summaryrefslogtreecommitdiff
path: root/lib/ssl/test
Commit message (Collapse)AuthorAgeFilesLines
* Removed function that should not be backmergedIngela Anderton Andin2012-03-201-12/+1
|
* Add two cherry-picked commits from R15B branch to R14B04 to provideGustav Simonsson2012-03-153-9/+71
| | | | | | | patch for a ssl_connection bug which was fixed in R15B but exists in R14B04. See Sequence 12016 * Send ssl_closed notification to active ssl user when a tcp error occurs
* Mitigate Computational DoS attackIngela Anderton Andin2012-03-151-1/+48
|
* fix unknown ssl extension parsing by changing length from bits to bytesBen Murphy2011-09-272-2/+70
|
* Merge branch 'ta/docs-fixes' into devHenrik Nord2011-09-201-4/+4
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * ta/docs-fixes: Fix misspelling of intermediate Fix typos in erts/preloaded/src Fix more misspellings of compatibility Fix misspelling of kept Fix misspelling of compatibility in ssl_basic_SUITE Fix misspelling of compatibility Fix misspelling of accommodate Fix misspelling of exceed Fix misspelling of accidentally Fix misspelling of erroneous in xmerl_xsd Fix misspelling of erroneous Fix misspelling of successful Fix typos in instrument(3) Fix typos in dbg(3) dialyzer: fix a small typo in list_to_bitstring test Fix typos in cover.erl Fix typos (variable name) in erl_nif(3) Fix typos in mod_esi(3) Fix trivial typos in erlang(3) OTP-9555
| * Fix misspelling of compatibility in ssl_basic_SUITETuncer Ayaz2011-09-151-4/+4
| |
* | Support explicit use of packet option httph and httph_binIngela Anderton Andin2011-09-161-1/+301
|/
* Merge branch 'ia/ssl/connect-twice' into devIngela Anderton Andin2011-07-061-1/+49
|\ | | | | | | | | * ia/ssl/connect-twice: Added test case
| * Added test caseIngela Anderton Andin2011-07-041-1/+49
| |
* | Improved test case so that it will not fail due to last_delay_timer = undefinedIngela Anderton Andin2011-06-301-5/+16
|/
* Merge branch 'ia/ssl/use-erlang-send-after-instead-of-timer-send-after' into devIngela Anderton Andin2011-06-281-4/+22
|\ | | | | | | | | | | | | | | * ia/ssl/use-erlang-send-after-instead-of-timer-send-after: Use erlang:send_after instead of timer:send_after Conflicts: lib/ssl/test/ssl_session_cache_SUITE.erl
| * Use erlang:send_after instead of timer:send_afterIngela Anderton Andin2011-06-271-4/+22
| | | | | | | | | | | | Also save latest delay cleanup timer ref so that we can use erlang:read_timer to write a more reliable test case.
* | Handle inet:getopts/2 and inet:setopts/2 crashesIngela Anderton Andin2011-06-272-4/+217
|/
* Merge branch 'ia/ssl/longer-timeout-in-testcase' into devIngela Anderton Andin2011-06-161-1/+1
|\ | | | | | | | | * ia/ssl/longer-timeout-in-testcase: Time out in test case needs to be longer to make sure clean up is properly executed
| * Time out in test case needs to be longer to make sure clean up isIngela Anderton Andin2011-06-131-1/+1
| | | | | | | | properly executed
* | Changed test case so that we do not have to make ets-table namedIngela Anderton Andin2011-06-141-4/+14
|/
* Prevention of denial of service attackIngela Anderton Andin2011-06-072-2/+41
|
* The clean up of the session table now works as intended.Ingela Anderton Andin2011-06-013-18/+84
| | | | | | | In ssl-4.1.5 temporary clean-up processes would crash resulting in that the session table would not be cleaned up (e.i. using more and more memory) and error reports would be printed, but connections would not be affected.
* Merge branch 'hw/call-chmod-without-f' into devHenrik Nord2011-03-301-1/+1
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * hw/call-chmod-without-f: Call chmod without the "-f" flag Conflicts: erts/emulator/test/Makefile lib/asn1/test/Makefile lib/crypto/test/Makefile lib/debugger/test/Makefile lib/docbuilder/test/Makefile lib/edoc/test/Makefile lib/erl_interface/test/Makefile lib/inviso/test/Makefile lib/parsetools/test/Makefile lib/percept/test/Makefile lib/ssl/test/Makefile lib/syntax_tools/test/Makefile lib/test_server/test/Makefile lib/tools/test/Makefile OTP-9170
| * Call chmod without the "-f" flagHolger Weiß2010-11-151-1/+1
| | | | | | | | | | | | "-f" is a non-standard chmod option which at least SGI IRIX and HP UX do not support. As the only effect of the "-f" flag is to suppress warning messages, it can be safely omitted.
* | Update copyright yearsBjörn-Egil Dahlberg2011-03-118-8/+8
| |
* | Add the option { hibernate_after, int() } to ssl:connect and ssl:listenJeroen Koops2011-03-073-7/+52
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When making an SSL connection (either as client or as server), the process implementing the connection may use as much as hundreds of kilobytes of memory, even when idle. This is problematic for any application maintaining more than just a few SSL connections. This patch introduces the option { hibernate_after, int() } to the ssl:connect and ssl:listen functions, making the SSL connection process go into hibernation after the specified number of milliseconds of inactivity. This will reduce the memory used by the process to just a few hundred bytes, making applications with thousands or more SSL connections feasible, as long as most of the connections are idle for most of the time (which is typically the case). The approach of making the process go into hibernation only after some time of inactivity was chosen because hibernation incurs some CPU usage, and it is therefore not desirable for a process to hibernate after each call.
* | Workaround for application:start(crypto) inconsistencyIngela Anderton Andin2011-03-077-19/+31
| |
* | Rename Suite Callback to Common Test HookLukas Larsson2011-02-1714-14/+14
| |
* | Update init_per_suite to skip all tests if crypto does not existLukas Larsson2011-02-177-56/+91
| |
* | Update and add cover spec files to work with common_testLukas Larsson2011-02-172-18/+20
| |
* | Update all test specsLukas Larsson2011-02-171-1/+1
| |
* | Fix formatting for sslLukas Larsson2011-02-1714-241/+372
| |
* | Add init_per_suite and end_per_suiteLukas Larsson2011-02-178-8/+56
| |
* | Add ts_install_scb to suite/0Lukas Larsson2011-02-1714-10/+37
| |
* | Update ssl tests to conform with common_test standardLukas Larsson2011-02-1715-250/+307
| |
* | Update all fin_per_testcase to end_per_testcase.Lukas Larsson2011-02-1710-19/+19
| |
* | Changed crypto start test so that it works as intendedIngela Anderton Andin2011-01-245-10/+10
| |
* | Skip ssl and public key tests if crypto fails to startIngela Anderton Andin2011-01-205-56/+73
| |
* | Verification of a critical extended_key_usage-extension correctedIngela Anderton Andin2011-01-171-19/+82
| | | | | | | | | | | | When a verify fun is supplied, it should not be called to verify the extended_key_usage-extension when it is already verified by the ssl_certificate:validate_extension/2
* | Cache invalidation and consistent user closingIngela Anderton Andin2010-12-163-221/+200
| | | | | | | | | | | | | | | | | | Added cache invalidation control of ssl certificates so that sessions will not be reused if file content is changed. There was a glitch in ssl:close that made it possible to to get eaddrinuse even though reuseadder-option was used. Also improved tests for better user-close handling.
* | Cache invaldation first version does not break old test casesIngela Anderton Andin2010-12-162-10/+224
| |
* | Updated tests to avoid test case failure for non interesting reasonsIngela Anderton Andin2010-11-303-4/+7
|/ | | | | Such reason is that pulic key generation or mnesia:stop might occasionally take very long time.
* Anonymous cipher suitesIngela Anderton Andin2010-10-075-208/+378
| | | | | | | | | For testing purposes ssl now also support some anonymous cipher suites when explicitly configured to do so. Also moved session cache tests to its own suite, so that timeout of end_per_testcase when the mnesia is used as session cache will not affect other test cases.
* Merge branch 'maint-r14' into devIngela Anderton Andin2010-10-011-1/+5
|\ | | | | | | | | Conflicts: lib/public_key/src/pubkey_cert.erl
| * Peer awarnessIngela Anderton Andin2010-09-291-1/+5
| | | | | | | | | | | | | | Changed the verify fun so that it differentiate between the peer certificate and CA certificates by using valid_peer or valid as the second argument to the verify fun. It may not always be trivial or even possible to know when the peer certificate is reached otherwise.
* | Handling of DSA key parametersIngela Anderton Andin2010-09-211-2/+2
|/ | | | | | | DSS-Params may be null in a certificate as it can inherit the parameters. Also ignore CA-certs that do not follow ASN-1 spec in RFC 5280.
* Improved certificate extension handlingIngela Anderton Andin2010-09-101-3/+7
| | | | | | | | | | | | | Added the functionality so that the verification fun will be called when a certificate is considered valid by the path validation to allow access to eachs certificate in the path to the user application. Removed clause that only check that a extension is not critical, it does alter the verification rusult only withholds information from the application. Try to verify subject-AltName, if unable to verify it let application try.
* Merge branch 'ia/ssl-http-error-test' into devIngela Anderton Andin2010-09-091-0/+66
|\ | | | | | | | | * ia/ssl-http-error-test: Add test suite for packet http_error.
| * Add test suite for packet http_error.Ingela Anderton Andin2010-09-071-0/+66
| |
* | Add missed DER dh option.Ingela Anderton Andin2010-09-071-3/+11
|/
* Handling of path validation errors by the applicationIngela Anderton Andin2010-09-061-53/+97
| | | | | | | | | | | | | | | | | Changed the behavior of the verify_fun option so that the application can be responsible for handling path validation errors even on the server side. Also replaced the not yet documented validate_extensions_fun to be handled by the verify_fun instead. If the verify callback fun returns {fail, Reason}, the verification process is immediately stopped and an alert is sent to the peer and the TLS/SSL handshake is terminated. If the verify callback fun returns {valid, UserState}, the verification process is continued. If the verify callback fun always returns {valid, UserState}, the TLS/SSL handshake will not be terminated with respect to verification failures and the connection will be established. The verify callback fun will also be able to verify application specific extensions.
* DER format in APIIngela Anderton Andin2010-09-031-2/+48
| | | | | Added support for inputing certificates and keys directly in DER format these options will override the pem-file options if specified.
* Empty certificate chainIngela Anderton Andin2010-09-013-25/+93
| | | | | | | | | Handling of unkown CA certificats was changed in ssl and public_key to work as intended. In the process of doing this some test cases has been corrected as they where wrong but happened to work together with the incorrect unknown CA handling.
* Add tests for crypto RC4 bugIngela Anderton Andin2010-08-313-15/+48
| | | | | | Changed test so that the test cases testing all different ciphers also sends data so that that the calls to crypto cipher functions are also tested.