Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | tests: make any ad-hoc timeout setting controllable through envvar | Daiki Ueno | 2021-02-17 | 1 | -1/+1 |
| | | | | Signed-off-by: Daiki Ueno <ueno@gnu.org> | ||||
* | ANON,SRP,NULL ciphersuites: when set do not negotiate TLS1.3 or later | Nikos Mavrogiannopoulos | 2018-04-13 | 1 | -61/+44 |
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The reason is that these ciphersuites cannot be negotiated using TLS1.3. There is a different strategy followed for these. * NULL ciphersuites: they are not something normally enabled and used for debugging purposes mostly. When set both in client and server side only TLS1.2 can be used. * SRP ciphersuites: they are used on client side when the client is actually performing a username-password authentication with SRP. On server side we can have indeed a server support SRP and non-SRP. In that case we limit both on TLS1.2. That an unfortunate restriction, but is not a regression and IMHO these servers would most likely be phased out as very few would want to stick to TLS1.2 connections for SRP; or we may have an SRP update for TLS1.3 which could lift that limitation in the future. * ANON ciphersuites: they are used in certain client/server setups where very basic level of security is required, and in opportunistic encryption scenarios. There is a difference in the handling of these cases. In the case of Anon-only server/clients they provide the session with anonymous credentials structure; in the case of opportunistic encryption they provide both certificate and anonymous credentials. Thus we allow the protocol (TLS1.3) be in the priorities, but if we see no certificate or PSK credentials we disable TLS1.3 negotiation. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> | ||||
* | tests: updated for TLS1.3 inclusion | Nikos Mavrogiannopoulos | 2018-03-19 | 1 | -1/+4 |
| | | | | | | | | | This moves the test to use a specific version or test multiple TLS versions if applicable. Resolves #413 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> | ||||
* | tests: fix TLS version to 1.2 for tests which used VERS-TLS-ALL | Nikos Mavrogiannopoulos | 2018-02-19 | 1 | -2/+2 |
| | | | | | | | This allows the test suite to run, even when TLS1.3 is still experimental. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
* | tests: combined and enhanced DH params tests | Nikos Mavrogiannopoulos | 2017-04-08 | 1 | -56/+2 |
| | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
* | tests: added DH parameter check in X.509 auth | Nikos Mavrogiannopoulos | 2017-04-08 | 1 | -5/+0 |
| | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
* | tests: test gnutls_dh_get_pubkey in anonymous auth | Nikos Mavrogiannopoulos | 2017-04-08 | 1 | -2/+38 |
| | | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org> | ||||
* | tests: enhanced test to check the return value of gnutls_record_send() | Nikos Mavrogiannopoulos | 2014-11-05 | 1 | -2/+6 |
| | |||||
* | gnutls_packet_get() was introduced to avoid exporting a structure on the API. | Nikos Mavrogiannopoulos | 2014-06-16 | 1 | -4/+8 |
| | | | | That change will allow exporting more info associated with a packet in the future. | ||||
* | Adapted test to check gnutls_record_recv_packet(). | Nikos Mavrogiannopoulos | 2014-06-06 | 1 | -7/+15 |
| | |||||
* | Add checks in tests for the DHE prime and exponent size. | Nikos Mavrogiannopoulos | 2014-03-26 | 1 | -0/+20 |
| | |||||
* | reindented code | Nikos Mavrogiannopoulos | 2013-11-08 | 1 | -223/+206 |
| | |||||
* | fix transport parameter casts in tests | Stefan Bühler | 2013-08-25 | 1 | -2/+2 |
| | |||||
* | Disable tests that use socketpair on _WIN32. | Adam Sampson | 2013-07-17 | 1 | -0/+14 |
| | | | | | | | | | | | socketpair isn't provided on Windows, so these tests should just exit 77. Note that resume-dtls.c already had a guard like this -- I've rewritten it to match the others, but socketpair (presumably!) isn't the only reason that test is disabled on Win32. Signed-off-by: Adam Sampson <ats@offog.org> | ||||
* | Use socketpair() rather than TCP connections. | Adam Sampson | 2013-07-17 | 1 | -76/+16 |
| | | | | | | | | Besides simplifying the code, this also makes it possible to run "make check" in parallel -- previously this didn't work because several tests were trying to bind the same port. Signed-off-by: Adam Sampson <ats@offog.org> | ||||
* | Detect socket() error responses correctly. | Adam Sampson | 2013-07-17 | 1 | -1/+1 |
| | | | | | | The code was testing the wrong variable... Signed-off-by: Adam Sampson <ats@offog.org> | ||||
* | When running tests disable PKCS #11 support to avoid detecting memory leaks ↵ | Nikos Mavrogiannopoulos | 2013-05-01 | 1 | -2/+2 |
| | | | | from PKCS #11 libraries. | ||||
* | Cleanup copyright headers. | Simon Josefsson | 2012-01-25 | 1 | -1/+1 |
| | |||||
* | Fixed signed/unsigned warnings. | Nikos Mavrogiannopoulos | 2012-01-21 | 1 | -2/+2 |
| | | | | Dropped opaque type (replaced with uint8_t) | ||||
* | Run 'make update-copyright'. | Simon Josefsson | 2012-01-16 | 1 | -2/+1 |
| | |||||
* | win32 fixes. Patch by LRN. | Nikos Mavrogiannopoulos | 2011-04-07 | 1 | -0/+2 |
| | |||||
* | Modernized the test applications that now use the gnutls_priority_set_direct(). | Nikos Mavrogiannopoulos | 2011-02-09 | 1 | -6/+2 |
| | |||||
* | Indented code. Use same indentation but with -nut to avoid usage of tabs. In ↵ | Nikos Mavrogiannopoulos | 2010-12-16 | 1 | -28/+28 |
| | | | | several editors tabs can be configured not to be 8 spaces and this produces artifacts with the current indentation that is a mixture of tabs and spaces. | ||||
* | Indent (using GNU indent 2.2.11). | Simon Josefsson | 2010-10-14 | 1 | -1/+1 |
| | |||||
* | Change GNUTLS into GnuTLS. | Simon Josefsson | 2010-05-22 | 1 | -5/+5 |
| | |||||
* | Indent code. | Simon Josefsson | 2010-04-14 | 1 | -17/+29 |
| | |||||
* | Reduced several unneeded messages during the make check procedure. | Nikos Mavrogiannopoulos | 2010-03-20 | 1 | -14/+17 |
| | | | | Verbose messages can be obtained with --verbose. | ||||
* | Update copyright years. | Simon Josefsson | 2010-01-27 | 1 | -1/+2 |
| | |||||
* | Fix FSF copyright notices. | Simon Josefsson | 2010-01-27 | 1 | -1/+1 |
| | |||||
* | Indent code. | Simon Josefsson | 2009-11-05 | 1 | -2/+3 |
| | |||||
* | Doc fixes. | Simon Josefsson | 2009-05-26 | 1 | -2/+2 |
| | | | | Suggested by Peter Hendrickson <pdh@wiredyne.com>. | ||||
* | Fix warnings. | Simon Josefsson | 2009-05-07 | 1 | -1/+1 |
| | |||||
* | Use memset instead of deprecated bzero. | Simon Josefsson | 2009-05-07 | 1 | -1/+1 |
| | |||||
* | Use more warnings. Fix many warnings. | Simon Josefsson | 2008-11-17 | 1 | -44/+7 |
| | |||||
* | Use #ifdef for checking HAVE_CONFIG_H for consistency. | Simon Josefsson | 2008-09-03 | 1 | -1/+1 |
| | |||||
* | tests/: Reduce amount of debugging output. | Simon Josefsson | 2008-06-07 | 1 | -2/+4 |
| | |||||
* | Fix memory leaks. | Simon Josefsson | 2008-06-05 | 1 | -16/+18 |
| | |||||
* | Use GPLv3 for self-tests. | Simon Josefsson | 2007-12-09 | 1 | -1/+1 |
| | |||||
* | Need netinet/in.h. Tiny patch from Deanna Phillips | Simon Josefsson | 2007-03-21 | 1 | -0/+1 |
| | | | | <deanna@sdf.lonestar.org>. | ||||
* | Use static DH. | Simon Josefsson | 2007-02-05 | 1 | -5/+3 |
| | |||||
* | Print TLS version too. | Simon Josefsson | 2006-11-26 | 1 | -0/+6 |
| | |||||
* | More debugging. | Simon Josefsson | 2006-11-26 | 1 | -8/+17 |
| | |||||
* | Need config.h. | Simon Josefsson | 2006-06-16 | 1 | -1/+4 |
| | |||||
* | Indent. | Simon Josefsson | 2005-11-07 | 1 | -1/+1 |
| | |||||
* | Fix bug. | Simon Josefsson | 2005-10-20 | 1 | -1/+1 |
| | |||||
* | Update FSF office address in license. | Simon Josefsson | 2005-05-26 | 1 | -1/+1 |
| | |||||
* | Clean up license templates. | Simon Josefsson | 2005-01-24 | 1 | -9/+13 |
| | |||||
* | Add. | Simon Josefsson | 2004-08-21 | 1 | -0/+365 |