Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Revise for change to tls_key_share_peer_public() | jsing | 2022-01-06 | 1 | -3/+2 | |
| | ||||||
* | Add regress tests for ASN1_BIT_STRING. | jsing | 2022-01-06 | 1 | -2/+113 | |
| | ||||||
* | Add a comment that explains why build_addr_block_tests isn't const | tb | 2022-01-06 | 2 | -3/+8 | |
| | ||||||
* | Test CBB_add_u64() | jsing | 2022-01-06 | 1 | -2/+6 | |
| | ||||||
* | With openssl-ruby-tests 20220105, test_post_connection_check_wildcard_san | tb | 2022-01-06 | 1 | -2/+2 | |
| | | | | is now an unexpected pass, so remove it from the expected failures. | |||||
* | Fix a copy-paste error that led to an out-of-bounds access. | tb | 2022-01-06 | 1 | -2/+2 | |
| | | | | Found via a crash on bluhm's i386 regress test box | |||||
* | Add test coverage for SCT validation. | jsing | 2022-01-06 | 4 | -7/+116 | |
| | | | | | | Of note, the public APIs for this mean that the only way you can add a CTLOG is by reading a configuration file from disk - there is no programmatic way to do this. | |||||
* | t_syscall was a test for the gcc 1.x off_t syscall padding, | guenther | 2022-01-06 | 2 | -125/+2 | |
| | | | | | which was an implementation detail and has been deleted, so delete the test | |||||
* | Revise for tls13_key_share rename. | jsing | 2022-01-05 | 1 | -11/+11 | |
| | ||||||
* | Provide regress for SSL public APIs. | jsing | 2022-01-05 | 3 | -1/+387 | |
| | | | | | | This will largely test curly and inconsistent APIs that are not covered by other regress tests. Currently, this tests the wonder that is SSL_get_peer_cert_chain(). | |||||
* | Remove bandaid to work around expected range_should_be_prefix() problem. | tb | 2022-01-05 | 1 | -6/+2 | |
| | ||||||
* | Plug memleaks | tb | 2021-12-29 | 1 | -3/+11 | |
| | | | | CID 345150 | |||||
* | Plug memleak | tb | 2021-12-29 | 1 | -2/+7 | |
| | | | | CID 345156 | |||||
* | More EVP_* return value checks | tb | 2021-12-29 | 1 | -22/+60 | |
| | | | | CID 345152 | |||||
* | Remove redundant NULL checks | tb | 2021-12-29 | 1 | -3/+1 | |
| | | | | CID 345154 | |||||
* | Minor cleanup after EC_POINT_get_affine_coordinates() unified the | tb | 2021-12-29 | 1 | -23/+6 | |
| | | | | | | _GFp and _GF2m variants. CID 345155 | |||||
* | More return value checks for EVP_* API | tb | 2021-12-29 | 1 | -16/+28 | |
| | | | | CID 345159 | |||||
* | Check return values of EVP_* API | tb | 2021-12-29 | 1 | -6/+24 | |
| | | | | CID 345158 | |||||
* | knfmt makes this slightly nicer. | tb | 2021-12-29 | 1 | -52/+49 | |
| | ||||||
* | One more leak of the same kind | tb | 2021-12-29 | 1 | -2/+2 | |
| | ||||||
* | Plug memleak | tb | 2021-12-29 | 1 | -3/+3 | |
| | | | | CID 345160 | |||||
* | Set failed in test_random_points() | tb | 2021-12-29 | 1 | -2/+2 | |
| | | | | CID 345141 | |||||
* | Provide a set of RSA and ECDSA test certificates/keys. | jsing | 2021-12-27 | 30 | -0/+919 | |
| | | | | These are generated using the make-certs.sh script. | |||||
* | Provide a script to generate test certificates/keys. | jsing | 2021-12-27 | 1 | -0/+263 | |
| | | | | | | | This will allow us to generate a variety of client and server certificates, including expired and revoked certificates, using both RSA and ECDSA. Discussed with tb@ | |||||
* | add missing include path; ok tb@ | anton | 2021-12-26 | 1 | -1/+2 | |
| | ||||||
* | The RFC 3779 test needs LIBRESSL_CRYPTO_INTERNAL as lon as the API | tb | 2021-12-24 | 1 | -2/+2 | |
| | | | | isn't public. | |||||
* | Print the name of the test before we run it. | jsing | 2021-12-24 | 1 | -1/+2 | |
| | ||||||
* | Style tweak in {d2i,i2d}_IPAddrBlocks() | tb | 2021-12-24 | 1 | -5/+5 | |
| | ||||||
* | Drop -g -O0 from CFLAGS | tb | 2021-12-24 | 1 | -2/+2 | |
| | ||||||
* | link rfc3779 test to build | tb | 2021-12-24 | 1 | -2/+2 | |
| | ||||||
* | Add initial test coverage for RFC 3779 code. | tb | 2021-12-24 | 2 | -0/+1804 | |
| | | | | | | | | | | | | | | This exercises the code paths that are reached from the validator and also tests that the public API behaves as expected. There is a lot more that could be done here, but this test is already big enough. Missing are tests for X509v3_{addr,asid}_validate_{path,resource_set}() themselves. One test failure is ignored and will be fixed in the near future when a bad logic error in range_should_be_prefix() is fixed. A consequence of this bug is that we will currently accept and generate DER that doesn't conform to RFC 3779. | |||||
* | fix typo: boolean true should decode to 1, not 0 | tb | 2021-12-23 | 1 | -2/+2 | |
| | ||||||
* | Add regress coverage for the crazy SCT_new_from_base64() API. | jsing | 2021-12-20 | 1 | -1/+57 | |
| | ||||||
* | support processing <openssl/bn.h> | schwarze | 2021-12-18 | 1 | -3/+24 | |
| | ||||||
* | To ease maintenance, structure the lists of intentionally undocumented | schwarze | 2021-12-16 | 1 | -55/+109 | |
| | | | | | | symbols according to the reason (internal, obsolete, postponed) and according to the header file (asn1, objects, x509, ...). Also, add some minor tweaks needed for <openssl/objects.h>. | |||||
* | Add coverage for CBS additions. | jsing | 2021-12-15 | 1 | -2/+50 | |
| | ||||||
* | Some more ASN.1 struct types that are postponed (because they are | schwarze | 2021-12-15 | 1 | -2/+5 | |
| | | | | | | related to templating macros) or intentionally undocumented. Apart from NETSCAPE, PCTX, and low-level templating stuff, all ASN.1 functions, types, and macros are now documented. | |||||
* | tweak for the generated source | tb | 2021-12-14 | 1 | -2/+2 | |
| | ||||||
* | more symbols that are postponed or intentionally undocumented and | schwarze | 2021-12-14 | 1 | -6/+55 | |
| | | | | some regexp tweaks; the relevant parts of asn1.h are nearing completion | |||||
* | Add regress coverage for ASN1_get_object() | jsing | 2021-12-14 | 1 | -1/+262 | |
| | ||||||
* | Add regress for ASN1_tag2bit() and ASN1_tag2str() | jsing | 2021-12-14 | 2 | -1/+135 | |
| | ||||||
* | remove a couple hundred sys/param.h includes in userland code, and | deraadt | 2021-12-13 | 50 | -227/+77 | |
| | | | | | | also whack some sys/cdefs.h early includes which is such a brutally bad pattern ok bluhm mbuhl | |||||
* | Merge two bugfixes in ASN1_STRING_TABLE_add(3) and ASN1_STRING_TABLE_get(3) | schwarze | 2021-12-11 | 2 | -2/+131 | |
| | | | | | | | | | | | | | | | | | | | | | | from the OpenSSL 1.1.1 branch, which is still under a free license, mostly this commit: commit d35c0ff30b31be9fd5dcf3d552a16feb8de464bc Author: Dr. Stephen Henson <steve@openssl.org> Date: Fri Oct 19 15:06:31 2012 +0000 fix ASN1_STRING_TABLE_add so it can override existing string table values This fixes a segfault in ASN1_STRING_TABLE_add(3), which tried to change a static const entry when called with an nid already in the default table, and it switches the precedence of the two tables in ASN1_STRING_TABLE_get(3). In addition, it changes behaviour in the following minor ways: * Ignore negative minsize and maxsize arguments, not just -1. * Ignore a zero mask and zero flags. It's unclear whether these additional changes make the API absolutely better, but we want compatibility with OpenSSL in these functions. Tweaks & OK tb@. | |||||
* | Fix missing return in asn1_compare_bytes() | jsing | 2021-12-09 | 1 | -1/+2 | |
| | ||||||
* | Add initial tests for coverage of ASN.1 complex/constructed types. | jsing | 2021-12-09 | 2 | -1/+228 | |
| | ||||||
* | Add initial tests for coverage of ASN.1 basic/primitive types. | jsing | 2021-12-09 | 2 | -1/+135 | |
| | ||||||
* | be more specific which NETSCAPE stuff to ignore, and why | schwarze | 2021-12-07 | 1 | -10/+7 | |
| | ||||||
* | Some improvements allowing to handle asn1.h and x509v3.h: | schwarze | 2021-12-07 | 1 | -10/+47 | |
| | | | | | | | | | | | | | * handle multiple qualifiers on the function return type * handle function pointer type declarations * handle unions inside structs * handle forward struct declarations * handle "typedef const" * handle ASN1_F_, ASN1_R_, and X509V3_R_ error constants * handle "#if defined" in the same way as "#ifdef" * skip whitespace between "#" and "define" * skip whitespace before C comments * ignore TYPEDEF_D2I2D_OF | |||||
* | Add initial regress for CT. | jsing | 2021-12-05 | 4 | -1/+415 | |
| | | | | This provides test coverage for SCT encoding/decoding. | |||||
* | gross trailing whitespace | tb | 2021-12-04 | 1 | -16/+16 | |
| |