with new defaults, test-fuzzed-plaintext.py is no longer slow

move a few tests to the unsupported group and fix two comments

annotate test-ecdhe-rsa-key-exchange-with-bad-messages.py with expected
alerts and where to add them.

Enable test-cve-2016-6309.py

The failure mode of test-tls13-version-negotiation.py has changed.
Update comment.

Enable test-sig-algs-renegotiation-resumption.py.

This test covers various scenarios with renegotiation and session
resumption. In particular it crashes the OpenSSL 1.1.1j server due
to the sigalg N

Enable test-sig-algs-renegotiation-resumption.py.

This test covers various scenarios with renegotiation and session
resumption. In particular it crashes the OpenSSL 1.1.1j server due
to the sigalg NULL deref fixed this week. We need --sig-algs-drop-ok
since we do not currently implement signature_algorithms_cert.

show more ...

Add test-sig-algs-renegotiation-resumption.py

This test currently fails but may soon be fixed.

typo

Add new test-tls13-multiple-ccs-messages.py

This is a test that checks for NSS's CCS flood DoS CVE-2020-25648.
The test script currently fails on LibreSSL and OpenSSL 1.1.1j because
it sends invalid

Add new test-tls13-multiple-ccs-messages.py

This is a test that checks for NSS's CCS flood DoS CVE-2020-25648.
The test script currently fails on LibreSSL and OpenSSL 1.1.1j because
it sends invalid records with version 0x0300 instead of 0x0303.
We have the ccs_seen logic corresponding to NSS's fix:
https://hg.mozilla.org/projects/nss/rev/57bbefa793232586d27cee83e74411171e128361
but we do allow up to two CCS due to an interop issue with Fizz, so
at least one of the tests will likey be broken once the record version
is fixed.

show more ...

wrap an overlong line

add arguments to skip a bunch of x448 tests

move test-tls13-finished.py from slow tests to normal tests.

test-tls13-finished.py has 70 failing tests that expect a "decode_error"
instead of the "decrypt_error" sent by tls13_server_finished_recv().
Both alerts appear to be reasonable in this context, so e

test-tls13-finished.py has 70 failing tests that expect a "decode_error"
instead of the "decrypt_error" sent by tls13_server_finished_recv().
Both alerts appear to be reasonable in this context, so enable the tests
while working around this.

show more ...

delete a stale comment

Enable test-tls13-large-number-of-extensions.py

Skip sending an empty ECPF extension for now: we don't accept it since
according to RFC 4492 and 8422 it needs to advertise uncompressed point
formats.

Also print a list of missing scripts in summary

Avoid test failures due to outdated packages

Indicate missing test scripts prominently in the result but do not
count them as an error.

enable jsing's zero content type test

Session resumption is not currently supported for TLSv1.3.

Enable P-521 and run the tests that use it.

enable test-tls13-keyshare-omitted.py

Add test-ffdhe-expected-params.py

Enable lucky 13 test.

Add lucky13 and bleichenbacher-timing tests

Implement a rolling hash of the ClientHello message, Enforce RFC 8446
section 4.1.2 to ensure subsequent ClientHello messages after a
HelloRetryRequest messages must be unchanged from the initial
Cli

Implement a rolling hash of the ClientHello message, Enforce RFC 8446
section 4.1.2 to ensure subsequent ClientHello messages after a
HelloRetryRequest messages must be unchanged from the initial
ClientHello.

ok tb@ jsing@

show more ...