| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | alarm(3) cannot fail, remove error handling. | bluhm | 2021-07-06 | 1 | -3/+2 |
| | | | | | suggested by millert@ | ||||
| * | Garbage collect do_test_cipherlist(). | jsing | 2021-07-03 | 1 | -45/+0 |
| | | | | | | This code no longer compiles and the equivalent test coverage has been added to regress/lib/libssl/ciphers (and is actually run). | ||||
| * | Add test that ensures ssl3_ciphers[] is sorted by cipher id. | jsing | 2021-07-03 | 1 | -0/+37 |
| | | |||||
| * | Rewrite get_put_test() as cipher_find_test(). | jsing | 2021-07-03 | 1 | -54/+25 |
| | | | | | | | The get_cipher_by_char() and put_cipher_by_char() pointers are no longer accessible on the SSL_METHOD (and soon will not even exist). Rewrite the test to use SSL_CIPHER_find() instead. | ||||
| * | Disable some code that reaches into libssl internals. | jsing | 2021-06-30 | 1 | -0/+7 |
| | | | | | This should be moved to a dedicated regress test. | ||||
| * | Disable some tests that probably no longer make sense. | jsing | 2021-06-30 | 1 | -0/+5 |
| | | | | | We'll either fix these or remove them in the near future. | ||||
| * | Pull in ssl_locl.h to allow for move of struct ssl_session_st. | jsing | 2021-06-30 | 2 | -2/+5 |
| | | |||||
| * | Add test coverage for TLSv1.3 client hellos. | jsing | 2021-06-27 | 1 | -13/+166 |
| | | | | | | | This is a little bit clunky due to the number of things that vary (largely thanks to middlebox compatibility mode, along with the versions and key share extensions), however it works and can be improved at a later date. | ||||
| * | Add test coverage for DTLSv1.2 client hellos. | jsing | 2021-06-27 | 1 | -7/+102 |
| | | |||||
| * | Improve test coverage for SSL_OP_NO_DTLSv1. | jsing | 2021-06-27 | 1 | -1/+9 |
| | | |||||
| * | Teach hexdump() how to identify differing bytes. | jsing | 2021-06-27 | 1 | -9/+13 |
| | | | | | | This allows differences between the received data and the test data to be more readily identified. | ||||
| * | More appropriately set cipher_list_len when AES acceleration is available. | jsing | 2021-06-27 | 1 | -5/+6 |
| | | |||||
| * | Tweak some data types and sprinkle some const. | jsing | 2021-06-27 | 1 | -15/+15 |
| | | |||||
| * | zap trailing whitespace | tb | 2021-06-19 | 1 | -4/+7 |
| | | |||||
| * | Add DTLS test cases that use non-zero initial epochs. | jsing | 2021-06-19 | 2 | -5/+44 |
| | | | | | | | In particular, test handling of 0xfffe and 0xffff - the latter results in wrapping to zero for the next epoch. One of these tests triggers a known bug in libssl, which will be fixed following this commit. | ||||
| * | Add more complex DTLS tests for delay/reordering. | jsing | 2021-06-19 | 1 | -17/+160 |
| | | | | | | These tests exercise the various queues and delayed processing that exists in the DTLS code. | ||||
| * | Expand comment that details why two DTLS tests currently fail. | jsing | 2021-06-19 | 1 | -2/+5 |
| | | | | | | | | | | | | | | | | Two tests currently fail (and are disabled) due to a flaw in the DTLSv1.0 specification - this flaw was addressed in DTLSv1.2, however our DTLS server code still needs to support the fix. Quoting RFC 6347 section 4.2.4: "This requirement applies to DTLS 1.0 as well, and though not explicit in [DTLS1], it was always required for the state machine to function correctly." In otherwords, both the original DTLS implementation and the DTLSv1.0 specification have a broken state machine, resulting in possible dead lock. | ||||
| * | Provide the ability to delay/reorder DTLS packets. | jsing | 2021-06-19 | 1 | -14/+147 |
| | | | | | | Add a test that delays the client CCS, resulting in it arriving after the client Finished message. | ||||
| * | Remove SSL_CTX_set_read_ahead() calls - it is now the default for DTLS. | jsing | 2021-06-18 | 1 | -3/+1 |
| | | |||||
| * | Rename shutdown_all() to shutdown_peers() for consistency. | tb | 2021-05-04 | 1 | -3/+3 |
| | | |||||
| * | Use limits.h instead of sys/limits.h in dtlstest.c for portable | inoguchi | 2021-05-03 | 1 | -2/+2 |
| | | | | | discussed and input from jsing@ | ||||
| * | Modify regress ssl_get_shared_ciphers for portable | inoguchi | 2021-05-03 | 2 | -6/+6 |
| | | | | | | | | - Split out the intermediate path (../certs/) to Makefile - Change 'shutdown' to 'shutdown_all' ok tb@ | ||||
| * | Hook openssl-ruby test to regress tree | tb | 2021-05-03 | 1 | -1/+2 |
| | | |||||
| * | Add scaffold to run the ruby/openssl regression tests | tb | 2021-05-03 | 1 | -0/+72 |
| | | | | | | | | | | | | | | | | | | | This test depends on the ruby/ruby-openssl-tests port that bundles the sources and tests of the Ruby OpenSSL gem below /usr/local. The Makefile compiles the openssl.so shared object below obj/ that provides Ruby bindings for the OpenSSL API. Once this is built, the regression tests are run. There are currently 4 failing tests, all related to the new verifier. At least one libssl bug is hidden behind a pend. All this will hopefully be fixed during this release cycle. This adds a decent amount of test coverage without being overly expensive. This way, regressions should be spotted during development so jeremy will no longer have to chase and work around them. Joint work with jeremy, positive feedback from bcook and jsing. | ||||
| * | Enable test-renegotiation-changed-clienthello.py but skip | tb | 2021-04-23 | 1 | -1/+7 |
| | | | | | | "drop extended_master_secret in renegotiation" since we don't support this extension. | ||||
| * | revert previous. some of the keyupdate tests still fail occasionally | tb | 2021-04-14 | 1 | -2/+11 |
| | | |||||
| * | Enable test-tls13-keyupdate.py | tb | 2021-04-14 | 1 | -9/+2 |
| | | |||||
| * | move test-record-size-limit.py to unsupported | tb | 2021-04-14 | 1 | -4/+3 |
| | | |||||
| * | enable test-record-layer-fragmentation.py | tb | 2021-04-14 | 1 | -7/+2 |
| | | |||||
| * | factor argument to catch an alert mismatch into a helper function | tb | 2021-04-14 | 1 | -7/+8 |
| | | |||||
| * | enable test-tlsfuzzer-invalid-compression-methods.py | tb | 2021-04-13 | 1 | -5/+10 |
| | | |||||
| * | enable test-large-hello.py as a slow test | tb | 2021-04-13 | 1 | -3/+2 |
| | | |||||
| * | with new defaults, test-fuzzed-plaintext.py is no longer slow | tb | 2021-04-13 | 1 | -3/+2 |
| | | |||||
| * | move a few tests to the unsupported group and fix two comments | tb | 2021-04-13 | 1 | -15/+15 |
| | | |||||
| * | annotate test-ecdhe-rsa-key-exchange-with-bad-messages.py with expected | tb | 2021-04-13 | 1 | -2/+3 |
| | | | | | alerts and where to add them. | ||||
| * | Enable test-cve-2016-6309.py | tb | 2021-04-08 | 1 | -3/+2 |
| | | |||||
| * | Fix two copy paste errors in error messages | tb | 2021-04-04 | 1 | -3/+3 |
| | | |||||
| * | Add tests for DTLSv1_2{,_client,_server}_method() | tb | 2021-04-04 | 1 | -1/+20 |
| | | |||||
| * | Use correct type for tmp in test_write_bytes() | tb | 2021-04-04 | 1 | -2/+2 |
| | | |||||
| * | Add regress coverage for TLSv1.2 record number increment. | jsing | 2021-03-29 | 1 | -8/+151 |
| | | |||||
| * | The failure mode of test-tls13-version-negotiation.py has changed. | tb | 2021-03-28 | 1 | -4/+2 |
| | | | | | Update comment. | ||||
| * | Enable test-sig-algs-renegotiation-resumption.py. | tb | 2021-03-27 | 1 | -5/+6 |
| | | | | | | | | This test covers various scenarios with renegotiation and session resumption. In particular it crashes the OpenSSL 1.1.1j server due to the sigalg NULL deref fixed this week. We need --sig-algs-drop-ok since we do not currently implement signature_algorithms_cert. | ||||
| * | Add test-sig-algs-renegotiation-resumption.py | tb | 2021-03-26 | 1 | -1/+5 |
| | | | | | This test currently fails but may soon be fixed. | ||||
| * | The server only sends a cookie during a HRR, not a SH | tb | 2021-03-24 | 1 | -4/+4 |
| | | |||||
| * | Update regress for new_cipher rename. | jsing | 2021-03-24 | 2 | -6/+6 |
| | | |||||
| * | Plug a few memory leaks reported by Ilya Shipitsin | tb | 2021-03-22 | 1 | -9/+7 |
| | | |||||
| * | Revise regress to match handshake struct changes. | jsing | 2021-03-21 | 1 | -18/+18 |
| | | |||||
| * | typo | tb | 2021-03-20 | 1 | -2/+2 |
| | | |||||
| * | Add new test-tls13-multiple-ccs-messages.py | tb | 2021-03-20 | 1 | -1/+8 |
| | | | | | | | | | | | | This is a test that checks for NSS's CCS flood DoS CVE-2020-25648. The test script currently fails on LibreSSL and OpenSSL 1.1.1j because it sends invalid records with version 0x0300 instead of 0x0303. We have the ccs_seen logic corresponding to NSS's fix: https://hg.mozilla.org/projects/nss/rev/57bbefa793232586d27cee83e74411171e128361 but we do allow up to two CCS due to an interop issue with Fizz, so at least one of the tests will likey be broken once the record version is fixed. | ||||
| * | Update for DTLSv1.2 being enabled. | jsing | 2021-03-17 | 1 | -4/+4 |
| | | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |