Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add qsort(3) regress based on Bentley & McIlroy's "Engineering a Sort Function" | millert | 2017-05-17 | 3 | -2/+278 |
| | |||||
* | Revise cipher suites in regress to match DSS cipher suite removal. | jsing | 2017-05-07 | 1 | -96/+82 |
| | |||||
* | Add a (currently failing) call to tls_handshake() on a client context that | jsing | 2017-05-07 | 1 | -1/+8 |
| | | | | | has not yet been connected. We expect this to fail, but it should fail gracefully. | ||||
* | Also test calling tls_handshake() on a server connection context that has | jsing | 2017-05-07 | 1 | -1/+7 |
| | | | | already completed a TLS handshake. | ||||
* | Add a test that calls tls_handshake() on a connection that has already | jsing | 2017-05-07 | 1 | -1/+7 |
| | | | | | completed a TLS handshake. This should return a failure, but currently succeeds (hence the regress currently fails). | ||||
* | An an initial sequencing/ordering test for libtls. | jsing | 2017-05-07 | 1 | -1/+61 |
| | |||||
* | Split TLS client/server handshake and close code into separate functions | jsing | 2017-05-06 | 1 | -4/+27 |
| | | | | so that it can be reused. | ||||
* | Bring in an SSL_HANDSHAKE structure and commence the great shovelling | beck | 2017-05-06 | 1 | -2/+2 |
| | | | | ok jsing@, gcc@, regress@ | ||||
* | Move TLS test code into a function that is called from main, making it | jsing | 2017-05-06 | 2 | -17/+33 |
| | | | | easier for new tests to be added. | ||||
* | Free tls_configs earlier now that we have refcounting. | jsing | 2017-05-06 | 1 | -4/+4 |
| | |||||
* | Add more functions. | jsing | 2017-05-06 | 1 | -1/+5 |
| | |||||
* | Sort/group functions. | jsing | 2017-05-06 | 1 | -5/+10 |
| | |||||
* | Not much point using a failed variable here. | jsing | 2017-05-06 | 1 | -3/+4 |
| | |||||
* | Bring in HKDF, from BoringSSL, with regress tests modified to be | beck | 2017-05-06 | 3 | -1/+310 |
| | | | | | in C. Ride previous minor bump ok tom@ inoguchi@ jsing@ | ||||
* | Add regress coverage for SSL{,_CTX}_set_{min,max}_proto_version(). | jsing | 2017-05-06 | 1 | -12/+304 |
| | |||||
* | Add regress for free functions that should be safe with NULL | beck | 2017-05-02 | 2 | -0/+63 |
| | |||||
* | whitespace | beck | 2017-04-30 | 1 | -3/+3 |
| | |||||
* | Add missing tls_init() and tls_free() calls. | jsing | 2017-04-30 | 1 | -1/+4 |
| | |||||
* | Use INT_MAX instead of SIZE_MAX as the maximum file size we can handle. | kettenis | 2017-04-16 | 1 | -2/+2 |
| | | | | | | Fixes this test on 64-bit architectures. ok visa@ | ||||
* | Define DEF_WEAK like we do for ld.so to fix building this with clang. | kettenis | 2017-04-16 | 1 | -1/+2 |
| | | | | ok millert@, deraadt@ | ||||
* | Use %zu to print a size_t. | kettenis | 2017-04-16 | 1 | -2/+2 |
| | |||||
* | Remove unused rnd_seed variable. Upstream made the same change 4 days ago. | kettenis | 2017-04-16 | 1 | -3/+0 |
| | | | | Fixes compiling this test using clang on arm64. | ||||
* | Rework and significantly extend TLS name verification tests to match | jsing | 2017-04-10 | 1 | -99/+377 |
| | | | | changes in libtls. | ||||
* | Improve unknown protocol version handling. | jsing | 2017-04-09 | 1 | -2/+3 |
| | |||||
* | In ssl.h TLS 1.0 is called TLSv1. Adapt name in test to make it pass. | bluhm | 2017-04-07 | 1 | -1/+1 |
| | | | | OK jsing@ | ||||
* | Update regress to match changes to tls1_PRF(). | jsing | 2017-03-25 | 1 | -10/+10 |
| | |||||
* | Update regress and remove temporary buffer to match changes in tls_PRF(). | jsing | 2017-03-18 | 1 | -8/+4 |
| | |||||
* | copy /etc/services in test directory | eric | 2017-03-14 | 1 | -1/+2 |
| | |||||
* | refresh the test infrastructure a bit. | eric | 2017-03-10 | 3 | -90/+93 |
| | |||||
* | Add a unit test for tls1_PRF(). | jsing | 2017-03-10 | 2 | -1/+257 |
| | |||||
* | remove bogus variable expansion | eric | 2017-03-09 | 2 | -4/+4 |
| | |||||
* | missing include | eric | 2017-03-09 | 1 | -1/+2 |
| | |||||
* | Add a test that covers a libtls client talking to a Go TLS server with | jsing | 2017-03-07 | 1 | -5/+107 |
| | | | | | varying minimum and maximum protocol versions. This gives us protocol version test coverage against an independent TLS stack. | ||||
* | Allow ciphers to be set on the TLS config. | jsing | 2017-03-07 | 1 | -0/+10 |
| | |||||
* | Provide support for libtls protocols and allow for protocols to be set on | jsing | 2017-03-07 | 1 | -3/+47 |
| | | | | | a TLS config. The ConnVersion function now also returns a protocol version instead of a string. | ||||
* | Add handling for errors on the TLS config and properly check/handle | jsing | 2017-03-07 | 2 | -6/+23 |
| | | | | failures when setting the CA file. | ||||
* | libtls errors are much more descriptive these days - return them directly | jsing | 2017-03-07 | 1 | -9/+8 |
| | | | | and avoid adding redundant/duplicate information. | ||||
* | We no longer need to keep pointers following tls_config_set_*() calls. | jsing | 2017-03-07 | 1 | -6/+3 |
| | |||||
* | Use an unsigned loop variable to avoid a comparison between signed | bluhm | 2017-03-06 | 1 | -1/+1 |
| | | | | | and unsigned. Makes the test compile again. OK inoguchi@ | ||||
* | Add an initial regress test that covers the server-side of libssl, by | jsing | 2017-03-05 | 3 | -1/+220 |
| | | | | providing SSL_accept() with fixed ClientHello messages. | ||||
* | Treat "ERROR in STARTUP" as an actual error, rather than failing without | jsing | 2017-03-04 | 1 | -2/+2 |
| | | | | | | | exiting non-zero (which has been masking a DTLS related issue). Also make the message consistent with other errors. Spotted by inogochi@ | ||||
* | Remove commented out code and fix indentation of surrounding statements. | jsing | 2017-03-04 | 1 | -12/+5 |
| | |||||
* | Remove handling for SSLv2. | jsing | 2017-03-04 | 1 | -14/+3 |
| | |||||
* | Ensure MD and key initialized before processing HMAC | inoguchi | 2017-03-03 | 1 | -31/+206 |
| | | | | | | | | Ensure both MD and key have been initialized before processing HMAC. Releasing HMAC_CTX in error path of HMAC(). In regress test, added test 4,5,6 and cleaned up the code. ok jsing@ | ||||
* | Add EVP test for MD5-SHA1. | jsing | 2017-03-01 | 1 | -0/+3 |
| | |||||
* | Add missing includes to avoid implicit function declarations. | jsg | 2017-02-25 | 4 | -3/+7 |
| | |||||
* | Check return value of every BN_* functions in bntest | inoguchi | 2017-02-23 | 1 | -393/+426 |
| | | | | | | | - add macro CHECK_GOTO - unify function return code to rc - add err: label for error goto ok bcook@ | ||||
* | Remove unused variable in C source to make the test compile and pass. | bluhm | 2017-02-07 | 1 | -1/+0 |
| | |||||
* | LibreSSL : regress for carry bug in mulx4x_mont and sqr8x_mont | inoguchi | 2017-01-31 | 1 | -1/+78 |
| | | | | | | | | | | | | This regress bntest.c patch is originally from master branch of OpenSSL. - dca2e0e test/bntest.c: regression test for CVE-2016-7055. - 3e7a496 test/bntest.c: regression test for carry bug in bn_sqr8x_internal. These tests were added for these commit. - 2fac86d bn/asm/x86_64-mont.pl: fix for CVE-2016-7055 (Low severity). - 3f4bcf5 bn/asm/x86_64-mont5.pl: fix carry bug in bn_sqr8x_internal. ok beck@ | ||||
* | More s/OSCP/OCSP/ typos | tom | 2017-01-27 | 1 | -1/+1 |
| | | | | ok jmc@ |