wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/test
History
Matt Caswell 32ec41539b Server side version negotiation rewrite 
This commit changes the way that we do server side protocol version
negotiation. Previously we had a whole set of code that had an "up front"
state machine dedicated to the negotiating the protocol version. This adds
significant complexity to the state machine. Historically the justification
for doing this was the support of SSLv2 which works quite differently to
SSLv3+. However, we have now removed support for SSLv2 so there is little
reason to maintain this complexity.

The one slight difficulty is that, although we no longer support SSLv2, we
do still support an SSLv3+ ClientHello in an SSLv2 backward compatible
ClientHello format. This is generally only used by legacy clients. This
commit adds support within the SSLv3 code for these legacy format
ClientHellos.

Server side version negotiation now works in much the same was as DTLS,
i.e. we introduce the concept of TLS_ANY_VERSION. If s->version is set to
that then when a ClientHello is received it will work out the most
appropriate version to respond with. Also, SSLv23_method and
SSLv23_server_method have been replaced with TLS_method and
TLS_server_method respectively. The old SSLv23* names still exist as
macros pointing at the new name, although they are deprecated.

Subsequent commits will look at client side version negotiation, as well of
removal of the old s23* code.

Reviewed-by: Kurt Roeckx <kurt@openssl.org>
2015-05-16 09:19:56 +01:00
..
ocsp-tests Fix OCSP checking. 2012-12-07 18:47:47 +00:00
smime-certs Add X9.42 DH certificate to S/MIME test 2013-08-05 16:23:22 +01:00
bctest bctest changes for Ultrix (don't return 1 from bctest, otherwise make aborts) 2001-05-03 08:50:27 +00:00
bctest.com Implement bc test strategy as submitted by Steven M. Schweda <sms@antinode.info>. 2010-11-23 02:12:07 +00:00
bftest.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
bntest.c Use BN_ULONG format. 2015-05-01 17:46:17 +01:00
bntest.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
CAss.cnf Use 2K RSA and SHA256 in tests 2015-04-20 07:23:04 -04:00
CAssdh.cnf
CAssdsa.cnf
CAssrsa.cnf
casttest.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
CAtsa.cnf Use 2K RSA and SHA256 in tests 2015-04-20 07:23:04 -04:00
clean_test.com * apps/makeapps.com: Forgot to end the check for /POINTER_SIZE=64=ARGV 2011-03-20 14:02:20 +00:00
cms-examples.pl Use "cont" consistently in cms-examples.pl 2008-05-01 23:30:06 +00:00
cms-test.pl Fix ECDH detection, add ECDH keyid test. 2015-04-10 18:51:52 +01:00
constant_time_test.c Identify and move OpenSSL internal header files 2015-05-14 15:13:49 +02:00
destest.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
dhtest.c more OSSL_NELEM cases 2015-05-04 13:03:49 +01:00
dsatest.c free NULL cleanup 7 2015-04-30 21:37:06 -04:00
dummytest.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ecdhtest.c free null cleanup finale 2015-05-01 10:02:07 -04:00
ecdsatest.c Use safer sizeof variant in malloc 2015-05-04 15:00:13 -04:00
ectest.c Use p==NULL not !p (in if statements, mainly) 2015-05-11 10:06:38 -04:00
enginetest.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
evp_extra_test.c free null cleanup finale 2015-05-01 10:02:07 -04:00
evp_test.c Use "==0" instead of "!strcmp" etc 2015-05-06 22:37:53 -04:00
evptests.txt Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
exptest.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
gost2814789test.c more OSSL_NELEM cases 2015-05-04 13:03:49 +01:00
heartbeat_test.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
hmactest.c Code style: space after 'if' 2015-04-16 13:44:59 -04:00
ideatest.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
igetest.c more OSSL_NELEM cases 2015-05-04 13:03:49 +01:00
jpaketest.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
Makefile Adjust unixly mk1mf after introduction of tkey 2015-05-14 15:55:59 +02:00
maketests.com Catch up the VMS build. 2015-03-05 18:20:06 +01:00
md2test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
md4test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
md5test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
mdc2test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
methtest.c More comment realignment 2015-01-22 09:20:10 +00:00
P1ss.cnf Use 2K RSA and SHA256 in tests 2015-04-20 07:23:04 -04:00
P2ss.cnf Use 2K RSA and SHA256 in tests 2015-04-20 07:23:04 -04:00
p5_crpt2_test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
pkcs7-1.pem
pkcs7.pem
pkits-test.pl detect and use older PKITS data 2011-12-11 16:39:25 +00:00
r160test.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
randtest.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
rc2test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
rc4test.c memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
rc5test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
rmdtest.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
rsa_test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
serverinfo.pem Require ServerInfo PEMs to be named "BEGIN SERVERINFO FOR"... 2013-09-13 19:32:55 -07:00
sha1test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
sha256t.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
sha512t.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
smcont.txt Add extensive PCKS7 and CMS consistency test script. 2008-03-18 14:37:59 +00:00
srptest.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
ssltest.c Server side version negotiation rewrite 2015-05-16 09:19:56 +01:00
Sssdsa.cnf
Sssrsa.cnf
tcrl test script cleanup 2015-04-10 10:06:17 -04:00
tcrl.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
test.cnf Use 2K RSA and SHA256 in tests 2015-04-20 07:23:04 -04:00
test_aesni test_aesni: harmonize with AES-NI support at EVP layer. 2012-07-15 13:38:51 +00:00
test_padlock Update test/test_padlock script. 2009-04-27 19:04:23 +00:00
test_t4 Add support for SPARC T4 DES opcode. 2013-03-31 14:32:05 +02:00
testca SunOS non-posix shells do not grok export name=value 2015-04-17 01:33:51 -04:00
testca.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
testcrl.pem
testdsa.pem Add private/public key conversion tests 2015-03-29 03:26:12 +01:00
testdsapub.pem Add private/public key conversion tests 2015-03-29 03:26:12 +01:00
testec-p256.pem Add private/public key conversion tests 2015-03-29 03:26:12 +01:00
testecpub-p256.pem Add private/public key conversion tests 2015-03-29 03:26:12 +01:00
testenc Remove the special list-xxxx commands 2015-04-26 10:31:48 -04:00
testenc.com Remove the special list-xxxx commands 2015-04-26 10:31:48 -04:00
testgen test script cleanup 2015-04-10 10:06:17 -04:00
testgen.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
testp7.pem
testreq2.pem
testrsa.pem
testrsapub.pem Add private/public key conversion tests 2015-03-29 03:26:12 +01:00
tests.com Catch up the VMS build. 2015-03-05 18:20:06 +01:00
testsid.pem Remove SSLv2 support 2014-12-04 11:55:03 +01:00
testss Add a -CAserial argument for signing the user cert request 2015-05-06 19:43:59 +02:00
testss.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
testssl consistent test-start logging 2015-04-08 12:28:15 -04:00
testssl.com Remove SSLv2 support 2014-12-04 11:55:03 +01:00
testsslproxy Added restrictions on the use of proxy certificates, as they may pose 2005-04-09 16:07:12 +00:00
testtsa test script cleanup 2015-04-10 10:06:17 -04:00
testtsa.com Drop CA.sh for CA.pl 2015-04-08 14:07:39 -04:00
testutil.c more OSSL_NELEM cases 2015-05-04 13:03:49 +01:00
testutil.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
testx509.pem
times Updates from 1.0.0-stable branch. 2009-04-20 11:33:12 +00:00
tkey test script cleanup 2015-04-10 10:06:17 -04:00
tocsp consistent test-start logging 2015-04-08 12:28:15 -04:00
tocsp.com VMS adjustments: 2015-01-30 14:43:57 +01:00
tpkcs7 test script cleanup 2015-04-10 10:06:17 -04:00
tpkcs7.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
tpkcs7d test script cleanup 2015-04-10 10:06:17 -04:00
tpkcs7d.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
treq test script cleanup 2015-04-10 10:06:17 -04:00
treq.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
trsa.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
tsid test script cleanup 2015-04-10 10:06:17 -04:00
tsid.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
tverify.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
tx509 test script cleanup 2015-04-10 10:06:17 -04:00
tx509.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
Uss.cnf Use 2K RSA and SHA256 in tests 2015-04-20 07:23:04 -04:00
v3-cert1.pem
v3-cert2.pem
v3nametest.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00
VMSca-response.1
VMSca-response.2
wp_test.c Stop symlinking, move files to intended directory 2015-03-31 20:16:01 +02:00