Enable the record layer limits test and mark two finished test cases as
xfail for now. Arguably, the expected decode_error is more appropriate
than the decrypt_error that we send at the moment.

Enable the test-tls13-zero-length-data.py test, skipping the
three tests that fail due to a BIO_gets() bug.

Enable test-dhe-rsa-key-exchange-with-bad-messages.py

The version detection doesn't work on bluhm's test machine, causing
the test to fail. Neuter it for now and just assume we do TLSv1.3.
I have been intending to purge this version detection hack once

The version detection doesn't work on bluhm's test machine, causing
the test to fail. Neuter it for now and just assume we do TLSv1.3.
I have been intending to purge this version detection hack once I'm
sure we can leave the 1.3 server enabled but I'll leave it here for
now.

show more ...

beck fixed most of the keyupdate tests. update annotation

Add a harness that runs tests from tlsfuzzer

This currently runs 54 tests from the tlsfuzzer suite against
the TLSv1.3 server which exercise a large portion of the code.
They already found a number

Add a harness that runs tests from tlsfuzzer

This currently runs 54 tests from the tlsfuzzer suite against
the TLSv1.3 server which exercise a large portion of the code.
They already found a number of bugs and misbehaviors and also
inspired a few diffs currently in the pipeline.

This regress requires the py3-tlsfuzzer package to be installed,
otherwise the tests are skipped. Many thanks to kmos for helping
with the ports side and to beck for his positive feedback.

ok beck

show more ...