| Commit message (Collapse) | Author | Age | Files | Lines | ||
|---|---|---|---|---|---|---|
| ... | ||||||
| * | zap trailing spaces | tb | 2022-07-19 | 1 | -2/+2 | |
| | | ||||||
| * | Regenerate golden numbers due to RC4-MD5 now being disabled by default. | tb | 2022-07-19 | 1 | -61/+58 | |
| | | ||||||
| * | Revert accidental commit | tb | 2022-07-18 | 1 | -2/+2 | |
| | | ||||||
| * | Add comments to explain the magic numbers 57 and 58 | tb | 2022-07-18 | 2 | -3/+6 | |
| | | ||||||
| * | Avoid sending the QUIC transport parameters extension now that we | tb | 2022-07-18 | 1 | -4/+4 | |
| | | | | | | | send an unsupported extension alert. Noted by anton | |||||
| * | Revise regress for QUIC transport parameters TLS extension. | jsing | 2022-07-17 | 1 | -15/+32 | |
| | | ||||||
| * | Revert previous. The added includes were already there. Duh. | tb | 2022-07-16 | 1 | -4/+1 | |
| | | ||||||
| * | Only run the client connection test with supported ciphers. Avoids test | tb | 2022-07-14 | 1 | -2/+2 | |
| | | | | | breakage also noted by anton. | |||||
| * | Enable Wycheproof primality tests. | tb | 2022-07-13 | 2 | -4/+4 | |
| | | ||||||
| * | The asn1time test no longer needs static linking. | tb | 2022-07-12 | 1 | -4/+1 | |
| | | ||||||
| * | Check that ASN1_{INTEGER,ENUMERATED}_get(NULL) return 0 as documented. | tb | 2022-07-09 | 1 | -1/+22 | |
| | | ||||||
| * | whitespace | tb | 2022-07-08 | 1 | -3/+3 | |
| | | ||||||
| * | Add to variables instead of overriding them | tb | 2022-07-08 | 1 | -4/+4 | |
| | | ||||||
| * | Add support for primality checking | tb | 2022-07-07 | 4 | -10/+218 | |
| | | | | | | | | | | | | | | Project Wycheproof's primality_tests.json contain a set of 280 numbers that trigger edge cases in Miller-Rabin and related checks. libcrypto's Miller-Rabin test is known to be rather poor, hopefully we will soon see a diff on tech that improves on this. This extends the Go test in the usual way and also adds a perl script that allows testing on non-Go architectures. Deliberately not yet linked to regress since the tests are flaky with the current BN_is_prime_ex() implementatation. | |||||
| * | Use the security level knob in the test script. | tb | 2022-07-07 | 1 | -2/+14 | |
| | | | | | from beck | |||||
| * | Only run tests against ciphers supported by the method. | tb | 2022-07-07 | 2 | -4/+28 | |
| | | ||||||
| * | Add some minimal regress coverage for the security level. | tb | 2022-07-07 | 1 | -1/+6 | |
| | | | | | From beck | |||||
| * | Make the ssltest security level aware. | tb | 2022-07-07 | 1 | -1/+9 | |
| | | | | | From beck | |||||
| * | Switch ssltest to using the newly generated certs that use SHA-256 instead | tb | 2022-07-07 | 2 | -8/+6 | |
| | | | | | | | of SHA-1. This helps the switch to security-level aware ssltest. From jsing | |||||
| * | cope with ASN1_TIME_set_string_X509() rename | anton | 2022-07-05 | 1 | -3/+3 | |
| | | ||||||
| * | Adjust to new tls1_ec_nid2group_id API. | tb | 2022-07-02 | 1 | -7/+13 | |
| | | ||||||
| * | Add valid time test from ruby regress, and check ASN1_time_to_tm | beck | 2022-06-30 | 1 | -1/+27 | |
| | | | | | against recorded time value. | |||||
| * | add valid utc time that should fail to parse as generalized | beck | 2022-06-30 | 1 | -2/+6 | |
| | | ||||||
| * | Add tests for times missing seconds, and to be able to test | beck | 2022-06-30 | 1 | -3/+43 | |
| | | | | | invalid generalized times specifically | |||||
| * | Add support for sending QUIC transport parameters | beck | 2022-06-29 | 1 | -1/+257 | |
| | | | | | | | | | | | This is the start of adding the boringssl API for QUIC support, and the TLS extensions necessary to send and receive QUIC transport data. Inspired by boringssl's https://boringssl-review.googlesource.com/24464 ok jsing@ tb@ | |||||
| * | Use relative paths so beck can run regress in his git tree and have | tb | 2022-06-29 | 4 | -8/+12 | |
| | | | | | the correct ssl_local.h etc be picked up. | |||||
| * | Botan 2.19.2 has removed support for the OpenSSL crypto provider. | bluhm | 2022-06-28 | 2 | -24/+1 | |
| | | | | | | | | It was incompatible with OpenSSL 3.0. Remove the regression test to check that LibreSSL crypto works with Botan tests. This is better than to keep an outdated Botan in ports. discussed with tb@ beck@ | |||||
| * | Only asn1time needs to be static for now. | tb | 2022-06-28 | 1 | -2/+4 | |
| | | ||||||
| * | Make this regress test link staticly and use internal symbols | beck | 2022-06-28 | 1 | -1/+2 | |
| | | | | | so that it works and compiles during the tb@ pre-bump shuffle(tm). | |||||
| * | Fix the legacy verifier callback behaviour for untrusted certs. | beck | 2022-06-28 | 2 | -2/+303 | |
| | | | | | | | | | | | | | | | | | | | The verifier callback is used by mutt to do a form of certificate pinning where the callback gets fired and depending on a cert saved to a file will decide to accept an untrusted cert. This corrects two problems that affected this. The callback was not getting the correct depth and chain for the error where mutt would save the certificate in the first place, and then the callback was not getting fired to allow it to override the failing certificate validation. thanks to Avon Robertson <avon.r@xtra.co.nz> for the report and sthen@ for analysis. "The callback is not an API, it's a gordian knot - tb@" ok jsing@ | |||||
| * | Add new time manipulation funcitons that OpenSSL has exposed that | beck | 2022-06-27 | 1 | -2/+35 | |
| | | | | | | | | | the world seems to be using. Symbols.list changes and exposure to wait for minor bump ok jsing@ jca@ | |||||
| * | Fix URI name constraints, allow for URI's with no host part. | beck | 2022-06-26 | 1 | -0/+26 | |
| | | | | | | | | | | | | Such uri's must be parsed and allowed, but then should fail if a name constraint is present. Adds regress testing for this same case. fixes https://github.com/libressl-portable/openbsd/issues/131 ok tb@ | |||||
| * | Move leaf certificate checks to the last thing after chain validation. | beck | 2022-06-25 | 2 | -1/+285 | |
| | | | | | | | | | While seemingly illogical and not what is done in Go's validator, this mimics OpenSSL's behavior so that callback overrides for the expiry of a certificate will not "sticky" override a failure to build a chain. ok jsing@ | |||||
| * | Check pointer argument after {d2i,i2d}_ASN1_{BIT_STRING,BOOLEAN,INTEGER}() | jsing | 2022-06-25 | 1 | -2/+46 | |
| | | ||||||
| * | Add regress for ASN1_INTEGER_{get,set}_{u,}int64() | jsing | 2022-06-25 | 1 | -1/+103 | |
| | | ||||||
| * | Add regress for ASN1_INTEGER_cmp() | jsing | 2022-06-25 | 1 | -1/+76 | |
| | | ||||||
| * | Use dynamic linking correctly. bntest and bn_to_string need static linking. | tb | 2022-06-23 | 1 | -3/+5 | |
| | | ||||||
| * | Explicitly include fcntl.h and unistd.h for pipe2 | tb | 2022-06-22 | 1 | -1/+4 | |
| | | ||||||
| * | Fix format strings for size_t | tb | 2022-06-22 | 1 | -5/+5 | |
| | | ||||||
| * | Fix format string: use %zu for size_t, not %lu. | tb | 2022-06-22 | 1 | -3/+3 | |
| | | ||||||
| * | Use uppercase for SUCCESS for consistency | tb | 2022-06-19 | 1 | -2/+2 | |
| | | ||||||
| * | None of these tests needs to link statically. | tb | 2022-06-19 | 2 | -4/+4 | |
| | | ||||||
| * | Drop bogus DPADD += ${LIBSSL} | tb | 2022-06-19 | 3 | -7/+6 | |
| | | ||||||
| * | Quick regression test that checks that BN_is_prime_fasttest_ex() | tb | 2022-06-18 | 2 | -1/+97 | |
| | | | | | | recognizes the primes in the primes[] table with and without trial division. Would have caught the bug fixed in bn_primes.c r1.9. | |||||
| * | Switch to using TLS_INT instead of handrolling it | tb | 2022-06-15 | 1 | -3/+2 | |
| | | ||||||
| * | More %i vs %d cleanup | tb | 2022-06-10 | 7 | -20/+20 | |
| | | ||||||
| * | Fix format strings: change %i, %li, %lli to %d, %ld, %lld and switch to | tb | 2022-06-07 | 1 | -18/+18 | |
| | | | | | | %zu for master_key_length, session_id_length and sid_ctx_length, which are now size_t. | |||||
| * | Minor tweaks to psk modes regress | tb | 2022-06-06 | 1 | -3/+3 | |
| | | ||||||
| * | move the calls to psk kex modes tests down to match order in ssl_tlsext.c | tb | 2022-06-05 | 1 | -4/+4 | |
| | | ||||||
| * | Add regress coverage for PSK kex modes tlsext handlers. | tb | 2022-06-05 | 1 | -2/+210 | |
| | | ||||||
 |
index : openbsd | |
| A mirror of https://github.com/libressl/openbsd.git |
| summaryrefslogtreecommitdiff |