Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Update DTLS client hello due to ECC changes. | jsing | 2021-02-08 | 1 | -5/+8 | |
| | ||||||
* | Enable auto DHE and disable session tickets for some tests. | jsing | 2021-02-07 | 1 | -12/+13 | |
| | | | | This allows us to drop the server messages that we intend on dropping. | |||||
* | Only hexdump packets/messages on higher debug levels. | jsing | 2021-02-06 | 1 | -3/+4 | |
| | ||||||
* | Test reads and writes between the client and server. | jsing | 2021-02-06 | 1 | -3/+49 | |
| | ||||||
* | wrap an overlong line | tb | 2021-01-27 | 1 | -2/+3 | |
| | ||||||
* | Avoid NULL deref on BIO_new{_mem_buf,}() failure. | tb | 2021-01-22 | 2 | -7/+11 | |
| | ||||||
* | don't set AUTO_RETRY. it's a remnant of an experiment. | tb | 2021-01-21 | 1 | -3/+1 | |
| | ||||||
* | A few minor tweaks to make my OCD happy. | tb | 2021-01-12 | 1 | -12/+9 | |
| | | | | | Sort headers, unwrap a line, fix grammar in spelling and simplify the check for test failure. | |||||
* | Print error if SSL_{connect,accept,shutdown}(3) don't run to completion. | tb | 2021-01-11 | 1 | -3/+13 | |
| | ||||||
* | Shut down the TLS connections properly. | tb | 2021-01-11 | 1 | -3/+28 | |
| | ||||||
* | Include headers used instead of relying on ssl.h pulling in the world. | tb | 2021-01-11 | 1 | -1/+7 | |
| | ||||||
* | Merge handshake_loop() into handshake(). There's no benefit in having | tb | 2021-01-10 | 1 | -18/+7 | |
| | | | | this factored into a separate function. | |||||
* | tweak a comment | tb | 2021-01-10 | 1 | -2/+2 | |
| | ||||||
* | Link shared ciphers test to build | tb | 2021-01-10 | 1 | -1/+3 | |
| | ||||||
* | Add a regress for SSL_get_shared_ciphers() for the change of returned | tb | 2021-01-10 | 1 | -0/+457 | |
| | | | | | | ciphers in ssl_lib.c r1.240 and TLSv1.3 support in tls13_server.c r1.69. requested by jsing | |||||
* | whitespace | tb | 2021-01-09 | 2 | -7/+7 | |
| | ||||||
* | Remove unused categories in re_guts; they are written to but never read. | millert | 2020-12-31 | 1 | -39/+2 | |
| | | | | From miod@, OK tb@ | |||||
* | Fix an off-by-one error in the marking of the O_CH operator following | millert | 2020-12-28 | 1 | -1/+4 | |
| | | | | | an OOR2 operator. Also includes a regress test for the issue. From FreeBSD via miod@ | |||||
* | Start each regress run from scratch with new keys and CA database. | bluhm | 2020-12-26 | 1 | -12/+17 | |
| | ||||||
* | Convert CA regress implementation from shell script to make file. | bluhm | 2020-12-26 | 5 | -141/+100 | |
| | | | | Ensure that it works with obj directory and link regress to build. | |||||
* | Add to *FLAGS and *ADD rather than overwriting them | tb | 2020-12-25 | 1 | -6/+6 | |
| | | | | | This makes CFLAGS pick up -O2, which shaves a few seconds runtime off these very slow tests. | |||||
* | Remove echo headlines. | bluhm | 2020-12-17 | 15 | -46/+15 | |
| | ||||||
* | Enable t_mmap-1 test. It is skipped on NetBSD, but works for us. | bluhm | 2020-12-06 | 2 | -3/+10 | |
| | ||||||
* | Extend the methods test to cover dtls methods as well | tb | 2020-12-01 | 1 | -1/+57 | |
| | ||||||
* | Enable ssl_methods unit test. | tb | 2020-12-01 | 1 | -1/+2 | |
| | ||||||
* | Add an ssl_methods() unit test that currently only covers the | tb | 2020-12-01 | 1 | -0/+192 | |
| | | | | | behavior of SSL_is_server(). This would have caught the regression introduced in the method unification. | |||||
* | $OpenBSD$ | tb | 2020-11-19 | 1 | -0/+1 | |
| | ||||||
* | Don't leak verify and store contexts. | tb | 2020-11-18 | 1 | -1/+3 | |
| | ||||||
* | Run the atf cleanup block after each test. This makes more tests | bluhm | 2020-11-11 | 1 | -9/+11 | |
| | | | | pass when run as non root. | |||||
* | Declare prototype of __syscall locally. Fixes t_syscall test. | bluhm | 2020-11-10 | 2 | -3/+7 | |
| | ||||||
* | Sync libc syscall tests with changes in upstream NetBSD. Use #ifdef | bluhm | 2020-11-09 | 20 | -283/+212 | |
| | | | | | | | to document differences to NetBSD behaviour, this helps to track upstream. Mark currently failing test as expected failures. So test programs get compiled and executed, but it shows that further investigation is necceassry. | |||||
* | Skip test if web server cannot be pinged. | bluhm | 2020-11-05 | 1 | -6/+14 | |
| | ||||||
* | botan2 uses C++11, so use ports-gcc on gcc-archs | tb | 2020-10-30 | 1 | -1/+12 | |
| | | | | This makes this interop test pass on sparc64. | |||||
* | Do not fail with obscure error messages on 'make' | tb | 2020-10-29 | 3 | -6/+12 | |
| | | | | | | | | | | | Fix some tests that fail with obscure error messages on 'make' if the required package (either version of OpenSSL or Botan 2) isn't installed. This can be avoided by doing 'make regress' instead. I'll try to adjust my finger memory for the many tests outside the LibreSSL tree that have the same "problem". The fix here is unintrusive and I've been wasting enough time with this to want to change it. ok bluhm | |||||
* | catch unset error when validation fails. | beck | 2020-10-26 | 2 | -2/+16 | |
| | ||||||
* | On machines with a userland timecounter we bypass the gettimeofday(2) | kettenis | 2020-10-21 | 1 | -2/+16 | |
| | | | | | | | | syscall. So whenever we pass a bad address we get a SIGSEGV instead of EFAULT. POSIX explicitly allows this behaviour. So adjust the test to deal with this case. ok deraadt@, millert@, guenther@ | |||||
* | Skip floating-point exception checks on arm64 and armv7 as the hardware | kettenis | 2020-10-19 | 2 | -2/+6 | |
| | | | | | | (typically) doesn't implement support for these. ok patrick@, drahn@ | |||||
* | XFAIL tests on arm64 and armv7 as floating-point exception support is | kettenis | 2020-10-18 | 1 | -1/+6 | |
| | | | | optional and isn't implemented on most hardware. | |||||
* | make this test compile and pass on sparc64 | tb | 2020-10-16 | 1 | -2/+2 | |
| | | | | | Two functions missed (void) in their declaration which made gcc whine "warning: function declaration isn't a prototype". | |||||
* | Add an explicit cast to make this test compile and pass with gcc. | tb | 2020-10-16 | 1 | -2/+2 | |
| | | | | | gcc emits a signed vs unsigned comparison warning which breaks the build due to -Werror. | |||||
* | Test DTLS timeouts and retransmissions by dropping specific messages. | jsing | 2020-10-15 | 1 | -5/+299 | |
| | | | | | | | | | Provide a BIO that can drop specific messages in order to trigger and test DTLS timeouts and retransmissions. Note that the SSL buffering BIO (bbio) has to be removed to ensure that handshake messages are sent individually. This would have detected the recent DTLS breakage with retransmissions for a flight that includes a CCS. | |||||
* | Improve poll and event handling. | jsing | 2020-10-15 | 1 | -8/+27 | |
| | | | | | In particular, ensure we clear events when the client or server side has completed and fix timeouts to ensure we use a non-zero timeout if present. | |||||
* | Hook up dtls regress. | jsing | 2020-10-14 | 1 | -1/+2 | |
| | ||||||
* | Add regress tests for DTLS. | jsing | 2020-10-14 | 2 | -0/+411 | |
| | | | | | | | | Test the operation of a DTLS client and server, with and without cookies, using the default MTU and a specifically lowered MTU. Further regress tests will be built on this to exercise other parts of the DTLS code base (such as retransmission, fragmentation and reassembly). | |||||
* | avoid two overlong lines and drop an unused printf argument | tb | 2020-10-12 | 1 | -4/+4 | |
| | ||||||
* | No longer need to cast away const in srtp_find_profile_by_name() | tb | 2020-10-11 | 1 | -2/+2 | |
| | ||||||
* | Update regress for method changes. | jsing | 2020-10-11 | 1 | -4/+4 | |
| | ||||||
* | Unbreak regress following SRTP_PROTECTION_PROFILE const change. | jsing | 2020-10-11 | 1 | -2/+2 | |
| | ||||||
* | Don't leak bundle_file and cert_file paths at the end. | tb | 2020-10-10 | 1 | -1/+3 | |
| | ||||||
* | Read cert.pem once and reuse it instead of reading it twice per test cert | tb | 2020-10-08 | 1 | -18/+10 | |
| | | | | | | | | chain. It only takes a few dozens of ms to read it, but doing this 7290 times adds up to a few minutes run time. This way, the test completes in a handful of seconds. Diagnosed by jsing, ok beck |