Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Free cert, key and ocsp_staple on exit of do_keypair_test(). | tb | 2021-12-04 | 1 | -1/+4 | |
| | | | | Reported by Ilya Shipitsine, discussed with jsing | |||||
* | Convert main into single exit to appease asan. | tb | 2021-12-04 | 1 | -22/+33 | |
| | ||||||
* | Explicitly free EVP_MD_CTX to appease asan. Reported by Ilya Shipitsin. | tb | 2021-12-04 | 1 | -10/+16 | |
| | ||||||
* | Add regress for ECPKParameters ASN.1 encoding/decoding. | jsing | 2021-12-04 | 2 | -2/+210 | |
| | ||||||
* | Tell testers which packages to install right away (and why) | kn | 2021-12-02 | 3 | -3/+7 | |
| | | | | | | | Other regress tests do it differently; just fix/thouch those that did not mention any package name at all. This helps grepping logs for SKIPPED to find instructions for the next run. | |||||
* | Add regress for {d2i,i2d}_{,DSA_,EC_,RSA_}PUBKEY{,_bio}(). | jsing | 2021-11-30 | 2 | -1/+570 | |
| | ||||||
* | make the bn/mont test compile with opaque DH. | tb | 2021-11-26 | 1 | -4/+12 | |
| | ||||||
* | Rework this test to compile with opaque RSA | tb | 2021-11-25 | 1 | -282/+427 | |
| | ||||||
* | Resolve last issue with opaque BIGNUM in this test. | tb | 2021-11-25 | 1 | -3/+3 | |
| | ||||||
* | Prepare ssltest for opaque DH | tb | 2021-11-21 | 1 | -18/+39 | |
| | ||||||
* | wycheproof: modify RSA tests to work with opaque RSA struct | tb | 2021-11-21 | 1 | -11/+57 | |
| | ||||||
* | wycheproof.go: modify some DSA and ECDSA code to work with opaque structs | tb | 2021-11-21 | 1 | -5/+23 | |
| | ||||||
* | Switch to BIO_up_ref() instead of adjusting references manually. | tb | 2021-11-20 | 2 | -16/+6 | |
| | ||||||
* | Use BIO_up_ref() instead of adjusting refcounts manually | tb | 2021-11-20 | 1 | -9/+3 | |
| | ||||||
* | Mark the X509_VERIFY_PARAM_ID variable type as intentionally | schwarze | 2021-11-19 | 1 | -3/+16 | |
| | | | | | | | undocumented. It is an opaque struct used only internally, as a sub-object of the public X509_VERIFY_PARAM type. All related API functions take X509_VERIFY_PARAM arguments, so X509_VERIFY_PARAM_ID is of no interest to the user. | |||||
* | Make function prototype parsing a bit stricter, | schwarze | 2021-11-19 | 1 | -1/+1 | |
| | | | | | | | | | | reducing the risk of accidental misparsing: Require whitespace after the function return type (before the asterisk indicating that the function returns a pointer, if any) and do not accept whitespace between the function name and the opening parenthesis of the parameter list. These changes are not a problem because we want that style for KNF reasons anyway. | |||||
* | Very quick and dirty script to help me check that the symbols | schwarze | 2021-11-19 | 1 | -0/+266 | |
| | | | | | | | | | | | | | | in one of the public openssl/ header files are all documented. Before attempting to read this code, make sure that you are fully vaccinated against leaning toothpick syndrome. Example usage: ./check_complete.pl x509_vfy ./check_complete.pl -v x509 | less Intentionally not linked to the build. jsing@ agrees with the general direction. | |||||
* | sha512test: replace EVP_MD_CTX_{cleanup,init} pair with EVP_MD_CTX_reset | tb | 2021-11-18 | 1 | -3/+2 | |
| | ||||||
* | gost: missed one cleanup | tb | 2021-11-18 | 1 | -2/+2 | |
| | ||||||
* | sha256test: EVP_MD_CTX_cleanup -> EVP_MD_CTX_reset | tb | 2021-11-18 | 1 | -4/+3 | |
| | ||||||
* | gost2814789t: EVP_MD_CTX_cleanup -> EVP_MD_CTX_reset | tb | 2021-11-18 | 1 | -2/+2 | |
| | ||||||
* | evptest: no need to call EVP_MD_CTX_cleanup() before EVP_MD_CTX_free() | tb | 2021-11-18 | 1 | -4/+3 | |
| | ||||||
* | Use HMAC_CTX_reset() instead of HMAC_CTX_cleanup() + HMAC_CTX_init() | tb | 2021-11-18 | 1 | -5/+3 | |
| | ||||||
* | Fix ssltest to work with opaque EVP_PKEY. | tb | 2021-11-18 | 1 | -22/+33 | |
| | ||||||
* | sha*test: convert these tests to work with opaque EVP_MD_CTX. | tb | 2021-11-18 | 3 | -31/+42 | |
| | ||||||
* | zap trailing whitespace | tb | 2021-11-18 | 1 | -7/+7 | |
| | ||||||
* | hmactest: convert to opaque HMAC_CTX. | tb | 2021-11-18 | 1 | -29/+37 | |
| | ||||||
* | gost2814789t: convert to opaque EVP_{MD,CIPHER}_CTX. | tb | 2021-11-18 | 1 | -19/+23 | |
| | ||||||
* | exptest: convert to opaque BN; minor KNF tweaks. | tb | 2021-11-18 | 1 | -40/+47 | |
| | ||||||
* | evptest: fix compilation with opaque EVP_{CIPHER,MD}_CTX. Uses a | tb | 2021-11-18 | 1 | -22/+30 | |
| | | | | workaround for excessive malloc inspired by mariadb (just kidding). | |||||
* | ecdsatest: make this test compile with opaque EVP_MD_CTX. | tb | 2021-11-18 | 1 | -7/+8 | |
| | ||||||
* | dsatest: make this work with opaque BN. Some more fixes will be needed | tb | 2021-11-18 | 1 | -114/+124 | |
| | | | | | for opaque DSA. I'll deal with that later. I also lobbed a KNF grenade in here. | |||||
* | dhtest: fix this to work with opaque BN. This will need more fixes to | tb | 2021-11-18 | 1 | -48/+61 | |
| | | | | | work with opaque DH, but one step at a time. While here, add a bunch of missing spaces to reduce the eyebleed. | |||||
* | bntest: Fix all but one test in this file to work with opaque BN. | tb | 2021-11-18 | 1 | -399/+563 | |
| | | | | | The remaining test needs some thinking (or disabling once we flip the switch). It is currently marked with an XXX. | |||||
* | Test ASN1_STRING_copy(3). | schwarze | 2021-11-13 | 2 | -1/+121 | |
| | | | | | | As a side effect, this also tests various aspects of ASN1_STRING_new(3), ASN1_STRING_set(3), ASN1_STRING_length_set(3), ASN1_STRING_get0_data(3), ASN1_STRING_length(3), and ASN1_STRING_type(3). | |||||
* | Test adding extensions to certification requests. | schwarze | 2021-11-03 | 2 | -2/+167 | |
| | | | | | Related to the bugfixes in x509_req.c rev. 1.25. OK tb@. | |||||
* | Add regress that calls SSL_set_tlsext_host_name() with a NULL host name. | jsing | 2021-11-02 | 1 | -1/+15 | |
| | ||||||
* | Rework SNI hostname regress to be table driven. | jsing | 2021-11-01 | 1 | -62/+147 | |
| | | | | | | | Also adjust for the changes to tlsext_sni_is_valid_hostname() and include tests for IPv4 and IPv6 literals. ok beck@ | |||||
* | Rework x509attribute regress test in such a way that it doesn't need | tb | 2021-11-01 | 1 | -11/+7 | |
| | | | | to reach into opaque structs. | |||||
* | Make this test compile again after the damage done in libcrypto | tb | 2021-10-31 | 1 | -19/+20 | |
| | ||||||
* | Prepare regress for opaque structs in x509*.h | tb | 2021-10-31 | 4 | -25/+18 | |
| | ||||||
* | openssl-ruby tests: rework for x509_alt.c r1.3 and r1.5. | tb | 2021-10-28 | 1 | -6/+9 | |
| | | | | | | | ruby can no longer generate certs with bogus wildcards in it to check that they will fail to verify when creating TLS connections. It will throw an error. This change needs openssl-ruby-tests-20211024p0 or later to work. | |||||
* | Free memory on text exit to make asan quieter | beck | 2021-10-26 | 1 | -53/+83 | |
| | | | | ok tb@ | |||||
* | Revise regress for removal of SSL_SESSION_INTERNAL. | jsing | 2021-10-26 | 1 | -27/+27 | |
| | ||||||
* | Drop two uses of the terrible asn1 kludge spotted by anton | tb | 2021-10-25 | 1 | -3/+3 | |
| | ||||||
* | For open/openat, if the flags parameter does not contain O_CREAT, the | deraadt | 2021-10-24 | 2 | -4/+4 | |
| | | | | | | | | | | | | | 3rd (variadic) mode_t parameter is irrelevant. Many developers in the past have passed mode_t (0, 044, 0644, or such), which might lead future people to copy this broken idiom, and perhaps even believe this parameter has some meaning or implication or application. Delete them all. This comes out of a conversation where tb@ noticed that a strange (but intentional) pledge behaviour is to always knock-out high-bits from mode_t on a number of system calls as a safety factor, and his bewilderment that this appeared to be happening against valid modes (at least visually), but no sorry, they are all irrelevant junk. They could all be 0xdeafbeef. ok millert | |||||
* | Add a regress test for TLS client/server. | jsing | 2021-10-23 | 3 | -1/+496 | |
| | | | | | | | | | This currently exercises various combinations of TLS versions and their associated key exchange mechanisms. Note that this currently fails for TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly). Over time all of the ssl regress should be moved into the dtls and tls regress tests. | |||||
* | Revise regress test for tls13_buffer rename. | jsing | 2021-10-23 | 1 | -14/+16 | |
| | ||||||
* | Revise regress for tlsext_tick_lifetime_hint changing type. | jsing | 2021-10-23 | 1 | -2/+2 | |
| | ||||||
* | Pull in ssl_locl.h so that we can keep reaching into libssl internals. | jsing | 2021-10-15 | 2 | -1/+4 | |
| |