Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | tests: added test case with invalid X.509 cert | Nikos Mavrogiannopoulos | 2017-01-03 | 2 | -1/+1 |
| | | | | | | | This triggers a memory leak. Issue found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=294 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> | ||||
* | tests: added test case with invalid X.509 cert | Nikos Mavrogiannopoulos | 2017-01-03 | 2 | -1/+1 |
| | | | | | | | Issue found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=300 Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> | ||||
* | tests: added reproducer for client issues | Nikos Mavrogiannopoulos | 2017-01-03 | 5 | -1/+118 |
| | | | | | | | | | | | This allows to reproduce issues found on client handling, by adding a transcript in client-interesting. Currently it contains values found using oss-fuzz. The client3.disabled transcript is disabled because it depends on a fix in nettle. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> | ||||
* | tests: do not run key-tests under leak sanitizer | Nikos Mavrogiannopoulos | 2017-01-03 | 1 | -1/+1 |
| | | | | | | | | | The reason is that we cannot distinguish between a memory leak on application failure (which is followed by exit- thus should be ignored) and an address sanitizer issue (which should never be ignored). As such we disable leak detection with asan and rely on valgrind. Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com> | ||||
* | tests: illegal-rsa: don't hide stderr | Nikos Mavrogiannopoulos | 2017-01-03 | 1 | -2/+2 |
| | |||||
* | tests: added suite for checking PKCS#7 structure import | Nikos Mavrogiannopoulos | 2017-01-03 | 6 | -2/+149 |
| | | | | | The initial (problematic) structures have been obtained from oss-fuzz project. | ||||
* | tests: added test case with invalid X.509 certificate | Nikos Mavrogiannopoulos | 2017-01-02 | 2 | -1/+2 |
| | | | | | | | | | This certificate causes a memory leak while printing. Issue found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=280 Relates #156 | ||||
* | tests: cert-tests: force asan to return an error code other than one on failure | Nikos Mavrogiannopoulos | 2017-01-02 | 1 | -1/+1 |
| | |||||
* | tests: added test for invalid private keys | Nikos Mavrogiannopoulos | 2017-01-02 | 3 | -2/+54 |
| | | | | | Also force asan to return an error code other than one (the normally expected for invalid keys). | ||||
* | tests: added certificate to reproduce memory leak | Nikos Mavrogiannopoulos | 2017-01-02 | 2 | -1/+1 |
| | | | | | | | Found by oss-fuzz project: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=299 Relates #156 | ||||
* | tests: added test case with invalid PKCS#8 data | Nikos Mavrogiannopoulos | 2017-01-02 | 3 | -2/+2 |
| | | | | | | | Issue found using oss-fuzz: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=363 Relates #156 | ||||
* | Corrected a leak in OpenPGP sub-packet parsing. | Alex Gaynor | 2017-01-02 | 2 | -0/+5 |
| | | | | Signed-off-by: Alex Gaynor <alex.gaynor@gmail.com> | ||||
* | Attempt to fix a leak in OpenPGP cert parsing. | Alex Gaynor | 2016-12-31 | 2 | -0/+4 |
| | |||||
* | tests: enable all the ciphersuite in openssl cli for DSS checksfix-compat-tests | Nikos Mavrogiannopoulos | 2016-12-31 | 1 | -3/+3 |
| | |||||
* | tests: don't check against 3DES if disabled in openssl | Nikos Mavrogiannopoulos | 2016-12-31 | 1 | -3/+8 |
| | |||||
* | tests: do not pass the -dhparams to openssl 1.1.0; it doesn't work | Nikos Mavrogiannopoulos | 2016-12-31 | 1 | -1/+8 |
| | |||||
* | tests: simplified DH params format | Nikos Mavrogiannopoulos | 2016-12-31 | 1 | -33/+9 |
| | | | | Also switch to RFC7919 DH params. | ||||
* | tests: corrected type in openssl compat tests | Nikos Mavrogiannopoulos | 2016-12-31 | 1 | -2/+2 |
| | |||||
* | tests: added common variable for DH parameters | Nikos Mavrogiannopoulos | 2016-12-31 | 3 | -31/+33 |
| | |||||
* | tests: fixed paths in compat tests | Nikos Mavrogiannopoulos | 2016-12-31 | 1 | -2/+2 |
| | |||||
* | tests: better termination checking in compat tests | Nikos Mavrogiannopoulos | 2016-12-31 | 2 | -3/+22 |
| | | | | | This ensures that the exit code of all spawned processes is checked. | ||||
* | Do not infinite loop if an EOF occurs while skipping a PGP packet | Alex Gaynor | 2016-12-28 | 3 | -0/+43 |
| | | | | Signed-off-by: Alex Gaynor <alex.gaynor@gmail.com> | ||||
* | tests: added check for certtool loading CA certificates from PKCS#11 | Nikos Mavrogiannopoulos | 2016-12-19 | 3 | -8/+184 |
| | |||||
* | tests: added check for multiple calls to gnutls_priority_set_direct() | Nikos Mavrogiannopoulos | 2016-12-19 | 2 | -1/+173 |
| | |||||
* | tests: added certificate which was causing issues in gnutls_x509_crt_print() | Nikos Mavrogiannopoulos | 2016-12-16 | 2 | -1/+1 |
| | |||||
* | tests: improved certder to easily load certificates from a directory | Nikos Mavrogiannopoulos | 2016-12-16 | 10 | -418/+156 |
| | | | | | That allows to place certificates in certs-interesting/ and these will be loaded and checked upon the new "cert" test case. | ||||
* | tests: added test for PKCS#8 encrypted key decoding | Nikos Mavrogiannopoulos | 2016-12-13 | 3 | -8/+89 |
| | | | | | This also verifies that the return value when attempting to decrypt without a password is GNUTLS_E_DECRYPTION_FAILED. | ||||
* | tests: disable ASAN leak checks on suite tests | Nikos Mavrogiannopoulos | 2016-12-09 | 1 | -4/+5 |
| | | | | | These detect memory leaks in the tools in src/ which are not critical nor there is serious reason to address. | ||||
* | tests: disable ASAN leak checks on certificate tests | Nikos Mavrogiannopoulos | 2016-12-09 | 1 | -0/+3 |
| | | | | | These detect memory leaks in the tools in src/ which are not critical nor there is serious reason to address. | ||||
* | tests: enhanced long-session-id testtmp-long-session-id-update | Nikos Mavrogiannopoulos | 2016-12-09 | 1 | -14/+8 |
| | | | | | | This ensures that no leaks exist during exit (to avoid asan failures), and that we test for the specific error code that gnutls_handshake() is expected to return. | ||||
* | tests: eliminate compilation warning in crq-basic [ci skip] | Nikos Mavrogiannopoulos | 2016-12-09 | 1 | -1/+1 |
| | |||||
* | tests: make conditional (to HAVE_LIBIDN) any IDN related checks | Nikos Mavrogiannopoulos | 2016-12-08 | 2 | -0/+6 |
| | | | | | This allows the test suite to successfully complete even when compiled without libidn. | ||||
* | tests: disable leak checks in rsa-md5-collision.sh | Nikos Mavrogiannopoulos | 2016-12-08 | 1 | -1/+6 |
| | |||||
* | tests: split and enhanced UTF-8 name checks from hostname-check | Nikos Mavrogiannopoulos | 2016-12-08 | 3 | -78/+218 |
| | | | | | That is, added checks to ensure that non-ASCII DNS names in certificates fail, and that properly encoded IDNA2003 names, succeed. | ||||
* | tests: added check with failed verification on invalid UTF-8 | Nikos Mavrogiannopoulos | 2016-12-08 | 4 | -1/+192 |
| | | | | | | That is, check whether raw UTF-8 in the certificate will fail verification. Raw UTF-8 is prohibited by IETF PKIX (RFC5280) on a certificate. | ||||
* | tests: updated cert with UTF8 names to contain proper IDNA2003 encoded names | Nikos Mavrogiannopoulos | 2016-12-08 | 1 | -14/+14 |
| | |||||
* | tests: added missing test in dist | Nikos Mavrogiannopoulos | 2016-12-08 | 1 | -1/+1 |
| | |||||
* | tests: corrected typos in starttls.sh | Nikos Mavrogiannopoulos | 2016-12-08 | 1 | -1/+1 |
| | | | | This allows to detect chat in most systems. | ||||
* | tests: reduced the intermediate steps in rsa-md5-collisiontmp-rsa-md5-simplifications | Nikos Mavrogiannopoulos | 2016-12-07 | 7 | -21/+533 |
| | |||||
* | tests: added operational -sign/verify- tests in keygen app | Nikos Mavrogiannopoulos | 2016-12-07 | 1 | -0/+46 |
| | | | | | This will check that a generated key is immediately usable for operations. | ||||
* | tests: enhanced keygen to include check of gnutls_x509_privkey_cpy | Nikos Mavrogiannopoulos | 2016-12-07 | 1 | -1/+19 |
| | |||||
* | tests: added tests for CRL generation APIs | Nikos Mavrogiannopoulos | 2016-12-07 | 2 | -1/+212 |
| | |||||
* | Don't trash DER CRQ output with text data | Dmitry Eremin-Solenikov | 2016-12-07 | 2 | -0/+4 |
| | | | | Signed-off-by: Dmitry Eremin-Solenikov <dbaryshkov@gmail.com> | ||||
* | tests: updated overhead calculation for new code | Nikos Mavrogiannopoulos | 2016-12-06 | 1 | -3/+10 |
| | |||||
* | tests: added check for MTU calculation on DTLS 1.2 | Nikos Mavrogiannopoulos | 2016-12-06 | 2 | -1/+212 |
| | |||||
* | tests: corrected space-tab issue | Nikos Mavrogiannopoulos | 2016-12-01 | 2 | -2/+2 |
| | |||||
* | tests: added checks on signature key usage violations | Nikos Mavrogiannopoulos | 2016-12-01 | 3 | -7/+339 |
| | |||||
* | tests: use datefudge in rsa-md5-collision checktmp-autogen-fix | Nikos Mavrogiannopoulos | 2016-11-29 | 1 | -0/+5 |
| | | | | | This makes sure that any failure detected is not because of expired certificates, but because of MD5 being disabled. | ||||
* | tests: str-unicode: check whether exceptions are tolerated on decryption | Nikos Mavrogiannopoulos | 2016-11-28 | 1 | -1/+9 |
| | |||||
* | tests: added exception and join control characters in str-unicode | Nikos Mavrogiannopoulos | 2016-11-28 | 1 | -0/+10 |
| |