openbsd/src/regress/lib/libssl, branch tb_20230715 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=tb_20230715 2023-07-15T19:29:46+00:00 This commit was manufactured by cvs2git to create tag 'tb_20230715'. 2023-07-15T19:29:46+00:00 cvs2svn admin@example.com 2023-07-15T19:29:46+00:00 urn:sha1:72cc860132e5b7971e495ba621dcd0713b5dd801 Import a version of libcrypto's symbols test for libssl 2023-07-15T19:29:45+00:00 tb 2023-07-15T19:29:45+00:00 urn:sha1:0d87a20f1d7f7c6ae9a6cbb5bc3c2235ee3fe18a Reenable clienttest and servertest 2023-07-12T07:03:24+00:00 tb 2023-07-12T07:03:24+00:00 urn:sha1:ef8535dfb88d26c0fa03b0d83c2108a25692f974 Fix last bit of the clienttest, needs ssl_pkt.c r1.66 2023-07-11T17:03:44+00:00 tb 2023-07-11T17:03:44+00:00 urn:sha1:5b8e6e5418571fde05d7861d782a926b9a9e8311 Keep servertest silent and align with clienttest 2023-07-11T11:52:35+00:00 tb 2023-07-11T11:52:35+00:00 urn:sha1:dec07df0fa7be98e0b3c49704cb0e6d5e5af1533 Neuter expected server test failures with SSLv2 2023-07-11T10:09:47+00:00 tb 2023-07-11T10:09:47+00:00 urn:sha1:e7fa5a4a8b991fe7dba04b9b6ad0263f4ead39a5 This test should either be extended or retired. As it is it is useless. Fix most of the clienttest. With this only test cases 9 and 13 fail. 2023-07-11T08:31:34+00:00 tb 2023-07-11T08:31:34+00:00 urn:sha1:6b1a3304b9d77657f2e58bb165918cbf8b58891a Avoid undefined behavior in tlsexttest 2023-07-05T17:30:14+00:00 tb 2023-07-05T17:30:14+00:00 urn:sha1:82dd34d70c585b4b99c4ddf5fae3480da08af357 An empty array cannot be initialized and it is an incomplete type, so the sizeof() operator can't be applied to it. Therefore initialize it with a zero byte and replace sizeof() use with lengths. Slightly tweaked version of a patch by inoguchi in portable. Discussed with bcook, beck, kettenis Plug leak in the ssltest 2023-07-04T08:47:01+00:00 tb 2023-07-04T08:47:01+00:00 urn:sha1:286247b132e6b61664f4095f00f8454ccb395e84 Removing -tls1 moved some tests from the legacy stack to the TLSv1.3 stack. On a HRR, the alpn callback would be called twice and allocate the global twice, thereby leaking. So free it up front. Joint suffering with bcook and beck Disable TLS 1.0 and TLS 1.1 in libssl 2023-07-02T17:21:33+00:00 beck 2023-07-02T17:21:33+00:00 urn:sha1:4edd92a57f3a74829fe519f35b5c7c79e03ce0b0 Their time has long since past, and they should not be used. This change restricts ssl to versions 1.2 and 1.3, and changes the regression tests to understand we no longer speak the legacy protocols. For the moment the magical "golden" byte for byte comparison tests of raw handshake values are disabled util jsing fixes them. ok jsing@ tb@