summaryrefslogtreecommitdiff
path: root/tests/tlsfuzzer
diff options
context:
space:
mode:
authorRobert Relyea <rrelyea@redhat.com>2018-09-25 09:33:20 +0200
committerRobert Relyea <rrelyea@redhat.com>2018-09-25 09:33:20 +0200
commiteac3f6ceb7152afcae1bd29662baaa27fc678138 (patch)
tree1ab5b30a48657e8238ee8c1288136680063b3361 /tests/tlsfuzzer
parent955ffa9d068e5d174b484100d93a250ccfc842c6 (diff)
downloadnss-hg-eac3f6ceb7152afcae1bd29662baaa27fc678138.tar.gz
Bug 1478698, preserve leading zeros when computing TLS 1.3 DHE key share, r=mt
Diffstat (limited to 'tests/tlsfuzzer')
-rw-r--r--tests/tlsfuzzer/config.json.in32
-rw-r--r--tests/tlsfuzzer/tlsfuzzer.sh2
2 files changed, 33 insertions, 1 deletions
diff --git a/tests/tlsfuzzer/config.json.in b/tests/tlsfuzzer/config.json.in
index 0cb6fa3bc..051bae2be 100644
--- a/tests/tlsfuzzer/config.json.in
+++ b/tests/tlsfuzzer/config.json.in
@@ -24,6 +24,14 @@
]
},
{
+ "name" : "test-tls13-dhe-shared-secret-padding.py",
+ "comment": "https://bugzilla.mozilla.org/show_bug.cgi?id=1305243",
+ "arguments": [
+ "-p", "@PORT@",
+ "-e", "TLS 1.3 with x448"
+ ]
+ },
+ {
"name" : "test-tls13-empty-alert.py",
"arguments": [
"-p", "@PORT@"
@@ -32,6 +40,12 @@
"exp_pass": false
},
{
+ "name" : "test-tls13-ffdhe-sanity.py",
+ "arguments": [
+ "-p", "@PORT@"
+ ]
+ },
+ {
"name" : "test-tls13-finished.py",
"arguments": [
"-p", "@PORT@"
@@ -116,6 +130,12 @@
"exp_pass": false
},
{
+ "name" : "test-tls13-unrecognised-groups.py",
+ "arguments": [
+ "-p", "@PORT@", "--cookie"
+ ]
+ },
+ {
"name" : "test-tls13-version-negotiation.py",
"comment": "the disabled test timeouts because of https://github.com/tomato42/tlsfuzzer/issues/452",
"arguments": [
@@ -128,6 +148,18 @@
"arguments": [
"-p", "@PORT@"
]
+ },
+ {
+ "name" : "test-dhe-no-shared-secret-padding.py",
+ "comment": "https://bugzilla.mozilla.org/show_bug.cgi?id=1494221 and SSLv3 cannot be enabled in server",
+ "arguments": [
+ "-p", "@PORT@",
+ "-e", "Protocol (3, 0) in SSLv2 compatible ClientHello",
+ "-e", "Protocol (3, 1) in SSLv2 compatible ClientHello",
+ "-e", "Protocol (3, 2) in SSLv2 compatible ClientHello",
+ "-e", "Protocol (3, 3) in SSLv2 compatible ClientHello",
+ "-e", "Protocol (3, 0)"
+ ]
}
]
}
diff --git a/tests/tlsfuzzer/tlsfuzzer.sh b/tests/tlsfuzzer/tlsfuzzer.sh
index 000f1b639..ecc146c24 100644
--- a/tests/tlsfuzzer/tlsfuzzer.sh
+++ b/tests/tlsfuzzer/tlsfuzzer.sh
@@ -44,7 +44,7 @@ tlsfuzzer_init()
if [ ! -d "$TLSFUZZER" ]; then
# Can't use git-copy.sh here, as tlsfuzzer doesn't have any tags
git clone -q https://github.com/tomato42/tlsfuzzer/ "$TLSFUZZER"
- git -C "$TLSFUZZER" checkout fc8fd0128643d6b2bcba344e276ba5f902445913
+ git -C "$TLSFUZZER" checkout a40ce4085052a4da9a05f9149b835a76c194a0c6
# We could use tlslite-ng from pip, but the pip command installed
# on TC is too old to support --pre