| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | Fix the legacy verifier callback behaviour for untrusted certs. | beck | 2022-06-28 | 2 | -2/+303 | |
| | | | | | | | | | | | | | | | | | | | The verifier callback is used by mutt to do a form of certificate pinning where the callback gets fired and depending on a cert saved to a file will decide to accept an untrusted cert. This corrects two problems that affected this. The callback was not getting the correct depth and chain for the error where mutt would save the certificate in the first place, and then the callback was not getting fired to allow it to override the failing certificate validation. thanks to Avon Robertson <avon.r@xtra.co.nz> for the report and sthen@ for analysis. "The callback is not an API, it's a gordian knot - tb@" ok jsing@ | |||||
| * | Add new time manipulation funcitons that OpenSSL has exposed that | beck | 2022-06-27 | 1 | -2/+35 | |
| | | | | | | | | | the world seems to be using. Symbols.list changes and exposure to wait for minor bump ok jsing@ jca@ | |||||
| * | Fix URI name constraints, allow for URI's with no host part. | beck | 2022-06-26 | 1 | -0/+26 | |
| | | | | | | | | | | | | Such uri's must be parsed and allowed, but then should fail if a name constraint is present. Adds regress testing for this same case. fixes https://github.com/libressl-portable/openbsd/issues/131 ok tb@ | |||||
| * | Move leaf certificate checks to the last thing after chain validation. | beck | 2022-06-25 | 2 | -1/+285 | |
| | | | | | | | | | While seemingly illogical and not what is done in Go's validator, this mimics OpenSSL's behavior so that callback overrides for the expiry of a certificate will not "sticky" override a failure to build a chain. ok jsing@ | |||||
| * | Check pointer argument after {d2i,i2d}_ASN1_{BIT_STRING,BOOLEAN,INTEGER}() | jsing | 2022-06-25 | 1 | -2/+46 | |
| | | ||||||
| * | Add regress for ASN1_INTEGER_{get,set}_{u,}int64() | jsing | 2022-06-25 | 1 | -1/+103 | |
| | | ||||||
| * | Add regress for ASN1_INTEGER_cmp() | jsing | 2022-06-25 | 1 | -1/+76 | |
| | | ||||||
| * | Use dynamic linking correctly. bntest and bn_to_string need static linking. | tb | 2022-06-23 | 1 | -3/+5 | |
| | | ||||||
| * | Explicitly include fcntl.h and unistd.h for pipe2 | tb | 2022-06-22 | 1 | -1/+4 | |
| | | ||||||
| * | Fix format strings for size_t | tb | 2022-06-22 | 1 | -5/+5 | |
| | | ||||||
| * | Fix format string: use %zu for size_t, not %lu. | tb | 2022-06-22 | 1 | -3/+3 | |
| | | ||||||
| * | Use uppercase for SUCCESS for consistency | tb | 2022-06-19 | 1 | -2/+2 | |
| | | ||||||
| * | None of these tests needs to link statically. | tb | 2022-06-19 | 2 | -4/+4 | |
| | | ||||||
| * | Drop bogus DPADD += ${LIBSSL} | tb | 2022-06-19 | 3 | -7/+6 | |
| | | ||||||
| * | Quick regression test that checks that BN_is_prime_fasttest_ex() | tb | 2022-06-18 | 2 | -1/+97 | |
| | | | | | | recognizes the primes in the primes[] table with and without trial division. Would have caught the bug fixed in bn_primes.c r1.9. | |||||
| * | Switch to using TLS_INT instead of handrolling it | tb | 2022-06-15 | 1 | -3/+2 | |
| | | ||||||
| * | More %i vs %d cleanup | tb | 2022-06-10 | 7 | -20/+20 | |
| | | ||||||
| * | Fix format strings: change %i, %li, %lli to %d, %ld, %lld and switch to | tb | 2022-06-07 | 1 | -18/+18 | |
| | | | | | | %zu for master_key_length, session_id_length and sid_ctx_length, which are now size_t. | |||||
| * | Minor tweaks to psk modes regress | tb | 2022-06-06 | 1 | -3/+3 | |
| | | ||||||
| * | move the calls to psk kex modes tests down to match order in ssl_tlsext.c | tb | 2022-06-05 | 1 | -4/+4 | |
| | | ||||||
| * | Add regress coverage for PSK kex modes tlsext handlers. | tb | 2022-06-05 | 1 | -2/+210 | |
| | | ||||||
| * | Use consistent spacing around assignments | tb | 2022-06-02 | 1 | -4/+4 | |
| | | ||||||
| * | Only constraints and verify need static linking in here. | tb | 2022-06-02 | 2 | -5/+9 | |
| | | ||||||
| * | *** empty log message *** | mbuhl | 2022-05-28 | 4 | -11/+11 | |
| | | ||||||
| * | Recent changes to truncate(2) swapped the ordering of some validations | anton | 2022-05-24 | 1 | -2/+2 | |
| | | | | | | | | causing EACCESS as opposed of ESDIR to be returned while trying to truncate a directory as a user lacking write permissions to the same directory. As this behavior is reasonable, change the truncate directory from /etc/ to /tmp which makes the test pass both as root and non-root. | |||||
| * | Add a simple test that exercises ASN1_STRING_to_UTF8() a little. | tb | 2022-05-16 | 2 | -1/+130 | |
| | | ||||||
| * | Add the two length tests. Can't currently run them because we need an | tb | 2022-05-14 | 1 | -1/+6 | |
| | | | | | echo server. | |||||
| * | Tweak regress in such a way that it would have caught the bug in | tb | 2022-05-13 | 1 | -1/+6 | |
| | | | | | | | d2i_ASN1_OBJECT() fixed in a_object.c r1.48. from jsing | |||||
| * | Enable X509v3_asid_subset() tests now that they no longer segfault. | tb | 2022-05-12 | 1 | -7/+1 | |
| | | ||||||
| * | Add a few more testcases for X509v3_asid_subset() | tb | 2022-05-12 | 1 | -1/+144 | |
| | | ||||||
| * | If Ruby 3.1 isn't available, try to fall back to Ruby 3.0 so that | tb | 2022-05-10 | 1 | -1/+5 | |
| | | | | | | regress on bluhm's test machines have a chance to pass on slower architectures while package builds catch up. | |||||
| * | Default Ruby is now 3.1 | tb | 2022-05-08 | 1 | -2/+2 | |
| | | ||||||
| * | Switch wycheproof.go to using the EVP HKDF API. | tb | 2022-05-05 | 1 | -6/+67 | |
| | | | | | | | | Gotta love EVP... Instead of a single, obvious call to HKDF(), you now need to call eight EVP functions with plenty of allocations and pointless copying internally. If you want to suffer even more, you could consider using the gorgeous string interface instead. | |||||
| * | Add tests that decode sequences into ASN.1 strings. | jsing | 2022-04-28 | 1 | -1/+97 | |
| | | | | | | | | | | | | Test decoding of sequences with length and indefinite length into an ASN.1 string - in this case the ASN.1 is not decoded, rather the octets are stored directly as the content of the string. This exercises a specific path through the ASN.1 decoder. (you know asn1complex is living up to its name when you have to import openssl/asn1t.h directly...) | |||||
| * | Ensure we clear the error stack before running tests that print errors. | jsing | 2022-04-27 | 2 | -2/+10 | |
| | | ||||||
| * | Enable ASN.1 INTEGER tests with invalid lengths/encodings. | jsing | 2022-04-27 | 1 | -3/+1 | |
| | | ||||||
| * | Add ASN1_INTEGER test coverage. | jsing | 2022-04-23 | 1 | -1/+248 | |
| | | ||||||
| * | Add missing self. From anton | tb | 2022-04-21 | 1 | -2/+2 | |
| | | ||||||
| * | Initialize the mutex before making us of it from many threads. Prevents | anton | 2022-04-03 | 1 | -28/+23 | |
| | | | | | | | | | a race in which one thread is currently initializing the mutex which is not an atomic operation whereas another thread tries to use it too early. With and ok schwarze@ | |||||
| * | Check EVPDigest* return values. | tb | 2022-03-31 | 1 | -4/+7 | |
| | | | | | CID 351293 | |||||
| * | Add a simple test to ensure that pmeth->cleanup() can cope with NULL | tb | 2022-03-30 | 2 | -2/+93 | |
| | | | | | pkey_ctx->data. | |||||
| * | Remove double slash in path to test program. | anton | 2022-03-30 | 1 | -9/+9 | |
| | | ||||||
| * | Adjust the signer test to link statically and work with hidden tls_signer | tb | 2022-03-24 | 2 | -3/+7 | |
| | | | | | API. | |||||
| * | Revise regress for ascii/text to ASN.1 object conversion rewrite. | jsing | 2022-03-19 | 1 | -58/+10 | |
| | | ||||||
| * | Add another invalid separator test case. | jsing | 2022-03-19 | 1 | -1/+5 | |
| | | ||||||
| * | Fix dependency to build bn_mod_sqrt. | bluhm | 2022-03-16 | 1 | -2/+2 | |
| | | ||||||
| * | Check BIO_reset() return value to make gcc happy. | tb | 2022-03-15 | 1 | -2/+5 | |
| | | ||||||
| * | Add a simple regress to verify that the infinite loop in BN_mod_sqrt() | tb | 2022-03-15 | 2 | -1/+138 | |
| | | | | | is fixed. | |||||
| * | Add a few regress test cases for name constraints. | tb | 2022-03-14 | 3 | -5/+25 | |
| | | | | | From Alex Wilson | |||||
| * | Simple regress for NULL deref reported by Guido Vranken and fixed in | tb | 2022-03-10 | 2 | -1/+51 | |
| | | | | | bn_exp2.c r1.13. | |||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |