wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
11729 commits 20 branches 302 tags 153 MiB
Commit graph

419 commits

Author SHA1 Message Date
Dr. Stephen Henson
784f155e0d Fix ECDH detection, add ECDH keyid test. 
Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 9fdbc9df76)
 2015-04-10 18:52:49 +01:00
Dr. Stephen Henson
8509128179 Fix OCSP tests. 
OCSP verification changes mean the OCSP tests now need -trusted_first

Reviewed-by: Matt Caswell <matt@openssl.org>
 2015-03-24 21:22:00 +00:00
Matt Caswell
b0b7232877 Add DTLS tests to make test 
Updated test/testssl script to include the new DTLS capability in ssltest.

Reviewed-by: Emilia Käsper <emilia@openssl.org>
(cherry picked from commit 3c381e5423)
 2015-03-20 12:09:24 +00:00
Matt Caswell
f747572547 Import evp_test.c from BoringSSL. Unfortunately we already have a file 
called evp_test.c, so I have called this one evp_extra_test.c

Reviewed-by: Emilia Käsper <emilia@openssl.org>

Conflicts:
	crypto/evp/Makefile
	test/Makefile
 2015-02-25 17:21:58 +00:00
Andy Polyakov
79e0285755 cms-test.pl: "localize" /dev/null even further [as follow-up to VMS]. 
Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 5da05a26f2)
 2015-02-02 15:29:10 +01:00
Richard Levitte
1d5668c258 VMS exit codes weren't handled well enough and were unclear 
Making a specific variable $failure_code and a bit of commenting in the
VMS section should help clear things up.

Reviewed-by: Andy Polyakov <appro@openssl.org>
(cherry picked from commit e00ab250c8)
 2015-01-30 14:47:37 +01:00
Matt Caswell
83975c80bb Re-align some comments after running the reformat script. 
This should be a one off operation (subsequent invokation of the
script should not move them)

This commit is for the 1.0.2 changes

Reviewed-by: Tim Hudson <tjh@openssl.org>
 2015-01-22 09:31:48 +00:00
Matt Caswell
ae5c8664e5 Run util/openssl-format-source -v -c . 
Reviewed-by: Tim Hudson <tjh@openssl.org>
 2015-01-22 09:31:38 +00:00
Tim Hudson
6977c7e2ba mark all block comments that need format preserving so that 
indent will not alter them when reformatting comments

(cherry picked from commit 1d97c84351)

Conflicts:
	crypto/bn/bn_lcl.h
	crypto/bn/bn_prime.c
	crypto/engine/eng_all.c
	crypto/rc4/rc4_utl.c
	crypto/sha/sha.h
	ssl/kssl.c
	ssl/t1_lib.c

Reviewed-by: Tim Hudson <tjh@openssl.org>
 2015-01-22 09:23:04 +00:00
Richard Levitte
cfb5d6c10a VMS fixups for 1.0.2 
Reviewed-by: Rich Salz <rsalz@openssl.org>
 2015-01-07 02:15:35 +01:00
Matt Caswell
a38ae11c48 Add OPENSSL_NO_ECDH guards 
Reviewed-by: Emilia Käsper <emilia@openssl.org>
(cherry picked from commit af6e2d51bf)
 2014-12-16 14:17:12 +00:00
Matt Caswell
5a4a949904 Fixed cms-test.pl for no-ec2m 
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
 2014-11-18 13:10:23 +00:00
Richard Levitte
ef8055cbb7 Add the constant time test to the VMS build and tests 
Reviewed-by: Tim Hudson <tjh@openssl.org>
 2014-09-25 08:07:54 +02:00
Emilia Kasper
9a9b0c0401 Constant-time utilities 
Pull constant-time methods out to a separate header, add tests.

Reviewed-by: Bodo Moeller <bodo@openssl.org>
(cherry picked from commit 5a3d21c058)

Conflicts:
	ssl/s3_cbc.c
	test/Makefile
 2014-08-28 16:26:01 +02:00
Dr. Stephen Henson
90a549ddfb Test SRP authentication ciphersuites. 
Reviewed-by: Matt Caswell <matt@openssl.org>
(cherry picked from commit 193c1c07165b0042abd217274a084b49459d4443)
 2014-08-09 00:09:01 +01:00
Dr. Stephen Henson
f284fc7cc3 Add test header to Makefile, update ordinals 
Reviewed-by: Tim Hudson <tjh@openssl.org>
 2014-07-20 20:50:38 +01:00
Richard Levitte
6ff73426c3 Make sure test/tests.com exit gracefully, even when openssl.exe wasn't 
properly built.
 2014-06-18 13:43:10 +02:00
Richard Levitte
9a6112d16a DCL doesn't do well with empty lines, or lines starting with # 2014-06-16 13:25:16 +02:00
Richard Levitte
9f8c183283 Update the VMS tests according to the latest unixly tests. 
Partly provided by Zoltan Arpadffy <arpadffy@polarhome.com>
 2014-06-14 16:58:11 +02:00
Dr. Stephen Henson
fa7a0efbac make update 2014-06-12 10:52:49 +01:00
Richard Levitte
995d08d104 Update the VMS build according to the latest unixly build. 
Partly provided by Zoltan Arpadffy <arpadffy@polarhome.com>
 2014-06-12 16:59:47 +02:00
Richard Levitte
ca422f3563 The 1.0.2 cms-test.pl had some changes that don't quite work on VMS... 2014-06-12 16:58:39 +02:00
Andy Polyakov
d85a772ec3 Enable multi-block support by default. 
(cherry picked from commit 77a27a5066)
 2014-06-11 20:41:46 +02:00
Mike Bland
2fddc5fc09 Create test/testutil.h for unit test helper macros 
Defines SETUP_TEST_FIXTURE and EXECUTE_TEST, and updates ssl/heartbeat_test.c
using these macros. SETUP_TEST_FIXTURE makes use of the new TEST_CASE_NAME
macro, defined to use __func__ or __FUNCTION__ on platforms that support those
symbols, or to use the file name and line number otherwise. This should fix
several reported build problems related to lack of C99 support.
 2014-06-10 19:24:46 +01:00
Kurt Roeckx
33e1a1d652 Link heartbeat_test with the static version of the libraries 
It's using an internal API that that might not be available in the shared
library.
 2014-06-09 00:12:37 +01:00
Mike Bland
2312a84ca1 Unit/regression test for TLS heartbeats. 
Regression test against CVE-2014-0160 (Heartbleed).

More info: http://mike-bland.com/tags/heartbleed.html

(based on commit 35cb55988b75573105eefd00d27d0138eebe40b1)
 2014-05-18 10:23:59 -04:00
Andy Polyakov
430c5ca02e test/Makefile: allow emulated test (e.g. under wine) [from master]. 
Submitted by: Roumen Petrov
 2014-03-06 14:09:58 +01:00
Ben Laurie
a808002bc3 Correctly test for no-ec. 
(cherry picked from commit d5605699a1)
 2013-10-01 14:01:19 +01:00
Dr. Stephen Henson
2fc368c111 Don't run ECDH CMS tests if EC disabled. 
(cherry picked from commit b85f8afe37)
 2013-10-01 14:01:18 +01:00
Dr. Stephen Henson
6ed3af7d50 Add X9.42 DH test. 
(cherry picked from commit bbc098ffb3)
 2013-10-01 14:01:18 +01:00
Dr. Stephen Henson
d037e0d30c New CMS tests. 
Add some ECDH CMS tests.
(cherry picked from commit 5cdc25a754)
 2013-10-01 14:01:18 +01:00
Dr. Stephen Henson
51cb950904 Add X9.42 DH certificate to S/MIME test 
(cherry picked from commit 75787fd833)
 2013-10-01 14:01:18 +01:00
Dr. Stephen Henson
4bfa88bb4c Scripts to recreate S/MIME test certificates. 
Add a script to generate keys and certificates for the S/MIME and CMS
tests.

Update certificates and add EC examples.
(cherry picked from commit a0957d5505)
 2013-10-01 14:01:18 +01:00
Dr. Stephen Henson
ea6bf26657 Add new CMS tests. 
Add new tests to cms-test.pl covering PSS and OAEP.
(cherry picked from commit 32b18e0338)
 2013-10-01 14:01:18 +01:00
Ben Laurie
63fe322160 Merge remote-tracking branch 'agl/1.0.2alpn' into agl-alpn 
Conflicts:
	ssl/ssl3.h
	ssl/t1_lib.c
 2013-10-01 12:20:02 +01:00
Ben Laurie
4f8a706dc7 Merge remote-tracking branch 'trevp/pemfix' into trev-pem-fix 2013-09-20 15:39:08 -07:00
Adam Langley
cb3cec4adf Add tests for ALPN functionality. 
Cherry-picked from a898936218.
 2013-09-13 11:27:26 -04:00
Trevor
e27711cfdd Trying cherrypick: 
Add support for arbitrary TLS extensions.

Contributed by Trevor Perrin.

Conflicts:

	CHANGES
	ssl/ssl.h
	ssl/ssltest.c
	test/testssl

Fix compilation due to #endif.

Cherrypicking more stuff.

Cleanup of custom extension stuff.

serverinfo rejects non-empty extensions.

Omit extension if no relevant serverinfo data.

Improve error-handling in serverinfo callback.

Cosmetic cleanups.

s_client documentation.

s_server documentation.

SSL_CTX_serverinfo documentation.

Cleaup -1 and NULL callback handling for custom extensions, add tests.

Cleanup ssl_rsa.c serverinfo code.

Whitespace cleanup.

Improve comments in ssl.h for serverinfo.

Whitespace.

Cosmetic cleanup.

Reject non-zero-len serverinfo extensions.

Whitespace.

Make it build.

Conflicts:

	test/testssl
 2013-07-03 11:53:30 +01:00
Ben Laurie
e887c4187e Backport single makefile from master. 2013-06-13 15:09:48 +01:00
Andy Polyakov
188ab7df98 cms-test.pl: make it work with not-so-latest perl. 
(cherry picked from commit 9c437e2fad)
 2013-02-14 16:39:06 +01:00
Adam Langley
0462eedf5e Fix for EXP-RC2-CBC-MD5 
MD5 should use little endian order. Fortunately the only ciphersuite
affected is EXP-RC2-CBC-MD5 (TLS_RSA_EXPORT_WITH_RC2_CBC_40_MD5) which
is a rarely used export grade ciphersuite.
(cherry picked from commit f306b87d76)
 2013-02-08 10:40:13 +01:00
Dr. Stephen Henson
75a8ff9263 make update 2013-01-15 16:24:07 +00:00
Dr. Stephen Henson
2b5e5c3d08 Revert incompatible OCSP_basic_verify changes. 
Make partial chain chekcing work with EE certificates only.
Remove unneeded -trust_other option from tocsp.
(Backport from HEAD)
 2012-12-26 14:12:09 +00:00
Dr. Stephen Henson
f1aec4dec3 fix typo 2012-12-21 18:33:53 +00:00
Dr. Stephen Henson
1c53a72f17 update/fix tocsp script (from HEAD) 2012-12-20 19:15:35 +00:00
Dr. Stephen Henson
45da1efcdb Backport X509 hostname, IP address and email checking code from HEAD. 2012-12-19 15:01:59 +00:00
Ben Laurie
d65b8b2162 Backport OCSP fixes. 2012-12-14 12:53:53 +00:00
Ben Laurie
5f4cf08864 Make verify return errors. 2012-12-13 15:49:15 +00:00
Ben Laurie
68d2cf51bc Reduce version skew: trivia (I hope). 2012-06-03 22:03:37 +00:00
Richard Levitte
784e2080df On OpenVMS, try sha256 and sha512 et al as well. 2012-03-01 21:29:58 +00:00