Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Run Wycheproof ECDH tests against libcrypto. Some tests currently fail, | tb | 2018-09-02 | 1 | -1/+154 |
| | | | | will be fixed with the next commit to libcrypto. | ||||
* | Use a Boolean rather than repeated string comparison. | tb | 2018-09-02 | 1 | -3/+5 |
| | |||||
* | Tweak comment. | tb | 2018-09-01 | 1 | -5/+2 |
| | |||||
* | Remove RSA-PSS from todo-list | tb | 2018-09-01 | 1 | -2/+2 |
| | |||||
* | Run Wycheproof RSASSA-PSS testvectors against libcrypto. | tb | 2018-09-01 | 1 | -2/+144 |
| | |||||
* | Remove unused argument to tls1_change_cipher_state_cipher(). | jsing | 2018-08-31 | 1 | -7/+4 |
| | |||||
* | Instead of enumerating the files to clean by hand, set PROGS=${TESTS}. | tb | 2018-08-31 | 2 | -5/+7 |
| | | | | Suggested by jsing | ||||
* | Make sure to clean up the .d files with 'make clean' | tb | 2018-08-30 | 1 | -2/+2 |
| | |||||
* | Nuke ssl_pending/ssl_shutdown function pointers. | jsing | 2018-08-30 | 9 | -56/+14 |
| | | | | | | | ssl3_pending() is used for all protocols and dtls1_shutdown() just calls ssl3_shutdown(), so just call the appropriate function directly instead. ok beck@ inoguchi@ tb@ | ||||
* | AES is now done also. | tb | 2018-08-29 | 1 | -3/+3 |
| | |||||
* | Pass algorithm as a string to all *TestGroup functions for consistency. | tb | 2018-08-29 | 1 | -22/+22 |
| | |||||
* | Run Wycheproof AES-GCM testvectors against libcrypto. | tb | 2018-08-29 | 1 | -42/+83 |
| | |||||
* | Calculate and check tag during AES-CCM encryption test. | tb | 2018-08-29 | 1 | -1/+25 |
| | |||||
* | typo | tb | 2018-08-29 | 1 | -2/+2 |
| | |||||
* | Don't fatal on keys of invalid sice, just print an INFO. | tb | 2018-08-29 | 1 | -2/+3 |
| | |||||
* | Run Wycheproof AES-CMAC testvectors against libcrypto. | tb | 2018-08-28 | 1 | -2/+116 |
| | |||||
* | remove some extra parens and fix some other formatting issues | tb | 2018-08-28 | 1 | -17/+17 |
| | | | | pointed out by gofmt (thanks anton) | ||||
* | Remove extra "and" in "These functions and have been available" | tb | 2018-08-28 | 1 | -3/+3 |
| | |||||
* | zap trailing whitespace | tb | 2018-08-28 | 1 | -7/+7 |
| | |||||
* | Drop SSLv2, SSLv3 support. | cheloha | 2018-08-28 | 1 | -6/+2 |
| | | | | | | | No need to check for SSLv2/3 sessions when printing the tally mark. Also do SSLv23_client_method -> TLS_client_method. ok jsing@ | ||||
* | Check for SSL_write(3) error. | cheloha | 2018-08-28 | 1 | -3/+4 |
| | | | | | | | | | | jsing@ notes that this is not a complete solution, as we don't account for retries or partial writes, but that this is a step in a right direction. May want to revisit this later to provide a complete solution. ok jsing@ | ||||
* | tweak failure messages | tb | 2018-08-27 | 1 | -9/+9 |
| | |||||
* | dedup AES-CBC-PKCS5 encryption and decryption checks | tb | 2018-08-27 | 1 | -66/+24 |
| | |||||
* | 2x missing "..." | tb | 2018-08-27 | 1 | -3/+3 |
| | |||||
* | Run Wycheproof AES-CCM testvectors against libcrypto. | tb | 2018-08-27 | 1 | -2/+200 |
| | |||||
* | n2s and l2n3 finally bite the dust! | jsing | 2018-08-27 | 1 | -7/+1 |
| | |||||
* | Convert ssl3_get_cert_verify() to CBS and clean up somewhat. | jsing | 2018-08-27 | 1 | -74/+72 |
| | | | | ok inoguchi@ | ||||
* | Dedup DTLS header writing code and convert to CBB. | jsing | 2018-08-27 | 1 | -25/+35 |
| | | | | | | | | | There are three versions of the DTLS header writing code, which primarily differ by the fragment offset and fragment length values that differ. Rework dtls1_write_message_header() such that it can be used in all three cases and convert it to CBB in the process. ok inoguchi@ tb@ | ||||
* | Add some missing statics. | jsing | 2018-08-27 | 2 | -5/+5 |
| | |||||
* | Simplify new session ticket encoding/generation. | jsing | 2018-08-27 | 3 | -84/+90 |
| | | | | | | | | | | | The original code did a crazy encode/malloc/encode/decode/modify/encode dance, in order to encode a session in the form needed to encrypt then add to a session ticket. By modifying the encoding functions slightly, we can do this entire dance as a single encode. Inspired by similar changes in BoringSSL. ok inoguchi@ tb@ | ||||
* | Fix formatting and grammatical issues with the description of how to use | jsing | 2018-08-27 | 1 | -19/+17 |
| | | | | | | | i2d_SSL_SESSION. Also rework the example code so that it is clearer and uses more appropriate names. Input from and ok schwarze@, tb@ | ||||
* | Add protocol and cipher patterns in regress appstest.sh | inoguchi | 2018-08-27 | 1 | -18/+88 |
| | |||||
* | fix the same "an non" issue found by tb in EVP_EncryptInit.3; | jmc | 2018-08-26 | 1 | -3/+3 |
| | |||||
* | Check return value of EVP_CipherInit_ex() | tb | 2018-08-26 | 1 | -6/+15 |
| | |||||
* | Run Wycheproof AES-CBC-PKCS5 testvectors against libcrypto. | tb | 2018-08-26 | 1 | -1/+189 |
| | |||||
* | Remove some redundant info from log.Fatalf | tb | 2018-08-26 | 1 | -2/+2 |
| | |||||
* | simplify returned value | tb | 2018-08-26 | 1 | -2/+2 |
| | |||||
* | Some of the functions in this manual need <openssl/dsa.h>, others | tb | 2018-08-26 | 1 | -3/+45 |
| | | | | | | | | | need <openssl/x509.h>. The functions {d2i,i2d}_DSA_params_{bio,fp}(3) were missing from the manual, so document them. The return values of the i2d_* functions are left undocumented, as these still need to be audited. ok schwarze (lots of input and help as usual) | ||||
* | typo: an nonce -> a nonce | tb | 2018-08-26 | 1 | -3/+3 |
| | |||||
* | Stop s_server if error occurs in regress appstest.sh | inoguchi | 2018-08-26 | 1 | -4/+13 |
| | |||||
* | Also run DSA tests with the PEM encoded public key. | tb | 2018-08-25 | 1 | -2/+22 |
| | |||||
* | update usage for pkcs8; | jmc | 2018-08-24 | 1 | -10/+9 |
| | | | | ok tb | ||||
* | tweak previous; | jmc | 2018-08-24 | 1 | -3/+3 |
| | |||||
* | crank majors after symbol addition/modification/removal | tb | 2018-08-24 | 3 | -6/+6 |
| | |||||
* | Adjust documentation for SSL_copy_session_id() | tb | 2018-08-24 | 1 | -8/+7 |
| | | | | ok jsing | ||||
* | Let SSL_copy_session_id() return an int for error checking. | tb | 2018-08-24 | 3 | -28/+31 |
| | | | | | | | | | | Accordingly, add some error checking to SSL_copy_session_id(), BIO_ssl_copy_session_id(), and SSL_dup(). Prompted by OpenSSL commit 17dd65e6e1f Tested in a bulk build by sthen ok jsing | ||||
* | Add const to EVP_PKCS82PKEY(). | tb | 2018-08-24 | 2 | -4/+4 |
| | | | | | tested in a bulk by sthen ok jsing | ||||
* | Add consts to EVP_PKEY_asn1_set_private() | tb | 2018-08-24 | 8 | -16/+16 |
| | | | | | | | | | Requires adding a const to the priv_decode() member of EVP_PKEY_ASN1_METHOD and adjusting all *_priv_decode() functions. All this is already documented this way. tested in a bulk build by sthen ok jsing | ||||
* | After removing support for broken PKCS#8 formats (it was high time), | tb | 2018-08-24 | 7 | -22/+19 |
| | | | | | | | | we can add const to PKCS8_pkey_get0(). In order for this to work, we need to sprinkle a few consts here and there. tested in a bulk by sthen ok jsing | ||||
* | The broken pkcs8 formats generated by openssl pkcs -{embed,nooct,nsdb} | tb | 2018-08-24 | 1 | -22/+2 |
| | | | | | | are no longer supported. Remove their documentation. ok jsing |