Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Add regress coverage for ASN1_get_object() | jsing | 2021-12-14 | 1 | -1/+262 | |
| | ||||||
* | Add regress for ASN1_tag2bit() and ASN1_tag2str() | jsing | 2021-12-14 | 2 | -1/+135 | |
| | ||||||
* | remove a couple hundred sys/param.h includes in userland code, and | deraadt | 2021-12-13 | 50 | -227/+77 | |
| | | | | | | also whack some sys/cdefs.h early includes which is such a brutally bad pattern ok bluhm mbuhl | |||||
* | Merge two bugfixes in ASN1_STRING_TABLE_add(3) and ASN1_STRING_TABLE_get(3) | schwarze | 2021-12-11 | 2 | -2/+131 | |
| | | | | | | | | | | | | | | | | | | | | | | from the OpenSSL 1.1.1 branch, which is still under a free license, mostly this commit: commit d35c0ff30b31be9fd5dcf3d552a16feb8de464bc Author: Dr. Stephen Henson <steve@openssl.org> Date: Fri Oct 19 15:06:31 2012 +0000 fix ASN1_STRING_TABLE_add so it can override existing string table values This fixes a segfault in ASN1_STRING_TABLE_add(3), which tried to change a static const entry when called with an nid already in the default table, and it switches the precedence of the two tables in ASN1_STRING_TABLE_get(3). In addition, it changes behaviour in the following minor ways: * Ignore negative minsize and maxsize arguments, not just -1. * Ignore a zero mask and zero flags. It's unclear whether these additional changes make the API absolutely better, but we want compatibility with OpenSSL in these functions. Tweaks & OK tb@. | |||||
* | Fix missing return in asn1_compare_bytes() | jsing | 2021-12-09 | 1 | -1/+2 | |
| | ||||||
* | Add initial tests for coverage of ASN.1 complex/constructed types. | jsing | 2021-12-09 | 2 | -1/+228 | |
| | ||||||
* | Add initial tests for coverage of ASN.1 basic/primitive types. | jsing | 2021-12-09 | 2 | -1/+135 | |
| | ||||||
* | be more specific which NETSCAPE stuff to ignore, and why | schwarze | 2021-12-07 | 1 | -10/+7 | |
| | ||||||
* | Some improvements allowing to handle asn1.h and x509v3.h: | schwarze | 2021-12-07 | 1 | -10/+47 | |
| | | | | | | | | | | | | | * handle multiple qualifiers on the function return type * handle function pointer type declarations * handle unions inside structs * handle forward struct declarations * handle "typedef const" * handle ASN1_F_, ASN1_R_, and X509V3_R_ error constants * handle "#if defined" in the same way as "#ifdef" * skip whitespace between "#" and "define" * skip whitespace before C comments * ignore TYPEDEF_D2I2D_OF | |||||
* | Add initial regress for CT. | jsing | 2021-12-05 | 4 | -1/+415 | |
| | | | | This provides test coverage for SCT encoding/decoding. | |||||
* | gross trailing whitespace | tb | 2021-12-04 | 1 | -16/+16 | |
| | ||||||
* | Free cert, key and ocsp_staple on exit of do_keypair_test(). | tb | 2021-12-04 | 1 | -1/+4 | |
| | | | | Reported by Ilya Shipitsine, discussed with jsing | |||||
* | Convert main into single exit to appease asan. | tb | 2021-12-04 | 1 | -22/+33 | |
| | ||||||
* | Explicitly free EVP_MD_CTX to appease asan. Reported by Ilya Shipitsin. | tb | 2021-12-04 | 1 | -10/+16 | |
| | ||||||
* | Add regress for ECPKParameters ASN.1 encoding/decoding. | jsing | 2021-12-04 | 2 | -2/+210 | |
| | ||||||
* | Tell testers which packages to install right away (and why) | kn | 2021-12-02 | 3 | -3/+7 | |
| | | | | | | | Other regress tests do it differently; just fix/thouch those that did not mention any package name at all. This helps grepping logs for SKIPPED to find instructions for the next run. | |||||
* | Add regress for {d2i,i2d}_{,DSA_,EC_,RSA_}PUBKEY{,_bio}(). | jsing | 2021-11-30 | 2 | -1/+570 | |
| | ||||||
* | make the bn/mont test compile with opaque DH. | tb | 2021-11-26 | 1 | -4/+12 | |
| | ||||||
* | Rework this test to compile with opaque RSA | tb | 2021-11-25 | 1 | -282/+427 | |
| | ||||||
* | Resolve last issue with opaque BIGNUM in this test. | tb | 2021-11-25 | 1 | -3/+3 | |
| | ||||||
* | Prepare ssltest for opaque DH | tb | 2021-11-21 | 1 | -18/+39 | |
| | ||||||
* | wycheproof: modify RSA tests to work with opaque RSA struct | tb | 2021-11-21 | 1 | -11/+57 | |
| | ||||||
* | wycheproof.go: modify some DSA and ECDSA code to work with opaque structs | tb | 2021-11-21 | 1 | -5/+23 | |
| | ||||||
* | Switch to BIO_up_ref() instead of adjusting references manually. | tb | 2021-11-20 | 2 | -16/+6 | |
| | ||||||
* | Use BIO_up_ref() instead of adjusting refcounts manually | tb | 2021-11-20 | 1 | -9/+3 | |
| | ||||||
* | Mark the X509_VERIFY_PARAM_ID variable type as intentionally | schwarze | 2021-11-19 | 1 | -3/+16 | |
| | | | | | | | undocumented. It is an opaque struct used only internally, as a sub-object of the public X509_VERIFY_PARAM type. All related API functions take X509_VERIFY_PARAM arguments, so X509_VERIFY_PARAM_ID is of no interest to the user. | |||||
* | Make function prototype parsing a bit stricter, | schwarze | 2021-11-19 | 1 | -1/+1 | |
| | | | | | | | | | | reducing the risk of accidental misparsing: Require whitespace after the function return type (before the asterisk indicating that the function returns a pointer, if any) and do not accept whitespace between the function name and the opening parenthesis of the parameter list. These changes are not a problem because we want that style for KNF reasons anyway. | |||||
* | Very quick and dirty script to help me check that the symbols | schwarze | 2021-11-19 | 1 | -0/+266 | |
| | | | | | | | | | | | | | | in one of the public openssl/ header files are all documented. Before attempting to read this code, make sure that you are fully vaccinated against leaning toothpick syndrome. Example usage: ./check_complete.pl x509_vfy ./check_complete.pl -v x509 | less Intentionally not linked to the build. jsing@ agrees with the general direction. | |||||
* | sha512test: replace EVP_MD_CTX_{cleanup,init} pair with EVP_MD_CTX_reset | tb | 2021-11-18 | 1 | -3/+2 | |
| | ||||||
* | gost: missed one cleanup | tb | 2021-11-18 | 1 | -2/+2 | |
| | ||||||
* | sha256test: EVP_MD_CTX_cleanup -> EVP_MD_CTX_reset | tb | 2021-11-18 | 1 | -4/+3 | |
| | ||||||
* | gost2814789t: EVP_MD_CTX_cleanup -> EVP_MD_CTX_reset | tb | 2021-11-18 | 1 | -2/+2 | |
| | ||||||
* | evptest: no need to call EVP_MD_CTX_cleanup() before EVP_MD_CTX_free() | tb | 2021-11-18 | 1 | -4/+3 | |
| | ||||||
* | Use HMAC_CTX_reset() instead of HMAC_CTX_cleanup() + HMAC_CTX_init() | tb | 2021-11-18 | 1 | -5/+3 | |
| | ||||||
* | Fix ssltest to work with opaque EVP_PKEY. | tb | 2021-11-18 | 1 | -22/+33 | |
| | ||||||
* | sha*test: convert these tests to work with opaque EVP_MD_CTX. | tb | 2021-11-18 | 3 | -31/+42 | |
| | ||||||
* | zap trailing whitespace | tb | 2021-11-18 | 1 | -7/+7 | |
| | ||||||
* | hmactest: convert to opaque HMAC_CTX. | tb | 2021-11-18 | 1 | -29/+37 | |
| | ||||||
* | gost2814789t: convert to opaque EVP_{MD,CIPHER}_CTX. | tb | 2021-11-18 | 1 | -19/+23 | |
| | ||||||
* | exptest: convert to opaque BN; minor KNF tweaks. | tb | 2021-11-18 | 1 | -40/+47 | |
| | ||||||
* | evptest: fix compilation with opaque EVP_{CIPHER,MD}_CTX. Uses a | tb | 2021-11-18 | 1 | -22/+30 | |
| | | | | workaround for excessive malloc inspired by mariadb (just kidding). | |||||
* | ecdsatest: make this test compile with opaque EVP_MD_CTX. | tb | 2021-11-18 | 1 | -7/+8 | |
| | ||||||
* | dsatest: make this work with opaque BN. Some more fixes will be needed | tb | 2021-11-18 | 1 | -114/+124 | |
| | | | | | for opaque DSA. I'll deal with that later. I also lobbed a KNF grenade in here. | |||||
* | dhtest: fix this to work with opaque BN. This will need more fixes to | tb | 2021-11-18 | 1 | -48/+61 | |
| | | | | | work with opaque DH, but one step at a time. While here, add a bunch of missing spaces to reduce the eyebleed. | |||||
* | bntest: Fix all but one test in this file to work with opaque BN. | tb | 2021-11-18 | 1 | -399/+563 | |
| | | | | | The remaining test needs some thinking (or disabling once we flip the switch). It is currently marked with an XXX. | |||||
* | Test ASN1_STRING_copy(3). | schwarze | 2021-11-13 | 2 | -1/+121 | |
| | | | | | | As a side effect, this also tests various aspects of ASN1_STRING_new(3), ASN1_STRING_set(3), ASN1_STRING_length_set(3), ASN1_STRING_get0_data(3), ASN1_STRING_length(3), and ASN1_STRING_type(3). | |||||
* | Test adding extensions to certification requests. | schwarze | 2021-11-03 | 2 | -2/+167 | |
| | | | | | Related to the bugfixes in x509_req.c rev. 1.25. OK tb@. | |||||
* | Add regress that calls SSL_set_tlsext_host_name() with a NULL host name. | jsing | 2021-11-02 | 1 | -1/+15 | |
| | ||||||
* | Rework SNI hostname regress to be table driven. | jsing | 2021-11-01 | 1 | -62/+147 | |
| | | | | | | | Also adjust for the changes to tlsext_sni_is_valid_hostname() and include tests for IPv4 and IPv6 literals. ok beck@ | |||||
* | Rework x509attribute regress test in such a way that it doesn't need | tb | 2021-11-01 | 1 | -11/+7 | |
| | | | | to reach into opaque structs. |