openbsd/src/regress/lib/libssl/ssl, branch tb_20230715

This commit was manufactured by cvs2git to create tag 'tb_20230715'.

2023-07-15T19:29:46+00:00

Plug leak in the ssltest

2023-07-04T08:47:01+00:00

Removing -tls1 moved some tests from the legacy stack to the TLSv1.3 stack. On a HRR, the alpn callback would be called twice and allocate the global twice, thereby leaking. So free it up front. Joint suffering with bcook and beck

Disable TLS 1.0 and TLS 1.1 in libssl

2023-07-02T17:21:33+00:00

Their time has long since past, and they should not be used. This change restricts ssl to versions 1.2 and 1.3, and changes the regression tests to understand we no longer speak the legacy protocols. For the moment the magical "golden" byte for byte comparison tests of raw handshake values are disabled util jsing fixes them. ok jsing@ tb@

ssltest: Drop more policy go from this test.

2023-04-15T16:50:05+00:00

Hopefully that is all. What an absolutely horrid mess.

ssltest: initial pass of dropping proxy cert goo

2023-04-15T16:17:57+00:00

Sync function prototypes and declarations to satisfy clang 15.

2023-02-02T12:37:14+00:00

ok jsing@

Make internal header file names consistent

2022-11-26T16:08:57+00:00

Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include was fixed manually. discussed with jsing, no objection bcook

Use the security level knob in the test script.

2022-07-07T13:20:12+00:00

from beck

Make the ssltest security level aware.

2022-07-07T13:10:22+00:00

From beck

Switch ssltest to using the newly generated certs that use SHA-256 instead

2022-07-07T11:40:17+00:00

of SHA-1. This helps the switch to security-level aware ssltest. From jsing