wireguard-openbsd - WireGuard implementation for the OpenBSD kernel

Age	Commit message (Collapse)	Author	Files	Lines
2021-04-03	Run the CMAC tests through EVP_PKEY_new_CMAC_key().	tb	1	-10/+22

2021-04-02	Two cases of BRE involving counts and backrefs that go wrong and	otto	1	-1/+16
	similar that have no isssues. Reported by Michael Paoli. Failing cases commented out for now.
2021-03-31	Remove workaround for missing d2i_DSAPrivateKey_fp prototype	tb	1	-5/+1

2021-03-29	Add regress coverage for TLSv1.2 record number increment.	jsing	1	-8/+151

2021-03-28	The failure mode of test-tls13-version-negotiation.py has changed.	tb	1	-4/+2
	Update comment.
2021-03-27	Enable test-sig-algs-renegotiation-resumption.py.	tb	1	-5/+6
	This test covers various scenarios with renegotiation and session resumption. In particular it crashes the OpenSSL 1.1.1j server due to the sigalg NULL deref fixed this week. We need --sig-algs-drop-ok since we do not currently implement signature_algorithms_cert.
2021-03-27	Handle dynamic definition of SIGSTKSZ as of glibc 2.34 on Linux.	bcook	1	-7/+24
	ok bluhm@, inoguchi@, tb@, deraadt@
2021-03-26	Add test-sig-algs-renegotiation-resumption.py	tb	1	-1/+5
	This test currently fails but may soon be fixed.
2021-03-24	The server only sends a cookie during a HRR, not a SH	tb	1	-4/+4

2021-03-24	Update regress for new_cipher rename.	jsing	2	-6/+6

2021-03-22	Don't leak ca in test_cms_sign_verify().	tb	1	-1/+2
	Reported by Ilya Shipitsin
2021-03-22	Plug a few memory leaks reported by Ilya Shipitsin	tb	1	-9/+7

2021-03-21	Revise regress to match handshake struct changes.	jsing	1	-18/+18

2021-03-21	Plug memory leak reported by Ilya Shipitsin	tb	1	-3/+2
	Since r1.7, input in base64_decoding_test() is allocated unconditionally, so free it unconditionally.
2021-03-20	typo	tb	1	-2/+2

2021-03-20	Add new test-tls13-multiple-ccs-messages.py	tb	1	-1/+8
	This is a test that checks for NSS's CCS flood DoS CVE-2020-25648. The test script currently fails on LibreSSL and OpenSSL 1.1.1j because it sends invalid records with version 0x0300 instead of 0x0303. We have the ccs_seen logic corresponding to NSS's fix: https://hg.mozilla.org/projects/nss/rev/57bbefa793232586d27cee83e74411171e128361 but we do allow up to two CCS due to an interop issue with Fizz, so at least one of the tests will likey be broken once the record version is fixed.
2021-03-17	Update for DTLSv1.2 being enabled.	jsing	1	-4/+4

2021-03-17	Update for DTLSv1.2 version handling.	jsing	1	-6/+90

2021-03-10	Revise TLS extension regress to match version handling changes.	jsing	1	-57/+25

2021-02-25	Update regress to match TLS versions change.	jsing	1	-6/+6

2021-02-23	Make this test module aware so it passes with Go 1.16	tb	1	-0/+4

2021-02-23	Make this test module aware so it passes with Go 1.16	tb	1	-0/+4

2021-02-20	Revise regress to match change in SSL{_CTX,}_get_{min,max}_proto_version().	jsing	1	-34/+45

2021-02-12	A few more flag combo's to test	otto	1	-2/+14

2021-02-08	Update DTLS client hello due to ECC changes.	jsing	1	-5/+8

2021-02-07	Enable auto DHE and disable session tickets for some tests.	jsing	1	-12/+13
	This allows us to drop the server messages that we intend on dropping.
2021-02-06	Only hexdump packets/messages on higher debug levels.	jsing	1	-3/+4

2021-02-06	Test reads and writes between the client and server.	jsing	1	-3/+49

2021-01-27	wrap an overlong line	tb	1	-2/+3

2021-01-22	Avoid NULL deref on BIO_new{_mem_buf,}() failure.	tb	1	-4/+6

2021-01-22	Avoid NULL deref on BIO_new{_mem_buf,}() failure.	tb	1	-3/+5

2021-01-21	don't set AUTO_RETRY. it's a remnant of an experiment.	tb	1	-3/+1

2021-01-17	Put a sleep 1 after starting net-snmpd. The reason of the race is	bluhm	1	-4/+10
	unclear, noone wants to debug net-snmpd. Goal it to replace this mess with proper agentx support in snmpd. OK martijn@
2021-01-15	Fix startup of smtpd; kill dangling smtpd; increase verbosity.	bluhm	1	-11/+9
	OK martijn@
2021-01-13	Make the binary run by linking it against net-snmpd.	martijn	4	-54/+173
	Also add an actual first test. More test should probably follow, but we have to start somewhere.
2021-01-12	Tweak previous.	rob	1	-2/+2

2021-01-12	Fix regress to compile and run on current. Still not hooked up.	rob	1	-16/+16

2021-01-12	A few minor tweaks to make my OCD happy.	tb	1	-12/+9
	Sort headers, unwrap a line, fix grammar in spelling and simplify the check for test failure.
2021-01-11	Regress and Makefile cleanup.	bluhm	2	-10/+10
	OK rob@
2021-01-11	Print error if SSL_{connect,accept,shutdown}(3) don't run to completion.	tb	1	-3/+13

2021-01-11	Shut down the TLS connections properly.	tb	1	-3/+28

2021-01-11	Include headers used instead of relying on ssl.h pulling in the world.	tb	1	-1/+7

2021-01-10	Merge handshake_loop() into handshake(). There's no benefit in having	tb	1	-18/+7
	this factored into a separate function.
2021-01-10	tweak a comment	tb	1	-2/+2

2021-01-10	Link shared ciphers test to build	tb	1	-1/+3

2021-01-10	Add a regress for SSL_get_shared_ciphers() for the change of returned	tb	1	-0/+457
	ciphers in ssl_lib.c r1.240 and TLSv1.3 support in tls13_server.c r1.69. requested by jsing
2021-01-09	whitespace	tb	2	-7/+7

2021-01-04	Regress from martijn@.	rob	4	-0/+1068

2020-12-31	Remove unused categories in re_guts; they are written to but never read.	millert	1	-39/+2
	From miod@, OK tb@
2020-12-28	Fix an off-by-one error in the marking of the O_CH operator following	millert	1	-1/+4
	an OOR2 operator. Also includes a regress test for the issue. From FreeBSD via miod@