summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorNikos Mavrogiannopoulos <nmav@gnutls.org>2020-01-24 23:11:34 +0100
committerNikos Mavrogiannopoulos <nmav@gnutls.org>2020-01-25 12:14:44 +0100
commit9bf69f837c979fb850d2ff4afa492611073ea366 (patch)
treeb9086470d735fe33841175b70ce2d5ab419df318
parent124f8a96034f47c4d9daffbe1df14113f18fc37a (diff)
downloadgnutls-9bf69f837c979fb850d2ff4afa492611073ea366.tar.gz
README-adding-traces.md: updated with more precise information
Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
-rw-r--r--fuzz/README-adding-traces.md17
1 files changed, 17 insertions, 0 deletions
diff --git a/fuzz/README-adding-traces.md b/fuzz/README-adding-traces.md
index 485c8bbb3d..20866f6ff3 100644
--- a/fuzz/README-adding-traces.md
+++ b/fuzz/README-adding-traces.md
@@ -1,10 +1,14 @@
# Generate and add new protocol traces
+## Step 1: compilation
+
Compile GnuTLS as:
```
./configure --enable-fuzzer-target --disable-doc
```
+## Step 2: Get the traces
+
Start the server with the necessary parameters (here TLS1.3 is assumed).
```
./gnutls-http-serv --priority NORMAL:-VERS-ALL:+VERS-TLS1.3
@@ -17,6 +21,19 @@ gnutls-cli localhost:5556 --priority NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+PSK
gnutls-cli localhost:5556 --priority NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+DHE-PSK --insecure --save-server-trace /tmp/server-trace-psk2 --save-client-trace /tmp/client-trace-psk2 --pskusername test --pskkey 8a7759b3f26983c453e448060bde8981
```
+## Step 3: Ensure server can read them
+
+If there is a new key type tested, ensure that `gnutls_server_fuzzer` and
+`gnutls_client_fuzzer` enable it, and set the appropriate keys.
+
+To verify that connection proceeds past to reading the first packet use:
+$ make gnutls_server_fuzzer gnutls_client_fuzzer
+$ GNUTLS_DEBUG_LEVEL=6 gnutls_server_fuzzer /tmp/server-trace-x509
+$ GNUTLS_DEBUG_LEVEL=6 gnutls_client_fuzzer /tmp/client-trace-x509
+
+
+## Step 4: Copy the traces
+
cp /tmp/server-trace-x509 fuzz/gnutls_client_fuzzer.in/$(sha1sum /tmp/server-trace-x509|cut -d ' ' -f 1)
cp /tmp/server-trace-psk1 fuzz/gnutls_psk_client_fuzzer.in/$(sha1sum /tmp/server-trace-psk1|cut -d ' ' -f 1)
cp /tmp/server-trace-psk2 fuzz/gnutls_psk_client_fuzzer.in/$(sha1sum /tmp/server-trace-psk2|cut -d ' ' -f 1)