summaryrefslogtreecommitdiff
path: root/regress
AgeCommit message (Collapse)Author
2020-07-27Add unveil test to lastcomm regress.rob
ok bluhm@
2020-07-26print the address of the "non-MAP_STACK stack", so it can be comparedTheo de Raadt
against failure reported in dmesg (hmm, is it time to delete those fault messages?)
2020-07-25Add stackpivot asm for ppc and ppc64 regress test.mortimer
Also tweak the pagefault test to work better on arches that do not modify the stack pointer on return.
2020-07-25With "%lx" new awk(1) prints 64 bit value also on 32 bit platforms.Alexander Bluhm
Replace it with Perl pack() to get hex representation of -1 on current platform. Make test pass again on i386.
2020-07-24If KTRACE environment is set, generate ktrace output also for clientAlexander Bluhm
and server. Together with the syslogd ktrace this helps debugging.
2020-07-24With TLS 1.3 error message has slightly changed if the cafile doesAlexander Bluhm
not contain the CA of the server certificate.
2020-07-24LibreSSL default TLS version has changed from 1.2 to 1.3. AdaptAlexander Bluhm
tests that use and check selected SSL version.
2020-07-23Fix a bug in PEM_X509_INFO_read_bio(3) that is very likely to causeIngo Schwarze
use-after-free and double-free issues in calling programs. The bug was introduced in SSLeay-0.6.0 released on June 21, 1996 and has been present since OpenBSD 2.4. I found the bug while documenting the function. The bug could bite in two ways that looked quite different from the perspective of the calling code: * If a stack was passed in that already contained some X509_INFO objects and an error occurred, all the objects passed in would be freed, but without removing the freed pointers from the stack, so the calling code would probable continue to access the freed pointers and eventually free them a second time. * If the input BIO contained at least two valid PEM objects followed by at least one PEM object causing an error, at least one freed pointer would be put onto the stack, even though the function would return NULL rather than the stack. But the calling code would still have a pointer to the stack, so it would be likely to access the new bogus pointers sooner or later. Fix all this by remembering the size of the input stack on entry and cutting it back to exactly that size when exiting due to an error, but no further. While here, do some related cleanup: * Garbage collect the automatic variables "error" and "i" which were only used at one single place each. * Use NULL rather than 0 for pointers. I like bugfixes that make the code four lines shorter, reduce the number of variables by one, reduce the number of brace-blocks by one, reduce the number if if-statements by one, and reduce the number of else-clauses by one. Tweaks and OK tb@.
2020-07-21trivial adjustment of the desired test resultsIngo Schwarze
after getting rid of the "copyless" crutch
2020-07-21adjust test framework to not require a ttyIngo Schwarze
2020-07-21Add pf config to block unencrypted pings.tobhe
2020-07-21Make test work with IPv6 addresses.tobhe
2020-07-20Improve MACHINE/MACHINE_ARCH access to actually testing architecturesTheo de Raadt
2020-07-20test _exit(2) rather than exit(3) [to keep things simpler], andTheo de Raadt
print the stack address [for comparison in dmesg post-fault]
2020-07-17Add test for '%k' (HostKeyAlias) TOKEN.Darren Tucker
2020-07-17Add tests for expansions on UserKnownHostsFile.Darren Tucker
2020-07-16Fix perl bugs that had me printing the wrong cert number for errorsBob Beck
2020-07-15Fix previous by calling the correct function.Darren Tucker
2020-07-15Update test to match recent change in match.cDarren Tucker
2020-07-15Use $OBJ to find key files. Fixes test when run on an obj directoryDarren Tucker
(on OpenBSD) or out of tree (in Portable).
2020-07-15The exit code from the perl matters hereBob Beck
2020-07-15Don't leak the X509_STOREBob Beck
2020-07-15Add certificate validation tests generated using the tools fromBob Beck
bettertls.com, and a verification suite to try each certificate in the same manner as the web based tests do using X509_verify. This includes the list of "known" failures today in our validaion code so we can move forward without moving back.
2020-07-14Enter the certs regress directory.Joel Sing
2020-07-14Add regress for X509_verify() using the new bundles.Joel Sing
A number of these tests are known to fail due to bugs/incorrect verification implementation.
2020-07-14Provide generated certificate bundles and roots for regress.Joel Sing
ok beck@ tb@
2020-07-14Provide tools to build certificate changes for verify regress.Joel Sing
This provides a script that generates a variety of certificate chains and assembles them into bundles containing various permutations, which can be used to test our X.509 verification. A Go program is included to verify each of these bundles. ok beck@ tb@
2020-07-14Force TLSv1.2 when testing SSLv3/TLSv1.2 cipher suites.Joel Sing
Otherwise we end up switching to TLSv1.3 and using a TLSv1.3 cipher suite.
2020-07-14Add a -tls1_2 option so we can force TLSv1.2 for testing.Joel Sing
2020-07-14getopt(3) returns an int so don't use a char to store its return value.Mark Kettenis
Makes the test work on architectures where char is unsigned. ok deraadt@, millert@
2020-07-09New regression tests for integral type conversionsIngo Schwarze
and for their modifiers, written from scratch.
2020-07-08New regression tests for character and string conversionsIngo Schwarze
and for their modifiers, written from scratch.
2020-07-07Remove temporary RSA keys/callbacks code.Joel Sing
This was removed from libssl a very long time ago...
2020-07-07Test TLSv1.3 ciphersuites now that TLS_method() supports TLSv1.3.Joel Sing
2020-07-07Add support for set -o pipefailJeremie Courreges-Anglas
With the pipefail option set, the exit status of a pipeline is 0 if all commands succeed, or the return status of the rightmost command that fails. This can help stronger error checking, but is not a silver bullet. For example, commands will exhibit a non-zero exit status if they're killed by a SIGPIPE when writing to a pipe. Yet pipefail was considered useful enough to be included in the next POSIX standard. This implementation remembers the value of the pipefail option when a pipeline is started, as described as option 1) in https://www.austingroupbugs.net/view.php?id=789#c4102 Requested by ajacoutot@, ok millert@
2020-07-06Add a few ${.CURDIR} to make the new RCS tests work with obj/ and obj@.Theo Buehler
ok stsp
2020-07-06Add support for timeconting in userland.Paul Irofti
This diff exposes parts of clock_gettime(2) and gettimeofday(2) to userland via libc eliberating processes from the need for a context switch everytime they want to count the passage of time. If a timecounter clock can be exposed to userland than it needs to set its tc_user member to a non-zero value. Tested with one or multiple counters per architecture. The timing data is shared through a pointer found in the new ELF auxiliary vector AUX_openbsd_timekeep containing timehands information that is frequently updated by the kernel. Timing differences between the last kernel update and the current time are adjusted in userland by the tc_get_timecount() function inside the MD usertc.c file. This permits a much more responsive environment, quite visible in browsers, office programs and gaming (apparently one is are able to fly in Minecraft now). Tested by robert@, sthen@, naddy@, kmos@, phessler@, and many others! OK from at least kettenis@, cheloha@, naddy@, sthen@
2020-07-06Make this build on powerpc64.Mark Kettenis
2020-07-06Make this build on powerpc/powerpc64. Only test on powerpc64 for nowMark Kettenis
since this is expected to fail on most 32-bit PowerPC CPUs given the lack of a proper permission bit.
2020-07-05Fix rpki-client regress test after -f removal.Theo Buehler
ok job
2020-07-04Add a missing circular_init() call in the TLS ordering test.Joel Sing
This makes the regress work correctly again - this was previously masked by the fact that tls_close() (and hence SSL_shutdown()) was draining the circular buffer, whereas now we're leaving data behind from a previous test, resulting in the ordering test failing.
2020-07-03Rename IN6_IFF_PRIVACY to IN6_IFF_TEMPORARY.Florian Obser
This is the name the other BSDs use for this, there is no reason to be different, the IPv6 RFCs call these addresses temporary, and some software in ports wants to use this as well. Most recently pointed out for firefox by landry. OK claudio, sthen
2020-07-03tlsexttest: pass message type to the extension functionsTheo Buehler
ok beck jsing
2020-07-03adjust alpn extension test to new argument orderTheo Buehler
2020-07-03adjust tlsexttest to new argument orderTheo Buehler
2020-06-29add a test covering the by now fixed regression during pipe closeanton
2020-06-26Provide an optimized implementation of ffs(3) in libc onChristian Weisgerber
aarch64/powerpc/powerpc64, making use of the count leading zeros instruction. Also add a brief regression test. ok deraadt@ kettenis@
2020-06-26Add an OpenRCS regression test for merging files which lack newlines.Stefan Sperling
2020-06-26regress test for ssh-add -d; ok dtucker@Damien Miller
2020-06-24add test for mux w/-Oproxy; ok djmMarkus Friedl
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 13:07:50 +0000