openbsd/src/regress/lib/libssl/openssl-ruby, branch libressl-v3.7.0 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.7.0 2022-05-10T19:27:21+00:00 If Ruby 3.1 isn't available, try to fall back to Ruby 3.0 so that 2022-05-10T19:27:21+00:00 tb 2022-05-10T19:27:21+00:00 urn:sha1:e83a551b3d51b7593803af6d262e86506cae222c regress on bluhm's test machines have a chance to pass on slower architectures while package builds catch up. Default Ruby is now 3.1 2022-05-08T19:03:31+00:00 tb 2022-05-08T19:03:31+00:00 urn:sha1:0c4b90d3ecf0e729e9cf6b3aa0825d0a8ca873d2 With openssl-ruby-tests 20220105, test_post_connection_check_wildcard_san 2022-01-06T13:36:56+00:00 tb 2022-01-06T13:36:56+00:00 urn:sha1:7bcedf6cb8c06798dd9388ed678a2230e1b00cf4 is now an unexpected pass, so remove it from the expected failures. openssl-ruby tests: rework for x509_alt.c r1.3 and r1.5. 2021-10-28T11:01:19+00:00 tb 2021-10-28T11:01:19+00:00 urn:sha1:4fda893ef65fd64d224fd46574ad7b6b04282efa ruby can no longer generate certs with bogus wildcards in it to check that they will fail to verify when creating TLS connections. It will throw an error. This change needs openssl-ruby-tests-20211024p0 or later to work. Rework openssl-ruby-tests to run all passing tests first, then 2021-09-09T15:02:33+00:00 tb 2021-09-09T15:02:33+00:00 urn:sha1:6e911b9143614469693d80a8f0187fe65eba67f7 run the one failing test as a separate regress test. This way, all regressions should be caught with REGRESS_FAIL_EARLY=yes or on bluhm's regress webpage. This needs an up-to-date openssl-ruby-tests package and an upcoming commit by beck in x509_verify.c to work. ok beck bluhm The default Ruby has switched to 3.0 2021-09-06T20:52:59+00:00 tb 2021-09-06T20:52:59+00:00 urn:sha1:9ecd1e57dbde0959751fcfb270c243fc9c4bd3ba Revert accidental commit 2021-08-30T17:34:02+00:00 tb 2021-08-30T17:34:02+00:00 urn:sha1:e501ef18aa9f692de97c6b92c6bfabf63c669322 link verify regress tests to build 2021-08-30T17:28:47+00:00 tb 2021-08-30T17:28:47+00:00 urn:sha1:ed1026f341a36f6824b8a5991147f9467392ce3a Add scaffold to run the ruby/openssl regression tests 2021-05-03T18:21:00+00:00 tb 2021-05-03T18:21:00+00:00 urn:sha1:adce76407c11e590bd7b90a85ab9f861af068268 This test depends on the ruby/ruby-openssl-tests port that bundles the sources and tests of the Ruby OpenSSL gem below /usr/local. The Makefile compiles the openssl.so shared object below obj/ that provides Ruby bindings for the OpenSSL API. Once this is built, the regression tests are run. There are currently 4 failing tests, all related to the new verifier. At least one libssl bug is hidden behind a pend. All this will hopefully be fixed during this release cycle. This adds a decent amount of test coverage without being overly expensive. This way, regressions should be spotted during development so jeremy will no longer have to chase and work around them. Joint work with jeremy, positive feedback from bcook and jsing.