Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-07-01 | Explicit TLS handshake with syslog client. | Alexander Bluhm | |
Add a new TLS handshake callback for incoming connections. This will allow to inspect the client certificate later. For now only print a debug message and check it in regress. with and OK henning@ | |||
2024-07-01 | use "lcd" to change directory before "lls" rather then "cd", since | Damien Miller | |
the directory we're trying to list is local. Spotted by Corinna Vinschen | |||
2024-06-28 | Link regress unp-write-closed to build. | Alexander Bluhm | |
2024-06-28 | Test writing to socket pair closed by the other side. This must | Alexander Bluhm | |
trigger EPIPE error. with and OK mvs@ | |||
2024-06-28 | Add more regress coverage for SSL_select_next_proto() | Theo Buehler | |
2024-06-23 | rust-openssl: switch from deprecated config to config.toml | Theo Buehler | |
2024-06-20 | Work around dbclient cipher and mac query bug. | Darren Tucker | |
Unlike earlier versions, recent Dropbear (at least v2024.85) requires a host arg when querying supported ciphers and macs via "-c/-m help". Earlier versions accept but do not require it, so always provide it. If these queries fail, skip the test with a warning. | |||
2024-06-20 | Remove dropbear key types not supported by current OpenSSH. | Darren Tucker | |
Allows subsequent test runs to work if OpenSSH is rebuilt w/out OpenSSL. | |||
2024-06-19 | Provide defaults for ciphers and macs if querying for them fails since | Darren Tucker | |
on some versions of Dropbear (at least v2024.85) "-m help" doesn't seem to work. Enable all supported pubkey algorithms in the server. | |||
2024-06-19 | Use ed25519 keys for kex tests since that's supported by OpenSSH even when | Darren Tucker | |
built without OpenSSL. Only test diffie-hellman kex if OpenSSH is compiled with support for it. | |||
2024-06-19 | Rework dropbear key setup to always generate ed25519 keys, other types | Darren Tucker | |
only if OpenSSH has support for the corresponding key type. | |||
2024-06-18 | Re-enable ssh-dss tests if ssh is compiled with DSA support | Darren Tucker | |
2024-06-18 | Stop using DSA in dropbear interop tests. | Anton Lindqvist | |
2024-06-17 | Add regress coverage for X509V3_get_d2i() | Theo Buehler | |
2024-06-16 | zap a stray space | Theo Buehler | |
2024-06-16 | same treatment for this test | Damien Miller | |
2024-06-16 | penalty test is still a bit racy | Damien Miller | |
2024-06-15 | openssl-ruby: prepare test for default ruby switch | Theo Buehler | |
2024-06-15 | crank up penalty timeouts so this should work on even the slowest of | Damien Miller | |
test builders | |||
2024-06-14 | Replace deprecated given/when and smartmatch operator in Perl scripts. | Alexander Bluhm | |
2024-06-14 | split the PerSourcePenalties test in two: one tests penalty enforcement | Damien Miller | |
but not penalty expiry, the other tests penalty expiry. This lets us disable the expiry testing in certain CI test environments. | |||
2024-06-14 | don't redirect stderr for ssh-keyscan we expect to succeed | Damien Miller | |
2024-06-14 | specify an algorithm for ssh-keyscan, otherwise it will make | Damien Miller | |
multiple attempts simultaneously and confuse the test | |||
2024-06-11 | fix PIDFILE handling, broken for SUDO=doas in last commit here | Damien Miller | |
2024-06-08 | Perl 5.38 permanently stops reading a file after it has seen EOF. | Alexander Bluhm | |
Call clearerr() to continously receive log file from remote machine while grepping for test patterns. | |||
2024-06-06 | regress test for PerSourcePenalties | Damien Miller | |
2024-06-06 | make sure logs are saved from sshd run via start_sshd | Damien Miller | |
2024-06-06 | simplify | Damien Miller | |
2024-06-06 | prepare for PerSourcePenalties being enabled by default in future | Damien Miller | |
2024-06-05 | make test struct const | Theo Buehler | |
2024-06-03 | Pledge violation messages are no longer accessible through dmesg since | Anton Lindqvist | |
the switch to uprintf. Attach a pseudo terminal in pledge regress in order to observe the syscall number that caused the pledge violation, shrug. | |||
2024-05-30 | Adjust hmac test for removal of static buffer from HMAC() | Theo Buehler | |
2024-05-29 | asn1object: zap trailing whitespace | Theo Buehler | |
2024-05-29 | Make it possible for the large OID test to fail | Theo Buehler | |
failed was set to 0 at the top of the function, so failure and success were indistinguishable. Move failed = 0 to the end so it can actually fail. | |||
2024-05-29 | Add regress coverage for some corner cases of i2d_ASN1_OBJECT() | Theo Buehler | |
2024-05-29 | Add regress coverage for i2d_ASN1_OBJECT() fixes | Theo Buehler | |
2024-05-28 | Test that invalid operations push the X509V3_R_UNSUPPORTED_OPTION error | Theo Buehler | |
2024-05-28 | Add regress coverage for X509V3_add1_i2d() | Theo Buehler | |
2024-05-25 | Eliminate last timegm() correctly this time | Theo Buehler | |
Also add a test case with a generalized time representing the moment one second past the 32-bit epoch wrap. | |||
2024-05-25 | Revert previous | Theo Buehler | |
It wasn't quite right, but I also think the test is bogus. | |||
2024-05-25 | asn1time: another use of gmtime was hiding here | Theo Buehler | |
2024-05-22 | Exercise EVP_chacha20_poly1305() with in-place decryption | Theo Buehler | |
This needs quite a bit of cleanup but let's have some tests rather than none. | |||
2024-05-22 | this test has been broken since 2014, and has been testing the same | Damien Miller | |
key exchange algorithm repeatedly instead of testing all of them. Spotted by nreilly AT blackberry.com in bz3692 Who broke the test? me. | |||
2024-05-19 | Add missing kex-names.c source file required since the ssh split. | Anton Lindqvist | |
2024-05-17 | allow overriding the sshd-session binary path | Damien Miller | |
2024-05-16 | Check that lower-case variants of UTF-16 surrogate escape sequences | Ingo Schwarze | |
are rejected with the correct error message. | |||
2024-05-16 | Improve coverage of edge cases for 3-byte UTF-8 sequences. | Ingo Schwarze | |
Coverage for 2-byte and 4-byte sequences was already reasonable. | |||
2024-05-16 | Add a complete suite of tests covering ASCII characters in UTF-8 spelling. | Ingo Schwarze | |
Most of this goes to nogroff.in rather than ascii.in for now because groff-1.23.0 is buggy as hell in this respect and i'm too lazy to debug the horrific function make_glyph_node() in the file groff/src/roff/troff/node.cpp right now. | |||
2024-05-15 | Add a complete set of tests for all C0 and C1 control characters. | Ingo Schwarze | |
This is particularly useful to make sure that man(1) does not let control characters sneak through to the output side, no matter how hard an input file tries to deceive it. | |||
2024-05-14 | fix a char signedness bug such that this testing code becomes able | Ingo Schwarze | |
to display the contents of databases containing UTF-8 strings on signed char architectures: for example on i386 and amd64, UTF-8 bytes are negative... |