Manuel Pégourié-Gonnard
|
99d4f19111
|
Add keyUsage checking for CAs
|
2014-04-09 15:50:58 +02:00 |
|
Manuel Pégourié-Gonnard
|
7f2a07d7b2
|
Check keyUsage in SSL client and server
|
2014-04-09 15:50:57 +02:00 |
|
Manuel Pégourié-Gonnard
|
603116c570
|
Add x509_crt_check_key_usage()
|
2014-04-09 15:50:57 +02:00 |
|
Paul Bakker
|
17b85cbd69
|
Merged additional tests and improved code coverage
Conflicts:
ChangeLog
|
2014-04-08 14:38:48 +02:00 |
|
Paul Bakker
|
0763a401a7
|
Merged support for the ALPN extension
|
2014-04-08 14:37:12 +02:00 |
|
Manuel Pégourié-Gonnard
|
563ad02663
|
Fix final report in compat.sh
Only affect what's printed, the exit code was already correct.
|
2014-04-08 11:56:35 +02:00 |
|
Manuel Pégourié-Gonnard
|
83d8c73c91
|
Disable ALPN by default
|
2014-04-07 13:24:21 +02:00 |
|
Manuel Pégourié-Gonnard
|
f6521de17b
|
Add ALPN tests to ssl-opt.sh
Only self-op for now, required peer versions are a bit high:
- OpenSSL 1.0.2-beta
- GnuTLS 3.2.0 (released 2013-05-10) (gnutls-cli only)
|
2014-04-07 12:42:04 +02:00 |
|
Manuel Pégourié-Gonnard
|
0148875cfc
|
Add tests and fix bugs for RSA-alt contexts
|
2014-04-04 17:46:46 +02:00 |
|
Manuel Pégourié-Gonnard
|
edb242fb2f
|
Minimally test md_process and associated wrappers
|
2014-04-04 16:42:44 +02:00 |
|
Manuel Pégourié-Gonnard
|
f8708ddc95
|
Also test shax_hmac_reset in test_suite_hmac_shax
|
2014-04-04 16:42:44 +02:00 |
|
Manuel Pégourié-Gonnard
|
9ce7e8414a
|
Add test for des_key_check_weak()
|
2014-04-04 16:42:44 +02:00 |
|
Manuel Pégourié-Gonnard
|
3fec220a33
|
Add test for dhm_parse_dhmfile
|
2014-04-04 16:42:44 +02:00 |
|
Manuel Pégourié-Gonnard
|
66dfc5a689
|
Add test for cipher_list()
|
2014-04-04 16:42:44 +02:00 |
|
Manuel Pégourié-Gonnard
|
f3013830cc
|
Tests for MD info functions
|
2014-04-04 16:42:44 +02:00 |
|
Manuel Pégourié-Gonnard
|
5819db1384
|
Test RIPEMD160 via MD layer more completely
|
2014-04-04 16:34:37 +02:00 |
|
Manuel Pégourié-Gonnard
|
59ba4e983b
|
Test generic md_hmac_reset()
|
2014-04-04 16:34:37 +02:00 |
|
Manuel Pégourié-Gonnard
|
58319e7f5c
|
Test mdX_hmax_reset() functions
|
2014-04-04 16:34:37 +02:00 |
|
Manuel Pégourié-Gonnard
|
7afdb88216
|
Test and fix x509_oid functions
|
2014-04-04 16:34:30 +02:00 |
|
Manuel Pégourié-Gonnard
|
6c1a73e061
|
Improve x509xrite_csr testing: extensions, version
|
2014-04-04 16:33:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
c5ce83a3b8
|
Improve x509xrite_csr testing: extensions, ECDSA
|
2014-04-04 16:33:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
913030c286
|
Enable SSLv2 testing if OPENSSL_CMD is set
|
2014-04-04 16:33:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
2be0b5225e
|
Add selftest program to the list of tests
|
2014-04-04 16:33:01 +02:00 |
|
Manuel Pégourié-Gonnard
|
52a555cd7d
|
Also test backwards compat strerror() function
|
2014-04-04 16:33:00 +02:00 |
|
Manuel Pégourié-Gonnard
|
6c33a16dae
|
Add previously forgotten test files... oops!
|
2014-04-04 16:23:29 +02:00 |
|
Manuel Pégourié-Gonnard
|
7b30cfc5b0
|
x509_crt_info() list output cosmectics
|
2014-04-04 14:01:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
f6f4ab40d3
|
Print extended key usage in x509_crt_info()
|
2014-04-04 14:01:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
65c2ddc318
|
Print key_usage in x509_crt_info()
|
2014-04-04 14:01:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
bce2b30855
|
Print subject alt name in x509_crt_info()
|
2014-04-04 14:01:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
919f8f5829
|
Print NS Cert Type in x509_crt_info()
|
2014-04-04 14:01:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
b28487db1f
|
Start printing extensions in x509_crt_info()
|
2014-04-04 14:01:39 +02:00 |
|
Manuel Pégourié-Gonnard
|
00d538f8f9
|
Disable renegotiation by default in example cli/srv
|
2014-03-31 11:03:06 +02:00 |
|
Manuel Pégourié-Gonnard
|
3895f5a344
|
all.sh: directly go for ASan build
|
2014-03-27 21:10:56 +01:00 |
|
Paul Bakker
|
96d5265315
|
Made ready for release 1.3.5
|
2014-03-26 16:55:50 +01:00 |
|
Manuel Pégourié-Gonnard
|
76b8ab73cd
|
ssl-opt.sh: address some robustness issues
|
2014-03-26 14:21:34 +01:00 |
|
Manuel Pégourié-Gonnard
|
c042cf0013
|
Fix broken tests due to changed error code
Introduced in 5246ee5c59
|
2014-03-26 14:12:20 +01:00 |
|
Paul Bakker
|
674e0b015a
|
Improvements to tests/Makefile when using shared library
|
2014-03-26 13:26:52 +01:00 |
|
Manuel Pégourié-Gonnard
|
e9a9a61c61
|
Deduplicate suites in compat.sh
|
2014-03-26 12:58:56 +01:00 |
|
Manuel Pégourié-Gonnard
|
8a3a3208a0
|
Update lcov test descriptions
|
2014-03-26 12:58:55 +01:00 |
|
Manuel Pégourié-Gonnard
|
12b8472f2f
|
Test against GnuTLS for every common ciphersuite
|
2014-03-26 12:58:54 +01:00 |
|
Manuel Pégourié-Gonnard
|
a1a9f9a639
|
Allow GnuTLS to be enabled via environment
|
2014-03-26 12:58:53 +01:00 |
|
Manuel Pégourié-Gonnard
|
e01af4cd37
|
Tune compat.sh and ssl-opt.sh error reporting
|
2014-03-26 12:58:48 +01:00 |
|
Manuel Pégourié-Gonnard
|
244c06ee02
|
Be more specific in ref-configs's compat.sh call
|
2014-03-26 12:58:47 +01:00 |
|
Manuel Pégourié-Gonnard
|
897a595406
|
Make all.sh more robust in some use cases
|
2014-03-26 12:58:47 +01:00 |
|
Paul Bakker
|
ad914954c2
|
Ignore .log files in tests
|
2014-03-26 12:57:13 +01:00 |
|
Paul Bakker
|
3f0be61a27
|
Merged support for parsing EC keys that use SpecifiedECDomain
|
2014-03-26 11:30:39 +01:00 |
|
Manuel Pégourié-Gonnard
|
80955ee075
|
all.sh: one test script to run them all
|
2014-03-20 09:38:39 +01:00 |
|
Manuel Pégourié-Gonnard
|
5de31ecf9c
|
Don't use dummy CA in compat.sh
|
2014-03-19 17:43:25 +01:00 |
|
Manuel Pégourié-Gonnard
|
a11a77f316
|
Add test for SpecifiedECDomain
|
2014-03-19 16:50:59 +01:00 |
|
Manuel Pégourié-Gonnard
|
3947d04b24
|
Fix too aggressive test for gnutls commands
|
2014-03-14 18:13:53 +01:00 |
|
Manuel Pégourié-Gonnard
|
417d46cdb0
|
Add --filter, --exclude to ssl-opt.sh
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
74faf3c400
|
Fix usage of environment variables for commands
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
84fd6877c6
|
Use ssl_client2 to terminate ssl_server2
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
ba0b8442f0
|
compat.sh and ssl-opt.sh cosmetics
- do not print '0 memory errors' when memcheck was not used
- add commands to the log files
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
9edba77c06
|
Add --exclude and --peers options to compat.sh
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
a4371447e4
|
Start adding GnuTLS client support to compat.sh
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
213c67adfc
|
Adapt to new ssl_client2 default
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
5b2d776d2a
|
GnuTLS in compat.sh: server-side
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
3eec60402f
|
Add memcheck support to compat.sh
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
de515ccdf5
|
Add tests for client w/o certificate
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
1b149ef746
|
Use no cert when none is required in compat.sh
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
f7a2690561
|
Make the openssl command configurable in sh tests
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
911622d84a
|
compat.sh: never kill our server
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
87ae3031ac
|
compat.sh: use file output (prep. for valgrind)
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
42d195acc1
|
compat.sh: don't start server if no ciphersuite
|
2014-03-14 08:41:02 +01:00 |
|
Manuel Pégourié-Gonnard
|
9dea8bd658
|
Minor compat.sh clean-up
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
c73339fd50
|
Add a --memcheck option to ssl-opt.sh
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
a3d808e140
|
Add tests for version bounds
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
0b6609b34c
|
Add tests for non-blocking I/O
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
db735f67b9
|
Add tests for sess-id-based resume with OpenSSL
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
fccd3255f9
|
Add tests for tickets with OpenSSL
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
677884d174
|
Add a few checks in ssl-opt.sh
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
a9062e96e7
|
shell scripts: clean up when exiting on signal
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
c1da664e89
|
Add test for SSLv2 ClientHello
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
96ea2f2557
|
Add tests for SNI
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
4145b89091
|
compat.sh cosmetics
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
720375e7ea
|
Add test descriptions for lcov
|
2014-03-14 08:41:01 +01:00 |
|
Manuel Pégourié-Gonnard
|
8520dac292
|
Add tests for auth_mode
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
da782c9458
|
compat.sh: better certificate verification testing
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
33a752e180
|
ssl-opt.sh: count and report failures
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
f8bdbb5d62
|
ssl-opt.sh: cosmetics
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
dbe1ee1988
|
Add tests for session ticket lifetime
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
c55a5b7d6f
|
Add tests for cache timeout
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
4c88345f19
|
Add test for ssl_cache max_entries
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
780d671f9d
|
Add tests for renegotiation
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
de14378a53
|
Add tests for max fragment length extension
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
f7c52014ec
|
Add basic tests for session resumption
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
eaadc508fb
|
New ssl-opt.sh test script
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
c57e98b5fa
|
compat.sh: terminate ssl_server2 cleanly
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
5f593f07f7
|
compat.sh: rm a useless sleep
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
95957717f3
|
compat.sh: source cosmetics
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
330e4111cb
|
compat.sh: factor code into run_client() function
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
304beef2ae
|
compat.sh: function to start server
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
9ada01a70c
|
compat.sh: regroup arguments even more
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
1b31d7fd97
|
compat.sh: remove useless server restart
|
2014-03-14 08:41:00 +01:00 |
|
Manuel Pégourié-Gonnard
|
48f196cda5
|
compat.sh refactoring: group ciphersuite lists
|
2014-03-14 08:40:59 +01:00 |
|
Manuel Pégourié-Gonnard
|
d941a796be
|
compat.sh refectoring: regroup argument setting
|
2014-03-14 08:40:59 +01:00 |
|
Manuel Pégourié-Gonnard
|
c7a88a960d
|
Fix more depend issues on specific curves
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
9533765b25
|
Reject certs and CRLs from the future
|
2014-03-13 19:25:06 +01:00 |
|
Manuel Pégourié-Gonnard
|
6304f786e0
|
Add x509_time_future()
|
2014-03-13 19:25:06 +01:00 |
|