Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add initial tests for coverage of ASN.1 basic/primitive types. | jsing | 2021-12-09 | 2 | -1/+135 | |
| | ||||||
* | be more specific which NETSCAPE stuff to ignore, and why | schwarze | 2021-12-07 | 1 | -10/+7 | |
| | ||||||
* | Some improvements allowing to handle asn1.h and x509v3.h: | schwarze | 2021-12-07 | 1 | -10/+47 | |
| | | | | | | | | | | | | | * handle multiple qualifiers on the function return type * handle function pointer type declarations * handle unions inside structs * handle forward struct declarations * handle "typedef const" * handle ASN1_F_, ASN1_R_, and X509V3_R_ error constants * handle "#if defined" in the same way as "#ifdef" * skip whitespace between "#" and "define" * skip whitespace before C comments * ignore TYPEDEF_D2I2D_OF | |||||
* | Add initial regress for CT. | jsing | 2021-12-05 | 4 | -1/+415 | |
| | | | | This provides test coverage for SCT encoding/decoding. | |||||
* | gross trailing whitespace | tb | 2021-12-04 | 1 | -16/+16 | |
| | ||||||
* | Convert main into single exit to appease asan. | tb | 2021-12-04 | 1 | -22/+33 | |
| | ||||||
* | Explicitly free EVP_MD_CTX to appease asan. Reported by Ilya Shipitsin. | tb | 2021-12-04 | 1 | -10/+16 | |
| | ||||||
* | Add regress for ECPKParameters ASN.1 encoding/decoding. | jsing | 2021-12-04 | 2 | -2/+210 | |
| | ||||||
* | Add regress for {d2i,i2d}_{,DSA_,EC_,RSA_}PUBKEY{,_bio}(). | jsing | 2021-11-30 | 2 | -1/+570 | |
| | ||||||
* | make the bn/mont test compile with opaque DH. | tb | 2021-11-26 | 1 | -4/+12 | |
| | ||||||
* | Rework this test to compile with opaque RSA | tb | 2021-11-25 | 1 | -282/+427 | |
| | ||||||
* | Resolve last issue with opaque BIGNUM in this test. | tb | 2021-11-25 | 1 | -3/+3 | |
| | ||||||
* | wycheproof: modify RSA tests to work with opaque RSA struct | tb | 2021-11-21 | 1 | -11/+57 | |
| | ||||||
* | wycheproof.go: modify some DSA and ECDSA code to work with opaque structs | tb | 2021-11-21 | 1 | -5/+23 | |
| | ||||||
* | Mark the X509_VERIFY_PARAM_ID variable type as intentionally | schwarze | 2021-11-19 | 1 | -3/+16 | |
| | | | | | | | undocumented. It is an opaque struct used only internally, as a sub-object of the public X509_VERIFY_PARAM type. All related API functions take X509_VERIFY_PARAM arguments, so X509_VERIFY_PARAM_ID is of no interest to the user. | |||||
* | Make function prototype parsing a bit stricter, | schwarze | 2021-11-19 | 1 | -1/+1 | |
| | | | | | | | | | | reducing the risk of accidental misparsing: Require whitespace after the function return type (before the asterisk indicating that the function returns a pointer, if any) and do not accept whitespace between the function name and the opening parenthesis of the parameter list. These changes are not a problem because we want that style for KNF reasons anyway. | |||||
* | Very quick and dirty script to help me check that the symbols | schwarze | 2021-11-19 | 1 | -0/+266 | |
| | | | | | | | | | | | | | | in one of the public openssl/ header files are all documented. Before attempting to read this code, make sure that you are fully vaccinated against leaning toothpick syndrome. Example usage: ./check_complete.pl x509_vfy ./check_complete.pl -v x509 | less Intentionally not linked to the build. jsing@ agrees with the general direction. | |||||
* | sha512test: replace EVP_MD_CTX_{cleanup,init} pair with EVP_MD_CTX_reset | tb | 2021-11-18 | 1 | -3/+2 | |
| | ||||||
* | gost: missed one cleanup | tb | 2021-11-18 | 1 | -2/+2 | |
| | ||||||
* | sha256test: EVP_MD_CTX_cleanup -> EVP_MD_CTX_reset | tb | 2021-11-18 | 1 | -4/+3 | |
| | ||||||
* | gost2814789t: EVP_MD_CTX_cleanup -> EVP_MD_CTX_reset | tb | 2021-11-18 | 1 | -2/+2 | |
| | ||||||
* | evptest: no need to call EVP_MD_CTX_cleanup() before EVP_MD_CTX_free() | tb | 2021-11-18 | 1 | -4/+3 | |
| | ||||||
* | Use HMAC_CTX_reset() instead of HMAC_CTX_cleanup() + HMAC_CTX_init() | tb | 2021-11-18 | 1 | -5/+3 | |
| | ||||||
* | sha*test: convert these tests to work with opaque EVP_MD_CTX. | tb | 2021-11-18 | 3 | -31/+42 | |
| | ||||||
* | zap trailing whitespace | tb | 2021-11-18 | 1 | -7/+7 | |
| | ||||||
* | hmactest: convert to opaque HMAC_CTX. | tb | 2021-11-18 | 1 | -29/+37 | |
| | ||||||
* | gost2814789t: convert to opaque EVP_{MD,CIPHER}_CTX. | tb | 2021-11-18 | 1 | -19/+23 | |
| | ||||||
* | exptest: convert to opaque BN; minor KNF tweaks. | tb | 2021-11-18 | 1 | -40/+47 | |
| | ||||||
* | evptest: fix compilation with opaque EVP_{CIPHER,MD}_CTX. Uses a | tb | 2021-11-18 | 1 | -22/+30 | |
| | | | | workaround for excessive malloc inspired by mariadb (just kidding). | |||||
* | ecdsatest: make this test compile with opaque EVP_MD_CTX. | tb | 2021-11-18 | 1 | -7/+8 | |
| | ||||||
* | dsatest: make this work with opaque BN. Some more fixes will be needed | tb | 2021-11-18 | 1 | -114/+124 | |
| | | | | | for opaque DSA. I'll deal with that later. I also lobbed a KNF grenade in here. | |||||
* | dhtest: fix this to work with opaque BN. This will need more fixes to | tb | 2021-11-18 | 1 | -48/+61 | |
| | | | | | work with opaque DH, but one step at a time. While here, add a bunch of missing spaces to reduce the eyebleed. | |||||
* | bntest: Fix all but one test in this file to work with opaque BN. | tb | 2021-11-18 | 1 | -399/+563 | |
| | | | | | The remaining test needs some thinking (or disabling once we flip the switch). It is currently marked with an XXX. | |||||
* | Test ASN1_STRING_copy(3). | schwarze | 2021-11-13 | 2 | -1/+121 | |
| | | | | | | As a side effect, this also tests various aspects of ASN1_STRING_new(3), ASN1_STRING_set(3), ASN1_STRING_length_set(3), ASN1_STRING_get0_data(3), ASN1_STRING_length(3), and ASN1_STRING_type(3). | |||||
* | Test adding extensions to certification requests. | schwarze | 2021-11-03 | 2 | -2/+167 | |
| | | | | | Related to the bugfixes in x509_req.c rev. 1.25. OK tb@. | |||||
* | Rework x509attribute regress test in such a way that it doesn't need | tb | 2021-11-01 | 1 | -11/+7 | |
| | | | | to reach into opaque structs. | |||||
* | Prepare regress for opaque structs in x509*.h | tb | 2021-10-31 | 4 | -25/+18 | |
| | ||||||
* | Mark another test as failing with the legacy verifier. | jsing | 2021-09-30 | 2 | -2/+4 | |
| | | | | | This test now fails with the legacy verifier, due to X509_V_FLAG_TRUSTED_FIRST being enabled by default. | |||||
* | Simplify runAesCmacTest() by using EVP_DigestSign(). | tb | 2021-09-24 | 1 | -16/+3 | |
| | ||||||
* | Call the callback on success in new verifier in a compatible way | beck | 2021-09-03 | 1 | -3/+1 | |
| | | | | | | | | | | | | | when we succeed with a chain, and ensure we do not call the callback twice when the caller doesn't expect it. A refactor of the end of the legacy verify code in x509_vfy is probably overdue, but this should be done based on a piece that works. the important bit here is this allows the perl regression tests in tree to pass. Changes the previously committed regress tests to test the success case callbacks to be known to pass. ok bluhm@ tb@ | |||||
* | Add a regression test to verify that we call the callback in the same | beck | 2021-09-01 | 3 | -4/+551 | |
| | | | | | | | | | order on success for both the legacy and the new verifier, This avoids problems as seen in perl's regression tests for some of the crazy things net:ssleay does. This is currently marked as expected to fail, it will be expected to succeed after a forthcoming commit from me. | |||||
* | Only remove the directories if there's an obj/ or obj@ | tb | 2021-08-28 | 1 | -2/+4 | |
| | ||||||
* | Add a pass using the modern vfy with by_dir roots, code by me, script to | beck | 2021-08-28 | 3 | -15/+106 | |
| | | | | | | generate certdirs by jsing, and make chicken sacrifies by tb. ok tb@ jsing@ | |||||
* | Add case 2c to the go side. Don't tell jsing I touched go. | beck | 2021-08-28 | 1 | -0/+1 | |
| | ||||||
* | Add regress test testing having the root cert in the intermediate bundle | beck | 2021-08-27 | 5 | -1/+96 | |
| | ||||||
* | Import regress tests for SM2. Not yet linked to the build. | tb | 2021-08-18 | 4 | -0/+640 | |
| | | | | Part of Github PR #105 | |||||
* | It's no longer necessary to link ecdhtest statically. | tb | 2021-05-10 | 1 | -2/+2 | |
| | ||||||
* | tweak one description to make it unique | tb | 2021-05-03 | 1 | -2/+3 | |
| | ||||||
* | Prefix the hybrid_corner_case test with test_ for consistency. | tb | 2021-05-03 | 1 | -3/+3 | |
| | ||||||
* | Exercise the point conversion bit for octet string representations | tb | 2021-05-03 | 1 | -1/+279 | |
| | | | | of points on secp256r1. |