summaryrefslogtreecommitdiff
path: root/regress
AgeCommit message (Collapse)Author
2021-03-21Plug memory leak reported by Ilya ShipitsinTheo Buehler
Since r1.7, input in base64_decoding_test() is allocated unconditionally, so free it unconditionally.
2021-03-20typoTheo Buehler
2021-03-20Add new test-tls13-multiple-ccs-messages.pyTheo Buehler
This is a test that checks for NSS's CCS flood DoS CVE-2020-25648. The test script currently fails on LibreSSL and OpenSSL 1.1.1j because it sends invalid records with version 0x0300 instead of 0x0303. We have the ccs_seen logic corresponding to NSS's fix: https://hg.mozilla.org/projects/nss/rev/57bbefa793232586d27cee83e74411171e128361 but we do allow up to two CCS due to an interop issue with Fizz, so at least one of the tests will likey be broken once the record version is fixed.
2021-03-19add a test for misc.c:argv_split(), currently failsDamien Miller
2021-03-19splitDamien Miller
2021-03-17Update for DTLSv1.2 being enabled.Joel Sing
2021-03-17Update for DTLSv1.2 version handling.Joel Sing
2021-03-15add a check for system-version, since I tend to reverse comparisonsMarc Espie
2021-03-13Add TEST_SSH_MODULI_FILE variable to allow overriding of the moduli fileDarren Tucker
used during the test run.
2021-03-12INET6_NOPRIVACY is called AUTOCONF6TEMP now, missed during rename.Florian Obser
2021-03-11Check for the existence of p5-IO-Socket-SSL by checking for its SSL.pmTheo Buehler
instead of running pkg_add which may block due to its locking mechanism. Precise file to check for suggested by sthen ok kn deraadt on previous version
2021-03-10Revise TLS extension regress to match version handling changes.Joel Sing
2021-03-09Dedicated regress test for snmp(1) instead of semi-relying on snmpd(8)'sMartijn van Duren
regress for basic functionality. This regress covers quite a few usecases, but there's still plenty missing. feedback and OK bluhm@
2021-03-09Kernel drops fewer messages in sendsyslog(2), adapt syslogd(8)Alexander Bluhm
tests. Kernel stashes logs temporarily, test it. Fix some races in existing tests.
2021-03-05Fix regress tests after changes to tal.c, mft.c, and cert.c.Claudio Jeker
2021-03-05Test case for read-only array being not that read-only in ksh.Vadim Zhukov
okay tb@
2021-02-26zap spades of trailing whitespaceTheo Buehler
2021-02-26remove this KEX fuzzer; it's awkward to use and doesn't play niceDamien Miller
with popular fuzzing drivers like libfuzzer. AFAIK nobody has used it but me.
2021-02-25Update regress to match TLS versions change.Joel Sing
2021-02-25s/PubkeyAcceptedKeyTypes/PubkeyAcceptedAlgorithms/Damien Miller
2021-02-24Rename pubkeyacceptedkeytypes to pubkeyacceptedalgorithms in test toDarren Tucker
match change to config-dump output.
2021-02-23Make this test module aware so it passes with Go 1.16Theo Buehler
2021-02-23Make this test module aware so it passes with Go 1.16Theo Buehler
2021-02-21PATH does not include '.' anymore. Fix the runs test for that situation.Theo Buehler
2021-02-20Enable threads testOtto Moerbeek
2021-02-20A regress test to test concurrent exception handling in threadsOtto Moerbeek
2021-02-20Revise regress to match change in SSL{_CTX,}_get_{min,max}_proto_version().Joel Sing
2021-02-18mark test-inlabel-wildcard-cert-no-CA-client as an expected failureTheo Buehler
2021-02-17Make sure puttygen is new enough to successfully run the PuTTY interopDarren Tucker
tests, otherwise skip them.
2021-02-16Add x509 certificate validation regression testsjan
The validation tests are originaly createtd by Steffen Ullrich. OK tb@ No objection jsing@
2021-02-16Print AIA in rpki-client test utilityjob
2021-02-15Fix invalid config error in run-psk-fail.tobhe
2021-02-12A few more flag combo's to testOtto Moerbeek
2021-02-11More route-to fallout in pfctl regress.Alexander Bluhm
2021-02-10Add med test, this no longer fails in -currentClaudio Jeker
2021-02-09These regress tests expect coredumps to be written so run them withClaudio Jeker
ulimit -c unlimited. Also simplify the logic a bit as requested by bluhm@. OK bluhm@ deraadt@
2021-02-09These regress test expect coredumps as an effect of the test so runClaudio Jeker
the tests with ulimit -c unlimited to make sure coredumps are written. OK bluhm@ deraadt@
2021-02-08Update DTLS client hello due to ECC changes.Joel Sing
2021-02-08Also print the recently added caRepository URI alongside rpkiManifestClaudio Jeker
and rpkiNotify SIA.
2021-02-07route-to rules take ips, not interfaces with optional ips.David Gwynne
another gentle reminder by bluhm@ who pointed out i missed some
2021-02-07i missed a dup-to when tweaking route-to things to takes ips, not ifaces.David Gwynne
gentle reminded by bluhm@
2021-02-07Enable auto DHE and disable session tickets for some tests.Joel Sing
This allows us to drop the server messages that we intend on dropping.
2021-02-06Only hexdump packets/messages on higher debug levels.Joel Sing
2021-02-06Test reads and writes between the client and server.Joel Sing
2021-02-05Roll back the hostname->uname change in rev 1.10. It turns outDarren Tucker
uname -n doesn't do what we need for some platforms in portable, so we'll fix the original problem (that some other platforms don't have hostname at all) by providing wrapper function to implement it.
2021-02-05Setup two pair(4) and one lo(4) interface in different routingAlexander Bluhm
domains and with different interface MTU. Test that packet flow and TCP path MTU discovery works.
2021-02-05hostname is not specified by POSIX but uname -n is, so use the latter forDarren Tucker
portability. Patch from Geert Hendrickx via github PR#208.
2021-02-04it's fine to route-to to a table.David Gwynne
i think this should have been tweaked a while back.
2021-02-04route-to rules take ips now, not interfaces with optional ips.David Gwynne
reminded by bluhm@
2021-02-04route-to rules take ips, not interfaces with optional ips.David Gwynne
reminded by bluhm@