summaryrefslogtreecommitdiff
path: root/regress
AgeCommit message (Collapse)Author
2020-10-17Use CLEANFILES instead of a custom hack for cleaning up stuffTheo Buehler
2020-10-17remove debugging output capture to /tmp/ that is not neededBob Beck
2020-10-16With TLS 1.2 the step by step handshake created precise errorAlexander Bluhm
conditions. TLS 1.3 shortens the handshake, so some errors cannot be reported properly to the other side. Instead the connection is closed and the other side receives a SIGPIPE when it tries to write the next TLS protocol message. Ignore this SIGPIPE signal in TLS client and server and adapt error messages when grepping the log files. discussed with tb@ and jsing@
2020-10-16Implement propper handling for make clean and obj.Alexander Bluhm
2020-10-16make this test compile and pass on sparc64Theo Buehler
Two functions missed (void) in their declaration which made gcc whine "warning: function declaration isn't a prototype".
2020-10-16Add an explicit cast to make this test compile and pass with gcc.Theo Buehler
gcc emits a signed vs unsigned comparison warning which breaks the build due to -Werror.
2020-10-16In HTML output, avoid printing a newline right after <pre>Ingo Schwarze
and right before </pre> because that resulted in vertical whitespace not requested by the manual page author. Formatting bug reported by Aman Verma <amanraoverma plus vim at gmail dot com> on discuss@.
2020-10-16few more things needs match.c and addrmatch.c now that log.cDamien Miller
calls match_pattern_list()
2020-10-16Display of P2P links has changeddenis
Reported by patrick@
2020-10-16Refactor a bunch of oscpcheck for single return to clean it up,Bob Beck
and add the ability to parse a port in the specified ocsp url. Since this will now pass them, enable regress tests previously committed for ocspcheck. mostly by me with some cleanup by tb after an obvious yak was found to shave in the OCSP routines in libcrypto ok tb@
2020-10-15Test DTLS timeouts and retransmissions by dropping specific messages.Joel Sing
Provide a BIO that can drop specific messages in order to trigger and test DTLS timeouts and retransmissions. Note that the SSL buffering BIO (bbio) has to be removed to ensure that handshake messages are sent individually. This would have detected the recent DTLS breakage with retransmissions for a flight that includes a CCS.
2020-10-15Improve poll and event handling.Joel Sing
In particular, ensure we clear events when the client or server side has completed and fix timeouts to ensure we use a non-zero timeout if present.
2020-10-14Hook up dtls regress.Joel Sing
2020-10-14Add regress tests for DTLS.Joel Sing
Test the operation of a DTLS client and server, with and without cookies, using the default MTU and a specifically lowered MTU. Further regress tests will be built on this to exercise other parts of the DTLS code base (such as retransmission, fragmentation and reassembly).
2020-10-12avoid two overlong lines and drop an unused printf argumentTheo Buehler
2020-10-11No longer need to cast away const in srtp_find_profile_by_name()Theo Buehler
2020-10-11Update regress for method changes.Joel Sing
2020-10-11Unbreak regress following SRTP_PROTECTION_PROFILE const change.Joel Sing
2020-10-10Don't leak bundle_file and cert_file paths at the end.Theo Buehler
2020-10-08Add regress for ocspcheckBob Beck
2020-10-08Read cert.pem once and reuse it instead of reading it twice per test certTheo Buehler
chain. It only takes a few dozens of ms to read it, but doing this 7290 times adds up to a few minutes run time. This way, the test completes in a handful of seconds. Diagnosed by jsing, ok beck
2020-10-07zap trailing whitespaceTheo Buehler
2020-10-07add arguments to skip a bunch of x448 testsTheo Buehler
2020-10-07Hook up tlslegacy regress.Joel Sing
2020-10-07Add regress tests for switching from the new TLS stack to the legacy stack.Joel Sing
This includes a test where the server response includes multiple handhshake messages in the single TLS plaintext record (which would have caught the bug just fixed in tls13_legacy.c).
2020-10-07remove GlobalKnownHostsFile for this test after UpdateHostkeysDamien Miller
change
2020-10-06Fix "rtable N" checkkn
pfctl parse.y r.1702 enforced rtables to exist at ruleset creation time but rtable 7 does not exist (this regress only tests the parser), so use 0. Spotted by tb.
2020-10-06Use std=gnu99 to be able to build the tests with both base clang and gcc.Martin Pieuchot
2020-10-03KNFTheo Buehler
2020-10-03typoTheo Buehler
2020-10-03add kcov remote interrupt coverage testanton
2020-10-03sync usageanton
2020-10-02spelling, punctuation, whitespaceTheo Buehler
2020-10-02Add possibility to link and run this test against the OpenSSL 1.1.1 packageTheo Buehler
using the make variable EOPENSSL11. Suggested by jsing
2020-10-02Use += and ?= and tidy up whitespaceTheo Buehler
2020-10-02Tidy up: no need to link statically against libcrypto and no needTheo Buehler
to look at its private headers either.
2020-10-02Make this test compile against OpenSSL 1.1Theo Buehler
The X509_STORE_CTX struct is opaque in OpenSSL 1.1. To avoid reaching inside it, reuse the trusted certificate store that was just assigned to it and use X509_STORE_CTX_get0_param(3) to access the verification parameters.
2020-09-25move test-tls13-finished.py from slow tests to normal tests.Theo Buehler
2020-09-25test-tls13-finished.py has 70 failing tests that expect a "decode_error"Theo Buehler
instead of the "decrypt_error" sent by tls13_server_finished_recv(). Both alerts appear to be reasonable in this context, so enable the tests while working around this.
2020-09-25delete a stale commentTheo Buehler
2020-09-25Add regression tests for oscpcheck.Bob Beck
These will not be activated until after release, with some ocspcheck cleanups
2020-09-21Fix test_parser crash in ikev2_pld_eap. msg->msg_parent is always set intobhe
iked, so it should also be set in the test. ok patrick@
2020-09-21With the new rdomain aware slaacd we can't start an additional slaacdFlorian Obser
in rtable 1. However, we can just query the already running one. regress breakage pointed out by tb@
2020-09-211) Move the interop tests to the end so we see tlsfuzzer firstBob Beck
2) Reorder the interop tests so the really slow "cert" test is at the end 3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination of client and server that does not involve libressl. This way we can skip testing openssl to openssl11 when running these manually by setting REGRESS_SKIP_SLOW to "yet" in mk.conf ok jsing@
2020-09-21move a misplaced 'goto done;' so that all invalid uris are testedTheo Buehler
2020-09-21add a few short invalid URIs in test_constraints1() that cause earlyTheo Buehler
failure of x509_constraints_uri_host() in x509_constraints_uri()
2020-09-20Correct a 1 byte read overflow in x509_contraints_uri and addBob Beck
regress to catch it in the future. found by Guido Vranken's cryptofuzzer ok tb@
2020-09-20Fix changed eap_parse signature.tobhe
2020-09-20As in emacs.sh -r1.11 by jca, don't test the behavior of ^L. WithTheo Buehler
millert's clear-screen change in vi.c -r1.57 it now depends on $TERM
2020-09-18Move variable declaration to beginning of scope in order to make thisTheo Buehler
test compile and pass on sparc64.
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-27 13:58:53 +0000