Improve comparision with test data.

First check the client random against the zeroed value, then zero the
client random in the client hello, before comparing with the golden value.
This makes failur

Improve comparision with test data.

First check the client random against the zeroed value, then zero the
client random in the client hello, before comparing with the golden value.
This makes failures more obvious and the test code more readable.

show more ...

Dump the test data when the lengths differ in order to aid debugging.

Use errx() if we fail to build the client hello.

Nuke trailing whitespace that is annoying before changing things in here

Remove SHA224 based sigalgs from use in TLS 1.2 as SHA224 is deprecated.
Remove GOST based sigalgs from TLS 1.2 since they don't work with TLS 1.2.
ok jsing@

Modify sigalgs extension processing to accomodate TLS 1.3.
- Make a separate sigalgs list for TLS 1.3 including only modern
algorithm choices which we use when the handshake will not negotiate
TLS 1.

Modify sigalgs extension processing to accomodate TLS 1.3.
- Make a separate sigalgs list for TLS 1.3 including only modern
algorithm choices which we use when the handshake will not negotiate
TLS 1.2.
- Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as
mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2
from a 1.3 handshake.
ok jsing@ tb@

show more ...

revert previous, accidentally contained another diff in addition
to the one I intended to commit

Modify sigalgs extension processing for TLS 1.3.
- Make a separate sigalgs list for TLS 1.3 including only modern
algorithm choices which we use when the handshake will not negotiate
TLS 1.2
- Mo

Modify sigalgs extension processing for TLS 1.3.
- Make a separate sigalgs list for TLS 1.3 including only modern
algorithm choices which we use when the handshake will not negotiate
TLS 1.2
- Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as
mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2
ok jsing@ tb@

show more ...

Update regress for DES cipher suite removal.

Zero the client random so that it is easier to spot unintended differences.

Update due to removal of original chacha20-poly1305 cipher suites.

Update the TLSv1.2 Client Hello messages, due to the removal of DSA
sigalgs.

Revise cipher suites in regress to match DSS cipher suite removal.

Update client tests for changes in default EC formats/curves.

Update regress for ECDHE with X25519.

Update regress for IDEA cipher suite removal.

Update client hello messages to follow the removal of fixed ECDH.

Update regress test to reflect changes in the cipher list.

Revise regression test so that it works correctly with AES taking priority
if hardware acceleration is available.

Add an initial TLS client regress, which currently covers ClientHello
message generation.