diff options
| author | bluhm <> | 2018-11-11 00:15:04 +0000 |
|---|---|---|
| committer | bluhm <> | 2018-11-11 00:15:04 +0000 |
| commit | bb7bf59b27f2841b551d2aac13e012204e220296 (patch) | |
| tree | 2e2f3822b8e0eb71ba45a900f399e61fb573f4b2 /src/regress/lib/libssl/interop/README | |
| parent | b6050265797720778c82d37cfa77e5524da4f74a (diff) | |
| download | openbsd-bb7bf59b27f2841b551d2aac13e012204e220296.tar.gz openbsd-bb7bf59b27f2841b551d2aac13e012204e220296.tar.bz2 openbsd-bb7bf59b27f2841b551d2aac13e012204e220296.zip | |
Reorganize libssl interop tests. Move netcat tests into separate
directory. Keep all log files for easier debugging. Name regress
target names consistently.
Diffstat (limited to 'src/regress/lib/libssl/interop/README')
| -rw-r--r-- | src/regress/lib/libssl/interop/README | 13 |
1 files changed, 7 insertions, 6 deletions
diff --git a/src/regress/lib/libssl/interop/README b/src/regress/lib/libssl/interop/README index b53b47b878..42d87acfdb 100644 --- a/src/regress/lib/libssl/interop/README +++ b/src/regress/lib/libssl/interop/README | |||
| @@ -2,8 +2,7 @@ Test TLS interoperability between LibreSSL and OpenSSL. | |||
| 2 | 2 | ||
| 3 | Implement simple SSL client and server in C. Create six binaries | 3 | Implement simple SSL client and server in C. Create six binaries |
| 4 | by linking them with LibreSSL or OpenSSL 1.0.2 or OpenSSL 1.1. This | 4 | by linking them with LibreSSL or OpenSSL 1.0.2 or OpenSSL 1.1. This |
| 5 | way API compatibility is tested. Connect and accept with netcat | 5 | way API compatibility is tested. |
| 6 | to test protocol compatibility with libtls. | ||
| 7 | 6 | ||
| 8 | To self test each SSL library, connect client with server. Check | 7 | To self test each SSL library, connect client with server. Check |
| 9 | that the highest available TLS version is selected. LibreSSL TLS | 8 | that the highest available TLS version is selected. LibreSSL TLS |
| @@ -13,7 +12,9 @@ Currently OpenSSL 1.0.2p and OpenSSL 1.1.1 from ports are used. As | |||
| 13 | soon as LibreSSL supports TLS 1.3, it should be used automatically | 12 | soon as LibreSSL supports TLS 1.3, it should be used automatically |
| 14 | when netcat is communicating with OpenSSL 1.1. | 13 | when netcat is communicating with OpenSSL 1.1. |
| 15 | 14 | ||
| 16 | The cert subdir is testing all combinations of certificate validation. | 15 | Connect and accept with netcat to test protocol compatibility with |
| 17 | Having the three libraries, client and server certificates, missing | 16 | libtls. Test TLS session reuse multiple times with different library |
| 18 | or invalid CA or certificates, and enforcing peer certificate results | 17 | combinations. The cert subdir is testing all combinations of |
| 19 | in 1944 test cases. | 18 | certificate validation. Having the three libraries, client and |
| 19 | server certificates, missing or invalid CA or certificates, and | ||
| 20 | enforcing peer certificate results in 1944 test cases. | ||
