yuzu-mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/yuzu-mirror/mbedtls.git synced 2025-12-06 07:12:32 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity
18154 commits 89 branches 205 tags 114 MiB
Commit graph

676 commits

Author SHA1 Message Date
Jerry Yu 52a6e7ea00 Replace tls1_3 with tls13 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:42:47 +08:00
Jerry Yu c502dff71c fix TLS1.3 name issue 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:22:51 +08:00
Jerry Yu cdcb683568 Update generate scripts and tls13 test cases 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:20:43 +08:00
Jerry Yu 31018adb81 Add tls13 compat tests with bash scripts 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:20:43 +08:00
Jerry Yu c4aa1520a2 tls13_compat_tests:Add generate all option 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:20:43 +08:00
Jerry Yu 26fa7dcc4a Remove rsa_pss_rsae_sha256 test from ssl-opt.sh 
It has been covered by tls13 compat tests

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:20:43 +08:00
Jerry Yu 305bfc3dfd Add tls13 compat tests 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:16:30 +08:00
Jerry Yu 8c5559d700 Add HelloRetryRequst tests 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:16:30 +08:00
Jerry Yu 936dffd77e Add certificate request check 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:16:30 +08:00
Jerry Yu 8f9d7dbfd0 Add unsupported version check 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-12-06 18:16:29 +08:00
Xiaofei Bai 8b5c3824ee Fix (d)tls1_2 into (d)tls12 in version options 
Signed-off-by: Xiaofei Bai <xiaofei.bai@arm.com>
 2021-12-02 13:22:18 +00:00
Xiaofei Bai d25fab6f79 Update based on comments 
Signed-off-by: Xiaofei Bai <xiaofei.bai@arm.com>
 2021-12-02 06:36:27 +00:00
Xiaofei Bai 746f9481ea Fix 1_3/13 usages in macros and function names 
Signed-off-by: Xiaofei Bai <xiaofei.bai@arm.com>
 2021-11-26 08:08:36 +00:00
XiaokangQian 30f556059a Reverse the cert file 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-24 01:54:50 +00:00
XiaokangQian f9fca8a791 Add back cipher suite information in ssh-opt.sh 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-23 23:21:27 +00:00
XiaokangQian 25476a48b9 Change code based on review 
Remove useless component in all.sh
Remove use server logs in ssh-opt.sh
Remove useless guards in ssl_client2.c

Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-23 14:01:21 +00:00
XiaokangQian 07c554748a Change cert file to server2-sha256.crt 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-23 08:30:14 +00:00
XiaokangQian a27b3526bf Disable PSA_CRYPTO in tls1.3 tests 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-23 02:27:07 +00:00
XiaokangQian bdf26de384 Fix test failure and remove useless code 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-22 09:52:56 +00:00
XiaokangQian 3887ab5bcc Use O_NEXT_SRV to support ciphersuite option 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-22 07:14:39 +00:00
XiaokangQian 22dd68c2b5 Rebase code and run through the whole test flow 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-22 05:54:50 +00:00
XiaokangQian d15018972c Change script to solve G_NEXT_SRV_RSA not set issue 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-22 05:50:13 +00:00
XiaokangQian 4b82ca1b70 Refine test code and test scripts 
Change client test code to support rsa pss signatures
Add test cases for rsa pss signature in ssl-opt.sh

Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-22 05:50:12 +00:00
XiaokangQian d940e641ed Add test script for RSA signature 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-22 05:50:12 +00:00
Jerry Yu 6d38c19582 Add http connection pass check 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-11-17 16:03:06 +08:00
Jerry Yu e1b1e2de65 Add minimal feature sets test 
Replace original negative test with work test.
Now, we can work with the simple test.

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-11-17 16:03:06 +08:00
XiaokangQian 3306284776 Change code base on comments 
Remove client certificate verify in tests.
Change the layout of structure to fix abi_api check issues.
Add comments of Finished.
Align with the coding styles.

Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-11 03:37:45 +00:00
XiaokangQian d0aa3e9307 Inprove code base on review comments 
Change debug messag for server finished.
Change name of generate_application_keys.
Remove the client vertificate tests from ssl-opt.sh.
Add test strings for server finished in ssl-opt.sh.

Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-11-10 06:17:40 +00:00
Jerry Yu 5398c10b89 Add return value check for cerificate verify 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-11-05 13:32:38 +08:00
Jerry Yu 834886d211 Add certificate verify check 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-10-30 13:26:15 +08:00
Jerry Yu daac359331 Change check condition order 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-10-29 20:01:42 +08:00
Jerry Yu 1df3db0467 Add certificate success check 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-10-29 10:18:50 +08:00
Jerry Yu 937ac673fa Disable client cert for gnutls tests 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-10-28 21:28:46 +08:00
XiaokangQian ab7f50d638 Change macro names and add test script for extensions 
Signed-off-by: XiaokangQian <xiaokang.qian@arm.com>
 2021-10-28 01:54:39 +00:00
Ronald Cron 5893246066
Merge pull request #4919 from yuhaoth/pr/add-tls13-server-hello-parser 
TLS1.3:ServerHello:Add parse server hello function
 2021-10-27 18:27:27 +02:00
paul-elliott-arm cbe4a056bd
Merge pull request #5090 from gilles-peskine-arm/ssl-opt-resend-retry-3.0 
Retry a test case if it fails due to an unexpected resend
 2021-10-27 16:24:54 +01:00
Manuel Pégourié-Gonnard 9317e09d15
Merge pull request #5007 from mprse/pk_opaque 
Add key_opaque option to ssl_server2.c + test
 2021-10-27 10:52:13 +02:00
Przemyslaw Stekiel bb5d483073 ssl-opt.sh: adapt paramteters of key opaque cases 
Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
 2021-10-26 12:55:34 +02:00
Jerry Yu 745bb616a4 Fix format issue and enhance test 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-10-25 10:41:29 +08:00
Jerry Yu 42920ec5a5 tls1_3:skip handshake msg test with PSA_CRYPTO 
tls1_3 hasn't implemented PSA version get transcript

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-10-25 10:41:28 +08:00
Jerry Yu 4ae2d62cce Improve tls13 handshake test 
Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
 2021-10-25 10:41:28 +08:00
Paul Elliott e05e126933 Remove bash specific code 
Use case pattern matching instead of multiline split, given there is
only the well formatted PIDs to match on this should be safe.

Signed-off-by: Paul Elliott <paul.elliott@arm.com>
 2021-10-21 17:25:46 +01:00
Przemyslaw Stekiel 8132c2ff46 Address review comments 
Signed-off-by: Przemyslaw Stekiel <przemyslaw.stekiel@mobica.com>
 2021-10-21 12:26:58 +02:00
Gilles Peskine 788ad339b8 Move is-it-resend logic into a function 
Improve the code structure in case we want to add other similar conditions
later. Document better what we're doing, and document why we're doing it.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2021-10-20 16:07:07 +02:00
Paul Elliott 58ed8a7594 Remove use of -p with lsof 
On machines with more modern kernels (>5.4 from testing so far) the
useage of -b seems to conflict with the usage of -p. Whilst the usage of
-b seems like a good idea to avoid blocks as we are tight looping on it,
the usage of -p seems to require the usage of stat() (specifically in
/proc) which -b forbids. All you get is a load of warnings
(suppressable by -w) but never a positive result, which means that all
servers are reported as "Failed to start". We are not keen on losing
-b, so instead parse the output of lsof (using -F to format it) to
check the if PIDs that it outputs match that we are looking for.

Signed-off-by: Paul Elliott <paul.elliott@arm.com>
 2021-10-19 18:23:47 +01:00
Gilles Peskine f11d30ecda Retry if a test case fails because of an unexpected resend 
Palliative for https://github.com/ARMmbed/mbedtls/issues/3377. If a test
case fails due to an unexpected resend, allow retrying, like in the case of
a client timeout.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2021-10-19 18:00:10 +02:00
Gilles Peskine 0e3534c67b Move retry logic into check_test_failure 
This will allow having other retry conditions, in particular based on
run_test options.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2021-10-19 17:23:25 +02:00
Gilles Peskine 196d73bc1b Move the core loop of run_test into an auxiliary function 
No behavior change.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2021-10-19 16:45:29 +02:00
Gilles Peskine 236bf98cfd Move some code of run_test into auxiliary functions 
No behavior change.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
 2021-10-19 16:45:29 +02:00
Gilles Peskine 6210320215
Merge pull request #4989 from AndrzejKurek/remove-ssl-export-keys 
Remove MBEDTLS_SSL_EXPORT_KEYS, making it always on
 2021-10-18 17:53:56 +02:00