Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Test SSL_OP_NO_RENEGOTIATION and SSL_OP_ALLOW_CLIENT_RENEGOTIATION. | jsing | 3 days | 1 | -1/+56 |
| | | | | | Extend renegotiation tests to cover SSL_OP_NO_RENEGOTIATION and SSL_OP_ALLOW_CLIENT_RENEGOTIATION. | ||||
* | ec_asn1_test: Prepare for upcoming bump | tb | 7 days | 2 | -8/+11 |
| | | | | | Linking statically, pull in ec_local.h and provide a prototype for EC_GROUP_new(), which will be removed from the public API. | ||||
* | asn1object: improve error message to include returned value | tb | 2025-02-26 | 1 | -2/+2 |
| | | | | From Kenjiro Nakayama | ||||
* | recp -> reciprocal renaming in tests | tb | 2025-02-12 | 2 | -7/+7 |
| | |||||
* | Improve detection and handling of alerts in renegotiation regress. | jsing | 2025-02-01 | 1 | -23/+76 |
| | |||||
* | Hook renegotiation regress. | jsing | 2025-02-01 | 1 | -1/+2 |
| | |||||
* | Fix certificate paths. | jsing | 2025-02-01 | 1 | -4/+4 |
| | |||||
* | Add regress coverage for TLS renegotiation. | jsing | 2025-02-01 | 2 | -0/+560 |
| | |||||
* | Remove pointless call to EC_GROUP_precompute_mul() | tb | 2025-01-24 | 1 | -3/+1 |
| | |||||
* | ectest: zap stray whitespace | tb | 2025-01-22 | 1 | -2/+2 |
| | |||||
* | ectest: fix misleading indentation | tb | 2025-01-22 | 1 | -5/+7 |
| | |||||
* | ectest: remove unused defines | tb | 2025-01-22 | 1 | -5/+1 |
| | |||||
* | ectest: even more lipstick | tb | 2025-01-22 | 1 | -17/+15 |
| | |||||
* | ectest: apply some more lipstick | tb | 2025-01-22 | 1 | -8/+3 |
| | |||||
* | ectest: switch from new + copy to dup. zap some NULL checks before free | tb | 2025-01-22 | 1 | -42/+15 |
| | |||||
* | bn_test: remove random negative dance for bn_div_reciprocal() | tb | 2025-01-22 | 1 | -3/+1 |
| | |||||
* | Adjust for BN_div_recp() -> BN_div_reciprocal() | tb | 2025-01-22 | 1 | -3/+3 |
| | |||||
* | Ensure the cyclic subgroup cycles in the expected number of iterations. | jsing | 2025-01-22 | 1 | -9/+14 |
| | | | | Also print the iteration number and fix some indentation. | ||||
* | ectest: heed long forgotten XXX and switch back to BN_one() | tb | 2025-01-22 | 1 | -3/+2 |
| | |||||
* | ec/Makefile: remove excess tabs | tb | 2025-01-21 | 1 | -9/+9 |
| | |||||
* | bn_test: use BN_RECP_CTX_create() rather than _new()/_set() | tb | 2025-01-21 | 1 | -5/+3 |
| | |||||
* | appstest: remove the two tests exercising -C minimally | tb | 2025-01-19 | 1 | -3/+3 |
| | |||||
* | md_test: switch from 2<<28 to 1<<29 | tb | 2025-01-19 | 1 | -2/+2 |
| | | | | discussed with jsing | ||||
* | Add regress coverage that checks the MD5 message bit counter handling. | jsing | 2025-01-19 | 1 | -1/+66 |
| | |||||
* | Interop tests for openssl 3.3 and 3.4, retire 3.2, 1.1 (and 3.1 remnants) | tb | 2025-01-15 | 12 | -191/+130 |
| | | | | | | OpenSSL 1.1 and 3.2 will be removed from the ports tree, so test the two remaining versions. Unfortunately, this requires a lot more manual massaging than there should be. | ||||
* | Default to eopenssl33 for other_openssl_bin | tb | 2025-01-15 | 1 | -2/+2 |
| | | | | | OpenSSL 1.1 is dead and will soon be removed from the ports tree. At the same time OpenSSL 3.3 will become the default openssl. | ||||
* | An -> The | tb | 2025-01-06 | 1 | -2/+2 |
| | | | | | There's only one inverse and in standard affine coordinates it only has one representation. | ||||
* | Print the inverse in affine coordinates | tb | 2025-01-06 | 1 | -8/+3 |
| | | | | | This way we can get rid of the stupidity that is publicly exposed Jprojective coordinates soon. | ||||
* | Let's use RSA_3 rather than 3 | tb | 2025-01-05 | 1 | -2/+2 |
| | |||||
* | Stop setting RSA_FLAG_SIGN_VER | tb | 2025-01-05 | 1 | -2/+1 |
| | | | | With rsa_sign.c r1.37 this is no longer needed. | ||||
* | rsa_method_test: some consistency tweaks | tb | 2025-01-04 | 1 | -6/+5 |
| | |||||
* | fix typo | tb | 2025-01-04 | 1 | -2/+2 |
| | |||||
* | Add some regress coverage for custom RSA methods | tb | 2025-01-04 | 2 | -1/+280 |
| | | | | | This currently only covers sign and verify since other parts are already known to work in practice. Prompted by a bug report by kn | ||||
* | rsa tests: tidy up the makefile | tb | 2025-01-04 | 1 | -7/+8 |
| | |||||
* | Zap extraneous -DLIBRESSL_INTERNAL | tb | 2024-12-29 | 1 | -2/+1 |
| | |||||
* | parse test file: add helper to skip to end of line | tb | 2024-12-27 | 1 | -8/+12 |
| | |||||
* | OpenSSL 1.1 is dead. Make this optionally use 3.3 instead. | tb | 2024-12-27 | 1 | -4/+4 |
| | |||||
* | Fix the unittest with Emscripten | tb | 2024-12-26 | 1 | -5/+26 |
| | | | | | | Split main into two helper functions since having a few ML-KEM key blobs on the stack makes Emscripten's stack explode, leading to inscrutable silent failures unles ASAN is enabled. Go figure. | ||||
* | mlkem iteration test: drop extraneous typedef | tb | 2024-12-26 | 1 | -4/+1 |
| | |||||
* | mlkem tests: whitespace tweak and fix an error message | tb | 2024-12-26 | 1 | -5/+7 |
| | |||||
* | fat fingers | tb | 2024-12-26 | 1 | -2/+2 |
| | |||||
* | Overhaul ML-KEM regress once more | tb | 2024-12-26 | 20 | -2571/+2110 |
| | | | | | | | | | | | | | | | | | | | | | | Implement a file parser that drives a state machine to extract the test data from the .txt files and manages the parsed data. Comments and empty lines are ignored. The code currently assumes that instruction lines are at the start of the file (which isn't generally true) and only supports two line types for now. This is good enough for all the ML-KEM tests but should be easy enough to extend. Once all data for a test case is parsed in the expected order, a test handler is called which can retrieve the test data via a simple API and throw warnings and errors with information on the test case line number, etc. Merge the tests into three programs: one parsing the .txt files and running the corresponding test cases, a unit test and the iteration tests. Deduplicate the actual test code and let the caller pass in an object containing the API functions, private keys and arrays that need to be different between the 768 version and the 1024 version. This way we don't have two sets of half a dozen .c files differing only in 3 or 4 occurrences of 768 and 1024. All this will also make it a lot easier to hook these tests into portable. | ||||
* | Remove already disabled tests for elliptic curves of small order | tb | 2024-12-24 | 3 | -880/+3 |
| | |||||
* | mlkem regress: garbage collect two global variables | tb | 2024-12-20 | 1 | -4/+1 |
| | |||||
* | Fix whitespace in Makefile | tb | 2024-12-20 | 1 | -22/+22 |
| | |||||
* | That works better with a G | tb | 2024-12-20 | 1 | -2/+2 |
| | |||||
* | cant't -> can't | tb | 2024-12-20 | 10 | -20/+20 |
| | | | | (the mystery of spotting typos right after commit strikes again) | ||||
* | Rework and fix the mlkem tests | tb | 2024-12-20 | 16 | -997/+1824 |
| | | | | | | | | | | | | | | | | | Make proper use of CBB and CBS. If a CBS ever owns data, you're holding it wrong. Ditch gross macros, sscanf, and globals. The use of fgets is annoying here, so replace it with getline, which be provided by portable if needed. Most importantly, make the tests actually signal failure rather than only printing an error. Fix the state machines in a few of them. Some tests didn't parse the .txt file at all. Others mostly did but didn't actually test what they were supposed to be testing. Such failures were hidden by the way the tests were written. This basically needed a complete revamp. It still isn't pretty and much of it could be deduplicated, but I only have so much time alotted on this blue planet. | ||||
* | mlkem regress: reach around into bytestring again | tb | 2024-12-19 | 1 | -1/+2 |
| | |||||
* | Close fp before exit since we clean up other stuff | tb | 2024-12-17 | 4 | -4/+8 |
| | | | | From Kenjiro Nakayama |