summaryrefslogtreecommitdiff
path: root/test/ssl-tests
Commit message (Expand)AuthorAgeFilesLines
* test: update ssl_new tests in line with pedantic FIPS policyPauli2023-04-212-0/+14
* Add support for compressed certificates (RFC8879)Todd Short2022-10-182-0/+391
* Add a test for TLSv1.3 only client sending a correct key_shareMatt Caswell2022-10-122-253/+1052
* Add some more brainpool tests for TLSv1.3Matt Caswell2022-10-072-451/+655
* Reimplement brainpool TLSv1.3 support group supportMatt Caswell2022-10-072-2/+2
* Change the SCT issuer key to RSA 2048Bernd Edlinger2022-06-032-25/+13
* Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl configTomas Mraz2022-06-032-289/+482
* Add a test_ssl_new testcaseTomas Mraz2022-06-032-0/+57
* Check that UnsafeLegacyServerConnect option existsTomas Mraz2022-05-272-111/+157
* tls: ban SSL3, TLS1, TLS1.1 and DTLS1.0 at security level one and abovePauli2022-05-082-3/+8
* Update copyright yearMatt Caswell2022-05-031-1/+1
* Fix typosDimitris Apostolou2022-01-051-2/+2
* Add a TLS test for name constraints with an EE cert without a SANMatt Caswell2021-12-142-1/+37
* Enable brainpool curves for TLS1.3Bernd Edlinger2021-11-262-4/+4
* Fix tests for new default security levelMatt Caswell2021-10-096-143/+176
* Update copyright yearMatt Caswell2021-06-171-1/+1
* Move AllowClientRenegotiation testsRich Salz2021-06-152-1/+93
* Update copyright yearMatt Caswell2021-05-062-2/+2
* Adjust ssl_test_new for SHA1 security levelMatt Caswell2021-04-295-28/+68
* Fix the check for suitable groups and TLSv1.3Matt Caswell2021-03-082-39/+85
* test_ssl_new: X448, X25519, and EdDSA are supported with fipsTomas Mraz2021-03-033-193/+179
* Update copyright yearMatt Caswell2021-02-182-2/+2
* ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3Tomas Mraz2021-02-122-198/+967
* Stop disabling TLSv1.3 if ec and dh are disabledMatt Caswell2021-02-053-7/+22
* Update copyright yearRichard Levitte2021-01-281-1/+1
* TLS client: allow cert verify callback return -1 for SSL_ERROR_WANT_RETRY_VERIFYDr. David von Oheimb2021-01-262-61/+103
* Update copyright yearMatt Caswell2021-01-071-1/+1
* 28-seclevel.cnf.in: fix typo in algo nameEtienne Millon2021-01-051-2/+2
* Fix no-dtlsMatt Caswell2020-12-021-1/+2
* Add fips checks for ecdh key agreementShane Lontis2020-09-182-190/+191
* Add fips checks for ecdsa signaturesShane Lontis2020-09-182-121/+121
* Test mte with stitched ciphersuites in TLSv1.0Matt Caswell2020-08-202-1/+136
* Reduce the security bits for MD5 and SHA1 based signatures in TLSKurt Roeckx2020-06-2711-1801/+1845
* Modify libssl to discover supported groups based on available providersMatt Caswell2020-06-192-4/+0
* Add a test for renegotiation with EXTMS droppedTomas Mraz2020-06-092-1/+52
* test/ssl-tests/20-cert-select.cnf.in: Re-enable RSA-PSS related testsRichard Levitte2020-05-141-4/+1
* Amend references to "OpenSSL license"Shourya Shukla2020-04-291-1/+1
* Update copyright yearMatt Caswell2020-04-2329-29/+29
* Teach ssl_test_new how to test the FIPS moduleMatt Caswell2020-04-2014-922/+1042
* Teach ssl_test_new to have different tests for different loaded providersMatt Caswell2020-04-202-483/+484
* Use .cnf for config files, not .confRich Salz2020-03-0660-1/+1
* Check that ed25519 and ed448 are allowed by the security levelKurt Roeckx2020-02-112-32/+105
* Generate new Ed488 certificatesKurt Roeckx2020-02-114-9/+12
* Add TLS tests for RSA-PSS Restricted certificatesMatt Caswell2019-08-092-262/+464
* Allow TLSv1.3 in a no-ec buildMatt Caswell2019-06-171-1/+1
* Add option to disable Extended Master SecretTodd Short2019-02-153-0/+325
* Fix end-point shared secret for DTLS/SCTPMichael Tuexen2019-02-012-0/+183
* Following the license change, modify the boilerplates in test/Richard Levitte2018-12-0627-27/+27
* Update copyright yearMatt Caswell2018-11-201-1/+1
* Fix no-ec and no-tls1_2Matt Caswell2018-11-142-35/+45