wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-07 21:00:51 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
130f683d8ca6401857fde3c0388c38496f6d91a0
wolfssl/tests
T
History
Juliusz Sosinowicz 130f683d8c Validate minDowngrade in wolfSSL_SetSession before reusing version 
When resuming a session wolfSSL_SetSession unconditionally
overwrote ssl->version with the version stored in the cached
session, even if that version was below the WOLFSSL's configured
minDowngrade. The overwritten version then fed straight into
SendClientHello, so a client configured to require TLS 1.2 or
higher could still emit a ClientHello advertising e.g. TLS 1.0
when resuming an old cached session. The ServerHello path catches
the actual downgrade, but the ClientHello version is already a
protocol-conformance issue and can confuse middleboxes.

Reject the session if its stored minor version is below
ssl->options.minDowngrade. The check is DTLS-aware: DTLS minor
versions decrease as the protocol version increases, so the
direction of the comparison is flipped for DTLS.

F-2105
2026-05-14 14:07:53 +02:00
..
api
Validate minDowngrade in wolfSSL_SetSession before reusing version
2026-05-14 14:07:53 +02:00
emnet
Restore IP_SOCK_getsockopt emNET error lookup
2026-04-30 18:01:16 +01:00
freertos-mem-track-repro
Fix mem_track.h compile failure on multi-threaded non-Linux builds
2026-05-11 16:20:35 +01:00
api.c
Merge pull request #10303 from julek-wolfssl/zd/21675
2026-05-13 10:33:17 -07:00
CONF_FILES_README.md
Cleanup markdown documentation
2021-10-13 16:39:46 +01:00
include.am
Fix mem_track.h compile failure on multi-threaded non-Linux builds
2026-05-11 16:20:35 +01:00
NCONF_test.cnf
Internal unit tests
2020-12-17 14:26:49 +01:00
quic.c
add exact-boundary tests at wolfssl_quic_max_record_capacity and cap+1 to catch off-by-onee mutations in the early data capacity check
2026-04-15 14:36:35 +02:00
README
…
srp.c
update Copyright year
2026-02-18 09:52:21 -07:00
suites.c
Replace liboqs SPHINCS+ with SLH-DSA in certificate layer
2026-04-30 18:32:07 +02:00
test-altchains.conf
Fix to catch the issue in this PR with alt cert chains, which only happens if the verify callback is used and the chain is long enough. Cleanup of the myVerify callback to allow specific actions. Fix the suites.c to not crash if no newline at end of file. Added helpful debug message to show that a CA was found.
2020-06-18 09:26:50 -07:00
test-chains.conf
Fix for tests/test-chains.conf with new intermediate CA.
2020-06-18 08:33:59 -07:00
test-dhprime.conf
Fix for DH prime test (extra leading spaces). Fix for new chain tests with CRL enabled. The current way of testing chain only loads root CA as trusted. The intermediate CA CRL isn't trusted or loaded and causes error.
2018-12-21 12:36:47 -08:00
test-dtls13-cid.conf
add basic ConnectionID DTLS tests
2022-08-23 16:58:24 +02:00
test-dtls13-downgrade-fails.conf
tests: add negative version negotation tests
2022-09-28 18:42:38 +02:00
test-dtls13-downgrade.conf
Support (D)TLS1.3 downgrade when using PSK
2024-03-29 18:04:30 +00:00
test-dtls13-pq-hybrid-extra-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-hybrid-extra.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-hybrid-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-standalone-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-standalone.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-psk.conf
fix: wrong size using DTLSv1.3 in RestartHandshakeHashWithCookie
2022-10-13 17:42:58 +02:00
test-dtls13.conf
tests: add dtls13 null cipher test
2023-05-19 08:10:26 +00:00
test-dtls-downgrade.conf
tests: add dtls downgrade tests
2022-07-06 16:18:44 +02:00
test-dtls-fails-cipher.conf
Correctly reset the Tx sequence number
2021-03-09 18:30:10 +01:00
test-dtls-fails.conf
Added a suite test use case to cover the new error check. Also fixed and issue with passing a couple flags to the test case runner, and some other changes to support the new test.
2020-07-22 13:20:23 -07:00
test-dtls-group.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-mtu.conf
Merge pull request #5149 from julek-wolfssl/store-frags-v2
2022-06-01 10:52:54 -07:00
test-dtls-reneg-client.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-reneg-server.conf
Add testing/docs for blocking write
2022-05-27 21:26:55 +02:00
test-dtls-resume.conf
tests: add bidirectional shutdown UDP tests
2022-05-11 13:27:37 +02:00
test-dtls-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-dtls-srtp-fails.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls-srtp.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
test-ecc-cust-curves.conf
Support TLS 1.3 ECC Brainpool authentication
2026-01-22 14:14:09 +01:00
test-ed448.conf
Update OpenSSL interopability testing
2020-08-11 16:44:45 +10:00
test-ed25519.conf
ECC: Disable ECC but have Curve25519/448 and PK callbacks fix
2021-05-10 10:32:55 +10:00
test-enckeys.conf
New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:
2018-12-21 09:54:55 -08:00
test-fails.conf
zd/21661: harden X.509 chain validation, session ticket identity binding, and peer cert restore
2026-05-06 16:45:58 +02:00
test-maxfrag-dtls.conf
nginx 1.28.1
2026-02-25 15:19:13 +01:00
test-maxfrag.conf
nginx 1.28.1
2026-02-25 15:19:13 +01:00
test-p521.conf
TLS 1.3: Fix P-521 algorithm matching
2020-09-18 10:51:55 +10:00
test-psk-no-id-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-psk-no-id.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-psk.conf
Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442
2022-05-27 11:05:55 -04:00
test-rsapss.conf
handle certificates with RSA-PSS signature that have RSAk public keys
2022-09-21 08:24:09 -06:00
test-sctp-sha2.conf
SCTP Test
2020-07-20 15:03:48 -07:00
test-sctp.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-sig.conf
add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.
2020-11-11 22:47:47 -06:00
test-sm2.conf
SM2/SM3/SM4: Chinese cipher support
2023-07-04 13:36:28 +10:00
test-tls13-down.conf
Allow trusted_ca_keys with TLSv1.3
2025-06-09 08:31:54 +01:00
test-tls13-ecc.conf
add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.
2020-11-11 22:47:47 -06:00
test-tls13-pq-hybrid-extra.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-pq-hybrid.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-pq-standalone.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-psk-certs.conf
Add RFC8773bis cert_with_extern_psk support
2026-04-17 15:12:04 +02:00
test-tls13-psk.conf
TLS 1.3 PSK: add option to require only PSK with DHE
2023-02-16 09:21:29 +10:00
test-tls13-slhdsa-fail.conf
Replace liboqs SPHINCS+ with SLH-DSA in certificate layer
2026-04-30 18:32:07 +02:00
test-tls13-slhdsa-sha2.conf
Replace liboqs SPHINCS+ with SLH-DSA in certificate layer
2026-04-30 18:32:07 +02:00
test-tls13-slhdsa-shake.conf
Replace liboqs SPHINCS+ with SLH-DSA in certificate layer
2026-04-30 18:32:07 +02:00
test-tls13.conf
TLS 1.3: send ticket
2022-06-01 10:36:01 +10:00
test-tls-downgrade.conf
Check for TLS downgrade
2021-04-23 14:45:35 -07:00
test-trustpeer.conf
stunnel 5.61 support
2022-02-23 09:47:34 +01:00
test.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
TXT_DB.txt
Internal unit tests
2020-12-17 14:26:49 +01:00
unit.c
test: move ECC curve cache cleanup from wolfcrypt_test() to unit.test exit path
2026-05-07 14:31:36 -06:00
unit.h
update Copyright year
2026-02-18 09:52:21 -07:00
utils.c
Refactor: Use XFILE for test memory I/O dumps
2026-03-31 12:42:15 +02:00
utils.h
update Copyright year
2026-02-18 09:52:21 -07:00
w64wrapper.c
update Copyright year
2026-02-18 09:52:21 -07:00

README 

Before creating any new configure files (.conf) read the CONF_FILES_README.md
Reference in New Issue View Git Blame Copy Permalink