summaryrefslogtreecommitdiff
path: root/src/regress/lib/libssl (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Remove unnecessary regress target.doug2015-06-231-7/+2
|
* Add tests for CBS_offset() and CBS_write_bytes().doug2015-06-171-2/+70
| | | | "no problem" miod@, tweak + ok jsing@
* Be more strict about BER and DER terminology.doug2015-06-161-15/+18
| | | | | | | | bs_ber.c does not convert BER to DER. It's a hack to convert a DER-like encoding with one violation (indefinite form) to strict DER. Rename the functions to reflect this. ok miod@ jsing@
* Check for invalid leading zeros in CBS_get_asn1_uint64.doug2015-04-251-2/+4
| | | | | | | | | | ASN.1 integers cannot have all zeros or all ones for the first 9 bits. This rule ensures the numbers are encoded with the smallest number of content octets (see ITU-T Rec X.690 section 8.3.2). Based on BoringSSL commit 5933723b7b592e9914f703d630b596e140c93e16 ok deraadt@ jsing@
* Reject DH keys sent by a server if they are considered too small; inspiredmiod2015-03-081-38/+4
| | | | | by a similar BoringSSL change, but raising the limit to 1024 bits. ok jsing@ markus@ guenther@ deraadt@
* Add more error checking and free resources in bytestringtest.doug2015-02-161-26/+47
|
* Add regress tests for SSL_CIPHER_get_by_value() and SSL_CIPHER_get_by_id().jsing2015-02-071-1/+61
|
* KNF bytestring files.doug2015-02-061-582/+596
| | | | | | | | I checked that this doesn't change anything. Compiled with clang using -Wno-pointer-sign -g0 to reduce the differences. Only difference in the asm is due to assert(0) line number changes in bs_cbs.c and bs_cbb.c. miod is ok with the general process.
* Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.doug2015-02-063-1/+671
| | | | | | | | | | | | | | This is imported with as few changes as possible for the initial commit. I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc() and changed a few header includes. BoringSSL has this as part of their public API. We're leaving it internal to libssl for now. Based on BoringSSL's CBB/CBS API as of commit c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54. input + ok jsing@, miod@
* Add libssl ciphers regress, which currently only coversjsing2015-02-063-1/+130
| | | | get_cipher_by_char/put_cipher_by_char.
* unifdef OPENSSL_NO_NEXTPROTONEGjsing2014-12-141-12/+0
|
* Increase cipher suite test coverage by including all cipher suites thatjsing2014-12-121-5/+5
| | | | use RSA authentication, rather than only those that use RSA key exchange.
* Add regress for ALPN.jsing2014-12-102-1/+180
| | | | Based on OpenSSL.
* remove duplicate initialization of .sid_ctx in testbcook2014-12-071-3/+1
|
* The -ssl2 flag does nothing - remove the flag and any tests that werejsing2014-12-062-34/+4
| | | | using it.
* Allow overriding the path to the testssl and openssl binaries.bcook2014-12-031-9/+9
| | | | | | | This is needed by the portable tree to point directly to the newly-built binaries when running unit tests. discussed with jsing@ and others
* Remove _XOPEN_SOURCE_EXTENDED since we're not too concerned aboutjsing2014-10-131-9/+2
| | | | gethostname being declared properly on Compaq platforms that use DEC C...
* BIO_free() and SSL_CTX_free() have explicit NULL checks, so there is nojsing2014-10-131-29/+16
| | | | need to have additional checks here.
* Add NPN regress tests from OpenSSL. However, unlike OpenSSL, actually exitjsing2014-10-132-3/+146
| | | | with a failure if the NPN verification fails.
* Fix tlsext_tick_lifetime_hint value in test #2 to make sure themiod2014-07-161-29/+29
| | | | | (tlsext_tick_lifetime_hint > 0) test also passes on 32-bit platforms (tlsext_tick_lifetime_hint is a long).
* Add a regress test for the ASN1 handling of SSL session tickets.jsing2014-07-133-1/+389
|
* More KNF.jsing2014-07-121-95/+108
|
* Remove #ifndefs for OPENSSL_NO_DH, OPENSSL_NO_ECDH andjsing2014-07-121-41/+0
| | | | | OPENSSL_NO_X509_VERIFY. We're not going to build with these and the same removal has already been done for libssl.
* Remove PSK from the ssl regress.jsing2014-07-112-134/+1
|
* Uncompress ssltest.jsing2014-07-101-50/+0
|
* Include -DLIBRESSL_INTERNAL in regress makefiles.jsing2014-07-081-2/+2
| | | | ok miod@
* Add DTLS support to ssltest and wire up some regress tests.jsing2014-06-212-8/+41
| | | | ok miod@
* Remove support for the `opaque PRF input' extension, which draft has expiredmiod2014-06-131-32/+0
| | | | | | | | 7 years ago and never made it into an RFC. That code wasn't compiled in anyway unless one would define the actual on-the-wire extension id bytes; crank libssl major. With help and enlightenment from Brendan MacDonell.
* Build with WARNINGS=Yes and Werror.miod2014-06-012-12/+4
|
* Move ssltest.c to a regress test.jsing2014-05-247-0/+2541
|
* Move the regress tests that are in lib/libssl to usr.sbin/openssl,jsing2014-05-248-245/+0
| | | | | | | since they are really testing openssl(1) (although this also tests libcrypto and libssl), rather than actual parts of the libssl library. Discussed with miod@
* Remove the ossltests target, these are now all in libcrypto regressjsg2014-04-171-208/+2
| | | | except sha256t/sha512t which are likely to be removed for license reasons.
* adapt to test file movesjsg2014-04-161-63/+50
| | | | md2test and rsatest targets removed as the files have been removed
* don't use non-standard CFLAGS; ok miod@, deraadt@naddy2010-10-031-2/+2
|
* update for openssl-0.9.8hdjm2008-09-061-47/+93
|
* missing blowfish testmickey2003-06-161-4/+4
|
* un-break test; report and test by davidkrausemarkus2003-05-241-90/+90
|
* remove MDC2; patentsmarkus2002-09-261-7/+1
|
* Rename a bunch of the old bsd.regress.mk variables into the new ones.avsm2002-09-021-3/+3
| | | | ok art@
* e_os.h is longer installedmarkus2002-09-011-3/+3
|
* Build and run openssl regress tests in addition to our own.beck2002-05-151-3/+191
|
* Move the enc tests into the Makefile and split them intoart2002-01-152-2/+42
| | | | | several small tests. beck@ ok
* Convert to bsd.regress.mk.art2002-01-021-5/+6
| | | | Not finished yet.
* Ancient comment. the RSA patent expired a long time ago.art2002-01-021-3/+1
|
* Generate? Or maybe Degenerate? Definitely not Denerate.art2002-01-021-2/+2
|
* Remove obsolete comment (and a 3 second sleep).art2002-01-021-10/+1
|
* uncomment rsa test; ok millert@todd2001-02-071-2/+2
|
* $OpenBSD$niklas2001-01-297-0/+14
|
* ssleay->openssl name change. (Wonder what spinoff projects will name it)beck1999-09-291-0/+0
|
* New minty openssl versionbeck1999-09-295-12/+12
|
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-08-23 19:15:06 +0000