Manuel Pégourié-Gonnard
8e42ff6bde
Parse CRLs signed with RSASSA-PSS
2014-06-02 16:10:29 +02:00
Manuel Pégourié-Gonnard
9df5c96214
Fix dependencies
2014-06-02 16:10:29 +02:00
Manuel Pégourié-Gonnard
e76b750b69
Finish parsing RSASSA-PSS parameters
2014-06-02 16:10:29 +02:00
Manuel Pégourié-Gonnard
f346bab139
Start parsing RSASSA-PSS parameters
2014-06-02 16:10:29 +02:00
Manuel Pégourié-Gonnard
59a75d5b9d
Basic parsing of certs signed with RSASSA-PSS
2014-06-02 16:10:29 +02:00
Manuel Pégourié-Gonnard
db2a6c1a20
Avoid sleep 1 at server start in ssl-opt.sh
...
On my machine, brings running time from 135 to 45 seconds...
3 times faster :)
2014-05-29 12:15:40 +02:00
Manuel Pégourié-Gonnard
32f8f4d1a0
Catch SERVERQUIT timeout in ssl test scripts
2014-05-29 11:57:44 +02:00
Manuel Pégourié-Gonnard
bc3b16c7e2
Also use unique names for temp files
2014-05-29 11:57:43 +02:00
Manuel Pégourié-Gonnard
8066b81a54
Pick a "unique" port in SSL test scripts
2014-05-29 11:57:43 +02:00
Andre Heinecke
f7ced9232b
Fix symlink command for cross compiling
...
Check for the host system to determine which command should be used
to create a symlink. Otherwise symlinking will fail when cross
compiling polarssl on a unix host for windows.
2014-05-28 11:38:28 +02:00
Paul Bakker
1ebc0c592c
Fix typos
2014-05-22 15:47:58 +02:00
Paul Bakker
b5212b436f
Merge CCM cipher mode and ciphersuites
...
Conflicts:
library/ssl_tls.c
2014-05-22 15:30:31 +02:00
Manuel Pégourié-Gonnard
17cde5f8ef
Fix ssl-opt.sh for new ciphersuites order
2014-05-22 14:42:39 +02:00
Manuel Pégourié-Gonnard
2594859bc6
Add CCM suites to compat.sh (self-op only)
2014-05-22 14:36:02 +02:00
Paul Bakker
4cdb4d9bb7
X509 time-related tests depend on POLARSSL_HAVE_TIME
2014-05-22 14:22:59 +02:00
Manuel Pégourié-Gonnard
4a9dc2a474
Test memory a bit more often in all.sh
2014-05-22 13:52:53 +02:00
Manuel Pégourié-Gonnard
542eac5aba
Add tests for CCM via cipher layer
2014-05-20 17:26:16 +02:00
Manuel Pégourié-Gonnard
64bf996fd9
Add test vectors for Camellia-CCM
2014-05-14 14:10:35 +02:00
Manuel Pégourié-Gonnard
0f6b66dba1
CCM operations allow input == output
2014-05-14 14:10:35 +02:00
Manuel Pégourié-Gonnard
e8b8d01782
Use tighter buffers in CCM test suite
2014-05-07 12:13:13 +02:00
Manuel Pégourié-Gonnard
87df5ba0a1
Add test for length checks
2014-05-07 12:13:13 +02:00
Manuel Pégourié-Gonnard
ce77d55023
Implement ccm_auth_decrypt()
2014-05-07 12:13:13 +02:00
Manuel Pégourié-Gonnard
002323340a
Refactor to prepare for CCM decryption
2014-05-07 12:13:12 +02:00
Manuel Pégourié-Gonnard
9322e49037
Add NIST CAVS 11.0 test vectors for AES-CCM
...
Since there are 2160 test vectors fro encryption, which is a lot,
only the first one (out of ten) for each length quadruple was kept.
2014-05-07 12:13:12 +02:00
Manuel Pégourié-Gonnard
637eb3d31d
Add ccm_encrypt_and_tag()
2014-05-07 12:13:12 +02:00
Manuel Pégourié-Gonnard
9fe0d13e8d
Add ccm_init/free()
2014-05-06 12:12:45 +02:00
Manuel Pégourié-Gonnard
a6916fada8
Add (placeholder) CCM module
2014-05-06 11:28:09 +02:00
Paul Bakker
da13016d84
Prepped for 1.3.7 release
2014-05-01 14:27:19 +02:00
Markus Pfeiffer
a26a005acf
Make compilation on DragonFly work
2014-04-30 16:52:28 +02:00
Paul Bakker
2a024ac86a
Merge dependency fixes
2014-04-30 16:50:59 +02:00
Manuel Pégourié-Gonnard
827b6cee7f
Minor cleanups in test-ref-configs.pl
2014-04-30 16:40:23 +02:00
Manuel Pégourié-Gonnard
0bc1f23dfd
Adapt script and instructions for alt config.h
2014-04-30 16:40:22 +02:00
Manuel Pégourié-Gonnard
cef4ad2509
Adapt sources to configurable config.h name
2014-04-30 16:40:20 +02:00
Paul Bakker
f96f7b607a
On OpenBSD, use arc4random_buf() instead of rand() to prevent warnings
2014-04-30 16:02:38 +02:00
Paul Bakker
24f37ccaed
rsa_check_pubkey() now allows an E up to N
2014-04-30 13:43:51 +02:00
Paul Bakker
0f90d7d2b5
version_check_feature() added to check for compile-time options at run-time
2014-04-30 11:49:44 +02:00
Manuel Pégourié-Gonnard
3d41370645
Fix hash dependencies in X.509 tests
2014-04-29 15:29:41 +02:00
Manuel Pégourié-Gonnard
edc81ff8c2
Fix some more curve depends in X.509 tests
2014-04-29 15:10:40 +02:00
Manuel Pégourié-Gonnard
ec4d27398a
Fix curve dependencies in *keyusage tests
2014-04-29 15:06:41 +02:00
Paul Bakker
c73079a78c
Add debug_set_threshold() and thresholding of messages
2014-04-25 16:58:16 +02:00
Paul Bakker
92478c37a6
Debug module only outputs full lines instead of parts
2014-04-25 16:58:15 +02:00
Paul Bakker
eaebbd5eaa
debug_set_log_mode() added to determine raw or full logging
2014-04-25 16:58:14 +02:00
Paul Bakker
57ffa5570d
Add tests for debug_print_ret() and debug_print_buf().
2014-04-25 16:58:13 +02:00
Paul Bakker
2b34657b39
Updated Debug test suite data
2014-04-25 16:58:12 +02:00
Paul Bakker
1f69a93ab1
Move configs to 'configs/' and activate-config.pl should be called from root
2014-04-25 10:04:49 +02:00
Paul Bakker
8a0c0a9ed9
Check additional return values in some test cases
2014-04-17 17:24:23 +02:00
Paul Bakker
94b916c7b5
Split assignment and assert check into seperate lines in tests
2014-04-17 16:07:20 +02:00
Paul Bakker
dd0aae92e0
Replaced strcpy() with strncpy() in tests suites
2014-04-17 16:06:37 +02:00
Paul Bakker
b6487dade9
Fixed result for test case in test_suite_x509parse
2014-04-17 16:04:33 +02:00
Paul Bakker
784b04ff9a
Prepared for version 1.3.6
2014-04-11 15:33:59 +02:00
Paul Bakker
d8b0c5ef01
Fixed typo
2014-04-11 15:31:33 +02:00
Paul Bakker
52c5af7d2d
Merge support for verifying the extendedKeyUsage extension in X.509
2014-04-11 13:58:57 +02:00
Paul Bakker
1630058dde
Potential buffer overwrite in pem_write_buffer() fixed
...
Length indication when given a too small buffer was off.
Added regression test in test_suite_pem to detect this.
2014-04-11 13:58:05 +02:00
Manuel Pégourié-Gonnard
add05d7125
Fix some dependency declarations in X.509 tests
2014-04-11 11:12:40 +02:00
Manuel Pégourié-Gonnard
0408fd1fbb
Add extendedKeyUsage checking in SSL modules
2014-04-11 11:09:09 +02:00
Manuel Pégourié-Gonnard
7afb8a0dca
Add x509_crt_check_extended_key_usage()
2014-04-11 11:09:00 +02:00
Paul Bakker
5c986f5244
Make test suite checks dependent on POLARSSL_X509_CHECK_KEY_USAGE
2014-04-09 16:58:51 +02:00
Manuel Pégourié-Gonnard
a9db85df73
Add tests for keyUsage with client auth
2014-04-09 15:50:58 +02:00
Manuel Pégourié-Gonnard
99d4f19111
Add keyUsage checking for CAs
2014-04-09 15:50:58 +02:00
Manuel Pégourié-Gonnard
7f2a07d7b2
Check keyUsage in SSL client and server
2014-04-09 15:50:57 +02:00
Manuel Pégourié-Gonnard
603116c570
Add x509_crt_check_key_usage()
2014-04-09 15:50:57 +02:00
Paul Bakker
17b85cbd69
Merged additional tests and improved code coverage
...
Conflicts:
ChangeLog
2014-04-08 14:38:48 +02:00
Paul Bakker
0763a401a7
Merged support for the ALPN extension
2014-04-08 14:37:12 +02:00
Manuel Pégourié-Gonnard
563ad02663
Fix final report in compat.sh
...
Only affect what's printed, the exit code was already correct.
2014-04-08 11:56:35 +02:00
Manuel Pégourié-Gonnard
83d8c73c91
Disable ALPN by default
2014-04-07 13:24:21 +02:00
Manuel Pégourié-Gonnard
f6521de17b
Add ALPN tests to ssl-opt.sh
...
Only self-op for now, required peer versions are a bit high:
- OpenSSL 1.0.2-beta
- GnuTLS 3.2.0 (released 2013-05-10) (gnutls-cli only)
2014-04-07 12:42:04 +02:00
Manuel Pégourié-Gonnard
0148875cfc
Add tests and fix bugs for RSA-alt contexts
2014-04-04 17:46:46 +02:00
Manuel Pégourié-Gonnard
edb242fb2f
Minimally test md_process and associated wrappers
2014-04-04 16:42:44 +02:00
Manuel Pégourié-Gonnard
f8708ddc95
Also test shax_hmac_reset in test_suite_hmac_shax
2014-04-04 16:42:44 +02:00
Manuel Pégourié-Gonnard
9ce7e8414a
Add test for des_key_check_weak()
2014-04-04 16:42:44 +02:00
Manuel Pégourié-Gonnard
3fec220a33
Add test for dhm_parse_dhmfile
2014-04-04 16:42:44 +02:00
Manuel Pégourié-Gonnard
66dfc5a689
Add test for cipher_list()
2014-04-04 16:42:44 +02:00
Manuel Pégourié-Gonnard
f3013830cc
Tests for MD info functions
2014-04-04 16:42:44 +02:00
Manuel Pégourié-Gonnard
5819db1384
Test RIPEMD160 via MD layer more completely
2014-04-04 16:34:37 +02:00
Manuel Pégourié-Gonnard
59ba4e983b
Test generic md_hmac_reset()
2014-04-04 16:34:37 +02:00
Manuel Pégourié-Gonnard
58319e7f5c
Test mdX_hmax_reset() functions
2014-04-04 16:34:37 +02:00
Manuel Pégourié-Gonnard
7afdb88216
Test and fix x509_oid functions
2014-04-04 16:34:30 +02:00
Manuel Pégourié-Gonnard
6c1a73e061
Improve x509xrite_csr testing: extensions, version
2014-04-04 16:33:01 +02:00
Manuel Pégourié-Gonnard
c5ce83a3b8
Improve x509xrite_csr testing: extensions, ECDSA
2014-04-04 16:33:01 +02:00
Manuel Pégourié-Gonnard
913030c286
Enable SSLv2 testing if OPENSSL_CMD is set
2014-04-04 16:33:01 +02:00
Manuel Pégourié-Gonnard
2be0b5225e
Add selftest program to the list of tests
2014-04-04 16:33:01 +02:00
Manuel Pégourié-Gonnard
52a555cd7d
Also test backwards compat strerror() function
2014-04-04 16:33:00 +02:00
Manuel Pégourié-Gonnard
6c33a16dae
Add previously forgotten test files... oops!
2014-04-04 16:23:29 +02:00
Manuel Pégourié-Gonnard
7b30cfc5b0
x509_crt_info() list output cosmectics
2014-04-04 14:01:39 +02:00
Manuel Pégourié-Gonnard
f6f4ab40d3
Print extended key usage in x509_crt_info()
2014-04-04 14:01:39 +02:00
Manuel Pégourié-Gonnard
65c2ddc318
Print key_usage in x509_crt_info()
2014-04-04 14:01:39 +02:00
Manuel Pégourié-Gonnard
bce2b30855
Print subject alt name in x509_crt_info()
2014-04-04 14:01:39 +02:00
Manuel Pégourié-Gonnard
919f8f5829
Print NS Cert Type in x509_crt_info()
2014-04-04 14:01:39 +02:00
Manuel Pégourié-Gonnard
b28487db1f
Start printing extensions in x509_crt_info()
2014-04-04 14:01:39 +02:00
Manuel Pégourié-Gonnard
00d538f8f9
Disable renegotiation by default in example cli/srv
2014-03-31 11:03:06 +02:00
Manuel Pégourié-Gonnard
3895f5a344
all.sh: directly go for ASan build
2014-03-27 21:10:56 +01:00
Paul Bakker
96d5265315
Made ready for release 1.3.5
2014-03-26 16:55:50 +01:00
Manuel Pégourié-Gonnard
76b8ab73cd
ssl-opt.sh: address some robustness issues
2014-03-26 14:21:34 +01:00
Manuel Pégourié-Gonnard
c042cf0013
Fix broken tests due to changed error code
...
Introduced in 5246ee5c59
2014-03-26 14:12:20 +01:00
Paul Bakker
674e0b015a
Improvements to tests/Makefile when using shared library
2014-03-26 13:26:52 +01:00
Manuel Pégourié-Gonnard
e9a9a61c61
Deduplicate suites in compat.sh
2014-03-26 12:58:56 +01:00
Manuel Pégourié-Gonnard
8a3a3208a0
Update lcov test descriptions
2014-03-26 12:58:55 +01:00
Manuel Pégourié-Gonnard
12b8472f2f
Test against GnuTLS for every common ciphersuite
2014-03-26 12:58:54 +01:00
Manuel Pégourié-Gonnard
a1a9f9a639
Allow GnuTLS to be enabled via environment
2014-03-26 12:58:53 +01:00
Manuel Pégourié-Gonnard
e01af4cd37
Tune compat.sh and ssl-opt.sh error reporting
2014-03-26 12:58:48 +01:00
Manuel Pégourié-Gonnard
244c06ee02
Be more specific in ref-configs's compat.sh call
2014-03-26 12:58:47 +01:00
Manuel Pégourié-Gonnard
897a595406
Make all.sh more robust in some use cases
2014-03-26 12:58:47 +01:00
Paul Bakker
ad914954c2
Ignore .log files in tests
2014-03-26 12:57:13 +01:00
Paul Bakker
3f0be61a27
Merged support for parsing EC keys that use SpecifiedECDomain
2014-03-26 11:30:39 +01:00
Manuel Pégourié-Gonnard
80955ee075
all.sh: one test script to run them all
2014-03-20 09:38:39 +01:00
Manuel Pégourié-Gonnard
5de31ecf9c
Don't use dummy CA in compat.sh
2014-03-19 17:43:25 +01:00
Manuel Pégourié-Gonnard
a11a77f316
Add test for SpecifiedECDomain
2014-03-19 16:50:59 +01:00
Manuel Pégourié-Gonnard
3947d04b24
Fix too aggressive test for gnutls commands
2014-03-14 18:13:53 +01:00
Manuel Pégourié-Gonnard
417d46cdb0
Add --filter, --exclude to ssl-opt.sh
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
74faf3c400
Fix usage of environment variables for commands
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
84fd6877c6
Use ssl_client2 to terminate ssl_server2
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
ba0b8442f0
compat.sh and ssl-opt.sh cosmetics
...
- do not print '0 memory errors' when memcheck was not used
- add commands to the log files
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
9edba77c06
Add --exclude and --peers options to compat.sh
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
a4371447e4
Start adding GnuTLS client support to compat.sh
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
213c67adfc
Adapt to new ssl_client2 default
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
5b2d776d2a
GnuTLS in compat.sh: server-side
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
3eec60402f
Add memcheck support to compat.sh
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
de515ccdf5
Add tests for client w/o certificate
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
1b149ef746
Use no cert when none is required in compat.sh
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
f7a2690561
Make the openssl command configurable in sh tests
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
911622d84a
compat.sh: never kill our server
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
87ae3031ac
compat.sh: use file output (prep. for valgrind)
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
42d195acc1
compat.sh: don't start server if no ciphersuite
2014-03-14 08:41:02 +01:00
Manuel Pégourié-Gonnard
9dea8bd658
Minor compat.sh clean-up
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
c73339fd50
Add a --memcheck option to ssl-opt.sh
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
a3d808e140
Add tests for version bounds
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
0b6609b34c
Add tests for non-blocking I/O
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
db735f67b9
Add tests for sess-id-based resume with OpenSSL
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
fccd3255f9
Add tests for tickets with OpenSSL
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
677884d174
Add a few checks in ssl-opt.sh
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
a9062e96e7
shell scripts: clean up when exiting on signal
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
c1da664e89
Add test for SSLv2 ClientHello
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
96ea2f2557
Add tests for SNI
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
4145b89091
compat.sh cosmetics
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
720375e7ea
Add test descriptions for lcov
2014-03-14 08:41:01 +01:00
Manuel Pégourié-Gonnard
8520dac292
Add tests for auth_mode
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
da782c9458
compat.sh: better certificate verification testing
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
33a752e180
ssl-opt.sh: count and report failures
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
f8bdbb5d62
ssl-opt.sh: cosmetics
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
dbe1ee1988
Add tests for session ticket lifetime
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
c55a5b7d6f
Add tests for cache timeout
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
4c88345f19
Add test for ssl_cache max_entries
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
780d671f9d
Add tests for renegotiation
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
de14378a53
Add tests for max fragment length extension
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
f7c52014ec
Add basic tests for session resumption
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
eaadc508fb
New ssl-opt.sh test script
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
c57e98b5fa
compat.sh: terminate ssl_server2 cleanly
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
5f593f07f7
compat.sh: rm a useless sleep
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
95957717f3
compat.sh: source cosmetics
2014-03-14 08:41:00 +01:00
Manuel Pégourié-Gonnard
330e4111cb
compat.sh: factor code into run_client() function
2014-03-14 08:41:00 +01:00