Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Revise for OBJ_obj2txt() OID arc limits. | jsing | 2022-02-12 | 1 | -4/+4 | |
| | ||||||
* | Test OBJ_obj2nid() with an undefined (NID_undef) object. | jsing | 2022-02-11 | 1 | -2/+2 | |
| | ||||||
* | Add initial regress for objects. | jsing | 2022-02-11 | 3 | -1/+449 | |
| | ||||||
* | If running with ASAN, mark test_with{,out}_bzero() with the | tb | 2022-02-10 | 1 | -3/+14 | |
| | | | | | | | | | | | | | no_sanitize_address attribute. ASAN doesn't seem to be able to understand these lowlevel gymnastics with sigaltstack() and segfaults in __intercept_memem(). This allows LibreSSL and other portable projects that use this test run tests with ASAN enabled. Issue reported and workaround suggested by Ilya Shipitsin Paraphrasing millert: it's a little ugly but it's only a regress. | |||||
* | silence "function declaration isn't a prototype" warning by changing | tb | 2022-02-09 | 1 | -6/+6 | |
| | | | | int foo() to int foo(void) | |||||
* | Plug leaks reported by Ilya Shipitsin | tb | 2022-02-08 | 1 | -1/+5 | |
| | ||||||
* | Plug a number of leaks reported by Ilya Shipitsin | tb | 2022-02-08 | 1 | -2/+9 | |
| | ||||||
* | Garbage collect the unused hash and print kp->pubkey_hash instead of NULL. | tb | 2022-02-08 | 1 | -7/+4 | |
| | | | | | | Make sure kp is freed also on error. ok jsing | |||||
* | Fix memleaks reported by Ilya Shipitsin | tb | 2022-02-08 | 1 | -3/+5 | |
| | ||||||
* | cope with recent S3I removal; ok tb@ | anton | 2022-02-06 | 1 | -2/+2 | |
| | ||||||
* | Adapt appstest.sh for the new TLS_ names. | tb | 2022-02-05 | 1 | -9/+5 | |
| | ||||||
* | Add a workaround due to OpenSSL's limitation of SSL_CTX_set_cipher_list | tb | 2022-02-05 | 1 | -1/+5 | |
| | | | | | | | | | | | | | | | | SSL_CTX_set_cipher_list() in OpenSSL 1.1 does not accept TLSv1.3 ciphers. This wasn't a problem until now since the AEAD- ciphers were counted as distinct from TLS_ ciphers by the regress test, so they were never used in the {run,check}-cipher-${cipher}-client-${clib}-server-${slib} tests With the renaming, the TLSv1.3 ciphers are now considered as common ciphers, so they're tested. With openssl11 this results in 0:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl/ssl_lib.c:2573: The design of these tests doesn't allow easily adding a call to SSL_CTX_set_ciphersuites (since they also need to work with openssl 1.0.2) so skip the TLS_* ciphers for the time being. | |||||
* | Mechanically adjust from AEAD- to TLS_ to adjust to the new cipher names. | tb | 2022-02-05 | 1 | -10/+5 | |
| | ||||||
* | Adjust the ssl_get_shared_ciphers to the new names. | tb | 2022-02-05 | 1 | -23/+23 | |
| | ||||||
* | Revise for S3I removal. | jsing | 2022-02-05 | 1 | -81/+81 | |
| | ||||||
* | Use TLS_PADDING_* defines. | jsing | 2022-02-01 | 1 | -4/+6 | |
| | ||||||
* | Revise/simplify for signer interface change. | jsing | 2022-02-01 | 1 | -20/+10 | |
| | ||||||
* | Add test coverage for tls_signer when used with a TLS server. | jsing | 2022-01-30 | 1 | -2/+189 | |
| | | | | | | In this configuration the tls_signer is provided with the server certificate and private key, while the TLS server is configured with a sign callback and is only provided with the certificate. | |||||
* | Add initial regress for tls_signer. | jsing | 2022-01-30 | 3 | -1/+305 | |
| | ||||||
* | remove unused variable from all copies of _asr_strdname() | naddy | 2022-01-20 | 2 | -6/+6 | |
| | | | | | | | | ... including those inlined into print_dname(). This also fixes -Wunused-but-set-variable warnings warnings in smtpd and smtpctl. The code was imported with asr and then copied around. ok deraadt@ guenther@ | |||||
* | Add ct.h and x509_vfy.h | inoguchi | 2022-01-15 | 1 | -1/+3 | |
| | ||||||
* | Undo static linking and other workarounds that are no longer needed | tb | 2022-01-14 | 6 | -19/+15 | |
| | | | | after the bump | |||||
* | Convert wycheproof.go for opaque EVP_AEAD_CTX | tb | 2022-01-14 | 1 | -11/+18 | |
| | ||||||
* | The cttest can link dynamically now | tb | 2022-01-14 | 1 | -2/+2 | |
| | ||||||
* | Simplify BN_mont test slightly using a new accessor. | tb | 2022-01-14 | 1 | -4/+2 | |
| | ||||||
* | Only evp_pkey_check needs static linking | tb | 2022-01-12 | 1 | -2/+4 | |
| | ||||||
* | Add a prototype for OBJ_bsearch_ so this test will keep working | tb | 2022-01-12 | 1 | -1/+6 | |
| | | | | | after the bump. Since this tests the public interfaces, we do not want to use LIBRESSL_INTERNAL/LIBRESSL_CRYPTO_INTERNAL here. | |||||
* | Rework ecdsatest to build after the bump and link statically for now | tb | 2022-01-12 | 2 | -14/+26 | |
| | ||||||
* | Rework dsatest to use accessors and link statically for now | tb | 2022-01-12 | 2 | -7/+7 | |
| | ||||||
* | Rework dhtest to use accessors and link statically for now | tb | 2022-01-12 | 1 | -6/+6 | |
| | | | | For some reason CVS didn't want to commit this the first time around. | |||||
* | Rework dhtest to use accessors and link statically for now | tb | 2022-01-12 | 1 | -3/+3 | |
| | ||||||
* | Rework test to use EVP_AEAD_CTX_{new,free}() and link statically for now | tb | 2022-01-12 | 2 | -20/+32 | |
| | ||||||
* | Fix asn1x509 build with opaque structures. Link statically for now. | tb | 2022-01-12 | 2 | -20/+25 | |
| | ||||||
* | Rework Makefile to use regress framework and link asn1basic statically. | tb | 2022-01-12 | 2 | -14/+16 | |
| | | | | | It will need this for testing {d2i,i2d}_ASN1_BOOLEAN which will be moved to internal-only in the upcoming bump. | |||||
* | forgot to zap some dead assignments | tb | 2022-01-11 | 1 | -4/+4 | |
| | ||||||
* | Add regress for EVP_PKEY_{,public_,param_}check() | tb | 2022-01-11 | 2 | -7/+415 | |
| | ||||||
* | Revise for peer_cert. | jsing | 2022-01-11 | 1 | -6/+6 | |
| | ||||||
* | Revise for changes to tls_key_share_peer_public() | jsing | 2022-01-11 | 1 | -2/+4 | |
| | ||||||
* | Increase the max size of allocations, in prep for a large cache implementation. | otto | 2022-01-09 | 1 | -3/+3 | |
| | ||||||
* | Add some workarounds to make build_addr_block_test_data const. | tb | 2022-01-07 | 1 | -17/+26 | |
| | ||||||
* | Revert previous accidental commit | tb | 2022-01-07 | 1 | -2/+2 | |
| | ||||||
* | Let dtlstest peek into bio_local.h | tb | 2022-01-07 | 2 | -2/+4 | |
| | ||||||
* | Revise for change to tls_key_share_peer_public() | jsing | 2022-01-06 | 1 | -3/+2 | |
| | ||||||
* | Add regress tests for ASN1_BIT_STRING. | jsing | 2022-01-06 | 1 | -2/+113 | |
| | ||||||
* | Add a comment that explains why build_addr_block_tests isn't const | tb | 2022-01-06 | 2 | -3/+8 | |
| | ||||||
* | Test CBB_add_u64() | jsing | 2022-01-06 | 1 | -2/+6 | |
| | ||||||
* | With openssl-ruby-tests 20220105, test_post_connection_check_wildcard_san | tb | 2022-01-06 | 1 | -2/+2 | |
| | | | | is now an unexpected pass, so remove it from the expected failures. | |||||
* | Fix a copy-paste error that led to an out-of-bounds access. | tb | 2022-01-06 | 1 | -2/+2 | |
| | | | | Found via a crash on bluhm's i386 regress test box | |||||
* | Add test coverage for SCT validation. | jsing | 2022-01-06 | 4 | -7/+116 | |
| | | | | | | Of note, the public APIs for this mean that the only way you can add a CTLOG is by reading a configuration file from disk - there is no programmatic way to do this. | |||||
* | t_syscall was a test for the gcc 1.x off_t syscall padding, | guenther | 2022-01-06 | 2 | -125/+2 | |
| | | | | | which was an implementation detail and has been deleted, so delete the test |