wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 10:00:52 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
558ae34f68a9dcae828963cbd7c28779b176e87c
wolfssl/tests
T
History
Andrew Hutchings 558ae34f68 Fix CRL_STATIC_REVOKED_LIST binary search bugs in FindRevokedSerial 
The CRL_STATIC_REVOKED_LIST code path stored revoked certificates in a
fixed array but never sorted it after parsing, causing binary search to
silently miss revoked serials when entries arrived in non-sorted wire
order. Additionally, comparisons used rc[0].serialSz instead of
rc[mid].serialSz, omitted the length-equality check before XMEMCMP,
and ignored the serialHash lookup path entirely (causing a NULL
dereference when hash-based lookup was used).

Fixes:
- Sort the revoked cert array in InitCRL_Entry after populating it
- Use rc[mid].serialSz instead of rc->serialSz in binary search
- Add serialSz equality check before XMEMCMP, matching linked-list path
- Implement serialHash-based linear scan for hash lookup callers

Add unit test that loads a CRL with serials in unsorted wire order and
verifies that a revoked certificate is correctly detected.
2026-02-23 16:52:52 +00:00
..
api
Fix CRL_STATIC_REVOKED_LIST binary search bugs in FindRevokedSerial
2026-02-23 16:52:52 +00:00
api.c
update Copyright year
2026-02-18 09:52:21 -07:00
CONF_FILES_README.md
Cleanup markdown documentation
2021-10-13 16:39:46 +01:00
include.am
add wolfcrypt_test() to unit_test(); remove call to HashTest() and delete
2025-03-11 14:59:07 -05:00
NCONF_test.cnf
Internal unit tests
2020-12-17 14:26:49 +01:00
quic.c
update Copyright year
2026-02-18 09:52:21 -07:00
README
re-format test-psk-no-id.conf add README
2015-08-03 11:04:18 -06:00
srp.c
update Copyright year
2026-02-18 09:52:21 -07:00
suites.c
update Copyright year
2026-02-18 09:52:21 -07:00
test-altchains.conf
Fix to catch the issue in this PR with alt cert chains, which only happens if the verify callback is used and the chain is long enough. Cleanup of the myVerify callback to allow specific actions. Fix the suites.c to not crash if no newline at end of file. Added helpful debug message to show that a CA was found.
2020-06-18 09:26:50 -07:00
test-chains.conf
Fix for tests/test-chains.conf with new intermediate CA.
2020-06-18 08:33:59 -07:00
test-dhprime.conf
Fix for DH prime test (extra leading spaces). Fix for new chain tests with CRL enabled. The current way of testing chain only loads root CA as trusted. The intermediate CA CRL isn't trusted or loaded and causes error.
2018-12-21 12:36:47 -08:00
test-dtls13-cid.conf
add basic ConnectionID DTLS tests
2022-08-23 16:58:24 +02:00
test-dtls13-downgrade-fails.conf
tests: add negative version negotation tests
2022-09-28 18:42:38 +02:00
test-dtls13-downgrade.conf
Support (D)TLS1.3 downgrade when using PSK
2024-03-29 18:04:30 +00:00
test-dtls13-pq-frag.conf
Improvements for PQC hybrid key exchange
2025-02-21 18:44:40 +01:00
test-dtls13-pq-hybrid-frag.conf
Rename ML-KEM hybrids to match IETF Draft.
2025-07-25 13:27:26 -04:00
test-dtls13-pq-hybrid.conf
Improvements for PQC hybrid key exchange
2025-02-21 18:44:40 +01:00
test-dtls13-pq.conf
Improvements for PQC hybrid key exchange
2025-02-21 18:44:40 +01:00
test-dtls13-psk.conf
fix: wrong size using DTLSv1.3 in RestartHandshakeHashWithCookie
2022-10-13 17:42:58 +02:00
test-dtls13.conf
tests: add dtls13 null cipher test
2023-05-19 08:10:26 +00:00
test-dtls-downgrade.conf
tests: add dtls downgrade tests
2022-07-06 16:18:44 +02:00
test-dtls-fails-cipher.conf
Correctly reset the Tx sequence number
2021-03-09 18:30:10 +01:00
test-dtls-fails.conf
Added a suite test use case to cover the new error check. Also fixed and issue with passing a couple flags to the test case runner, and some other changes to support the new test.
2020-07-22 13:20:23 -07:00
test-dtls-group.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-mtu.conf
Merge pull request #5149 from julek-wolfssl/store-frags-v2
2022-06-01 10:52:54 -07:00
test-dtls-reneg-client.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-reneg-server.conf
Add testing/docs for blocking write
2022-05-27 21:26:55 +02:00
test-dtls-resume.conf
tests: add bidirectional shutdown UDP tests
2022-05-11 13:27:37 +02:00
test-dtls-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-dtls-srtp-fails.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls-srtp.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
test-ecc-cust-curves.conf
Support TLS 1.3 ECC Brainpool authentication
2026-01-22 14:14:09 +01:00
test-ed448.conf
Update OpenSSL interopability testing
2020-08-11 16:44:45 +10:00
test-ed25519.conf
ECC: Disable ECC but have Curve25519/448 and PK callbacks fix
2021-05-10 10:32:55 +10:00
test-enckeys.conf
New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:
2018-12-21 09:54:55 -08:00
test-fails.conf
Regression test fixes
2026-01-28 07:37:29 +10:00
test-maxfrag-dtls.conf
New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:
2018-12-21 09:54:55 -08:00
test-maxfrag.conf
Add testing/docs for blocking write
2022-05-27 21:26:55 +02:00
test-p521.conf
TLS 1.3: Fix P-521 algorithm matching
2020-09-18 10:51:55 +10:00
test-psk-no-id-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-psk-no-id.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-psk.conf
Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442
2022-05-27 11:05:55 -04:00
test-rsapss.conf
handle certificates with RSA-PSS signature that have RSAk public keys
2022-09-21 08:24:09 -06:00
test-sctp-sha2.conf
SCTP Test
2020-07-20 15:03:48 -07:00
test-sctp.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-sig.conf
add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.
2020-11-11 22:47:47 -06:00
test-sm2.conf
SM2/SM3/SM4: Chinese cipher support
2023-07-04 13:36:28 +10:00
test-tls13-down.conf
Allow trusted_ca_keys with TLSv1.3
2025-06-09 08:31:54 +01:00
test-tls13-ecc.conf
add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.
2020-11-11 22:47:47 -06:00
test-tls13-pq-hybrid.conf
Rename ML-KEM hybrids to match IETF Draft.
2025-07-25 13:27:26 -04:00
test-tls13-pq.conf
Kyber/ML-KEM: make both available
2024-11-04 23:51:51 +10:00
test-tls13-psk.conf
TLS 1.3 PSK: add option to require only PSK with DHE
2023-02-16 09:21:29 +10:00
test-tls13.conf
TLS 1.3: send ticket
2022-06-01 10:36:01 +10:00
test-tls-downgrade.conf
Check for TLS downgrade
2021-04-23 14:45:35 -07:00
test-trustpeer.conf
stunnel 5.61 support
2022-02-23 09:47:34 +01:00
test.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
TXT_DB.txt
Internal unit tests
2020-12-17 14:26:49 +01:00
unit.c
update Copyright year
2026-02-18 09:52:21 -07:00
unit.h
update Copyright year
2026-02-18 09:52:21 -07:00
utils.c
update Copyright year
2026-02-18 09:52:21 -07:00
utils.h
update Copyright year
2026-02-18 09:52:21 -07:00
w64wrapper.c
update Copyright year
2026-02-18 09:52:21 -07:00

README 

Before creating any new configure files (.conf) read the CONF_FILES_README.md
Reference in New Issue View Git Blame Copy Permalink