summaryrefslogtreecommitdiff
path: root/regress
AgeCommit message (Collapse)Author
2015-10-03adapt to the removal of !Otto Moerbeek
2015-10-02Add another invalid time, which is currently accepted.Joel Sing
2015-09-30Fix a bug in the regress, and be much more pedantic about what is allowedBob Beck
per RFC 5380 in an X509. RFC 5280 states that all times before 2050 must be specified as a UTCtime, not a Generalized time, and all times after must be a UTC time. By extension this also means the smallest time allowed per RFC 5280 is 500101000000Z and the largest is 99991231235959Z..
2015-09-30implement new "prot_exec" tame(2) request:Sebastien Marie
- by default, a tamed-program don't have the possibility to use PROT_EXEC for mmap(2) or mprotect(2) - for that, use the request "prot_exec" (that could be dropped later) initial idea from deraadt@ and kettenis@ "make complete sense" beck@ ok deraadt@
2015-09-29Add an rfc5280 test suite to test x509_cmp_time.Bob Beck
Note some of these will yet fail with the current libcrypto as the current X509_cmp_time is not RFC5280 compliant ok jsing@
2015-09-29Fix sha2 regression test for libcrypto.Doug Hogan
By default, "openssl sha" used SHA-0. However, it was possible to use the form "openssl sha -sha256" to run SHA-256 instead. The regression test used this form. Since we removed SHA-0 support, the regress tests should now call "openssl <digest>". ok guenther@, bcook@
2015-09-28make using tame path "/" work.Sebastien Marie
and add a regress test for that. ok deraadt@
2015-09-28Sync with recent changes, local routes are now always UP.Martin Pieuchot
2015-09-27check if openssl(1) actually works before proceedingBrent Cook
It was possible for this test to pass even if the openssl command itself was missing.
2015-09-27add a tame(2) regress for stat(2) and realpath(3)Sebastien Marie
2015-09-25Add DER encoding/decoding coverage for ASN.1 GENERALIZEDTIME and UTCTIME.Joel Sing
2015-09-25Add initial regress tests for ASN.1 times.Joel Sing
2015-09-25In libtls connection error EOF has changed to connection close.Alexander Bluhm
Adapt syslogd tests.
2015-09-24fix command-line option to match what was actually committedDamien Miller
2015-09-24tame("xxx", NULL) and tame("xxx", {NULL}) are not the sameSebastien Marie
- change output of regress to reflect that - add test
2015-09-24refactor a bit regress tameSebastien Marie
- unit tests are functions in main.c - use test name in output - add grabbing stdout output of tests
2015-09-24regress test for CertificateFile; patch from Meghana Bhat via bz#2436Damien Miller
2015-09-23Sync with recent rt_use change.Martin Pieuchot
2015-09-21Trailing whitespace is significant when determining the width of a tagIngo Schwarze
in mdoc(7) .Bl -tag and man(7) .TP, but not in man(7) .IP. Quirk reported by Jan Stary <hans at stare dot cz> on ports@.
2015-09-18remove check for LD_BIND_NOW as kbind(2) is available on almost (all ?) archSebastien Marie
where LD_BIND_NOW was in use.
2015-09-16Repair.Daniel Dickman
2015-09-16Zap RANDFILE.Lawrence Teo
2015-09-14Remove the warning about children of .Vt blocks because actually,Ingo Schwarze
.Vt type global_variable No = Dv defined_constant ; is the best way to specify in the SYNOPSIS how a global variable is initialized in the rare case where that matters. Issue noticed by jmc@.
2015-09-14init a variable to avoid spurious failurePhilip Guenther
2015-09-14Check pselect, poll, and ppoll tooPhilip Guenther
2015-09-14Add regress for cancellation of wait/waitpid/wait3/wait4Philip Guenther
2015-09-14Update expected output to reflect changed sort orderPhilip Guenther
2015-09-14Test the exported strsignal() API, not the (now hidden) internal APIPhilip Guenther
noted by daniel@
2015-09-14Temporarily revive MD4 for MS CHAP support.Doug Hogan
2015-09-13Remove MD4 support from LibreSSL.Doug Hogan
MD4 should have been removed a long time ago. Also, RFC 6150 moved it to historic in 2011. Rides the major crank from removing SHA-0. Discussed with many including beck@, millert@, djm@, sthen@ ok jsing@, input + ok bcook@
2015-09-13Another style(9) grenade.Joel Sing
2015-09-13Remove SHA-0 support.Doug Hogan
SHA-0 was withdrawn shortly after publication 20 years ago and replaced with SHA-1. This will require a major crank. ok bcook@, jsing@
2015-09-13Revise regression test so that it works correctly with AES taking priorityJoel Sing
if hardware acceleration is available.
2015-09-13Rename __sysctl syscall to just sysctl, as the userland wrapper is no longerPhilip Guenther
necessary ok deraadt@ jsing@
2015-09-13Remove explicit NULL checks before *_free() calls and tidy some code.Joel Sing
2015-09-13Use ECDH_size() and do some other clean up.Joel Sing
2015-09-13remove e_os2.h includesBrent Cook
ok jsing@
2015-09-13Wrap long lines.Joel Sing
2015-09-13style(9) grenade.Joel Sing
2015-09-12Cleanup enginetest a bit.Brent Cook
It was the only thing preventing -Werror from building on some systems due to the unchecked asprintf's.
2015-09-11Adapt test to 50MB CAfile limit.Alexander Bluhm
2015-09-11fter fixing poll(2) semantics in dynamic TCP buffer size update,Alexander Bluhm
making netcat non-blocking and fixing ip6_forward() ICMP6 checksum, this test can be made more aggressive. Delete the path MTU route before sending TCP streams through the pf firewall. This checks that PMTU discovery works with outgoing interface MTU and router MTU. Test IPv4 and IPv6 protocols ICMP echo, UDP, TCP with pf nat-to, rdr-to, af-to, route-to, reply-to. Some af-to cases seem to be broken.
2015-09-11regress test that we do not allow a wildcard match for ".openbsd.org"Bob Beck
against a wildcard of "*.openbsd.org"
2015-09-11fix verify to allow for servername->nameBob Beck
ok jsing@
2015-09-11Check that there are no illegal spaces in the sendsyslog message.Alexander Bluhm
2015-09-11skip if running as root; many systems (inc OpenBSD) allowDamien Miller
root to ptrace arbitrary processes
2015-09-11try all supported key types here; bz#2455 reported by Jakub JelenDamien Miller
2015-09-10Grep for new error messages about tls_connect_socket. Libtls nowAlexander Bluhm
reports handshake failed. Make bufsize tests more reliable.
2015-09-10enable generic regress for tame(2)Sebastien Marie
2015-09-10convert tame(2) regress to new APISebastien Marie