Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add ct.h and x509_vfy.h | inoguchi | 2022-01-15 | 1 | -1/+3 | |
| | ||||||
* | Undo static linking and other workarounds that are no longer needed | tb | 2022-01-14 | 6 | -19/+15 | |
| | | | | after the bump | |||||
* | Convert wycheproof.go for opaque EVP_AEAD_CTX | tb | 2022-01-14 | 1 | -11/+18 | |
| | ||||||
* | The cttest can link dynamically now | tb | 2022-01-14 | 1 | -2/+2 | |
| | ||||||
* | Simplify BN_mont test slightly using a new accessor. | tb | 2022-01-14 | 1 | -4/+2 | |
| | ||||||
* | Only evp_pkey_check needs static linking | tb | 2022-01-12 | 1 | -2/+4 | |
| | ||||||
* | Add a prototype for OBJ_bsearch_ so this test will keep working | tb | 2022-01-12 | 1 | -1/+6 | |
| | | | | | after the bump. Since this tests the public interfaces, we do not want to use LIBRESSL_INTERNAL/LIBRESSL_CRYPTO_INTERNAL here. | |||||
* | Rework ecdsatest to build after the bump and link statically for now | tb | 2022-01-12 | 2 | -14/+26 | |
| | ||||||
* | Rework dsatest to use accessors and link statically for now | tb | 2022-01-12 | 2 | -7/+7 | |
| | ||||||
* | Rework dhtest to use accessors and link statically for now | tb | 2022-01-12 | 1 | -6/+6 | |
| | | | | For some reason CVS didn't want to commit this the first time around. | |||||
* | Rework dhtest to use accessors and link statically for now | tb | 2022-01-12 | 1 | -3/+3 | |
| | ||||||
* | Rework test to use EVP_AEAD_CTX_{new,free}() and link statically for now | tb | 2022-01-12 | 2 | -20/+32 | |
| | ||||||
* | Fix asn1x509 build with opaque structures. Link statically for now. | tb | 2022-01-12 | 2 | -20/+25 | |
| | ||||||
* | Rework Makefile to use regress framework and link asn1basic statically. | tb | 2022-01-12 | 2 | -14/+16 | |
| | | | | | It will need this for testing {d2i,i2d}_ASN1_BOOLEAN which will be moved to internal-only in the upcoming bump. | |||||
* | forgot to zap some dead assignments | tb | 2022-01-11 | 1 | -4/+4 | |
| | ||||||
* | Add regress for EVP_PKEY_{,public_,param_}check() | tb | 2022-01-11 | 2 | -7/+415 | |
| | ||||||
* | Add some workarounds to make build_addr_block_test_data const. | tb | 2022-01-07 | 1 | -17/+26 | |
| | ||||||
* | Revert previous accidental commit | tb | 2022-01-07 | 1 | -2/+2 | |
| | ||||||
* | Add regress tests for ASN1_BIT_STRING. | jsing | 2022-01-06 | 1 | -2/+113 | |
| | ||||||
* | Add a comment that explains why build_addr_block_tests isn't const | tb | 2022-01-06 | 2 | -3/+8 | |
| | ||||||
* | Fix a copy-paste error that led to an out-of-bounds access. | tb | 2022-01-06 | 1 | -2/+2 | |
| | | | | Found via a crash on bluhm's i386 regress test box | |||||
* | Add test coverage for SCT validation. | jsing | 2022-01-06 | 4 | -7/+116 | |
| | | | | | | Of note, the public APIs for this mean that the only way you can add a CTLOG is by reading a configuration file from disk - there is no programmatic way to do this. | |||||
* | Remove bandaid to work around expected range_should_be_prefix() problem. | tb | 2022-01-05 | 1 | -6/+2 | |
| | ||||||
* | Plug memleak | tb | 2021-12-29 | 1 | -2/+7 | |
| | | | | CID 345156 | |||||
* | More EVP_* return value checks | tb | 2021-12-29 | 1 | -22/+60 | |
| | | | | CID 345152 | |||||
* | Remove redundant NULL checks | tb | 2021-12-29 | 1 | -3/+1 | |
| | | | | CID 345154 | |||||
* | Minor cleanup after EC_POINT_get_affine_coordinates() unified the | tb | 2021-12-29 | 1 | -23/+6 | |
| | | | | | | _GFp and _GF2m variants. CID 345155 | |||||
* | More return value checks for EVP_* API | tb | 2021-12-29 | 1 | -16/+28 | |
| | | | | CID 345159 | |||||
* | Check return values of EVP_* API | tb | 2021-12-29 | 1 | -6/+24 | |
| | | | | CID 345158 | |||||
* | knfmt makes this slightly nicer. | tb | 2021-12-29 | 1 | -52/+49 | |
| | ||||||
* | Set failed in test_random_points() | tb | 2021-12-29 | 1 | -2/+2 | |
| | | | | CID 345141 | |||||
* | add missing include path; ok tb@ | anton | 2021-12-26 | 1 | -1/+2 | |
| | ||||||
* | The RFC 3779 test needs LIBRESSL_CRYPTO_INTERNAL as lon as the API | tb | 2021-12-24 | 1 | -2/+2 | |
| | | | | isn't public. | |||||
* | Print the name of the test before we run it. | jsing | 2021-12-24 | 1 | -1/+2 | |
| | ||||||
* | Style tweak in {d2i,i2d}_IPAddrBlocks() | tb | 2021-12-24 | 1 | -5/+5 | |
| | ||||||
* | Drop -g -O0 from CFLAGS | tb | 2021-12-24 | 1 | -2/+2 | |
| | ||||||
* | link rfc3779 test to build | tb | 2021-12-24 | 1 | -2/+2 | |
| | ||||||
* | Add initial test coverage for RFC 3779 code. | tb | 2021-12-24 | 2 | -0/+1804 | |
| | | | | | | | | | | | | | | This exercises the code paths that are reached from the validator and also tests that the public API behaves as expected. There is a lot more that could be done here, but this test is already big enough. Missing are tests for X509v3_{addr,asid}_validate_{path,resource_set}() themselves. One test failure is ignored and will be fixed in the near future when a bad logic error in range_should_be_prefix() is fixed. A consequence of this bug is that we will currently accept and generate DER that doesn't conform to RFC 3779. | |||||
* | fix typo: boolean true should decode to 1, not 0 | tb | 2021-12-23 | 1 | -2/+2 | |
| | ||||||
* | Add regress coverage for the crazy SCT_new_from_base64() API. | jsing | 2021-12-20 | 1 | -1/+57 | |
| | ||||||
* | support processing <openssl/bn.h> | schwarze | 2021-12-18 | 1 | -3/+24 | |
| | ||||||
* | To ease maintenance, structure the lists of intentionally undocumented | schwarze | 2021-12-16 | 1 | -55/+109 | |
| | | | | | | symbols according to the reason (internal, obsolete, postponed) and according to the header file (asn1, objects, x509, ...). Also, add some minor tweaks needed for <openssl/objects.h>. | |||||
* | Some more ASN.1 struct types that are postponed (because they are | schwarze | 2021-12-15 | 1 | -2/+5 | |
| | | | | | | related to templating macros) or intentionally undocumented. Apart from NETSCAPE, PCTX, and low-level templating stuff, all ASN.1 functions, types, and macros are now documented. | |||||
* | tweak for the generated source | tb | 2021-12-14 | 1 | -2/+2 | |
| | ||||||
* | more symbols that are postponed or intentionally undocumented and | schwarze | 2021-12-14 | 1 | -6/+55 | |
| | | | | some regexp tweaks; the relevant parts of asn1.h are nearing completion | |||||
* | Add regress coverage for ASN1_get_object() | jsing | 2021-12-14 | 1 | -1/+262 | |
| | ||||||
* | Add regress for ASN1_tag2bit() and ASN1_tag2str() | jsing | 2021-12-14 | 2 | -1/+135 | |
| | ||||||
* | Merge two bugfixes in ASN1_STRING_TABLE_add(3) and ASN1_STRING_TABLE_get(3) | schwarze | 2021-12-11 | 2 | -2/+131 | |
| | | | | | | | | | | | | | | | | | | | | | | from the OpenSSL 1.1.1 branch, which is still under a free license, mostly this commit: commit d35c0ff30b31be9fd5dcf3d552a16feb8de464bc Author: Dr. Stephen Henson <steve@openssl.org> Date: Fri Oct 19 15:06:31 2012 +0000 fix ASN1_STRING_TABLE_add so it can override existing string table values This fixes a segfault in ASN1_STRING_TABLE_add(3), which tried to change a static const entry when called with an nid already in the default table, and it switches the precedence of the two tables in ASN1_STRING_TABLE_get(3). In addition, it changes behaviour in the following minor ways: * Ignore negative minsize and maxsize arguments, not just -1. * Ignore a zero mask and zero flags. It's unclear whether these additional changes make the API absolutely better, but we want compatibility with OpenSSL in these functions. Tweaks & OK tb@. | |||||
* | Fix missing return in asn1_compare_bytes() | jsing | 2021-12-09 | 1 | -1/+2 | |
| | ||||||
* | Add initial tests for coverage of ASN.1 complex/constructed types. | jsing | 2021-12-09 | 2 | -1/+228 | |
| |