openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Only run tests against ciphers supported by the method.	tb	2022-07-07	1	-2/+14
\|
*	Connect a client to a server. Both can be current libressl, or	bluhm	2020-09-14	1	-4/+46
\| \| \| \| \| \| \|	openssl 1.0.2, or openssl 1.1. Pin client or server to a fixed TLS version number. Incompatible versions must fail. Check that client and server have used correct version by grepping in their session print out.
*	Enable cert and cipher interop tests. cert just works. cipher has	bluhm	2020-09-11	1	-2/+1
\| \| \| \| \| \| \| \|	been fixed to work with libressl TLS 1.3. Both libressl and openssl11 replace obsolete TLS 1.2 ciphers with AEAD-AES256-GCM-SHA384 or TLS_AES_256_GCM_SHA384 in TLS 1.3 respectively. The test expects that now. Currently GOST does not work with libressl and TLS 1.3 and is disabled.
*	Fix typo in usage and comment.	bluhm	2019-03-21	1	-2/+2
\|
*	Test that all supported TLS ciphers actually work. Establish	bluhm	2019-02-21	1	-10/+29
\| \| \| \| \| \|	connections between client and server implemented with LibreSSL or OpenSSL with a fixed cipher on each side. Check the used cipher in the session print out.
*	getopt(3) returns int, not char. Fix type of ch variable to prevent	bluhm	2019-02-11	1	-3/+3
\| \| \| \|	sign error during arm regress.
*	Regress client and server can do session reuse now. Test this with	bluhm	2018-11-10	1	-60/+86
\| \| \| \| \|	all combinations of LibreSSL, OpenSSL 1.0.2, and OpenSSL 1.1. It is currently disabled for TLS 1.3 as this needs more setup.
*	The cert subdir is testing all combinations of certificate validation.	bluhm	2018-11-09	1	-7/+51
\| \| \| \| \| \|	Having the three libraries, client and server certificates, missing or invalid CA or certificates, and enforcing peer certificate results in 1944 new test cases.
*	Add interop test with OpenSSL 1.1. TLS 1.3 should be used automatically	bluhm	2018-11-07	1	-1/+7
\| \| \| \| \|	when it becomes available in LibreSSL. thanks to sthen@ for the new OpenSSL port
*	Print SSLeay, OpenSSL, and LibreSSL version strings. Make client	bluhm	2018-11-07	1	-2/+3
\| \| \| \| \|	and server compile with OpenSSL 1.1. Check runtime version string of SSL library.
*	Test TLS interoperability between LibreSSL and OpenSSL.	bluhm	2018-11-07	1	-0/+136
	Implement simple SSL client and server in C. Create four binaries by linking them with LibreSSL or OpenSSL. This way API compatibility is tested. Connect and accept with netcat to test protocol compatibility with libtls. Currently OpenSSL 1.0.2p from ports is used. Plan is to move to OpenSSL 1.1 and and test TLS 1.3. idea from beck@; help from jsing@