Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-10-03 | adapt to the removal of ! | Otto Moerbeek | |
2015-10-02 | Add another invalid time, which is currently accepted. | Joel Sing | |
2015-09-30 | Fix a bug in the regress, and be much more pedantic about what is allowed | Bob Beck | |
per RFC 5380 in an X509. RFC 5280 states that all times before 2050 must be specified as a UTCtime, not a Generalized time, and all times after must be a UTC time. By extension this also means the smallest time allowed per RFC 5280 is 500101000000Z and the largest is 99991231235959Z.. | |||
2015-09-30 | implement new "prot_exec" tame(2) request: | Sebastien Marie | |
- by default, a tamed-program don't have the possibility to use PROT_EXEC for mmap(2) or mprotect(2) - for that, use the request "prot_exec" (that could be dropped later) initial idea from deraadt@ and kettenis@ "make complete sense" beck@ ok deraadt@ | |||
2015-09-29 | Add an rfc5280 test suite to test x509_cmp_time. | Bob Beck | |
Note some of these will yet fail with the current libcrypto as the current X509_cmp_time is not RFC5280 compliant ok jsing@ | |||
2015-09-29 | Fix sha2 regression test for libcrypto. | Doug Hogan | |
By default, "openssl sha" used SHA-0. However, it was possible to use the form "openssl sha -sha256" to run SHA-256 instead. The regression test used this form. Since we removed SHA-0 support, the regress tests should now call "openssl <digest>". ok guenther@, bcook@ | |||
2015-09-28 | make using tame path "/" work. | Sebastien Marie | |
and add a regress test for that. ok deraadt@ | |||
2015-09-28 | Sync with recent changes, local routes are now always UP. | Martin Pieuchot | |
2015-09-27 | check if openssl(1) actually works before proceeding | Brent Cook | |
It was possible for this test to pass even if the openssl command itself was missing. | |||
2015-09-27 | add a tame(2) regress for stat(2) and realpath(3) | Sebastien Marie | |
2015-09-25 | Add DER encoding/decoding coverage for ASN.1 GENERALIZEDTIME and UTCTIME. | Joel Sing | |
2015-09-25 | Add initial regress tests for ASN.1 times. | Joel Sing | |
2015-09-25 | In libtls connection error EOF has changed to connection close. | Alexander Bluhm | |
Adapt syslogd tests. | |||
2015-09-24 | fix command-line option to match what was actually committed | Damien Miller | |
2015-09-24 | tame("xxx", NULL) and tame("xxx", {NULL}) are not the same | Sebastien Marie | |
- change output of regress to reflect that - add test | |||
2015-09-24 | refactor a bit regress tame | Sebastien Marie | |
- unit tests are functions in main.c - use test name in output - add grabbing stdout output of tests | |||
2015-09-24 | regress test for CertificateFile; patch from Meghana Bhat via bz#2436 | Damien Miller | |
2015-09-23 | Sync with recent rt_use change. | Martin Pieuchot | |
2015-09-21 | Trailing whitespace is significant when determining the width of a tag | Ingo Schwarze | |
in mdoc(7) .Bl -tag and man(7) .TP, but not in man(7) .IP. Quirk reported by Jan Stary <hans at stare dot cz> on ports@. | |||
2015-09-18 | remove check for LD_BIND_NOW as kbind(2) is available on almost (all ?) arch | Sebastien Marie | |
where LD_BIND_NOW was in use. | |||
2015-09-16 | Repair. | Daniel Dickman | |
2015-09-16 | Zap RANDFILE. | Lawrence Teo | |
2015-09-14 | Remove the warning about children of .Vt blocks because actually, | Ingo Schwarze | |
.Vt type global_variable No = Dv defined_constant ; is the best way to specify in the SYNOPSIS how a global variable is initialized in the rare case where that matters. Issue noticed by jmc@. | |||
2015-09-14 | init a variable to avoid spurious failure | Philip Guenther | |
2015-09-14 | Check pselect, poll, and ppoll too | Philip Guenther | |
2015-09-14 | Add regress for cancellation of wait/waitpid/wait3/wait4 | Philip Guenther | |
2015-09-14 | Update expected output to reflect changed sort order | Philip Guenther | |
2015-09-14 | Test the exported strsignal() API, not the (now hidden) internal API | Philip Guenther | |
noted by daniel@ | |||
2015-09-14 | Temporarily revive MD4 for MS CHAP support. | Doug Hogan | |
2015-09-13 | Remove MD4 support from LibreSSL. | Doug Hogan | |
MD4 should have been removed a long time ago. Also, RFC 6150 moved it to historic in 2011. Rides the major crank from removing SHA-0. Discussed with many including beck@, millert@, djm@, sthen@ ok jsing@, input + ok bcook@ | |||
2015-09-13 | Another style(9) grenade. | Joel Sing | |
2015-09-13 | Remove SHA-0 support. | Doug Hogan | |
SHA-0 was withdrawn shortly after publication 20 years ago and replaced with SHA-1. This will require a major crank. ok bcook@, jsing@ | |||
2015-09-13 | Revise regression test so that it works correctly with AES taking priority | Joel Sing | |
if hardware acceleration is available. | |||
2015-09-13 | Rename __sysctl syscall to just sysctl, as the userland wrapper is no longer | Philip Guenther | |
necessary ok deraadt@ jsing@ | |||
2015-09-13 | Remove explicit NULL checks before *_free() calls and tidy some code. | Joel Sing | |
2015-09-13 | Use ECDH_size() and do some other clean up. | Joel Sing | |
2015-09-13 | remove e_os2.h includes | Brent Cook | |
ok jsing@ | |||
2015-09-13 | Wrap long lines. | Joel Sing | |
2015-09-13 | style(9) grenade. | Joel Sing | |
2015-09-12 | Cleanup enginetest a bit. | Brent Cook | |
It was the only thing preventing -Werror from building on some systems due to the unchecked asprintf's. | |||
2015-09-11 | Adapt test to 50MB CAfile limit. | Alexander Bluhm | |
2015-09-11 | fter fixing poll(2) semantics in dynamic TCP buffer size update, | Alexander Bluhm | |
making netcat non-blocking and fixing ip6_forward() ICMP6 checksum, this test can be made more aggressive. Delete the path MTU route before sending TCP streams through the pf firewall. This checks that PMTU discovery works with outgoing interface MTU and router MTU. Test IPv4 and IPv6 protocols ICMP echo, UDP, TCP with pf nat-to, rdr-to, af-to, route-to, reply-to. Some af-to cases seem to be broken. | |||
2015-09-11 | regress test that we do not allow a wildcard match for ".openbsd.org" | Bob Beck | |
against a wildcard of "*.openbsd.org" | |||
2015-09-11 | fix verify to allow for servername->name | Bob Beck | |
ok jsing@ | |||
2015-09-11 | Check that there are no illegal spaces in the sendsyslog message. | Alexander Bluhm | |
2015-09-11 | skip if running as root; many systems (inc OpenBSD) allow | Damien Miller | |
root to ptrace arbitrary processes | |||
2015-09-11 | try all supported key types here; bz#2455 reported by Jakub Jelen | Damien Miller | |
2015-09-10 | Grep for new error messages about tls_connect_socket. Libtls now | Alexander Bluhm | |
reports handshake failed. Make bufsize tests more reliable. | |||
2015-09-10 | enable generic regress for tame(2) | Sebastien Marie | |
2015-09-10 | convert tame(2) regress to new API | Sebastien Marie | |