openbsd/src/regress/lib/libssl/tlsext, branch OPENBSD_7_9_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE 2026-04-03T07:37:52+00:00 Use DTLS_client_method() instead of DTLSv1_client_method(). 2026-04-03T07:37:52+00:00 jsing 2026-04-03T07:37:52+00:00 urn:sha1:4e96afcd8aab7bbc0e9ad7f32a9c2dd0dc055a61 libssl regress: adjust golden numbers for RSASSA-PSS 2026-03-30T06:23:33+00:00 tb 2026-03-30T06:23:33+00:00 urn:sha1:ccb38f6d4da1788074ffa4e9a4a99bc33073b703 Add the three RSASSA-PSS SignatureScheme 0x080b, 0x080a, 0x0809 in the appropriate spots in (components of) the ClientHello and adjust various length octets by adding 6. Add a MLKEM768_X25519 hybrid key share. 2025-12-04T21:03:42+00:00 beck 2025-12-04T21:03:42+00:00 urn:sha1:f8fcf556caab3fb1fb9d9b496d2724345c90a3eb This implements the currently in use MLKEM768_X25519 hybrid key share as outlined in https://datatracker.ietf.org/doc/draft-ietf-tls-ecdhe-mlkem/ This commit does not yet wire this up to anything, that is done in follow on changes. ok tb@ jsing@ kenjiro@ Verify that the selected key share is indeed group 29 2025-05-03T08:37:28+00:00 tb 2025-05-03T08:37:28+00:00 urn:sha1:fcc4c7b50e2b86b55823dda5fe0622d8fe00bf31 From Kenjiro Nakayama tlsexttest: remove check that clients receive SNI before ALPN 2025-04-30T13:44:54+00:00 tb 2025-04-30T13:44:54+00:00 urn:sha1:aab757a17fa1f081f77bddc901e6d39f0b245803 The next commit will remove the kludge for compatibility of Apache with older libressl, so remove the corresponding regress coverage and only check that PSK is the last extension. parametes -> parameters 2024-09-11T15:04:16+00:00 tb 2024-09-11T15:04:16+00:00 urn:sha1:09903e44fed5f689c935935b95c447ccb1465128 Revise regress to match cipher suite values change. 2024-07-22T14:50:45+00:00 jsing 2024-07-22T14:50:45+00:00 urn:sha1:ee47b67deae4b8751972f7fc4a0b821ffc61bb86 Initialize quic_method in tlsexttest 2024-03-30T09:53:41+00:00 tb 2024-03-30T09:53:41+00:00 urn:sha1:3247516c5c49295dd4e217b38e6a58c72595e142 This is only there to pretend a quic method was set on the SSL, but apparently some compilers warn about an uninitialized variable. from Christian Andersen Fix coverity complaints. 2024-03-28T01:45:18+00:00 beck 2024-03-28T01:45:18+00:00 urn:sha1:45f98f789c6ef09f937c978393d67f6741b3fe1f fix leaks in the horrible ssl whackery necessary for this test. 2024-03-27T23:56:34+00:00 beck 2024-03-27T23:56:34+00:00 urn:sha1:4dc7c1da04b000cd1c9039034bbfa79d816568ca ok tb@