openbsd/src/regress/lib/libssl, branch libressl-v3.2.5 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.2.5 2020-09-25T19:50:45+00:00 move test-tls13-finished.py from slow tests to normal tests. 2020-09-25T19:50:45+00:00 tb 2020-09-25T19:50:45+00:00 urn:sha1:7eb95eb34cc5ab06b70e7dad39df3ed47d31f1ae test-tls13-finished.py has 70 failing tests that expect a "decode_error" 2020-09-25T08:38:25+00:00 tb 2020-09-25T08:38:25+00:00 urn:sha1:0b96d4d35b0952539f92141a8abe70c107f8dae2 instead of the "decrypt_error" sent by tls13_server_finished_recv(). Both alerts appear to be reasonable in this context, so enable the tests while working around this. delete a stale comment 2020-09-25T06:34:59+00:00 tb 2020-09-25T06:34:59+00:00 urn:sha1:d61b74c62204dd91b312e2fc4975776b198dce0b 1) Move the interop tests to the end so we see tlsfuzzer first 2020-09-21T15:13:24+00:00 beck 2020-09-21T15:13:24+00:00 urn:sha1:9d558960cf920187dcf488f05a3decde546bbddc 2) Reorder the interop tests so the really slow "cert" test is at the end 3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination of client and server that does not involve libressl. This way we can skip testing openssl to openssl11 when running these manually by setting REGRESS_SKIP_SLOW to "yet" in mk.conf ok jsing@ Add cipher set tests with empty SSL_set_ciphersuites(). 2020-09-16T15:47:43+00:00 jsing 2020-09-16T15:47:43+00:00 urn:sha1:f5e89218456e82c85b0ea5a2bd65abd500ffee2f Correct cipher_set_test() when run on a machine without AES acceleration. 2020-09-16T15:44:36+00:00 jsing 2020-09-16T15:44:36+00:00 urn:sha1:aaefe2961da930a21acec119a91e33fbf8d869ca Noted by bcook@ and inoguchi@ while working on portable. Make cipher_set_test() log failures and continue, rather than aborting. 2020-09-16T15:43:08+00:00 jsing 2020-09-16T15:43:08+00:00 urn:sha1:51541e424111c95eca4e2d8cfd61d663c955e037 Test botan TLS client with libressl, openssl, openssl11 server. 2020-09-15T01:45:16+00:00 bluhm 2020-09-15T01:45:16+00:00 urn:sha1:99c305e9a1574d8ffff5ba4752c88b964c0fafbd Connect a client to a server. Both can be current libressl, or 2020-09-14T00:51:04+00:00 bluhm 2020-09-14T00:51:04+00:00 urn:sha1:407ed00262824449401bb81ab8981bc63ea02280 openssl 1.0.2, or openssl 1.1. Pin client or server to a fixed TLS version number. Incompatible versions must fail. Check that client and server have used correct version by grepping in their session print out. Add regress for SSL_{CTX_,}set_ciphersuites(). 2020-09-13T16:51:30+00:00 jsing 2020-09-13T16:51:30+00:00 urn:sha1:660fc42fc8432f65e71a75c64547c2a0aaa05888