| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Revise regress now that SSL_QUIC_METHOD exists. | jsing | 2022-08-21 | 1 | -4/+6 |
| | | |||||
| * | fix error message | tb | 2022-08-05 | 1 | -2/+2 |
| | | |||||
| * | Use the FAIL macro instead of fprintf(stderr, "FAIL: ...\n"); | tb | 2022-08-05 | 1 | -10/+10 |
| | | |||||
| * | Make the bogokey[] global static const. | tb | 2022-08-05 | 1 | -7/+8 |
| | | |||||
| * | Move CBB_init() to a consistent place. | tb | 2022-08-05 | 1 | -10/+10 |
| | | |||||
| * | Consistently initialize failure to 1 at the top of the function and | tb | 2022-08-05 | 1 | -76/+62 |
| | | | | | clear it right before the done label. | ||||
| * | Consistently check for CBB_init() failure. | tb | 2022-08-05 | 1 | -45/+89 |
| | | |||||
| * | Remove most of the indirection introduced in previous and instead fetch | tb | 2022-08-05 | 1 | -400/+339 |
| | | | | | | | | the appropriate tls_extension_funcs pointers for client and server from libssl and reach into them directly. ok jsing | ||||
| * | Add some glue to fetch the tlsext functions from the tls_extensions[] | tb | 2022-08-04 | 1 | -190/+440 |
| | | | | | table rather than calling the functions directly. | ||||
| * | Revise regress for QUIC transport parameters TLS extension. | jsing | 2022-07-17 | 1 | -15/+32 |
| | | |||||
| * | Adjust to new tls1_ec_nid2group_id API. | tb | 2022-07-02 | 1 | -7/+13 |
| | | |||||
| * | Add support for sending QUIC transport parameters | beck | 2022-06-29 | 1 | -1/+257 |
| | | | | | | | | | | | This is the start of adding the boringssl API for QUIC support, and the TLS extensions necessary to send and receive QUIC transport data. Inspired by boringssl's https://boringssl-review.googlesource.com/24464 ok jsing@ tb@ | ||||
| * | Use relative paths so beck can run regress in his git tree and have | tb | 2022-06-29 | 1 | -2/+3 |
| | | | | | the correct ssl_local.h etc be picked up. | ||||
| * | Minor tweaks to psk modes regress | tb | 2022-06-06 | 1 | -3/+3 |
| | | |||||
| * | move the calls to psk kex modes tests down to match order in ssl_tlsext.c | tb | 2022-06-05 | 1 | -4/+4 |
| | | |||||
| * | Add regress coverage for PSK kex modes tlsext handlers. | tb | 2022-06-05 | 1 | -2/+210 |
| | | |||||
| * | Plug a number of leaks reported by Ilya Shipitsin | tb | 2022-02-08 | 1 | -2/+9 |
| | | |||||
| * | Revise for S3I removal. | jsing | 2022-02-05 | 1 | -81/+81 |
| | | |||||
| * | Revise for changes to tls_key_share_peer_public() | jsing | 2022-01-11 | 1 | -2/+4 |
| | | |||||
| * | Revise for change to tls_key_share_peer_public() | jsing | 2022-01-06 | 1 | -3/+2 |
| | | |||||
| * | Revise for tls13_key_share rename. | jsing | 2022-01-05 | 1 | -11/+11 |
| | | |||||
| * | One more leak of the same kind | tb | 2021-12-29 | 1 | -2/+2 |
| | | |||||
| * | Plug memleak | tb | 2021-12-29 | 1 | -3/+3 |
| | | | | | CID 345160 | ||||
| * | Add regress that calls SSL_set_tlsext_host_name() with a NULL host name. | jsing | 2021-11-02 | 1 | -1/+15 |
| | | |||||
| * | Rework SNI hostname regress to be table driven. | jsing | 2021-11-01 | 1 | -62/+147 |
| | | | | | | | | Also adjust for the changes to tlsext_sni_is_valid_hostname() and include tests for IPv4 and IPv6 literals. ok beck@ | ||||
| * | Free memory on text exit to make asan quieter | beck | 2021-10-26 | 1 | -53/+83 |
| | | | | | ok tb@ | ||||
| * | Revise regress for removal of SSL_SESSION_INTERNAL. | jsing | 2021-10-26 | 1 | -27/+27 |
| | | |||||
| * | The server only sends a cookie during a HRR, not a SH | tb | 2021-03-24 | 1 | -4/+4 |
| | | |||||
| * | Update regress for new_cipher rename. | jsing | 2021-03-24 | 1 | -4/+4 |
| | | |||||
| * | Revise regress to match handshake struct changes. | jsing | 2021-03-21 | 1 | -18/+18 |
| | | |||||
| * | Revise TLS extension regress to match version handling changes. | jsing | 2021-03-10 | 1 | -57/+25 |
| | | |||||
| * | No longer need to cast away const in srtp_find_profile_by_name() | tb | 2020-10-11 | 1 | -2/+2 |
| | | |||||
| * | Unbreak regress following SRTP_PROTECTION_PROFILE const change. | jsing | 2020-10-11 | 1 | -2/+2 |
| | | |||||
| * | Update golden values to match P-521 being enabled by default in the client. | jsing | 2020-08-09 | 1 | -10/+11 |
| | | |||||
| * | tlsexttest: pass message type to the extension functions | tb | 2020-07-03 | 1 | -144/+144 |
| | | | | | ok beck jsing | ||||
| * | adjust tlsexttest to new argument order | tb | 2020-07-03 | 1 | -5/+5 |
| | | |||||
| * | Previous commit caught a few errx() cases by accident. undo them. | tb | 2020-05-24 | 1 | -25/+25 |
| | | |||||
| * | include newlines in FAIL messages | tb | 2020-05-24 | 1 | -108/+108 |
| | | |||||
| * | address some nits from jsing | tb | 2020-05-24 | 1 | -7/+11 |
| | | |||||
| * | Enforce that SNI hostnames be correct as per rfc 6066 and 5980. | beck | 2020-05-23 | 1 | -1/+79 |
| | | | | | | | | Correct SNI alerts to differentiate between illegal parameter and an unknown name. ok tb@` | ||||
| * | Revise regress for TLSv1.3 server being enabled. | jsing | 2020-05-11 | 1 | -5/+8 |
| | | |||||
| * | Update key share regress to match previous change. | jsing | 2020-04-17 | 1 | -4/+4 |
| | | |||||
| * | Reset the key share so that we do not have an existing peer public key. | jsing | 2020-02-05 | 1 | -1/+7 |
| | | |||||
| * | Tweak regress to match change made to tls13_key_share_peer_public(). | jsing | 2020-02-01 | 1 | -2/+1 |
| | | |||||
| * | Revise for TLSv1.3 key share changes. | jsing | 2020-01-30 | 1 | -8/+27 |
| | | |||||
| * | server sigalgs test is now bogus, disable for now | beck | 2020-01-26 | 1 | -2/+3 |
| | | |||||
| * | It has been called to my attention that the cookie monster ascii art | beck | 2019-11-10 | 1 | -17/+7 |
| | | | | | | | | | | in this test which I had obtained from a site purporting it to be free for use with artist attribtion might not be. After looking at at some other muppett ascii art for inspiration I am replacing this with my own ascii art muppet to replace the previously used cookie monster. The copyright for the art is the same as my code. | ||||
| * | Update regress following sigalgs changes. | jsing | 2019-03-25 | 1 | -17/+1 |
| | | |||||
| * | Use malloc() and memcpy() the test X25519 x25519_peer_public value. | jsing | 2019-02-03 | 1 | -3/+6 |
| | | | | | | | | Otherwise, if tlsext_keyshare_server_build() fails we call free with a pointer to static memory and bad things happen. Reported by bcook@ | ||||
| * | Add server side of versions, keyshare, and client and server of cookie | beck | 2019-01-24 | 1 | -6/+435 |
| | | | | | | | | | extensions for tls1.3. versions is currently defanged to ignore its result until tls13 server side wired in full, so that server side code still works today when we only support tls 1.2 ok bcook@ tb@ jsing@ | ||||
