summaryrefslogtreecommitdiff
path: root/tests/priorities.c
Commit message (Collapse)AuthorAgeFilesLines
* priorities: hmac-sha256 ciphersuites were removed from defaultsNikos Mavrogiannopoulos2018-06-121-9/+9
| | | | | | | | | | | | These ciphersuites are deprecated since the introduction of AEAD ciphersuites, and are only necessary for compatibility with older servers. Since older servers already support hmac-sha1 there is no reason to keep these ciphersuites enabled by default, as they increase our attack surface. Relates #456 Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: updated to account for HMAC-SHA384 and CAMELLIA removalNikos Mavrogiannopoulos2018-02-191-14/+14
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: verify that no signature algorithms with (D)TLS 1.2 will cause an errorNikos Mavrogiannopoulos2018-02-191-0/+2
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: verify that +SIGN-ECDSA-SECP256R1-SHA256 has no effect when combined ↵Nikos Mavrogiannopoulos2018-02-191-1/+21
| | | | | | with TLS1.2 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: adjusted for the removal of HMAC-MD5tmp-remove-hmac-md5Nikos Mavrogiannopoulos2017-03-081-1/+1
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: converted compile-time checks for FIPS140 mode to run-timetmp-use-thread-local-rngNikos Mavrogiannopoulos2017-03-071-9/+9
| | | | | | | | This allows running the complete test suite even when the library is compiled in FIPS140-2 mode, as long as the run-time is not at this mode. Signed-off-by: Nikos Mavrogiannopoulos <nmav@gnutls.org>
* tests: priorities: enhanced for test to work under FIPS140-2 modeNikos Mavrogiannopoulos2017-03-011-13/+27
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: modified tests for the disablement of 3DESNikos Mavrogiannopoulos2017-02-051-9/+9
| | | | Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
* tests: updated known ciphersuites test for CHACHA20-POLY1305 in the SECURE setNikos Mavrogiannopoulos2016-11-041-4/+4
|
* tests: added 'PFS' and 'SUITEB128' into the list of checked priority stringsNikos Mavrogiannopoulos2016-04-291-0/+2
|
* tests: priorities: account for the addition of CHACHA20-POLY1305Nikos Mavrogiannopoulos2016-01-211-8/+8
|
* tests: check whether the RSA-EXPORT and ARCFOUR-40 legacy strings are acceptedNikos Mavrogiannopoulos2015-10-151-9/+4
|
* tests: updated the suite to account for the removal of DSA by defaultNikos Mavrogiannopoulos2015-03-031-4/+5
|
* tests: account for disabling of ARCFOUR where neededNikos Mavrogiannopoulos2015-01-051-16/+16
|
* tests: updated for AES-128-CCM ciphersuitesNikos Mavrogiannopoulos2014-12-031-13/+13
|
* Restrict the number of tests run on FIPS140-2 mode.Nikos Mavrogiannopoulos2013-11-271-0/+10
|
* reindented codeNikos Mavrogiannopoulos2013-11-081-69/+66
|
* updated priorities for new ciphersuitesNikos Mavrogiannopoulos2013-10-251-3/+3
|
* Added camellia-gcm into the default priority levels, and prioritized GCM ↵Nikos Mavrogiannopoulos2013-10-231-11/+11
| | | | over CBC everywhere.
* corrected ciphersuite numbers in prioritiesNikos Mavrogiannopoulos2013-10-231-3/+3
|
* add some RC4-128-SHA1 ciphersuites based on ECDH(E) key exchangesStefan Bühler2013-08-251-1/+1
|
* test also the number of ciphers.Nikos Mavrogiannopoulos2013-07-251-14/+27
|
* Added a test that checks whether the priorities behave as expected (depends ↵Nikos Mavrogiannopoulos2013-07-251-0/+101
on the supported ciphersuite numbers)