Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | +interop | bluhm | 2018-11-07 | 1 | -1/+2 | |
| | ||||||
* | Test TLS interoperability between LibreSSL and OpenSSL. | bluhm | 2018-11-07 | 10 | -0/+549 | |
| | | | | | | | | | | | | Implement simple SSL client and server in C. Create four binaries by linking them with LibreSSL or OpenSSL. This way API compatibility is tested. Connect and accept with netcat to test protocol compatibility with libtls. Currently OpenSSL 1.0.2p from ports is used. Plan is to move to OpenSSL 1.1 and and test TLS 1.3. idea from beck@; help from jsing@ | |||||
* | better failure printing, add more checks | tb | 2018-11-06 | 1 | -9/+35 | |
| | ||||||
* | link rand/ to build | tb | 2018-11-06 | 1 | -2/+4 | |
| | ||||||
* | add a regression test for bn_rand_interval() | tb | 2018-11-06 | 2 | -0/+98 | |
| | ||||||
* | Add TLSv1.3 to version regress tests. | jsing | 2018-11-06 | 1 | -4/+80 | |
| | ||||||
* | Unbreak regress following Supported Elliptic Curve extension rename. | jsing | 2018-11-06 | 1 | -49/+49 | |
| | ||||||
* | With the fixed length checks in aes_wrap.c 1.11, we can remove the ugly | tb | 2018-10-20 | 1 | -11/+3 | |
| | | | | length checks here. | |||||
* | Run Wycheproof testvectors for AES Key Wrap without padding (RFC 3394) | tb | 2018-10-19 | 1 | -4/+144 | |
| | | | | | | against libcrypto. Currently contains caller-side length checks that should really be done in the library. This will be fixed after an upcoming commit to libcrypto. | |||||
* | truncate long comments in audit summary | tb | 2018-10-19 | 1 | -2/+7 | |
| | ||||||
* | simplify BN_bin2bn() calls; no need to pre-declare the variable. | tb | 2018-10-18 | 1 | -11/+6 | |
| | ||||||
* | Avoid a bad out of bounds access that caused intermittent crashes. | tb | 2018-10-18 | 1 | -2/+2 | |
| | ||||||
* | whitespace cleanup and other minor things from gofmt | tb | 2018-10-07 | 1 | -44/+39 | |
| | ||||||
* | make sure all CStrings are freed | tb | 2018-10-06 | 1 | -3/+7 | |
| | ||||||
* | plug a memory leak | tb | 2018-10-06 | 1 | -1/+2 | |
| | ||||||
* | wrap a few more overlong lines | tb | 2018-10-06 | 1 | -14/+36 | |
| | ||||||
* | wrap some overlong fmt.Printfs | tb | 2018-10-06 | 1 | -53/+106 | |
| | ||||||
* | It's slightly simpler to get the ECDH public key as an EC_POINT by using | tb | 2018-10-06 | 1 | -16/+15 | |
| | | | | | EC_KEY_set_public_key_affine_coordinates() and EC_KEY_get0_public_key() than using EC_POINT_set_affine_coordinates_GFp() directly. | |||||
* | free EC_POINT and EC_GROUP | tb | 2018-10-06 | 1 | -1/+4 | |
| | ||||||
* | Run Wycheproof ECDH Web Crypto test vectors against libcrypto. | tb | 2018-10-06 | 1 | -6/+155 | |
| | ||||||
* | merge runECDSAWebCryptoTest() into runECDSATest() | tb | 2018-10-06 | 1 | -53/+31 | |
| | ||||||
* | factor ECDSA signature extraction into its own function | tb | 2018-10-06 | 1 | -24/+35 | |
| | ||||||
* | make allocate/use/defer dances more consistent in ECDSA sig extraction | tb | 2018-10-06 | 1 | -9/+8 | |
| | ||||||
* | Run Wycheproof ECDSA Web Crypto test vectors against libcrypto. | tb | 2018-10-05 | 1 | -7/+166 | |
| | ||||||
* | Better refer to RFC 8422 which obsoletes RFC 4492. | tb | 2018-10-04 | 1 | -2/+2 | |
| | ||||||
* | While we don't explicitly support curve secp256r1, we can run 1250 tests | tb | 2018-10-04 | 1 | -11/+2 | |
| | | | | against its ANSI equivalent prime256v1 (compare RFC 4492, Appendix A). | |||||
* | in ECDH, gather statistics where it makes more sense | tb | 2018-09-30 | 1 | -8/+5 | |
| | ||||||
* | Add a comment on the acceptable RSASSA cases. | tb | 2018-09-22 | 1 | -2/+3 | |
| | ||||||
* | gather statistics in checkAead{Open,Seal}() as well. | tb | 2018-09-22 | 1 | -1/+7 | |
| | ||||||
* | remove some unneeded checks | tb | 2018-09-22 | 1 | -15/+5 | |
| | ||||||
* | gather and print some statistics on the acceptable cases we need to | tb | 2018-09-22 | 1 | -8/+60 | |
| | | | | look into | |||||
* | more flags printing | tb | 2018-09-22 | 1 | -23/+23 | |
| | ||||||
* | improve logic involving acceptableAudit | tb | 2018-09-22 | 1 | -5/+5 | |
| | ||||||
* | Swap order of "action" and "wt.Flags" in a few fmt.Printfs. | tb | 2018-09-22 | 1 | -17/+17 | |
| | ||||||
* | Introduce a couple of convenience targets to help with auditing the | tb | 2018-09-22 | 2 | -5/+41 | |
| | | | | acceptable cases. | |||||
* | Print the flags field in INFO: and FAIL: messages. It's helpful in | tb | 2018-09-21 | 1 | -17/+17 | |
| | | | | identifying the important failures while auditing. | |||||
* | fix order of arguments in fmt.Printf() | tb | 2018-09-18 | 1 | -2/+2 | |
| | ||||||
* | add missing default case to switch | tb | 2018-09-16 | 1 | -1/+3 | |
| | ||||||
* | EVP_aead_chacha20_poly1305() can't actually fail. | tb | 2018-09-16 | 1 | -4/+1 | |
| | ||||||
* | Rename *AesCcmOrGcm* into the slightly less ugly *AesAead*. | tb | 2018-09-16 | 1 | -9/+9 | |
| | ||||||
* | another typo. time to sleep | tb | 2018-09-15 | 1 | -2/+2 | |
| | ||||||
* | typos | tb | 2018-09-15 | 1 | -3/+3 | |
| | ||||||
* | add a brief comment on the acceptable AES CCM and AES GCM cases | tb | 2018-09-15 | 1 | -2/+8 | |
| | ||||||
* | Also exercise EVP_aead_aes_128_gcm() and EVP_aead_aes_256_gcm(). | tb | 2018-09-15 | 1 | -6/+26 | |
| | ||||||
* | rename checkChaCha20Poly1305{Open,Seal}() into checkAead{Open,Seal}(). | tb | 2018-09-15 | 1 | -5/+5 | |
| | ||||||
* | Merge AES CCM, AES GCM and ChaCha20 data structures into | tb | 2018-09-15 | 1 | -42/+21 | |
| | | | | single AEAD types. Will be used in upcoming commits. | |||||
* | Add missing conversion specifier | tb | 2018-09-15 | 1 | -2/+2 | |
| | ||||||
* | Modify regress appstest.sh for interoperability testing with OpenSSL 1.1.x | inoguchi | 2018-09-15 | 1 | -16/+40 | |
| | | | | | | | | - add sleep before s_client instead of removing -pause option - change check words for s_client output messages - replace CAfile to CApath for s_time - remove -prexit from s_client - confirm openssl command path is executable | |||||
* | Add interoperability test mode for regress appstest.sh | inoguchi | 2018-09-14 | 1 | -35/+79 | |
| | | | | | | | - test s_server and s_client between different version by option -i - indicate other version by defining OTHER_OPENSSL environment variable - fix "SSL/TLS" to "TLS/SSL", since TLS is correct as technical term - s/SKIPPNG/SKIPPING/ | |||||
* | Fix indent and adjust line fit to 80 columns. | inoguchi | 2018-09-08 | 1 | -930/+961 | |
| |