Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Modify sigalgs extension processing for TLS 1.3. | beck | 2019-01-23 | 2 | -25/+28 | |
| | | | | | | | | | - Make a separate sigalgs list for TLS 1.3 including only modern algorithm choices which we use when the handshake will not negotiate TLS 1.2 - Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2 ok jsing@ tb@ | |||||
* | incorrrect spelling | tb | 2019-01-23 | 1 | -2/+2 | |
| | ||||||
* | do not print the command in the print: target | tb | 2019-01-23 | 1 | -2/+2 | |
| | ||||||
* | Add a regression test that builds up the handshake state table | tb | 2019-01-23 | 2 | -1/+399 | |
| | | | | | | | from graph information and cross-checks it against the state table in tls13_handshake.c. with help from jsing | |||||
* | add support for xchacha20 and xchacha20-poly1305 | dlg | 2019-01-22 | 3 | -3/+191 | |
| | | | | | | | xchacha is a chacha stream that allows for an extended nonce, which in turn makes it feasible to use random nonces. ok tb@ | |||||
* | Update record regress to match functionality changes. | jsing | 2019-01-20 | 1 | -6/+37 | |
| | ||||||
* | hook handshake test | tb | 2019-01-20 | 1 | -1/+2 | |
| | ||||||
* | Add a simple test that verifies that every valid handshake | tb | 2019-01-20 | 2 | -0/+76 | |
| | | | | sets action->handshake_complete. | |||||
* | Hook record regress. | jsing | 2019-01-19 | 1 | -1/+3 | |
| | ||||||
* | Add regress for TLSv1.3 record handling. | jsing | 2019-01-19 | 2 | -0/+533 | |
| | ||||||
* | initialize offset value so this passes | beck | 2019-01-18 | 1 | -0/+1 | |
| | | | | ok jsing@ | |||||
* | Add client side of supported versions and keyshare extensions with basic regress | beck | 2019-01-18 | 1 | -1/+192 | |
| | | | | ok jsing@ | |||||
* | Removed unused struct members. | jsing | 2019-01-18 | 1 | -2/+0 | |
| | ||||||
* | Update regress following TLS extension renaming. | jsing | 2019-01-18 | 2 | -379/+378 | |
| | ||||||
* | Add regress for extensible buffer code. | jsing | 2019-01-17 | 3 | -1/+169 | |
| | ||||||
* | Add regress test for bugs in stdio/fread.c rev 1.13 and 1.17 | millert | 2018-12-16 | 3 | -2/+160 | |
| | ||||||
* | add a -R option to set/unset resolver flags.libressl-v2.9.0 | eric | 2018-12-15 | 9 | -20/+101 | |
| | | | | use strcasecmp for reading args. | |||||
* | This test does not terminate if malloc conf is preconfigured with | bluhm | 2018-11-29 | 1 | -2/+6 | |
| | | | | | J. Clear that option to allow running full regress with paranoid malloc flags. This is the same fix as for malloc_ulimit1. | |||||
* | We're manipulating malloc flags ourselves, start with restting them all. | otto | 2018-11-29 | 1 | -1/+5 | |
| | | | | ok bluhm@ | |||||
* | This test does not terminate if malloc conf is preconfigured with | bluhm | 2018-11-28 | 1 | -4/+8 | |
| | | | | | | J. Clear that option to allow running full regress with paranoid malloc flags. Also fix whitespace. OK otto@ | |||||
* | Just err if we can't create secrets | beck | 2018-11-13 | 1 | -2/+2 | |
| | ||||||
* | Rework the sm3 regress based on a suggestion by jsing. Zap the weird | tb | 2018-11-12 | 1 | -30/+36 | |
| | | | | | | hex_encode() function and use byte arrays instead of strings to store the expected values. Snatch and tweak hexdump() from beck's key_schedule test to pretty-print data in case of failure. | |||||
* | Fix a race in libssl interop regress. The success messages from | bluhm | 2018-11-11 | 3 | -6/+9 | |
| | | | | | the server child could be delayed. In this case wait a second and check again. | |||||
* | Hook up sm3 regress tests. | tb | 2018-11-11 | 1 | -1/+2 | |
| | ||||||
* | Add sm3 regress tests. | tb | 2018-11-11 | 2 | -0/+101 | |
| | ||||||
* | Add automatic threading initialization for libcrypto. | bcook | 2018-11-11 | 1 | -56/+0 | |
| | | | | | | | | | | | | | | This implements automatic thread support initialization in libcrypto. This does not remove any functions from the ABI, but does turn them into no-ops. Stub implementations of pthread_mutex_(init|lock|unlock) are provided for ramdisks. This does not implement the new OpenSSL 1.1 thread API internally, keeping the original CRYTPO_lock / CRYPTO_add_lock functions for library locking. For -portable, crypto_lock.c can be reimplemented with OS-specific primitives as needed. ok beck@, tb@, looks sane guenther@ | |||||
* | Reorganize libssl interop tests. Move netcat tests into separate | bluhm | 2018-11-11 | 9 | -148/+197 | |
| | | | | | directory. Keep all log files for easier debugging. Name regress target names consistently. | |||||
* | Speling | beck | 2018-11-10 | 1 | -2/+2 | |
| | ||||||
* | Regress client and server can do session reuse now. Test this with | bluhm | 2018-11-10 | 6 | -129/+220 | |
| | | | | | all combinations of LibreSSL, OpenSSL 1.0.2, and OpenSSL 1.1. It is currently disabled for TLS 1.3 as this needs more setup. | |||||
* | Make sure the interop test happen last (since they take a long time) | beck | 2018-11-10 | 2 | -8/+9 | |
| | ||||||
* | Clean up and free objects at the completion of the regress test. | jsing | 2018-11-10 | 1 | -1/+13 | |
| | | | | From Ben L <bobsayshilol at live dot co dot uk>. | |||||
* | fix a leak reported by Ben L (bobsayshilol () live ! co ! uk) | tb | 2018-11-10 | 1 | -1/+3 | |
| | ||||||
* | Fix a leak reported by Ben L bobsayshilol () live ! co ! uk. | tb | 2018-11-10 | 1 | -1/+3 | |
| | ||||||
* | fix a leak pointed out by Ben L (bobsayshi () live ! co ! uk) | tb | 2018-11-10 | 1 | -4/+8 | |
| | ||||||
* | More regress all the way to exporter_master | beck | 2018-11-10 | 1 | -4/+44 | |
| | ||||||
* | Fix last of the empty hash nonsense | beck | 2018-11-10 | 1 | -6/+3 | |
| | | | | ok jsing@ | |||||
* | Update key schedule regress to match API changes. | jsing | 2018-11-09 | 1 | -21/+12 | |
| | ||||||
* | The Botan library from ports an be configured to use OpenSSL or | bluhm | 2018-11-09 | 2 | -1/+22 | |
| | | | | | | | | LibreSSL as crypto provider. When we run their regression tests, we are actually testing our library. This is far from perfect. A lot of LibreSSL features have not been implemented as Botan provider. Even if provider openssl is specified, botan-test runs a lot of non-openssl tests. This can be improved later. | |||||
* | remove the not yet implemented "handshake" subdirectory | tb | 2018-11-09 | 1 | -2/+1 | |
| | ||||||
* | Add subdirectires with SUBDIR += instead of a single assignment with | tb | 2018-11-09 | 3 | -67/+65 | |
| | | | | line continuations. | |||||
* | The cert subdir is testing all combinations of certificate validation. | bluhm | 2018-11-09 | 11 | -48/+244 | |
| | | | | | | Having the three libraries, client and server certificates, missing or invalid CA or certificates, and enforcing peer certificate results in 1944 new test cases. | |||||
* | Add missing NULL checks on allocation, style(9) and consistently use | jsing | 2018-11-08 | 1 | -35/+34 | |
| | | | | goto err instead of handrolling. | |||||
* | Add missing BN_free() calls. | jsing | 2018-11-08 | 1 | -1/+3 | |
| | | | | From Ben L <bobsayshilol at live dot co dot uk>. | |||||
* | Use ASN1_TYPE_new()/ASN1_TYPE_free() to avoid leaking memory. | jsing | 2018-11-08 | 1 | -12/+17 | |
| | | | | From Ben L <bobsayshilol at live dot co dot uk>. | |||||
* | Use in-place (un)wrapping in the keywrap tests. | tb | 2018-11-07 | 1 | -5/+8 | |
| | ||||||
* | Add in key_schedule regress tests to regress build | beck | 2018-11-07 | 1 | -1/+2 | |
| | ||||||
* | Add a self test for each SSL library by connecting client with | bluhm | 2018-11-07 | 5 | -23/+88 | |
| | | | | | | server. Check that the highest available TLS version is selected. LibreSSL TLS 1.3 check is disabled until the feature becomes available. | |||||
* | Add initial TLS 1.3 key schedule support with basic regress tests | beck | 2018-11-07 | 2 | -0/+249 | |
| | | | | ok jsing@ tb@ | |||||
* | Add interop test with OpenSSL 1.1. TLS 1.3 should be used automatically | bluhm | 2018-11-07 | 5 | -10/+55 | |
| | | | | | when it becomes available in LibreSSL. thanks to sthen@ for the new OpenSSL port | |||||
* | Print SSLeay, OpenSSL, and LibreSSL version strings. Make client | bluhm | 2018-11-07 | 7 | -12/+71 | |
| | | | | | and server compile with OpenSSL 1.1. Check runtime version string of SSL library. |