| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
| |
test_init() calls test_new(NULL, NULL), which leads to a segfault.
llvm 16 optimizes this away with -O2, however gcc 4.2.1 on sparc64
doesn't. Fix this by only inheriting the out FILE from the parent
if the latter is non-NULL.
|
|
|
|
| |
pushed-back wchar_t chars.
|
| |
|
| |
|
|
|
|
| |
previous commit.
|
|
|
|
|
|
| |
reading FILE objects. It will fail until fflush() complies POSIX-2008.
ok tb asou
|
| |
|
| |
|
|
|
|
|
|
| |
what is going on when these break
ok tb@
|
|
|
|
|
|
|
|
|
|
|
| |
Previously, invalid generalized time tests were split into a separate
set of test vectors and a flag was used when calling the test function to
indicate they should be tested as generalized only.
This simplifies the code a bit, and makes converting to the new test
framework easier.
ok jsing
|
|
|
|
| |
ok beck
|
|
|
|
| |
ok jsing tb beck
|
|
|
|
|
| |
This caused test_fail to always be called when used in certain conditions,
and wrapping with do {} while (0) fixes this.
|
|
|
|
|
|
|
|
| |
Add a basic test case for HKDF using EVP_PKEY_HKDF to evp_test.c.
This test verifies the correct derivation of output keying material
using SHA-256, matching the test vector from RFC 5869 Appendix A.1.
ok tb@ joshua@
|
|
|
|
|
|
|
|
|
|
| |
Add a test framework for use in LibreSSL regression tests. This test
framework aims to be as lightweight and as simple to use as possible.
The design is mostly inspired by Go's test system, and aims to be a
drop-in utility in most existing regress tests.
ok jsing tb beck
|
|
|
|
|
|
|
|
| |
Check if ctx->data is NULL before calling freezero(). Also add
HKDF and TLS1-PRF to the EVP_PKEY cleanup regression test, as
they no longer crash with this change.
ok tb@
|
| |
|
|
|
|
|
|
|
|
| |
Even though this should remain internal, make it the same
as the public key marshal function, and make the needed
fallout changes in regress.
ok kenjiro@, tb@
|
|
|
|
|
|
|
|
|
|
|
|
| |
Even though this should remain internal, make it the same
as the public key marshal function, and make the needed
fallout changes in regress.
This does not yet do the bikeshed of renaming the structure
field in the regress ctx, that will wait until a follow on
to convert 1024 in a similar manner
ok tb@
|
|
|
|
|
|
|
|
|
| |
- Get rid of CBB/CBS usage in public api
- Make void functions return int that can fail if malloc fails.
Along with some fallout and resulting bikeshedding in the regress tests.
ok jsing@, tb@
|
| |
|
|
|
|
|
|
|
| |
Since struct gcm128_context is not exposed via a public header, there is no
way CRYPTO_gcm128_init() can actually be used properly. Instead, use
CRYPTO_gcm128_new() and CRYPTO_gcm128_free_bird()^WCRYPTO_gcm128_release()
(naming consistency is apparently hard).
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Remove the old x509name test and its Makefile rule. Its logic has
been fully integrated into x509_name_test.c using a new table-driven
approach. Each x509 name entry is added and validated step by step,
checking both the string representation produced by X509_NAME_print_ex()
and the internal RDN set structure.
This makes the test easier to extend and maintain, and eliminates the need
for an external .expected file or output diff.
From Kenjiro Nakayama (with tiny tweaks)
|
|
|
|
|
|
|
| |
This simplifies the test in portable and makes the whole thing a bit
less ugly overall.
From Kenjiro Nakayama with minor tweaks by me
|
| |
|
|
|
|
| |
From Kenjiro Nakayama
|
|
|
|
| |
From Kenjiro Nakayama
|
| |
|
|
|
|
|
|
| |
The next commit will remove the kludge for compatibility of Apache with
older libressl, so remove the corresponding regress coverage and only
check that PSK is the last extension.
|
| |
|
|
|
|
| |
Now that libc is fixed, we can do this also for md5, rmd160 and sha1.
|
| |
|
|
|
|
| |
Prompted by a pending diff by claudio
|
|
|
|
|
|
| |
gcc 14 needs a hint that ld != NULL beyond the use of ld->data in the
previous line. I guess aggressive inlining is becoming too aggressive.
What a pile of junk.
|
|
|
|
|
|
|
|
| |
Some OS declare arc4random() with __attribute__((warn_unused_result))
causing this test to whine. So explicitly ignore the return value.
Reported by scheiba in libressl/portable
Fixes #1151
|
| |
|
| |
|
|
|
|
|
| |
Extend renegotiation tests to cover SSL_OP_NO_RENEGOTIATION and
SSL_OP_ALLOW_CLIENT_RENEGOTIATION.
|
|
|
|
|
| |
Linking statically, pull in ec_local.h and provide a prototype for
EC_GROUP_new(), which will be removed from the public API.
|
|
|
|
| |
From Kenjiro Nakayama
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|