openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Use the new certificates/chains in regress.	jsing	2024-03-20	1	-4/+5
\| \| \| \| \| \| \| \| \| \|	The new certificates are more representative of the real world. The old certificates use weak algorithms and expire in the very near future. Most of our regress has already been switched over, this changes the remainder. Thanks to Bernhard M. Wiedemann for reminding us of the upcoming expiry. ok tb@
*	Make internal header file names consistent	tb	2022-11-26	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Libcrypto currently has a mess of _lcl.h, _locl.h, and _local.h names used for internal headers. Move all these headers we inherited from OpenSSL to _local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include <ssl_locl.h> was fixed manually. discussed with jsing, no objection bcook
*	dtlstest: Ensure the timeouts are at least 10 ms. This makes these tests	tb	2022-10-26	1	-1/+7
\| \| \| \| \| \|	a bit less flaky if the machine is otherwise under load. from jsing
*	Revise for SSL_CTX_INTERNAL and SSL_INTERNAL removal.	jsing	2022-10-02	1	-5/+3
\|
*	Let dtlstest peek into bio_local.h	tb	2022-01-07	2	-2/+4
\|
*	zap trailing whitespace	tb	2021-06-19	1	-4/+7
\|
*	Add DTLS test cases that use non-zero initial epochs.	jsing	2021-06-19	2	-5/+44
\| \| \| \| \| \|	In particular, test handling of 0xfffe and 0xffff - the latter results in wrapping to zero for the next epoch. One of these tests triggers a known bug in libssl, which will be fixed following this commit.
*	Add more complex DTLS tests for delay/reordering.	jsing	2021-06-19	1	-17/+160
\| \| \| \| \|	These tests exercise the various queues and delayed processing that exists in the DTLS code.
*	Expand comment that details why two DTLS tests currently fail.	jsing	2021-06-19	1	-2/+5
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Two tests currently fail (and are disabled) due to a flaw in the DTLSv1.0 specification - this flaw was addressed in DTLSv1.2, however our DTLS server code still needs to support the fix. Quoting RFC 6347 section 4.2.4: "This requirement applies to DTLS 1.0 as well, and though not explicit in [DTLS1], it was always required for the state machine to function correctly." In otherwords, both the original DTLS implementation and the DTLSv1.0 specification have a broken state machine, resulting in possible dead lock.
*	Provide the ability to delay/reorder DTLS packets.	jsing	2021-06-19	1	-14/+147
\| \| \| \| \|	Add a test that delays the client CCS, resulting in it arriving after the client Finished message.
*	Remove SSL_CTX_set_read_ahead() calls - it is now the default for DTLS.	jsing	2021-06-18	1	-3/+1
\|
*	Use limits.h instead of sys/limits.h in dtlstest.c for portable	inoguchi	2021-05-03	1	-2/+2
\| \| \| \|	discussed and input from jsing@
*	Enable auto DHE and disable session tickets for some tests.	jsing	2021-02-07	1	-12/+13
\| \| \| \|	This allows us to drop the server messages that we intend on dropping.
*	Only hexdump packets/messages on higher debug levels.	jsing	2021-02-06	1	-3/+4
\|
*	Test reads and writes between the client and server.	jsing	2021-02-06	1	-3/+49
\|
*	Add an explicit cast to make this test compile and pass with gcc.	tb	2020-10-16	1	-2/+2
\| \| \| \| \|	gcc emits a signed vs unsigned comparison warning which breaks the build due to -Werror.
*	Test DTLS timeouts and retransmissions by dropping specific messages.	jsing	2020-10-15	1	-5/+299
\| \| \| \| \| \| \| \| \|	Provide a BIO that can drop specific messages in order to trigger and test DTLS timeouts and retransmissions. Note that the SSL buffering BIO (bbio) has to be removed to ensure that handshake messages are sent individually. This would have detected the recent DTLS breakage with retransmissions for a flight that includes a CCS.
*	Improve poll and event handling.	jsing	2020-10-15	1	-8/+27
\| \| \| \| \|	In particular, ensure we clear events when the client or server side has completed and fix timeouts to ensure we use a non-zero timeout if present.
*	Add regress tests for DTLS.	jsing	2020-10-14	2	-0/+411
	Test the operation of a DTLS client and server, with and without cookies, using the default MTU and a specifically lowered MTU. Further regress tests will be built on this to exercise other parts of the DTLS code base (such as retransmission, fragmentation and reassembly).