delta/gnutls.git/tests, branch tmp-cli-buffer-term

tests: run tls-fuzzer PSK testsuite

2018-07-27T12:13:26+00:00

Resolves #508

Signed-off-by: Nikos Mavrogiannopoulos

tests: added unit test of handshake with large certificate

2018-07-26T09:27:25+00:00

This checks whether handshake message fragmentation and de-fragmentation
is functional on server and client.

Resolves #513

Signed-off-by: Nikos Mavrogiannopoulos

send_client_hello: don't override version after HRR is received

2018-07-25T13:32:45+00:00

When a Hello Retry Request is received, do not set our (transient)
version to TLS1.2 on the second client hello. That's because both
peers have already negotiated TLS1.3.

This addresses issue with peers which may send a changecipherspec
message at this stage, which is now allowed when our version is
set to be TLS1.2. Introduced test suite using openssl and resumption
using HRR which reproduces the issue.

Signed-off-by: Nikos Mavrogiannopoulos

allow no certificates to be reported by the gnutls_certificate_retrieve_function callbacks

2018-07-24T20:06:03+00:00

In 9829ef9a we introduced a wrapper over the older callback functions
which didn't handle this case.

Resolves #528

Signed-off-by: Nikos Mavrogiannopoulos

cert-cred: fix possible segfault when resetting cert retrieval function

2018-07-24T07:39:57+00:00

Reset get_cert_callback3 callback to NULL if provided callback is NULL.
Otherwise after the certificate request call_legacy_cert_cb1 /
call_legacy_cert_cb2 will try to unconditionally call legacy_cert_cb1 /
legacy_cert_cb2 callback (set to NULL) leading to segfault.

Fixes: 9829ef9a3ca06d60472599df7c74ebb9a53f1fe2
Signed-off-by: Dmitry Eremin-Solenikov

Remove trailing dot from hostname input

2018-07-22T10:44:25+00:00

Fixes #532

Signed-off-by: Tim Rühsen

gnutls_x509_privkey_import_ecc_raw: encode parameters on import

2018-07-20T14:35:08+00:00

That makes the structure fully usable after import. In _encode_privkey()
use the lower-level _gnutls_x509_export_int2() for key encoding as the
call to higher gnutls_x509_privkey_export2() could result to an infinite
recursion when keys are incomplete.

Introduced additional tests for PKCS#8 key import and export.

Resolves: #516

Signed-off-by: Nikos Mavrogiannopoulos

tests: handshake-timeout: reverted virt-time.h usage

2018-07-19T04:11:40+00:00

The tests nature (waiting on a socket) didn't fit well with the virt-time
implementation. Reverted to original real-time wait and improved error
detection in child process.

Signed-off-by: Nikos Mavrogiannopoulos

gnutls_priority_init: fix err_pos on invalid strings

2018-07-19T03:55:14+00:00

When the provided string would be resolved (e.g., due to a @ priority
being used), to a different string, then do not attempt to
detect the right location of the error. It will not be useful to the caller.

This addresses the issue of test suite failure when --with-system-priority-file
and --with-default-priority-string are provided. It also enhances the test suite
with these options being active.

Resolves #517

Signed-off-by: Nikos Mavrogiannopoulos

cipher-listings: use the sed found by configure script and make it portable

2018-07-13T11:38:12+00:00

Signed-off-by: Nikos Mavrogiannopoulos