wireguard-openbsd/regress/lib/libssl, branch master WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/regress/lib/libssl?h=master 2021-03-29T16:22:02Z Add regress coverage for TLSv1.2 record number increment. 2021-03-29T16:22:02Z jsing jsing@openbsd.org 2021-03-29T16:22:02Z urn:sha1:7a4693f26cf484040108304633c0f51b38ac7a1a The failure mode of test-tls13-version-negotiation.py has changed. 2021-03-28T18:12:09Z tb tb@openbsd.org 2021-03-28T18:12:09Z urn:sha1:e7667ed597d60c77b74cc15531e62f81e2c693b5 Update comment. Enable test-sig-algs-renegotiation-resumption.py. 2021-03-27T18:11:53Z tb tb@openbsd.org 2021-03-27T18:11:53Z urn:sha1:dab3dacd45d0d9045dae1070a74d8a65e0428e7f This test covers various scenarios with renegotiation and session resumption. In particular it crashes the OpenSSL 1.1.1j server due to the sigalg NULL deref fixed this week. We need --sig-algs-drop-ok since we do not currently implement signature_algorithms_cert. Add test-sig-algs-renegotiation-resumption.py 2021-03-26T22:35:17Z tb tb@openbsd.org 2021-03-26T22:35:17Z urn:sha1:48eb9341f2a2c6b9c06913ea1a3b5489212973d6 This test currently fails but may soon be fixed. The server only sends a cookie during a HRR, not a SH 2021-03-24T21:36:26Z tb tb@openbsd.org 2021-03-24T21:36:26Z urn:sha1:2a70c749235b80bc60904537b8a8c7c76533ffdb Update regress for new_cipher rename. 2021-03-24T19:02:35Z jsing jsing@openbsd.org 2021-03-24T19:02:35Z urn:sha1:d8ed2d1233aa84d82d553b2be73eb1186c296b09 Plug a few memory leaks reported by Ilya Shipitsin 2021-03-22T20:05:21Z tb tb@openbsd.org 2021-03-22T20:05:21Z urn:sha1:29ec4e842245b88de2748ddfc7b42ea6b1b956a7 Revise regress to match handshake struct changes. 2021-03-21T18:37:26Z jsing jsing@openbsd.org 2021-03-21T18:37:26Z urn:sha1:0f32bcb35a1b6429079a0cfe7512739d3c82914e typo 2021-03-20T12:17:45Z tb tb@openbsd.org 2021-03-20T12:17:45Z urn:sha1:7880f6939c52f4455e938af17ebf36d2bd5eee6b Add new test-tls13-multiple-ccs-messages.py 2021-03-20T08:12:53Z tb tb@openbsd.org 2021-03-20T08:12:53Z urn:sha1:bb0ca7986b24fc01ca950482a42857514f70683c This is a test that checks for NSS's CCS flood DoS CVE-2020-25648. The test script currently fails on LibreSSL and OpenSSL 1.1.1j because it sends invalid records with version 0x0300 instead of 0x0303. We have the ccs_seen logic corresponding to NSS's fix: https://hg.mozilla.org/projects/nss/rev/57bbefa793232586d27cee83e74411171e128361 but we do allow up to two CCS due to an interop issue with Fizz, so at least one of the tests will likey be broken once the record version is fixed.