summaryrefslogtreecommitdiffstats
path: root/test (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Compat self-signed trust with reject-only aux dataViktor Dukhovni2016-02-0135-38/+815
| | | | | | | | | | | | When auxiliary data contains only reject entries, continue to trust self-signed objects just as when no auxiliary data is present. This makes it possible to reject specific uses without changing what's accepted (and thus overring the underlying EKU). Added new supported certs and doubled test count from 38 to 76. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Check chain extensions also for trusted certificatesViktor Dukhovni2016-02-017-35/+168
| | | | | | | | | This includes basic constraints, key usages, issuer EKUs and auxiliary trust OIDs (given a trust suitably related to the intended purpose). Added tests and updated documentation. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Move more BN internals to bn_lcl.hRich Salz2016-01-302-12/+19
| | | | | | | | There was an unused macro in ssl_locl.h that used an internal type, so I removed it. Move bio_st from bio.h to ossl_type.h Reviewed-by: Andy Polyakov <appro@openssl.org>
* When checking if there's a VMS directory spec, don't forget the possible deviceRichard Levitte2016-01-301-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix test/recipes/25-test_verify.tRichard Levitte2016-01-301-4/+4
| | | | | | | top_dir() are used to create directory names, top_file() should be used for files. In a Unixly environment, that doesn't matter, but... Reviewed-by: Rich Salz <rsalz@openssl.org>
* handle "Ctrl" in separate functionDr. Stephen Henson2016-01-301-16/+20
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Add test data for ECDHDr. Stephen Henson2016-01-301-0/+25
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Add support for EVP_PKEY_derive in evp_testDr. Stephen Henson2016-01-301-0/+71
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* fix warningDr. Stephen Henson2016-01-301-0/+2
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Templatize util/domdRich Salz2016-01-291-1/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Configure et al: split up the lflags configuration item into twoRichard Levitte2016-01-291-7/+7
| | | | | | | | | | | | | | The lflags configuration had a weird syntax with a % as separator. If it was present, whatever came before ended up as PEX_LIBS in Makefile (usually, this is LDFLAGS), while whatever came after ended up as EX_LIBS. This change splits that item into lflags and ex_libs, making their use more explicit. Also, PEX_LIBS in all the Makefiles are renamed to LDFLAGS. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add have_precompute_mult testsMatt Caswell2016-01-291-0/+9
| | | | | | | Add tests for have_precompute_mult for the optimised curves (nistp224, nistp256 and nistp521) if present Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add a test for small subgroup attacks on DH/DHEMatt Caswell2016-01-281-4/+65
| | | | | | | | | Following on from the previous commit, add a test to ensure that DH_compute_key correctly fails if passed a bad y such that: y^q (mod p) != 1 Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Test all built-in curves and let the library choose the EC_METHODBilly Brumley2016-01-271-0/+14
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Skip all explicitely if the number of tests is 0Richard Levitte2016-01-271-0/+3
| | | | | | | | | | | | It seems that Test::More doesn't like 0 tests, a line like this raises an error and stops the recipe entirely: plan tests => 0; So we need to check for 0 tests beforehand and skip the subtest explicitely in that case. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Be careful when applying EXE_SHELLRichard Levitte2016-01-271-4/+9
| | | | | | | $EXE_SHELL should only be used with out own programs, not with surrounding programs such as the perl interpreter. Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix Custom Extension tests skip countViktor Dukhovni2016-01-271-1/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove /* foo.c */ commentsRich Salz2016-01-2637-37/+0
| | | | | | | | | | | | This was done by the following find . -name '*.[ch]' | /tmp/pl where /tmp/pl is the following three-line script: print unless $. == 1 && m@/\* .*\.[ch] \*/@; close ARGV if eof; # Close file to reset $. And then some hand-editing of other files. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* RT4272: Unit tests fail when DTLS disabledTodd Short2016-01-261-2/+4
| | | | | | | Missing SKIP: block in SSL unit tests for DTLS and TLS version tests. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* 80-test_ca.t is made to use the new perlapp()Richard Levitte2016-01-261-11/+6
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Have OpenSSL::Test handle perl scripts like any programRichard Levitte2016-01-261-11/+77
| | | | | | | | | | | | | | | Since we're building some of our perl scripts and the result might not end up in apps/ (*), we may need to treat them like the compile programs we use for testing. This introduces perlapp() and perltest(), which behave like app() and test(), but will add the perl executable in the command line. ----- (*) For example, with a mk1mf build, the result will end up in $(BIN_D) Reviewed-by: Matt Caswell <matt@openssl.org>
* Use the new OpenSSL::Test::Utils routines.Richard Levitte2016-01-267-11/+11
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Use Configure's @disablables and %disabled through configdata.pmRichard Levitte2016-01-261-34/+87
| | | | | | | | Enhances the routines in OpenSSL::Test::Utils for checking disabled stuff to get their information directly from Configure instead of 'openssl list -disabled'. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* For every test in 80-test_ssl.t, check that the protocol(s) used is enabledRichard Levitte2016-01-251-138/+214
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Make tests use configdata.pm rather than parsing MakefileRichard Levitte2016-01-257-20/+26
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix OpenSSL::Test::Simple to take more than one algorithmRichard Levitte2016-01-251-4/+10
| | | | | | | Some test programs may depend on more than just one TLS version, for example. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* dsatest: use the correct BIO to print the test errorMarcus Meissner2016-01-221-1/+1
| | | | | Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* few typo fixesFdaSilvaYY2016-01-221-1/+1
| | | | | Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Remove outdated conftest.cRich Salz2016-01-221-99/+0
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Multiple -trusted/-untrusted/-CRLfile options in verifyViktor Dukhovni2016-01-211-4/+0
| | | | | | | | | | | | | | It is sometimes useful (especially in automated tests) to supply multiple trusted or untrusted certificates via separate files rather than have to prepare a single file containing them all. To that end, change verify(1) to accept these options zero or more times. Also automatically set -no-CAfile and -no-CApath when -trusted is specified. Improve verify(1) documentation, which could still use some work. Reviewed-by: Richard Levitte <levitte@openssl.org>
* More X509_verify_cert() tests via verify(1).Viktor Dukhovni2016-01-219-5/+259
| | | | | | | Still need tests for trusted-first and tests that probe construction of alternate chains. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Commit pre-generated test_verify certsViktor Dukhovni2016-01-2130-0/+608
| | | | | | | | | | | | | | | | | | | | | | | | | These can be re-generated via: cd test/certs; ./setup.sh if need be. The keys are all RSA 2048-bit keys, but it is possible to change that via environment variables. cd test/certs rm -f *-key.pem *-key2.pem OPENSSL_KEYALG=rsa OPENSSL_KEYBITS=3072 ./setup.sh cd test/certs rm -f *-key.pem *-key2.pem OPENSSL_KEYALG=ecdsa OPENSSL_KEYBITS=secp384r1 ./setup.sh ... Keys are re-used if already present, so the environment variables are only used when generating any keys that are missing. Hence the "rm -f" Reviewed-by: Richard Levitte <levitte@openssl.org>
* Scripts to generate verify test certsViktor Dukhovni2016-01-212-0/+222
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove update tagsRich Salz2016-01-201-6/+1
| | | | | Also remove depend/local_depend. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove the GOST engineMatt Caswell2016-01-193-1467/+3
| | | | | | | | | | The GOST engine is now out of date and is removed by this commit. An up to date GOST engine is now being maintained in an external repository. See: https://wiki.openssl.org/index.php/Binaries Reviewed-by: Richard Levitte <levitte@openssl.org>
* Support disabling any or all TLS or DTLS versionsViktor Dukhovni2016-01-192-534/+152
| | | | | | | | | | | | | | | Some users want to disable SSL 3.0/TLS 1.0/TLS 1.1, and enable just TLS 1.2. In the future they might want to disable TLS 1.2 and enable just TLS 1.3, ... This commit makes it possible to disable any or all of the TLS or DTLS protocols. It also considerably simplifies the SSL/TLS tests, by auto-generating the min/max version tests based on the set of supported protocols (425 explicitly written out tests got replaced by two loops that generate all 425 tests if all protocols are enabled, fewer otherwise). Reviewed-by: Richard Levitte <levitte@openssl.org>
* add TLS1-PRF testsDr. Stephen Henson2016-01-191-0/+48
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Add TLS1-PRF test support to evp_testDr. Stephen Henson2016-01-191-0/+115
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Use POSIX functions on Cygwin, not Win32 functionCorinna Vinschen2016-01-181-2/+2
| | | | | | | Signed-off-by: Corinna Vinschen <vinschen@redhat.com> Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix build break; restore missing targetRich Salz2016-01-181-0/+3
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove some old makefile targetsRich Salz2016-01-171-10/+0
| | | | | | | | Remove lint, tags, dclean, tests. This is prep for a new makedepend scheme. This is temporary pending unified makefile, and might help it. Reviewed-by: Richard Levitte <levitte@openssl.org>
* The TLSProxy tests can't run if no-engine has been configuredRichard Levitte2016-01-176-0/+23
| | | | | | Make sure they detect that. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* NGX-2040 - fix wildcard match on punycode/IDNA DNS namesZi Lin2016-01-151-0/+10
| | | | | | | | - bugfix: should not treat '--' as invalid domain substring. - '-' should not be the first letter of a domain Signed-off-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* In __cwd, make sure the given directory is seen as such and not a fileRichard Levitte2016-01-141-2/+1
| | | | | | On Unixly platforms, this doesn't matter. On VMS, it does. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Do not use redirection on binary filesRichard Levitte2016-01-142-8/+8
| | | | | | | | | | | On some platforms, the shell will determine what attributes a file will have, so while the program might think it's safely outputting binary data, it's not always true. For the sake of the tests, it's therefore safer to use -out than to use redirection. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add a directry spec for mcr if there is noneRichard Levitte2016-01-141-1/+1
| | | | | | | | | | On VMS, the command MCR will assume SYS$SYSTEM: when the first argument lacks a directory spec. So for programs in the current directory, we add [] to tell MCR it is in the current directory. It's the same as having ./ at the start of a program on Unix so the shell doesn't start looking along $PATH. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix verify(1) to report failure when verification failsViktor Dukhovni2016-01-131-2/+1
| | | | | | Regenerated expired test certificates, good for the next 100 years. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Fix test_ordinalsMatt Caswell2016-01-131-1/+1
| | | | | | | This used to work but somewhere along the line it broke and was failing to detect duplicate ordinals - which was the whole point of the test! Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove test_probable_prime_coprime from test/bntest.cRichard Levitte2016-01-131-42/+0
| | | | | | | This test relies on a private function, which isn't exported. This test would work better as a unit test in crypto/bn/bn_prime.c. Reviewed-by: Rich Salz <rsalz@openssl.org>
* VMS perl doesn't implement fork(), so don't run the TLSProxy tests thereRichard Levitte2016-01-136-0/+18
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-20 00:10:08 +0100