diff options
| author | cvs2svn <admin@example.com> | 2021-08-30 17:27:46 +0000 |
|---|---|---|
| committer | cvs2svn <admin@example.com> | 2021-08-30 17:27:46 +0000 |
| commit | 4e4f5b4c833ba5285e001bdb6b832bdf91c43da3 (patch) | |
| tree | ab301f051b9dd067fa28b0fe56806a2893b8161e /src/regress/lib/libssl/interop/README | |
| parent | 20a5de624e2e817be526407f2b8de078016ee258 (diff) | |
| download | openbsd-tb_20210830.tar.gz openbsd-tb_20210830.tar.bz2 openbsd-tb_20210830.zip | |
This commit was manufactured by cvs2git to create tag 'tb_20210830'.tb_20210830
Diffstat (limited to 'src/regress/lib/libssl/interop/README')
| -rw-r--r-- | src/regress/lib/libssl/interop/README | 22 |
1 files changed, 0 insertions, 22 deletions
diff --git a/src/regress/lib/libssl/interop/README b/src/regress/lib/libssl/interop/README deleted file mode 100644 index 54910e554d..0000000000 --- a/src/regress/lib/libssl/interop/README +++ /dev/null | |||
| @@ -1,22 +0,0 @@ | |||
| 1 | Test TLS interoperability between LibreSSL and OpenSSL. | ||
| 2 | |||
| 3 | Implement simple SSL client and server in C. Create six binaries | ||
| 4 | by linking them with LibreSSL or OpenSSL 1.0.2 or OpenSSL 1.1. This | ||
| 5 | way API compatibility is tested. | ||
| 6 | |||
| 7 | To self test each SSL library, connect client with server. Check | ||
| 8 | that the highest available TLS version is selected. LibreSSL TLS | ||
| 9 | 1.3 check has to be enabled when the feature becomes available. | ||
| 10 | |||
| 11 | Currently OpenSSL 1.0.2p and OpenSSL 1.1.1 from ports are used. As | ||
| 12 | soon as LibreSSL supports TLS 1.3, it should be used automatically | ||
| 13 | when netcat is communicating with OpenSSL 1.1. | ||
| 14 | |||
| 15 | Connect and accept with netcat to test protocol compatibility with | ||
| 16 | libtls. Test TLS session reuse multiple times with different library | ||
| 17 | combinations. The cert subdir is testing all combinations of | ||
| 18 | certificate validation. Having the three libraries, client and | ||
| 19 | server certificates, missing or invalid CA or certificates, and | ||
| 20 | enforcing peer certificate results in 1944 test cases. The cipher | ||
| 21 | test establishes connections between implementations for each | ||
| 22 | supported cipher. | ||
