summaryrefslogtreecommitdiff
path: root/regress
AgeCommit message (Collapse)Author
2020-09-16Put all signal tests under a single directory.Martin Pieuchot
This allows to run them all with a single command. Discussed with bluhm@
2019-05-13Test the interaction of signals with multiple posix threads. ItAlexander Bluhm
covers blocking with signal mask, killing process or thread, invoking handler or waiting for signal.
2020-09-15Error messages for LibreSSL have changed when switching to TLS 1.3.Alexander Bluhm
2020-09-15Null cipher test works only with TLS 1.2.Alexander Bluhm
2020-09-15Make sure variable assignments are followed by '\', otherwisetobhe
make(1) ignores them.
2020-09-15add tests for PKG_CONFIG_SYSTEM_INCLUDE_PATHJasper Lievisse Adriaanse
2020-09-15Test botan TLS client with libressl, openssl, openssl11 server.Alexander Bluhm
2020-09-14add support for '&' and '|' operators in btrace scriptsJasper Lievisse Adriaanse
feedback from otto@ ok mpi@ kn@ semarie@
2020-09-14Use more specific regex for ktrace to avoid false positives.Alexander Bluhm
2020-09-14Change the known output to be the expected output, so that weBob Beck
no longer ignore the expected failures from the legacy name constraints validation, and will have a regress failure if we regress.
2020-09-14Use a fixed validation time in these tests so we neverBob Beck
have to re-generate these certificates and this should just keep working even if the certs get old
2020-09-14Connect a client to a server. Both can be current libressl, orAlexander Bluhm
openssl 1.0.2, or openssl 1.1. Pin client or server to a fixed TLS version number. Incompatible versions must fail. Check that client and server have used correct version by grepping in their session print out.
2020-09-13Add regress for SSL_{CTX_,}set_ciphersuites().Joel Sing
2020-09-13Adapt regress to IFS splitting correction (eval.c -r1.66)Theo Buehler
From Martijn Dekker
2020-09-13Add new x509 certificate chain validator in x509_verify.cBob Beck
The new validator finds multiple validated chains to handle the modern PKI cases which may frequently have multiple paths via different intermediates to different roots. It is loosely based on golang's x509 validator This includes integration so that the new validator can be used via X509_verify_cert() as well as a new api x509_verify() which will return multiple chains (similar to go). The new validator is not enabled by default with this commit, this will be changed in a follow on commit. The new public API is not yet exposed, and will be finalized and exposed with a man page and a library minor bump later. ok tb@ inoguchi@ jsing@
2020-09-13More tests for policy matching via dstid.tobhe
2020-09-13Test for failure on dstid mismatch.tobhe
2020-09-13Add run-psk-fail test to check for failure on psk mismatch.tobhe
2020-09-13Refactor config setup boilerplate to allow asymmetric test setups.tobhe
Return _ret from TEST_FLOWS to allow known-negative tests.
2020-09-12If CPU does not support AES-NI, LibreSSL TLS 1.3 client prefersAlexander Bluhm
chacha-poly over aes-gcm. Expect both fallbacks for non 1.3 ciphers.
2020-09-12remove unused include that breaks regressBob Beck
2020-09-11Enable cert and cipher interop tests. cert just works. cipher hasAlexander Bluhm
been fixed to work with libressl TLS 1.3. Both libressl and openssl11 replace obsolete TLS 1.2 ciphers with AEAD-AES256-GCM-SHA384 or TLS_AES_256_GCM_SHA384 in TLS 1.3 respectively. The test expects that now. Currently GOST does not work with libressl and TLS 1.3 and is disabled.
2020-09-11Add x509_constraints.c - a new implementation of x509 name constraints, withBob Beck
regression tests. The use of the new name constraints is not yet activated in x509_vfy.c and will be activated in a follow on commit ok jsing@
2020-09-10Refactor initial cleanup.tobhe
2020-09-10Enable test-tls13-large-number-of-extensions.pyTheo Buehler
Skip sending an empty ECPF extension for now: we don't accept it since according to RFC 4492 and 8422 it needs to advertise uncompressed point formats.
2020-09-09Element next-line scopes can nest. Consequently, even when closingIngo Schwarze
one element next-line scope, the MAN_ELINE flag must not yet be cleared if the parent macro is another element macro having next-line scope, or an assertion failure is caused if all this is wrapped in another macro that has block next-line scope, for example .TP. Bug found in an afl run performed by Jan Schreiber <jes at posteo dot de>.
2020-09-09adapt to SSH_SK_VERSION_MAJOR crankDamien Miller
2020-09-07Add 'run-ping-fail' subtest. Make sure to clean up left over statetobhe
before running tests.
2020-09-03oops, i tripped over $Mdocdate$ again; so sync the date after the commitIngo Schwarze
2020-09-03Fix two issues with .po (page offset) formatting:Ingo Schwarze
1. Truncate excessive offsets to a width reasonable in the context of manual pages instead of printing excessively long lines and sometimes causing assertion failures; found in an afl run performed by Jan Schreiber <jes at posteo dot de>. 2. Remember both the requested and the applied page offset; otherwise, subtracting an excessive width, then adding it again, would end up with an incorrectly large offset. While here, simplify the code by reverting the previous offset up front, and also add some comments to make the general ideas easier to understand.
2020-09-03If .ti had an excessive argument, using it was attempted, in someIngo Schwarze
cases resulting in an assertion failure. Instead, truncate the temporary indent to a width reasonable in a manual page. I found the issue in an afl run that was performed by Jan Schreiber <jes at posteo dot de>.
2020-09-02Do not indent by SIZE_MAX/2 when .ce occurs inside explicit no-fill mode.Ingo Schwarze
While here, drop two unused arguments from the function term_field(); the related work was already done by term_fill() before this commit. I found the bug in an afl run that was performed by Jan Schreiber <jes at posteo dot de>.
2020-09-01Ignore unreasonably large spacing modifiers in tbl layouts.Ingo Schwarze
Jan Schreiber <jes at posteo dot de> ran afl on mandoc and it turned out mandoc tried to use spacing modifiers so large that they would trigger assertion failures in term_ascii.c, function locale_advance().
2020-08-30Allow multiple global options.tobhe
2020-08-30Add regress test case for make/varmodifiers.c r1.48Theo Buehler
(Fix :S with anchors and replacement)
2020-08-29Add 'enforcesingleikesa' test.tobhe
2020-08-28Ensure that address/mask mismatches are flagged at config-check time.Darren Tucker
ok djm@
2020-08-27adapt to API changesDamien Miller
2020-08-27dummy firmware needs to match API version numner crank (forDamien Miller
verify-required resident keys) even though it doesn't implement this feature
2020-08-21Fix rpki-client regressTheo Buehler
The fix for the misuse of EVP_PKEY_cmp() (rpki-client/cert.c -r1.16) came with an API change. ta_parse() will now throw an error if fed a NULL pubkey. This in turn broke a regress test. Fix this by parsing the pubkey out of the appropriate TAL to let ta_parse() verify that it matches the pubkey in the first level certificate. Discussed with tobhe, benno and claudio
2020-08-18Fix bug in the select() portion of the test, the timeout was ignored.Todd C. Miller
The select() results are now consistent with what poll() returns.
2020-08-17Fix append mode so it always writes to the end and expand regress.Todd C. Miller
OK deraadt@ martijn@
2020-08-17Also print a list of missing scripts in summaryTheo Buehler
2020-08-17Avoid test failures due to outdated packagesTheo Buehler
Indicate missing test scripts prominently in the result but do not count them as an error.
2020-08-15enable jsing's zero content type testTheo Buehler
2020-08-11I accidentally zeored out a few bytes of the TLSv1.0 session ID.Theo Buehler
Restore them to their previous values.
2020-08-09Update TLS versions to match TLSv1.3 being enabled for TLS_method().Joel Sing
2020-08-09Fix regress test so that it exits non-zero for failure cases.Joel Sing
2020-08-09Update golden values to match P-521 being enabled by default in the client.Joel Sing
Diff from tb@
2020-08-09Update golden values to match P-521 being enabled by default in the client.Joel Sing
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-04 20:51:54 +0000