wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 13:30:50 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
e5ab7fa7457d82294bafcfb6c103a9e79b4aa213
wolfssl/tests
T
History
Tobias Frauenschläger e5ab7fa745 x509: fix CA:FALSE bypass in wolfSSL_X509_verify_cert 
When an untrusted issuer has CA:FALSE and no verify_cb is registered,
the !isCa branch now fails closed (ret=WOLFSSL_FAILURE, goto exit)
instead of falling through and skipping X509StoreVerifyCert for the
leaf. SetupStoreCtxError_ex is also hardened to never overwrite a
previously recorded error with success, preventing a later valid chain
link from clobbering ctx->error back to X509_V_OK. Tests added for
both the no-callback rejection and the error-preservation cases.

Reported by: Nicholas Carlini (Anthropic) & Thai Duong (Calif.io)
2026-04-02 22:38:16 -06:00
..
api
x509: fix CA:FALSE bypass in wolfSSL_X509_verify_cert
2026-04-02 22:38:16 -06:00
api.c
Merge pull request #10117 from gasbytes/2025-03-31-dtls-and-tls-focused-fixes
2026-04-02 00:24:03 -05:00
CONF_FILES_README.md
Cleanup markdown documentation
2021-10-13 16:39:46 +01:00
include.am
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
NCONF_test.cnf
Internal unit tests
2020-12-17 14:26:49 +01:00
quic.c
bounds check on ext_dump
2026-03-12 09:53:35 -06:00
README
re-format test-psk-no-id.conf add README
2015-08-03 11:04:18 -06:00
srp.c
update Copyright year
2026-02-18 09:52:21 -07:00
suites.c
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-altchains.conf
Fix to catch the issue in this PR with alt cert chains, which only happens if the verify callback is used and the chain is long enough. Cleanup of the myVerify callback to allow specific actions. Fix the suites.c to not crash if no newline at end of file. Added helpful debug message to show that a CA was found.
2020-06-18 09:26:50 -07:00
test-chains.conf
Fix for tests/test-chains.conf with new intermediate CA.
2020-06-18 08:33:59 -07:00
test-dhprime.conf
Fix for DH prime test (extra leading spaces). Fix for new chain tests with CRL enabled. The current way of testing chain only loads root CA as trusted. The intermediate CA CRL isn't trusted or loaded and causes error.
2018-12-21 12:36:47 -08:00
test-dtls13-cid.conf
add basic ConnectionID DTLS tests
2022-08-23 16:58:24 +02:00
test-dtls13-downgrade-fails.conf
tests: add negative version negotation tests
2022-09-28 18:42:38 +02:00
test-dtls13-downgrade.conf
Support (D)TLS1.3 downgrade when using PSK
2024-03-29 18:04:30 +00:00
test-dtls13-pq-hybrid-extra-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-hybrid-extra.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-hybrid-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-standalone-frag.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-pq-standalone.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-dtls13-psk.conf
fix: wrong size using DTLSv1.3 in RestartHandshakeHashWithCookie
2022-10-13 17:42:58 +02:00
test-dtls13.conf
tests: add dtls13 null cipher test
2023-05-19 08:10:26 +00:00
test-dtls-downgrade.conf
tests: add dtls downgrade tests
2022-07-06 16:18:44 +02:00
test-dtls-fails-cipher.conf
Correctly reset the Tx sequence number
2021-03-09 18:30:10 +01:00
test-dtls-fails.conf
Added a suite test use case to cover the new error check. Also fixed and issue with passing a couple flags to the test case runner, and some other changes to support the new test.
2020-07-22 13:20:23 -07:00
test-dtls-group.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-mtu.conf
Merge pull request #5149 from julek-wolfssl/store-frags-v2
2022-06-01 10:52:54 -07:00
test-dtls-reneg-client.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-dtls-reneg-server.conf
Add testing/docs for blocking write
2022-05-27 21:26:55 +02:00
test-dtls-resume.conf
tests: add bidirectional shutdown UDP tests
2022-05-11 13:27:37 +02:00
test-dtls-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-dtls-srtp-fails.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls-srtp.conf
tests: support test for SRTP
2022-01-19 13:35:29 +01:00
test-dtls.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
test-ecc-cust-curves.conf
Support TLS 1.3 ECC Brainpool authentication
2026-01-22 14:14:09 +01:00
test-ed448.conf
Update OpenSSL interopability testing
2020-08-11 16:44:45 +10:00
test-ed25519.conf
ECC: Disable ECC but have Curve25519/448 and PK callbacks fix
2021-05-10 10:32:55 +10:00
test-enckeys.conf
New tests for cert chains, alternate cert chains, trusted peer certs and DH prime cleanup:
2018-12-21 09:54:55 -08:00
test-fails.conf
Regression test fixes
2026-01-28 07:37:29 +10:00
test-maxfrag-dtls.conf
nginx 1.28.1
2026-02-25 15:19:13 +01:00
test-maxfrag.conf
nginx 1.28.1
2026-02-25 15:19:13 +01:00
test-p521.conf
TLS 1.3: Fix P-521 algorithm matching
2020-09-18 10:51:55 +10:00
test-psk-no-id-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-psk-no-id.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-psk.conf
Add TLS 1.2 ciphersuite ECDHE_PSK_WITH_AES_128_GCM_SHA256 from RFC 8442
2022-05-27 11:05:55 -04:00
test-rsapss.conf
handle certificates with RSA-PSS signature that have RSAk public keys
2022-09-21 08:24:09 -06:00
test-sctp-sha2.conf
SCTP Test
2020-07-20 15:03:48 -07:00
test-sctp.conf
Purge IDEA cipher
2022-01-31 15:29:25 -05:00
test-sha2.conf
Disallow SHA-2 ciphersuites from TLS 1.0 and 1.1 handshakes
2019-09-06 09:31:14 +10:00
test-sig.conf
add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.
2020-11-11 22:47:47 -06:00
test-sm2.conf
SM2/SM3/SM4: Chinese cipher support
2023-07-04 13:36:28 +10:00
test-tls13-down.conf
Allow trusted_ca_keys with TLSv1.3
2025-06-09 08:31:54 +01:00
test-tls13-ecc.conf
add wolfSSL_get_cipher_suite_from_name(); add flags arg to GetCipherSuiteFromName(); fix GetCipherSuiteFromName() to prevent spurious substring matching; add SUITE_ALIAS() macros for use defining CipherSuiteInfo, and add CipherSuiteInfo.flags slot and associated logic, to allow alternative cipher names to be recognized; add "CCM8" cipher name variants wherever applicable, including the unit.test conf files, to recognize and test the OpenSSL variants; add tests in client_test() and server_test() to confirm correct forward and backward mapping of cipher names/aliases.
2020-11-11 22:47:47 -06:00
test-tls13-pq-hybrid-extra.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-pq-hybrid.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-pq-standalone.conf
Enable and use ML-KEM by default
2026-03-18 10:48:16 +01:00
test-tls13-psk.conf
TLS 1.3 PSK: add option to require only PSK with DHE
2023-02-16 09:21:29 +10:00
test-tls13.conf
TLS 1.3: send ticket
2022-06-01 10:36:01 +10:00
test-tls-downgrade.conf
Check for TLS downgrade
2021-04-23 14:45:35 -07:00
test-trustpeer.conf
stunnel 5.61 support
2022-02-23 09:47:34 +01:00
test.conf
ECDHE-PSK with x25519
2024-01-16 15:18:05 -08:00
TXT_DB.txt
Internal unit tests
2020-12-17 14:26:49 +01:00
unit.c
update Copyright year
2026-02-18 09:52:21 -07:00
unit.h
update Copyright year
2026-02-18 09:52:21 -07:00
utils.c
Refactor: Use XFILE for test memory I/O dumps
2026-03-31 12:42:15 +02:00
utils.h
update Copyright year
2026-02-18 09:52:21 -07:00
w64wrapper.c
update Copyright year
2026-02-18 09:52:21 -07:00

README 

Before creating any new configure files (.conf) read the CONF_FILES_README.md
Reference in New Issue View Git Blame Copy Permalink