wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 17:40:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
2da5b244386522d5675417e135d7fe453955810f
wolfssl/tests/api
T
History
Juliusz Sosinowicz 2da5b24438 F-5811: enforce resumed cipher suite match for ticket resumption 
The TLS 1.2 client only compared the ServerHello suite against the
cached session suite for session-ID resumption; ticket resumption was
skipped on the assumption the suite is bound in the ticket. But the
ticket is opaque to the client, so it must enforce the match itself -
otherwise a server could resume a ticket under a different (weaker)
suite the client offered and the downgrade would go undetected
(RFC 5246 7.4.1.3).

The check is skipped only when the client retained no suite for the
session (cipherSuite0/cipherSuite both zero), so there is nothing to
compare against - as for EAP-FAST, whose PAC is a TLS ticket whose keys
come from the session-secret callback and which never populates the
cached suite. (0,0) is TLS_NULL_WITH_NULL_NULL, never negotiated, so it
unambiguously means "no retained suite". The EMS check remains
ticket-gated.

Add memio regression tests: a ticket resumption under a different
(retained) suite is rejected with MATCH_SUITE_ERROR, and a resumption
whose cached suite was not retained still succeeds.
2026-06-09 13:07:53 +00:00
..
api_decl.h
update Copyright year
2026-02-18 09:52:21 -07:00
api.h
remove unnecessary check, idx will be 1 and derSz is at least 5
2026-05-13 16:32:54 -06:00
create_ocsp_test_blobs.py
Remove non-RFC-compliant OCSP responder chain walk. The chain walk
2026-06-02 16:20:37 -06:00
include.am
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_aes.c
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_aes.h
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_arc4.c
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_arc4.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_ascon_kats.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ascon.c
Merge pull request #10155 from aidangarske/fenrir-fixes-2
2026-05-11 21:07:53 -07:00
test_ascon.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_asn.c
NameConstraints: support wildcard SAN
2026-05-28 15:19:20 +02:00
test_asn.h
NameConstraints: support wildcard SAN
2026-05-28 15:19:20 +02:00
test_blake2.c
globally fix all "BLAKE2" references (implicit BLAKE2B) to explicit "BLAKE2B":
2026-04-07 13:18:53 -05:00
test_blake2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_camellia.c
initiallize camellia variable
2026-05-13 09:01:20 -06:00
test_camellia.h
tests: cover input validation fixes
2026-05-07 02:31:25 +00:00
test_certman.c
Merge pull request #10532 from rlm2002/zd21800
2026-06-05 16:27:00 -05:00
test_certman.h
Disallow matching URI type in CheckForAltNames.
2026-05-27 16:54:14 -07:00
test_chacha20_poly1305.c
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_chacha20_poly1305.h
add AEAD bad tag tests
2026-05-12 20:59:29 +00:00
test_chacha.c
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_chacha.h
API tests: more cipher tests
2026-04-15 17:05:32 +10:00
test_cmac.c
Gate out all of the newly added AES-CMAC tests for FIPS as none of them will apply to the old FIPS AES-CMAC code.
2026-05-14 15:19:56 -07:00
test_cmac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_curve448.c
Enable all-zero shared secret check for curve448/25519 by default. Change macro to opt-out macro WOLFSSL_NO_ECDHX_SHARED_ZERO_CHECK. Add unit test.
2026-05-13 17:02:08 -07:00
test_curve448.h
Enable all-zero shared secret check for curve448/25519 by default. Change macro to opt-out macro WOLFSSL_NO_ECDHX_SHARED_ZERO_CHECK. Add unit test.
2026-05-13 17:02:08 -07:00
test_curve25519.c
X25519 x64 ASM: fix full reduction
2026-06-01 09:14:57 +10:00
test_curve25519.h
X25519 x64 ASM: fix full reduction
2026-06-01 09:14:57 +10:00
test_des3.c
Merge pull request #10136 from JeremiahM37/fenrir-issues-2
2026-04-16 08:51:17 +10:00
test_des3.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_dh.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_dh.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_dsa.c
Merge pull request #10291 from JeremiahM37/test-coverage
2026-05-13 16:39:54 +10:00
test_dsa.h
Validate DSA parameters when verifying DSA key.
2026-05-11 10:05:45 -07:00
test_dtls13.c
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_dtls13.h
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_dtls.c
Support importing/exporting DTLS sessions with encrypt-then-mac options
2026-06-02 09:34:14 -04:00
test_dtls.h
Support importing/exporting DTLS sessions with encrypt-then-mac options
2026-06-02 09:34:14 -04:00
test_ecc.c
tests/swdev: add ECC support to wc_swdev
2026-05-13 16:18:51 +02:00
test_ecc.h
Fix ECC validation regression
2026-04-23 11:26:33 +02:00
test_ed448.c
More regression testing fixes
2026-06-05 11:30:53 +10:00
test_ed448.h
Reject small-order public keys for Ed25519 and Ed448
2026-05-28 19:53:19 +02:00
test_ed25519.c
More regression testing fixes
2026-06-05 11:30:53 +10:00
test_ed25519.h
Reject small-order public keys for Ed25519 and Ed448
2026-05-28 19:53:19 +02:00
test_evp_cipher.c
Merge pull request #10364 from MarkAtwood/fix/evp-cipher-iv-length-cfb-ofb
2026-06-04 17:26:48 -05:00
test_evp_cipher.h
Fix review feedback
2026-03-05 08:51:52 -06:00
test_evp_digest.c
add unit test for NULL SHAKE parameters
2026-05-06 15:25:06 -06:00
test_evp_digest.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp_pkey.c
Regression testing fixes
2026-06-04 18:29:24 +10:00
test_evp_pkey.h
Add NID_X25519 and NID_X448 support to the EVP layer
2026-05-28 14:40:36 +00:00
test_evp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_evp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hash.c
PQ FIPS v7.0.0 Phase 2 & 3: All changes
2026-04-24 06:52:49 -06:00
test_hash.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_hmac.c
tests: api: remove extra wolfSSL_cleanup()
2026-05-13 16:18:52 +02:00
test_hmac.h
Fix issue in TLS_hmac size calculation
2026-02-26 10:26:20 -06:00
test_lms_xmss.c
Regression testing fixes
2026-06-04 18:29:24 +10:00
test_lms_xmss.h
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_md2.c
update MD2 functions to return int instead of void
2026-05-13 11:36:36 -06:00
test_md2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md4.c
update MD4 return from void to int
2026-05-13 11:36:36 -06:00
test_md4.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_md5.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_mldsa_legacy.c
Regression testing fixes
2026-06-04 18:29:24 +10:00
test_mldsa.c
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_mldsa.h
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_mlkem.c
add PQ key integrity tests
2026-05-12 20:59:29 +00:00
test_mlkem.h
add PQ key integrity tests
2026-05-12 20:59:29 +00:00
test_ocsp_test_blobs.h
Remove non-RFC-compliant OCSP responder chain walk. The chain walk
2026-06-02 16:20:37 -06:00
test_ocsp.c
Merge pull request #10532 from rlm2002/zd21800
2026-06-05 16:27:00 -05:00
test_ocsp.h
Merge pull request #10532 from rlm2002/zd21800
2026-06-05 16:27:00 -05:00
test_ossl_asn1.c
prevent resource leak if ASN1_INTEGER_to_BN() != null if expected
2026-04-03 17:13:29 -06:00
test_ossl_asn1.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_bio.c
Fix flaky tcp bind on Windows test runs
2026-05-04 10:35:04 +02:00
test_ossl_bio.h
Feat: support openssl compatibility layer functionality for libevent integration
2026-04-21 19:05:26 +03:00
test_ossl_bn.c
Add tests for BN_bn2binpad with zero output length
2026-04-13 15:50:26 +02:00
test_ossl_bn.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_cipher.c
tests
2026-05-07 02:33:58 +00:00
test_ossl_cipher.h
tests
2026-05-07 02:33:58 +00:00
test_ossl_dgst.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dgst.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dh.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_dsa.c
wolfcrypt: add additional enforcement of correct digest sizes in signature gen and verify ops:
2026-04-06 00:53:57 -05:00
test_ossl_dsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ec.c
support of NO_BIO and NO_FILESYSTEM build with opensslextra
2026-05-15 10:37:46 -06:00
test_ossl_ec.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_ecx.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_mac.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_obj.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_p7p12.c
Reject PKCS#7 SignedData signer-identity forgery
2026-04-23 09:36:32 +02:00
test_ossl_p7p12.h
Reject PKCS#7 SignedData signer-identity forgery
2026-04-23 09:36:32 +02:00
test_ossl_pem.c
Refactor - Split test to two different functions
2026-05-22 19:24:53 +03:00
test_ossl_pem.h
Refactor - Split test to two different functions
2026-05-22 19:24:53 +03:00
test_ossl_rand.c
honor OpenSSL fail-open contracts
2026-05-14 16:59:12 +00:00
test_ossl_rand.h
honor OpenSSL fail-open contracts
2026-05-14 16:59:12 +00:00
test_ossl_rsa.c
F-3888: add negative tests for tampered RSA signatures/hashes
2026-06-08 14:21:53 +02:00
test_ossl_rsa.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_sk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_acert.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_crypto.c
evp: support ML-DSA in wolfSSL_EVP_PKCS82PKEY() and wolfSSL_X509_check_private_key()
2026-05-22 14:56:14 -06:00
test_ossl_x509_crypto.h
evp: support ML-DSA in wolfSSL_EVP_PKCS82PKEY() and wolfSSL_X509_check_private_key()
2026-05-22 14:56:14 -06:00
test_ossl_x509_ext.c
X509 API: fix issues
2026-06-01 09:57:19 +10:00
test_ossl_x509_ext.h
X509 API: fix issues
2026-06-01 09:57:19 +10:00
test_ossl_x509_info.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_info.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_io.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_io.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_lu.c
src/x509.c: refactor wolfSSL_PEM_read_bio_X509_CRL onto the per-block reader
2026-04-28 10:06:47 +00:00
test_ossl_x509_lu.h
src/x509.c: refactor wolfSSL_PEM_read_bio_X509_CRL onto the per-block reader
2026-04-28 10:06:47 +00:00
test_ossl_x509_name.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_name.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_pk.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_str.c
Merge pull request #10339 from embhorn/zd21707
2026-05-05 11:41:28 -07:00
test_ossl_x509_str.h
Fixes ZD 19760
2026-04-09 13:09:17 -04:00
test_ossl_x509_vp.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509_vp.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_ossl_x509.c
Fixes from review
2026-05-07 07:32:51 -05:00
test_ossl_x509.h
Fix IDNA matching
2026-05-07 07:31:25 -05:00
test_pkcs7.c
tests/swdev: add scaffolding for WOLF_CRYPTO_CB_ONLY_* testing
2026-05-13 16:18:51 +02:00
test_pkcs7.h
Merge pull request #10291 from JeremiahM37/test-coverage
2026-05-13 16:39:54 +10:00
test_pkcs12.c
tests/api/test_pkcs12.c, tests/api/test_pwdbased.c: add missing FIPS version gates to test_wc_PKCS12_PBKDF(), test_wc_PKCS12_PBKDF_ex(), and test_wc_PBKDF1_ex_iterations();
2026-06-01 14:23:38 -05:00
test_pkcs12.h
PKCS12: check mismatch between hash algo and hash size
2026-04-15 03:08:50 +02:00
test_poly1305.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_poly1305.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_pwdbased.c
tests/api/test_pkcs12.c, tests/api/test_pwdbased.c: add missing FIPS version gates to test_wc_PKCS12_PBKDF(), test_wc_PKCS12_PBKDF_ex(), and test_wc_PBKDF1_ex_iterations();
2026-06-01 14:23:38 -05:00
test_pwdbased.h
fix clamp iterations <= 0 to 1 instead of returning an error
2026-05-20 07:25:35 -07:00
test_random.c
Addressed Copilot comments
2026-06-04 15:30:39 +09:00
test_random.h
Add MAX ENTROPY BITS check
2026-06-04 09:08:24 +09:00
test_rc2.c
Add wc_Rc2Free for key zeroization
2026-05-12 20:57:31 +00:00
test_rc2.h
Add wc_Rc2Free for key zeroization
2026-05-12 20:57:31 +00:00
test_ripemd.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_ripemd.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_rsa.c
Rework added test
2026-05-27 18:20:20 -07:00
test_rsa.h
Fix potential mismatch in size between DECL_MP_INT_SIZE_DYN and NEW_MP_INT_SIZE. In some configurations DECL_MP_INT_SIZE_DYN will set the size to max while NEW_MP_INT_SIZE will memset bits.
2026-05-27 15:57:00 -07:00
test_session.c
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_session.h
api.c: move out tests into other files
2026-05-28 19:34:09 +10:00
test_sha3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha256.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha512.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha512.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sha.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_she.c
wc_SHE_ImportM1M2M3: fix guard from || to && so it gates on WOLF_CRYPTO_CB
2026-04-15 18:03:39 -06:00
test_she.h
Fix CMake SHE deps, const-correctness in CryptoCb uid, stale comment, XSTRLEN double call, configure.ac AES-CBC guard, and add LoadKey/LoadKey_Verify test coverage
2026-04-15 11:28:03 -06:00
test_signature.c
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_signature.h
fix f-1370 key_len size check for void* in wc_SignatureGetSize
2026-04-08 17:07:42 +09:00
test_slhdsa.c
add PQ key integrity tests
2026-05-12 20:59:29 +00:00
test_slhdsa.h
HashSLH-DSA APIs now take the pre-hashed digest, not the raw message
2026-05-11 10:14:13 +02:00
test_sm2.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm2.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.c
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm3.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_sm4.c
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_sm4.h
Unit testing: Add Monte Carlo testing to ciphers
2026-04-14 13:25:15 +10:00
test_tls13.c
Merge pull request #10596 from SparkiDev/regression_fixes_24
2026-06-05 13:37:56 -05:00
test_tls13.h
Merge pull request #10534 from SparkiDev/tls13_psk_id_fix
2026-06-05 12:36:00 -05:00
test_tls_ext.c
F-4144: honor WOLFSSL_OP_NO_RENEGOTIATION
2026-06-08 14:25:10 +02:00
test_tls_ext.h
F-4144: honor WOLFSSL_OP_NO_RENEGOTIATION
2026-06-08 14:25:10 +02:00
test_tls.c
F-5811: enforce resumed cipher suite match for ticket resumption
2026-06-09 13:07:53 +00:00
test_tls.h
F-5811: enforce resumed cipher suite match for ticket resumption
2026-06-09 13:07:53 +00:00
test_wc_encrypt.c
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wc_encrypt.h
API testing additions: cipher tests
2026-04-10 15:43:21 +10:00
test_wolfmath.c
wolfmath: check mpSz cleanup.
2026-05-11 12:09:50 -05:00
test_wolfmath.h
update Copyright year
2026-02-18 09:52:21 -07:00
test_x509.c
Regression testing fixes
2026-06-04 18:29:24 +10:00
test_x509.h
Fix wolfSSL_sk_X509_OBJECT_deep_copy to check bounds
2026-04-13 17:02:51 -05:00