summaryrefslogtreecommitdiff
path: root/devel
Commit message (Collapse)AuthorAgeFilesLines
* ext/record_size_limit: distinguish sending and receiving limitstmp-record-sizesDaiki Ueno2019-05-142-2/+10
| | | | | | | | | | | | | | | | The previous behavior was that both sending and receiving limits are negotiated to be the same value. It was problematic when: - client sends a record_size_limit with a large value in CH - server sends a record_size_limit with a smaller value in EE - client updates the limit for both sending and receiving, upon receiving EE - server sends a Certificate message larger than the limit With this patch, each peer maintains the sending / receiving limits separately so not to confuse with the contradicting settings. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* abi-check: supply --hd2 to abi-check-latest targetDaiki Ueno2019-05-031-1/+1
| | | | | | | To suppress changes in internal structures. Suggested by Nikos Mavrogiannopoulos. Signed-off-by: Daiki Ueno <dueno@redhat.com>
* prf: add function to retrieve early keying materialDaiki Ueno2019-04-192-0/+2
| | | | | | | | | This adds a new function gnutls_prf_early, which shall be called in a handshake hook waiting for GNUTLS_HANDSHAKE_CLIENT_HELLO. The test needs to be run in a datefudge wrapper as the early secrets depend on the current time (through PSK). Signed-off-by: Daiki Ueno <dueno@redhat.com>
* abi-check: simplify ABI comparison using libabigail toolsNikos Mavrogiannopoulos2019-04-1611-174947/+46225
| | | | | | | | | | | | | These have output ABI format compatibility and that means we can take snapshots to test ABI against. We also hard-code explicitly the SONAME version to ensure no accidental SONAME bumps happen. This patch also moves symbols.last in the devel/ subdirectory and no internal files are shipped. Relates: #292 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* Pass CI commit check if branches are 'even'tmp-check-evenTim Rühsen2019-04-091-2/+5
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Fix check_if_signedSimo Sorce2019-04-011-10/+15
| | | | | | | | | | | | | Fix the target branch we check against by adding upstream as remote. Drop the use of set -e as this causes the shell to immediately exit on errors instead of allowing the code to check the failure and report what it faled about. Also print which commits are being checked and what information was found so that a CI failure can be better diagnosed. Signed-off-by: Simo Sorce <simo@redhat.com>
* Let check_if_signed fail if git failstmp-fail-sigcheckTim Rühsen2019-03-281-2/+4
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Use https:// for arbitrary files #1Tim Rühsen2019-03-131-12/+12
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Use https:// for www.gnu.org and www.example.comTim Rühsen2019-03-131-1/+1
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* .gitlab-ci.yml: added thread sanitizer runtmp-false-start-clarificationsNikos Mavrogiannopoulos2019-03-022-0/+10
| | | | | | | This checks for unsafe uses of variables in our included threaded tests. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* cppcheck: suppress warning on nettle code [ci skip]Nikos Mavrogiannopoulos2019-02-261-0/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* check_if_signed: Get source branch if not setTim Rühsen2019-02-181-0/+5
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* Check for Signed-off-by: in CITim Rühsen2019-01-201-0/+25
| | | | Signed-off-by: Tim Rühsen <tim.ruehsen@gmx.de>
* README-ci.freebsd.md: require autogenDaiki Ueno2018-11-131-1/+1
| | | | Signed-off-by: Daiki Ueno <dueno@redhat.com>
* protocols: bumped TLS1.3 version number to RFC8446 valueNikos Mavrogiannopoulos2018-08-201-0/+0
| | | | | | | | This adds support of the final RFC numbers. Resolves #542 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* testcompat-tls13-openssl: fix openssl interactionsNikos Mavrogiannopoulos2018-06-271-0/+0
| | | | | | | | | | | | | * Do not require certificate validation on tests where no certificate is sent * Rekey test performs data transfer after re-key This introduces a dependency on the expect package for testing, and updates openssl to address an issue in post-handshake auth interop testing. Resolves #488 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* README-ci.freebsd.md: updated for new build method with gnulib [ci skip]Nikos Mavrogiannopoulos2018-06-141-2/+8
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: added interop tests with openssl under TLS1.3Nikos Mavrogiannopoulos2018-05-041-0/+0
| | | | | | | | | | | | | This adds interoperability tests for: * PSK with elliptic curve DHE * RSA,RSA-PSS,secp256r1,ed25519 server certificate * RSA,RSA-PSS,secp256r1,ed25519 client certificate * X25519,SECP256R1 key share exchange * key share with HRR Relates #328 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* doc: added README on FreeBSD CI setupNikos Mavrogiannopoulos2017-09-081-0/+70
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* .gitlab-ci.yml: enable more cppcheck testsNikos Mavrogiannopoulos2017-09-081-0/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* abi-check: added check for 3.6.0 ABI compatibilityNikos Mavrogiannopoulos2017-08-181-0/+39891
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* removed devel/fuzz; functionality moved to fuzz/ [ci skip]Nikos Mavrogiannopoulos2017-08-179920-2081/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzzer: added a fuzzer targetNikos Mavrogiannopoulos2017-08-161-1/+1
| | | | | | | | This allows to compile the library with flags which will add predictable random generation and eliminate some crypto checks, in order for the library to be used for testing (fuzzying). Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: explicitly initialize and deinitialize the library [ci skip]Nikos Mavrogiannopoulos2017-08-1114-0/+44
| | | | | | This enables the fuzzers to run even when statically linked. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: added reproducer applications for psk and srp fuzzerstmp-oss-fuzz-updatesNikos Mavrogiannopoulos2017-08-051-7/+18
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* gnutls_server_fuzzer: added ed25519 key/certNikos Mavrogiannopoulos2017-08-044-0/+81
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: introduced mem.h with common callbacks for mem accessNikos Mavrogiannopoulos2017-08-037-252/+91
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: added SRP server and client fuzzersNikos Mavrogiannopoulos2017-08-0310-1/+339
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: introduced psk.h common headerNikos Mavrogiannopoulos2017-08-033-7/+40
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: added PSK server fuzzerNikos Mavrogiannopoulos2017-08-038-229/+427
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: added PSK client fuzzerNikos Mavrogiannopoulos2017-08-036-2/+129
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: ported libidn2's main.c taking advantage of afl-clang-fastNikos Mavrogiannopoulos2017-08-032-22/+51
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: added make update command [ci skip]Nikos Mavrogiannopoulos2017-07-072-0/+11
| | | | | | | This allows updating the fuzzer corpus from openssl using a single command. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: added corpora from openssl [ci skip]Nikos Mavrogiannopoulos2017-07-077900-0/+36
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: undid changes related to boringssl server/client corpus format [ci skip]Nikos Mavrogiannopoulos2017-07-072-22/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: included verbatim corpus from boringsslNikos Mavrogiannopoulos2017-07-071936-0/+43
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: gnutls-client-fuzzer: read directly from memory [ci skip]Nikos Mavrogiannopoulos2017-07-071-45/+95
| | | | | | Also updated to read the prefixed boringssl corpus files. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: gnutls-server-fuzzer: read directly from memory [ci skip]Nikos Mavrogiannopoulos2017-07-071-284/+334
| | | | | | Also updated to read the prefixed boring ssl corpus files. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: updated server with multiple keys (ECDSA, RSA) and DH parameters [ci skip]Nikos Mavrogiannopoulos2017-07-041-8/+79
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: removed the openpgp certificate fuzzerNikos Mavrogiannopoulos2017-06-163-51/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: added reproducer for OCSP response found test casestmp-ocsp-status-fixNikos Mavrogiannopoulos2017-06-151-2/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: documented location for OCSP-related reproducersNikos Mavrogiannopoulos2017-06-151-6/+7
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: eliminated build warningsNikos Mavrogiannopoulos2017-05-312-2/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: added RSA-PSS certificateNikos Mavrogiannopoulos2017-05-291-0/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: doc update [ci skip]Nikos Mavrogiannopoulos2017-05-091-4/+4
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: fix leaks in PKCS#12 fuzzerNikos Mavrogiannopoulos2017-04-281-4/+10
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: added PEM base64 decoder and encoder fuzzers [ci skip]Nikos Mavrogiannopoulos2017-04-205-2/+114
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: openpgp fuzzer always succeeds when no support is present [ci skip]Nikos Mavrogiannopoulos2017-04-191-3/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* fuzz: do not enable the openpgp fuzzer when openpgp is disabledtmp-fix-coverity-issuesNikos Mavrogiannopoulos2017-04-061-1/+3
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* fuzz: updated pkcs12 corpusNikos Mavrogiannopoulos2017-03-288-0/+0
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
View Lorry Controller Status