wireguard-openbsd/regress/lib/libssl, branch jd/simplify-queueing WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/regress/lib/libssl?h=jd%2Fsimplify-queueing 2020-06-19T21:29:41Z Enable lucky 13 test. 2020-06-19T21:29:41Z tb tb@openbsd.org 2020-06-19T21:29:41Z urn:sha1:44072c60256e69240df075cb1b556c9641bedec7 Add lucky13 and bleichenbacher-timing tests 2020-06-10T22:14:37Z tb tb@openbsd.org 2020-06-10T22:14:37Z urn:sha1:676445dd34e16c7db373ccb13ab37ede2d2ce822 Implement a rolling hash of the ClientHello message, Enforce RFC 8446 2020-06-06T01:40:08Z beck beck@openbsd.org 2020-06-06T01:40:08Z urn:sha1:095832a3beabe6679cff4c4b7d27ace9e87b0258 section 4.1.2 to ensure subsequent ClientHello messages after a HelloRetryRequest messages must be unchanged from the initial ClientHello. ok tb@ jsing@ Enable the record layer limits test and mark two finished test cases as 2020-06-03T04:47:03Z tb tb@openbsd.org 2020-06-03T04:47:03Z urn:sha1:92edee68ec6759f24e102c05a4539ffabb7b7766 xfail for now. Arguably, the expected decode_error is more appropriate than the decrypt_error that we send at the moment. Enable the test-tls13-zero-length-data.py test, skipping the 2020-06-01T10:46:45Z tb tb@openbsd.org 2020-06-01T10:46:45Z urn:sha1:0970cb57551e0e8df6688f8a475400ea57aba548 three tests that fail due to a BIO_gets() bug. Enable test-dhe-rsa-key-exchange-with-bad-messages.py 2020-06-01T08:05:32Z tb tb@openbsd.org 2020-06-01T08:05:32Z urn:sha1:75204759451ad92c07e9ee0c5932a36388075e69 Previous commit caught a few errx() cases by accident. undo them. 2020-05-24T20:01:58Z tb tb@openbsd.org 2020-05-24T20:01:58Z urn:sha1:d5ad68e5c9786af0033373d75756e46de32c4574 include newlines in FAIL messages 2020-05-24T15:10:06Z tb tb@openbsd.org 2020-05-24T15:10:06Z urn:sha1:2628ace50dad9dbdd4b75576400d66199a30997a address some nits from jsing 2020-05-24T14:35:26Z tb tb@openbsd.org 2020-05-24T14:35:26Z urn:sha1:011e454b172ebcff579a10031c56a6922fa8f437 The version detection doesn't work on bluhm's test machine, causing 2020-05-24T10:35:57Z tb tb@openbsd.org 2020-05-24T10:35:57Z urn:sha1:f501c9917527d63230a2d35a02aa001d39753f1d the test to fail. Neuter it for now and just assume we do TLSv1.3. I have been intending to purge this version detection hack once I'm sure we can leave the 1.3 server enabled but I'll leave it here for now.