openbsd/src/regress/lib/libssl/shutdown, branch libressl-v3.9.2A mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=libressl-v3.9.22024-01-30T14:46:46+00:00Add a shutdown sequence regress test.2024-01-30T14:46:46+00:00jsing2024-01-30T14:46:46+00:00urn:sha1:58b71efb8cd73a807ec46c267e6e92a1f728420c
Some software relies on SSL_shutdown() returning 0 (indicating close-notify
sent) before returning 1 on a subsequent call (indicating close-notify sent
and received). It is worth noting that there is no guarantee that this will
occur in normal operation, as the peer could send a close-notify prior to
SSL_shutdown() being called.
This is currently failing for TLSv1.3.
Enable for TLSv1.3 now that shutdown behaviour matches the legacy stack.2024-01-27T14:35:13+00:00jsing2024-01-27T14:35:13+00:00urn:sha1:c8d20b6287dfe3ed671896311b9b2372794b52d3Add regress test coverage for SSL_shutdown().2024-01-19T08:29:08+00:00jsing2024-01-19T08:29:08+00:00urn:sha1:3d9800133cfe170c9c442d27469ee41fbc756d0f
This tests and codifies the behaviour of SSL_shutdown() with respect to
SSL_quiet_shutdown() and SSL_set_shutdown(). For now, only the legacy stack
(TLSv1.2) is tested, as there are currently some subtle differences with
the TLSv1.3 stack.