Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | bio_dump: only run strncmp if there's something to compare | tb | 2025-05-18 | 1 | -2/+2 | |
| | ||||||
* | Stop using CRYPTO_gcm128_init() and stack allocated GCM128_CONTEXT. | jsing | 2025-05-16 | 1 | -16/+16 | |
| | | | | | | | Since struct gcm128_context is not exposed via a public header, there is no way CRYPTO_gcm128_init() can actually be used properly. Instead, use CRYPTO_gcm128_new() and CRYPTO_gcm128_free_bird()^WCRYPTO_gcm128_release() (naming consistency is apparently hard). | |||||
* | merge the x509name test into x509_name_test.c | tb | 2025-05-05 | 4 | -73/+125 | |
| | | | | | | | | | | | | | Remove the old x509name test and its Makefile rule. Its logic has been fully integrated into x509_name_test.c using a new table-driven approach. Each x509 name entry is added and validated step by step, checking both the string representation produced by X509_NAME_print_ex() and the internal RDN set structure. This makes the test easier to extend and maintain, and eliminates the need for an external .expected file or output diff. From Kenjiro Nakayama (with tiny tweaks) | |||||
* | Improve the pqueue test | tb | 2025-05-04 | 3 | -48/+57 | |
| | | | | | | | This simplifies the test in portable and makes the whole thing a bit less ugly overall. From Kenjiro Nakayama with minor tweaks by me | |||||
* | Remove the three test cases covering prime239v* | tb | 2025-05-04 | 1 | -121/+1 | |
| | ||||||
* | Verify that the selected key share is indeed group 29 | tb | 2025-05-03 | 1 | -1/+6 | |
| | | | | From Kenjiro Nakayama | |||||
* | mlkem_unittest: check return value of decap() | tb | 2025-05-03 | 1 | -5/+11 | |
| | | | | From Kenjiro Nakayama | |||||
* | mlkem_tests: add an empty line for consistency | tb | 2025-05-03 | 1 | -1/+2 | |
| | ||||||
* | tlsexttest: remove check that clients receive SNI before ALPN | tb | 2025-04-30 | 1 | -33/+3 | |
| | | | | | | The next commit will remove the kludge for compatibility of Apache with older libressl, so remove the corresponding regress coverage and only check that PSK is the last extension. | |||||
* | c2sp: drop OpenSSL 1.1 and 3.2, add 3.5 | tb | 2025-04-27 | 1 | -2/+2 | |
| | ||||||
* | Enable remaining tests with NULL, 0 | tb | 2025-04-14 | 2 | -9/+3 | |
| | | | | Now that libc is fixed, we can do this also for md5, rmd160 and sha1. | |||||
* | Link hash regress to build | tb | 2025-04-14 | 1 | -1/+2 | |
| | ||||||
* | Add some regress coverage for the hashes in libc | tb | 2025-04-14 | 2 | -0/+946 | |
| | | | | Prompted by a pending diff by claudio | |||||
* | parse_test_file() | tb | 2025-04-13 | 1 | -1/+3 | |
| | | | | | | gcc 14 needs a hint that ld != NULL beyond the use of ld->data in the previous line. I guess aggressive inlining is becoming too aggressive. What a pile of junk. | |||||
* | Avoid compiler warning on some OS | tb | 2025-04-13 | 1 | -1/+1 | |
| | | | | | | | | Some OS declare arc4random() with __attribute__((warn_unused_result)) causing this test to whine. So explicitly ignore the return value. Reported by scheiba in libressl/portable Fixes #1151 | |||||
* | Adjust x509_name_regress to the X509_NAME_print() fix in a_strex.c r1.38 | tb | 2025-03-19 | 1 | -15/+2 | |
| | ||||||
* | Add regress coverage for X509_NAME_oneline and X509_NAME_print | tb | 2025-03-15 | 2 | -1/+314 | |
| | ||||||
* | Test SSL_OP_NO_RENEGOTIATION and SSL_OP_ALLOW_CLIENT_RENEGOTIATION. | jsing | 2025-03-12 | 1 | -1/+56 | |
| | | | | | Extend renegotiation tests to cover SSL_OP_NO_RENEGOTIATION and SSL_OP_ALLOW_CLIENT_RENEGOTIATION. | |||||
* | ec_asn1_test: Prepare for upcoming bump | tb | 2025-03-08 | 2 | -8/+11 | |
| | | | | | Linking statically, pull in ec_local.h and provide a prototype for EC_GROUP_new(), which will be removed from the public API. | |||||
* | asn1object: improve error message to include returned value | tb | 2025-02-26 | 1 | -2/+2 | |
| | | | | From Kenjiro Nakayama | |||||
* | recp -> reciprocal renaming in tests | tb | 2025-02-12 | 2 | -7/+7 | |
| | ||||||
* | Improve detection and handling of alerts in renegotiation regress. | jsing | 2025-02-01 | 1 | -23/+76 | |
| | ||||||
* | Hook renegotiation regress. | jsing | 2025-02-01 | 1 | -1/+2 | |
| | ||||||
* | Fix certificate paths. | jsing | 2025-02-01 | 1 | -4/+4 | |
| | ||||||
* | Add regress coverage for TLS renegotiation. | jsing | 2025-02-01 | 2 | -0/+560 | |
| | ||||||
* | Remove pointless call to EC_GROUP_precompute_mul() | tb | 2025-01-24 | 1 | -3/+1 | |
| | ||||||
* | ectest: zap stray whitespace | tb | 2025-01-22 | 1 | -2/+2 | |
| | ||||||
* | ectest: fix misleading indentation | tb | 2025-01-22 | 1 | -5/+7 | |
| | ||||||
* | ectest: remove unused defines | tb | 2025-01-22 | 1 | -5/+1 | |
| | ||||||
* | ectest: even more lipstick | tb | 2025-01-22 | 1 | -17/+15 | |
| | ||||||
* | ectest: apply some more lipstick | tb | 2025-01-22 | 1 | -8/+3 | |
| | ||||||
* | ectest: switch from new + copy to dup. zap some NULL checks before free | tb | 2025-01-22 | 1 | -42/+15 | |
| | ||||||
* | bn_test: remove random negative dance for bn_div_reciprocal() | tb | 2025-01-22 | 1 | -3/+1 | |
| | ||||||
* | Adjust for BN_div_recp() -> BN_div_reciprocal() | tb | 2025-01-22 | 1 | -3/+3 | |
| | ||||||
* | Ensure the cyclic subgroup cycles in the expected number of iterations. | jsing | 2025-01-22 | 1 | -9/+14 | |
| | | | | Also print the iteration number and fix some indentation. | |||||
* | ectest: heed long forgotten XXX and switch back to BN_one() | tb | 2025-01-22 | 1 | -3/+2 | |
| | ||||||
* | ec/Makefile: remove excess tabs | tb | 2025-01-21 | 1 | -9/+9 | |
| | ||||||
* | bn_test: use BN_RECP_CTX_create() rather than _new()/_set() | tb | 2025-01-21 | 1 | -5/+3 | |
| | ||||||
* | md_test: switch from 2<<28 to 1<<29 | tb | 2025-01-19 | 1 | -2/+2 | |
| | | | | discussed with jsing | |||||
* | Add regress coverage that checks the MD5 message bit counter handling. | jsing | 2025-01-19 | 1 | -1/+66 | |
| | ||||||
* | Interop tests for openssl 3.3 and 3.4, retire 3.2, 1.1 (and 3.1 remnants) | tb | 2025-01-15 | 12 | -191/+130 | |
| | | | | | | OpenSSL 1.1 and 3.2 will be removed from the ports tree, so test the two remaining versions. Unfortunately, this requires a lot more manual massaging than there should be. | |||||
* | An -> The | tb | 2025-01-06 | 1 | -2/+2 | |
| | | | | | There's only one inverse and in standard affine coordinates it only has one representation. | |||||
* | Print the inverse in affine coordinates | tb | 2025-01-06 | 1 | -8/+3 | |
| | | | | | This way we can get rid of the stupidity that is publicly exposed Jprojective coordinates soon. | |||||
* | Let's use RSA_3 rather than 3 | tb | 2025-01-05 | 1 | -2/+2 | |
| | ||||||
* | Stop setting RSA_FLAG_SIGN_VER | tb | 2025-01-05 | 1 | -2/+1 | |
| | | | | With rsa_sign.c r1.37 this is no longer needed. | |||||
* | rsa_method_test: some consistency tweaks | tb | 2025-01-04 | 1 | -6/+5 | |
| | ||||||
* | fix typo | tb | 2025-01-04 | 1 | -2/+2 | |
| | ||||||
* | Add some regress coverage for custom RSA methods | tb | 2025-01-04 | 2 | -1/+280 | |
| | | | | | This currently only covers sign and verify since other parts are already known to work in practice. Prompted by a bug report by kn | |||||
* | rsa tests: tidy up the makefile | tb | 2025-01-04 | 1 | -7/+8 | |
| | ||||||
* | Zap extraneous -DLIBRESSL_INTERNAL | tb | 2024-12-29 | 1 | -2/+1 | |
| |