Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Update regress following sigalgs changes. | jsing | 2019-03-25 | 1 | -17/+1 | |
| | ||||||
* | Fix typo in usage and comment. | bluhm | 2019-03-21 | 3 | -6/+6 | |
| | ||||||
* | Add regress tests for the EVP_aes_*_wrap() API. Based on the tests in | tb | 2019-03-17 | 2 | -4/+19 | |
| | | | | OpenSSL 1.0.2r which is still freely licenced with a tweak by jsing. | |||||
* | link sm4 regress to the build | tb | 2019-03-17 | 1 | -1/+2 | |
| | ||||||
* | Add a regress test for the SM4 block cipher from the Chinese standard | tb | 2019-03-17 | 2 | -0/+117 | |
| | | | | | | | GB/T 32907-2016. Patch from Daniel Wyatt ok inoguchi, jsing | |||||
* | Test that all supported TLS ciphers actually work. Establish | bluhm | 2019-02-21 | 8 | -26/+308 | |
| | | | | | | connections between client and server implemented with LibreSSL or OpenSSL with a fixed cipher on each side. Check the used cipher in the session print out. | |||||
* | one more error message that should go to stderr | tb | 2019-02-13 | 1 | -2/+3 | |
| | ||||||
* | getopt(3) returns int, not char. Fix type of ch variable to prevent | bluhm | 2019-02-11 | 2 | -6/+6 | |
| | | | | sign error during arm regress. | |||||
* | Use malloc() and memcpy() the test X25519 x25519_peer_public value. | jsing | 2019-02-03 | 1 | -3/+6 | |
| | | | | | | | Otherwise, if tlsext_keyshare_server_build() fails we call free with a pointer to static memory and bad things happen. Reported by bcook@ | |||||
* | zap a commented out line. 0RTT will need more thought than | tb | 2019-01-27 | 1 | -2/+1 | |
| | | | | just uncommenting this. | |||||
* | refactor and clean up the code generating dot output. | tb | 2019-01-27 | 1 | -53/+76 | |
| | ||||||
* | print errors to stderr | tb | 2019-01-25 | 1 | -19/+21 | |
| | ||||||
* | sort output suffixes | tb | 2019-01-25 | 1 | -2/+2 | |
| | ||||||
* | I am retiring my old email address; replace it with my OpenBSD one. | millert | 2019-01-25 | 9 | -16/+16 | |
| | ||||||
* | Add code to visualize the state machine. Both the state machine and the | tb | 2019-01-24 | 2 | -5/+79 | |
| | | | | | | | output will have to be tweaked, but this may as well happen in-tree. To try it, pkg_add graphviz and run 'make handshake.svg' in this directory. Committing early so Bob's followers can play. | |||||
* | set the NEGOTIATED flag in the flags argument rather than | tb | 2019-01-24 | 1 | -4/+4 | |
| | | | | squeezing it into the table. | |||||
* | Add server side of versions, keyshare, and client and server of cookie | beck | 2019-01-24 | 1 | -6/+435 | |
| | | | | | | | | extensions for tls1.3. versions is currently defanged to ignore its result until tls13 server side wired in full, so that server side code still works today when we only support tls 1.2 ok bcook@ tb@ jsing@ | |||||
* | Remove SHA224 based sigalgs from use in TLS 1.2 as SHA224 is deprecated. | beck | 2019-01-24 | 2 | -31/+21 | |
| | | | | | Remove GOST based sigalgs from TLS 1.2 since they don't work with TLS 1.2. ok jsing@ | |||||
* | make whitespace inside curlies consistent; sort function prototypes. | tb | 2019-01-23 | 1 | -24/+24 | |
| | ||||||
* | Rename NUM_HANDSHAKE to handshake_count and make it a variable | tb | 2019-01-23 | 2 | -10/+44 | |
| | | | | | | | | | so it can be used from regress. Update regress accordingly. Make sure the print target generates the entire table as it currently is in tls13_handshake.c discussed with beck and jsing ok jsing | |||||
* | Modify sigalgs extension processing to accomodate TLS 1.3. | beck | 2019-01-23 | 2 | -25/+28 | |
| | | | | | | | | | | - Make a separate sigalgs list for TLS 1.3 including only modern algorithm choices which we use when the handshake will not negotiate TLS 1.2. - Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2 from a 1.3 handshake. ok jsing@ tb@ | |||||
* | revert previous, accidentally contained another diff in addition | beck | 2019-01-23 | 2 | -28/+25 | |
| | | | | to the one I intended to commit | |||||
* | Modify sigalgs extension processing for TLS 1.3. | beck | 2019-01-23 | 2 | -25/+28 | |
| | | | | | | | | | - Make a separate sigalgs list for TLS 1.3 including only modern algorithm choices which we use when the handshake will not negotiate TLS 1.2 - Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2 ok jsing@ tb@ | |||||
* | incorrrect spelling | tb | 2019-01-23 | 1 | -2/+2 | |
| | ||||||
* | do not print the command in the print: target | tb | 2019-01-23 | 1 | -2/+2 | |
| | ||||||
* | Add a regression test that builds up the handshake state table | tb | 2019-01-23 | 2 | -1/+399 | |
| | | | | | | | from graph information and cross-checks it against the state table in tls13_handshake.c. with help from jsing | |||||
* | add support for xchacha20 and xchacha20-poly1305 | dlg | 2019-01-22 | 3 | -3/+191 | |
| | | | | | | | xchacha is a chacha stream that allows for an extended nonce, which in turn makes it feasible to use random nonces. ok tb@ | |||||
* | Update record regress to match functionality changes. | jsing | 2019-01-20 | 1 | -6/+37 | |
| | ||||||
* | hook handshake test | tb | 2019-01-20 | 1 | -1/+2 | |
| | ||||||
* | Add a simple test that verifies that every valid handshake | tb | 2019-01-20 | 2 | -0/+76 | |
| | | | | sets action->handshake_complete. | |||||
* | Hook record regress. | jsing | 2019-01-19 | 1 | -1/+3 | |
| | ||||||
* | Add regress for TLSv1.3 record handling. | jsing | 2019-01-19 | 2 | -0/+533 | |
| | ||||||
* | initialize offset value so this passes | beck | 2019-01-18 | 1 | -0/+1 | |
| | | | | ok jsing@ | |||||
* | Add client side of supported versions and keyshare extensions with basic regress | beck | 2019-01-18 | 1 | -1/+192 | |
| | | | | ok jsing@ | |||||
* | Removed unused struct members. | jsing | 2019-01-18 | 1 | -2/+0 | |
| | ||||||
* | Update regress following TLS extension renaming. | jsing | 2019-01-18 | 2 | -379/+378 | |
| | ||||||
* | Add regress for extensible buffer code. | jsing | 2019-01-17 | 3 | -1/+169 | |
| | ||||||
* | Add regress test for bugs in stdio/fread.c rev 1.13 and 1.17 | millert | 2018-12-16 | 3 | -2/+160 | |
| | ||||||
* | add a -R option to set/unset resolver flags.libressl-v2.9.0 | eric | 2018-12-15 | 9 | -20/+101 | |
| | | | | use strcasecmp for reading args. | |||||
* | This test does not terminate if malloc conf is preconfigured with | bluhm | 2018-11-29 | 1 | -2/+6 | |
| | | | | | J. Clear that option to allow running full regress with paranoid malloc flags. This is the same fix as for malloc_ulimit1. | |||||
* | We're manipulating malloc flags ourselves, start with restting them all. | otto | 2018-11-29 | 1 | -1/+5 | |
| | | | | ok bluhm@ | |||||
* | This test does not terminate if malloc conf is preconfigured with | bluhm | 2018-11-28 | 1 | -4/+8 | |
| | | | | | | J. Clear that option to allow running full regress with paranoid malloc flags. Also fix whitespace. OK otto@ | |||||
* | Just err if we can't create secrets | beck | 2018-11-13 | 1 | -2/+2 | |
| | ||||||
* | Rework the sm3 regress based on a suggestion by jsing. Zap the weird | tb | 2018-11-12 | 1 | -30/+36 | |
| | | | | | | hex_encode() function and use byte arrays instead of strings to store the expected values. Snatch and tweak hexdump() from beck's key_schedule test to pretty-print data in case of failure. | |||||
* | Fix a race in libssl interop regress. The success messages from | bluhm | 2018-11-11 | 3 | -6/+9 | |
| | | | | | the server child could be delayed. In this case wait a second and check again. | |||||
* | Hook up sm3 regress tests. | tb | 2018-11-11 | 1 | -1/+2 | |
| | ||||||
* | Add sm3 regress tests. | tb | 2018-11-11 | 2 | -0/+101 | |
| | ||||||
* | Add automatic threading initialization for libcrypto. | bcook | 2018-11-11 | 1 | -56/+0 | |
| | | | | | | | | | | | | | | This implements automatic thread support initialization in libcrypto. This does not remove any functions from the ABI, but does turn them into no-ops. Stub implementations of pthread_mutex_(init|lock|unlock) are provided for ramdisks. This does not implement the new OpenSSL 1.1 thread API internally, keeping the original CRYTPO_lock / CRYPTO_add_lock functions for library locking. For -portable, crypto_lock.c can be reimplemented with OS-specific primitives as needed. ok beck@, tb@, looks sane guenther@ | |||||
* | Reorganize libssl interop tests. Move netcat tests into separate | bluhm | 2018-11-11 | 9 | -148/+197 | |
| | | | | | directory. Keep all log files for easier debugging. Name regress target names consistently. | |||||
* | Speling | beck | 2018-11-10 | 1 | -2/+2 | |
| |