| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | print errors to stderr | tb | 2019-01-25 | 1 | -19/+21 | |
| | | ||||||
| * | sort output suffixes | tb | 2019-01-25 | 1 | -2/+2 | |
| | | ||||||
| * | Add code to visualize the state machine. Both the state machine and the | tb | 2019-01-24 | 2 | -5/+79 | |
| | | | | | | | | output will have to be tweaked, but this may as well happen in-tree. To try it, pkg_add graphviz and run 'make handshake.svg' in this directory. Committing early so Bob's followers can play. | |||||
| * | set the NEGOTIATED flag in the flags argument rather than | tb | 2019-01-24 | 1 | -4/+4 | |
| | | | | | squeezing it into the table. | |||||
| * | Add server side of versions, keyshare, and client and server of cookie | beck | 2019-01-24 | 1 | -6/+435 | |
| | | | | | | | | | extensions for tls1.3. versions is currently defanged to ignore its result until tls13 server side wired in full, so that server side code still works today when we only support tls 1.2 ok bcook@ tb@ jsing@ | |||||
| * | Remove SHA224 based sigalgs from use in TLS 1.2 as SHA224 is deprecated. | beck | 2019-01-24 | 2 | -31/+21 | |
| | | | | | | Remove GOST based sigalgs from TLS 1.2 since they don't work with TLS 1.2. ok jsing@ | |||||
| * | make whitespace inside curlies consistent; sort function prototypes. | tb | 2019-01-23 | 1 | -24/+24 | |
| | | ||||||
| * | Rename NUM_HANDSHAKE to handshake_count and make it a variable | tb | 2019-01-23 | 2 | -10/+44 | |
| | | | | | | | | | | so it can be used from regress. Update regress accordingly. Make sure the print target generates the entire table as it currently is in tls13_handshake.c discussed with beck and jsing ok jsing | |||||
| * | Modify sigalgs extension processing to accomodate TLS 1.3. | beck | 2019-01-23 | 2 | -25/+28 | |
| | | | | | | | | | | | - Make a separate sigalgs list for TLS 1.3 including only modern algorithm choices which we use when the handshake will not negotiate TLS 1.2. - Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2 from a 1.3 handshake. ok jsing@ tb@ | |||||
| * | revert previous, accidentally contained another diff in addition | beck | 2019-01-23 | 2 | -28/+25 | |
| | | | | | to the one I intended to commit | |||||
| * | Modify sigalgs extension processing for TLS 1.3. | beck | 2019-01-23 | 2 | -25/+28 | |
| | | | | | | | | | | - Make a separate sigalgs list for TLS 1.3 including only modern algorithm choices which we use when the handshake will not negotiate TLS 1.2 - Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2 ok jsing@ tb@ | |||||
| * | incorrrect spelling | tb | 2019-01-23 | 1 | -2/+2 | |
| | | ||||||
| * | do not print the command in the print: target | tb | 2019-01-23 | 1 | -2/+2 | |
| | | ||||||
| * | Add a regression test that builds up the handshake state table | tb | 2019-01-23 | 2 | -1/+399 | |
| | | | | | | | | from graph information and cross-checks it against the state table in tls13_handshake.c. with help from jsing | |||||
| * | Update record regress to match functionality changes. | jsing | 2019-01-20 | 1 | -6/+37 | |
| | | ||||||
| * | hook handshake test | tb | 2019-01-20 | 1 | -1/+2 | |
| | | ||||||
| * | Add a simple test that verifies that every valid handshake | tb | 2019-01-20 | 2 | -0/+76 | |
| | | | | | sets action->handshake_complete. | |||||
| * | Hook record regress. | jsing | 2019-01-19 | 1 | -1/+3 | |
| | | ||||||
| * | Add regress for TLSv1.3 record handling. | jsing | 2019-01-19 | 2 | -0/+533 | |
| | | ||||||
| * | initialize offset value so this passes | beck | 2019-01-18 | 1 | -0/+1 | |
| | | | | | ok jsing@ | |||||
| * | Add client side of supported versions and keyshare extensions with basic regress | beck | 2019-01-18 | 1 | -1/+192 | |
| | | | | | ok jsing@ | |||||
| * | Removed unused struct members. | jsing | 2019-01-18 | 1 | -2/+0 | |
| | | ||||||
| * | Update regress following TLS extension renaming. | jsing | 2019-01-18 | 2 | -379/+378 | |
| | | ||||||
| * | Add regress for extensible buffer code. | jsing | 2019-01-17 | 3 | -1/+169 | |
| | | ||||||
| * | Just err if we can't create secrets | beck | 2018-11-13 | 1 | -2/+2 | |
| | | ||||||
| * | Fix a race in libssl interop regress. The success messages from | bluhm | 2018-11-11 | 3 | -6/+9 | |
| | | | | | | the server child could be delayed. In this case wait a second and check again. | |||||
| * | Add automatic threading initialization for libcrypto. | bcook | 2018-11-11 | 1 | -56/+0 | |
| | | | | | | | | | | | | | | | This implements automatic thread support initialization in libcrypto. This does not remove any functions from the ABI, but does turn them into no-ops. Stub implementations of pthread_mutex_(init|lock|unlock) are provided for ramdisks. This does not implement the new OpenSSL 1.1 thread API internally, keeping the original CRYTPO_lock / CRYPTO_add_lock functions for library locking. For -portable, crypto_lock.c can be reimplemented with OS-specific primitives as needed. ok beck@, tb@, looks sane guenther@ | |||||
| * | Reorganize libssl interop tests. Move netcat tests into separate | bluhm | 2018-11-11 | 9 | -148/+197 | |
| | | | | | | directory. Keep all log files for easier debugging. Name regress target names consistently. | |||||
| * | Speling | beck | 2018-11-10 | 1 | -2/+2 | |
| | | ||||||
| * | Regress client and server can do session reuse now. Test this with | bluhm | 2018-11-10 | 6 | -129/+220 | |
| | | | | | | all combinations of LibreSSL, OpenSSL 1.0.2, and OpenSSL 1.1. It is currently disabled for TLS 1.3 as this needs more setup. | |||||
| * | Make sure the interop test happen last (since they take a long time) | beck | 2018-11-10 | 2 | -8/+9 | |
| | | ||||||
| * | fix a leak reported by Ben L (bobsayshilol () live ! co ! uk) | tb | 2018-11-10 | 1 | -1/+3 | |
| | | ||||||
| * | More regress all the way to exporter_master | beck | 2018-11-10 | 1 | -4/+44 | |
| | | ||||||
| * | Fix last of the empty hash nonsense | beck | 2018-11-10 | 1 | -6/+3 | |
| | | | | | ok jsing@ | |||||
| * | Update key schedule regress to match API changes. | jsing | 2018-11-09 | 1 | -21/+12 | |
| | | ||||||
| * | remove the not yet implemented "handshake" subdirectory | tb | 2018-11-09 | 1 | -2/+1 | |
| | | ||||||
| * | Add subdirectires with SUBDIR += instead of a single assignment with | tb | 2018-11-09 | 1 | -13/+13 | |
| | | | | | line continuations. | |||||
| * | The cert subdir is testing all combinations of certificate validation. | bluhm | 2018-11-09 | 11 | -48/+244 | |
| | | | | | | | Having the three libraries, client and server certificates, missing or invalid CA or certificates, and enforcing peer certificate results in 1944 new test cases. | |||||
| * | Add in key_schedule regress tests to regress build | beck | 2018-11-07 | 1 | -1/+2 | |
| | | ||||||
| * | Add a self test for each SSL library by connecting client with | bluhm | 2018-11-07 | 5 | -23/+88 | |
| | | | | | | | server. Check that the highest available TLS version is selected. LibreSSL TLS 1.3 check is disabled until the feature becomes available. | |||||
| * | Add initial TLS 1.3 key schedule support with basic regress tests | beck | 2018-11-07 | 2 | -0/+249 | |
| | | | | | ok jsing@ tb@ | |||||
| * | Add interop test with OpenSSL 1.1. TLS 1.3 should be used automatically | bluhm | 2018-11-07 | 5 | -10/+55 | |
| | | | | | | when it becomes available in LibreSSL. thanks to sthen@ for the new OpenSSL port | |||||
| * | Print SSLeay, OpenSSL, and LibreSSL version strings. Make client | bluhm | 2018-11-07 | 7 | -12/+71 | |
| | | | | | | and server compile with OpenSSL 1.1. Check runtime version string of SSL library. | |||||
| * | +interop | bluhm | 2018-11-07 | 1 | -1/+2 | |
| | | ||||||
| * | Test TLS interoperability between LibreSSL and OpenSSL. | bluhm | 2018-11-07 | 10 | -0/+549 | |
| | | | | | | | | | | | | | Implement simple SSL client and server in C. Create four binaries by linking them with LibreSSL or OpenSSL. This way API compatibility is tested. Connect and accept with netcat to test protocol compatibility with libtls. Currently OpenSSL 1.0.2p from ports is used. Plan is to move to OpenSSL 1.1 and and test TLS 1.3. idea from beck@; help from jsing@ | |||||
| * | Add TLSv1.3 to version regress tests. | jsing | 2018-11-06 | 1 | -4/+80 | |
| | | ||||||
| * | Unbreak regress following Supported Elliptic Curve extension rename. | jsing | 2018-11-06 | 1 | -49/+49 | |
| | | ||||||
| * | Add regress coverage for CBB_add_u32(). | jsing | 2018-08-16 | 1 | -3/+4 | |
| | | ||||||
| * | Update regress for DES cipher suite removal. | jsing | 2018-06-02 | 2 | -49/+41 | |
| | | ||||||
| * | Zero the client random so that it is easier to spot unintended differences. | jsing | 2018-06-02 | 1 | -0/+1 | |
| | | ||||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |