diff options
| author | cvs2svn <admin@example.com> | 2019-11-19 19:57:05 +0000 |
|---|---|---|
| committer | cvs2svn <admin@example.com> | 2019-11-19 19:57:05 +0000 |
| commit | e9f9eb6198f1757b7c0dfef043fadf1fa8243022 (patch) | |
| tree | b5a648f6ccaf6c1cd9915ddb45503d1fccfeba0e /src/regress/lib/libssl/interop/README | |
| parent | ab72e3a6f7e8d5c71bbba034410468781d5923b6 (diff) | |
| download | openbsd-bluhm_20191119.tar.gz openbsd-bluhm_20191119.tar.bz2 openbsd-bluhm_20191119.zip | |
This commit was manufactured by cvs2git to create tag 'bluhm_20191119'.bluhm_20191119
Diffstat (limited to 'src/regress/lib/libssl/interop/README')
| -rw-r--r-- | src/regress/lib/libssl/interop/README | 22 |
1 files changed, 0 insertions, 22 deletions
diff --git a/src/regress/lib/libssl/interop/README b/src/regress/lib/libssl/interop/README deleted file mode 100644 index 54910e554d..0000000000 --- a/src/regress/lib/libssl/interop/README +++ /dev/null | |||
| @@ -1,22 +0,0 @@ | |||
| 1 | Test TLS interoperability between LibreSSL and OpenSSL. | ||
| 2 | |||
| 3 | Implement simple SSL client and server in C. Create six binaries | ||
| 4 | by linking them with LibreSSL or OpenSSL 1.0.2 or OpenSSL 1.1. This | ||
| 5 | way API compatibility is tested. | ||
| 6 | |||
| 7 | To self test each SSL library, connect client with server. Check | ||
| 8 | that the highest available TLS version is selected. LibreSSL TLS | ||
| 9 | 1.3 check has to be enabled when the feature becomes available. | ||
| 10 | |||
| 11 | Currently OpenSSL 1.0.2p and OpenSSL 1.1.1 from ports are used. As | ||
| 12 | soon as LibreSSL supports TLS 1.3, it should be used automatically | ||
| 13 | when netcat is communicating with OpenSSL 1.1. | ||
| 14 | |||
| 15 | Connect and accept with netcat to test protocol compatibility with | ||
| 16 | libtls. Test TLS session reuse multiple times with different library | ||
| 17 | combinations. The cert subdir is testing all combinations of | ||
| 18 | certificate validation. Having the three libraries, client and | ||
| 19 | server certificates, missing or invalid CA or certificates, and | ||
| 20 | enforcing peer certificate results in 1944 test cases. The cipher | ||
| 21 | test establishes connections between implementations for each | ||
| 22 | supported cipher. | ||
