| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
From miod@, OK tb@
|
|
|
|
|
| |
an OOR2 operator. Also includes a regress test for the issue.
From FreeBSD via miod@
|
| |
|
|
|
|
| |
Ensure that it works with obj directory and link regress to build.
|
|
|
|
|
| |
This makes CFLAGS pick up -O2, which shaves a few seconds runtime
off these very slow tests.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
| |
behavior of SSL_is_server(). This would have caught the regression
introduced in the method unification.
|
| |
|
| |
|
|
|
|
| |
pass when run as non root.
|
| |
|
|
|
|
|
|
|
| |
to document differences to NetBSD behaviour, this helps to track
upstream. Mark currently failing test as expected failures. So
test programs get compiled and executed, but it shows that further
investigation is necceassry.
|
| |
|
|
|
|
| |
This makes this interop test pass on sparc64.
|
|
|
|
|
|
|
|
|
|
|
| |
Fix some tests that fail with obscure error messages on 'make' if the
required package (either version of OpenSSL or Botan 2) isn't installed.
This can be avoided by doing 'make regress' instead. I'll try to adjust
my finger memory for the many tests outside the LibreSSL tree that have
the same "problem". The fix here is unintrusive and I've been wasting
enough time with this to want to change it.
ok bluhm
|
| |
|
|
|
|
|
|
|
|
| |
syscall. So whenever we pass a bad address we get a SIGSEGV instead of
EFAULT. POSIX explicitly allows this behaviour. So adjust the test
to deal with this case.
ok deraadt@, millert@, guenther@
|
|
|
|
|
|
| |
(typically) doesn't implement support for these.
ok patrick@, drahn@
|
|
|
|
| |
optional and isn't implemented on most hardware.
|
|
|
|
|
| |
Two functions missed (void) in their declaration which made gcc whine
"warning: function declaration isn't a prototype".
|
|
|
|
|
| |
gcc emits a signed vs unsigned comparison warning which breaks the build
due to -Werror.
|
|
|
|
|
|
|
|
|
| |
Provide a BIO that can drop specific messages in order to trigger and test
DTLS timeouts and retransmissions. Note that the SSL buffering BIO (bbio)
has to be removed to ensure that handshake messages are sent individually.
This would have detected the recent DTLS breakage with retransmissions for
a flight that includes a CCS.
|
|
|
|
|
| |
In particular, ensure we clear events when the client or server side has
completed and fix timeouts to ensure we use a non-zero timeout if present.
|
| |
|
|
|
|
|
|
|
|
| |
Test the operation of a DTLS client and server, with and without cookies,
using the default MTU and a specifically lowered MTU.
Further regress tests will be built on this to exercise other parts of the
DTLS code base (such as retransmission, fragmentation and reassembly).
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
chain. It only takes a few dozens of ms to read it, but doing this 7290
times adds up to a few minutes run time. This way, the test completes in
a handful of seconds.
Diagnosed by jsing, ok beck
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
This includes a test where the server response includes multiple handhshake
messages in the single TLS plaintext record (which would have caught the
bug just fixed in tls13_legacy.c).
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
using the make variable EOPENSSL11.
Suggested by jsing
|
| |
|
|
|
|
| |
to look at its private headers either.
|
|
|
|
|
|
|
| |
The X509_STORE_CTX struct is opaque in OpenSSL 1.1. To avoid reaching
inside it, reuse the trusted certificate store that was just assigned
to it and use X509_STORE_CTX_get0_param(3) to access the verification
parameters.
|
| |
|
|
|
|
|
|
| |
instead of the "decrypt_error" sent by tls13_server_finished_recv().
Both alerts appear to be reasonable in this context, so enable the tests
while working around this.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf
ok jsing@
|