| #
521ba2f2 |
| 02-Jul-2023 |
beck <beck@openbsd.org> |
Disable TLS 1.0 and TLS 1.1 in libssl
Their time has long since past, and they should not be used.
This change restricts ssl to versions 1.2 and 1.3, and changes
the regression tests to understand w
Disable TLS 1.0 and TLS 1.1 in libssl
Their time has long since past, and they should not be used.
This change restricts ssl to versions 1.2 and 1.3, and changes
the regression tests to understand we no longer speak the legacy
protocols.
For the moment the magical "golden" byte for byte comparison
tests of raw handshake values are disabled util jsing fixes them.
ok jsing@ tb@
show more ...
|
| #
59aa5285 |
| 07-Jul-2022 |
tb <tb@openbsd.org> |
Use the security level knob in the test script.
from beck
|
| #
5bc6646e |
| 14-Jul-2020 |
jsing <jsing@openbsd.org> |
Force TLSv1.2 when testing SSLv3/TLSv1.2 cipher suites.
Otherwise we end up switching to TLSv1.3 and using a TLSv1.3 cipher suite.
|
| #
26890145 |
| 07-Jul-2020 |
jsing <jsing@openbsd.org> |
Test TLSv1.3 ciphersuites now that TLS_method() supports TLSv1.3.
|
| #
be86402e |
| 09-Apr-2020 |
jsing <jsing@openbsd.org> |
Revise test to handle the fact that TLSv1.3 cipher suites are now being
included in the output from `openssl ciphers`.
|
| #
6a37ed6a |
| 09-Apr-2020 |
jsing <jsing@openbsd.org> |
Test both SSLv3 (aka pre-TLSv1.2) and TLSv1.2 cipher suites with TLS.
|
| #
06acd9fc |
| 12-Aug-2017 |
jsing <jsing@openbsd.org> |
Remove NPN test coverage.
|
| #
c3b42949 |
| 27-Sep-2015 |
bcook <bcook@openbsd.org> |
check if openssl(1) actually works before proceeding
It was possible for this test to pass even if the openssl command itself was
missing.
|
| #
5ff16b15 |
| 27-Aug-2015 |
doug <doug@openbsd.org> |
Remove SSLv3 support from LibreSSL regression tests.
|
| #
bbac1b59 |
| 12-Dec-2014 |
jsing <jsing@openbsd.org> |
Increase cipher suite test coverage by including all cipher suites that
use RSA authentication, rather than only those that use RSA key exchange.
|
| #
00422117 |
| 10-Dec-2014 |
jsing <jsing@openbsd.org> |
Add regress for ALPN.
Based on OpenSSL.
|
| #
faafa310 |
| 06-Dec-2014 |
jsing <jsing@openbsd.org> |
The -ssl2 flag does nothing - remove the flag and any tests that were
using it.
|
| #
aa735308 |
| 03-Dec-2014 |
bcook <bcook@openbsd.org> |
Allow overriding the path to the testssl and openssl binaries.
This is needed by the portable tree to point directly to the newly-built
binaries when running unit tests.
discussed with jsing@ and o
Allow overriding the path to the testssl and openssl binaries.
This is needed by the portable tree to point directly to the newly-built
binaries when running unit tests.
discussed with jsing@ and others
show more ...
|
| #
2011c60c |
| 13-Oct-2014 |
jsing <jsing@openbsd.org> |
Add NPN regress tests from OpenSSL. However, unlike OpenSSL, actually exit
with a failure if the NPN verification fails.
|
| #
ea9acafb |
| 11-Jul-2014 |
jsing <jsing@openbsd.org> |
Remove PSK from the ssl regress.
|
| #
c419fba1 |
| 21-Jun-2014 |
jsing <jsing@openbsd.org> |
Add DTLS support to ssltest and wire up some regress tests.
ok miod@
|
| #
e90e4caf |
| 24-May-2014 |
jsing <jsing@openbsd.org> |
Move ssltest.c to a regress test.
|