Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-07-18 | ssl: Better grouping of test | Ingela Anderton Andin | |
Regroup testes after functionality making it easier to test all variants (all protocols, all cert types etc). Also extend OpenSSL interop | |||
2019-07-01 | ssl: Kill OpenSSL processes that survived test run | Ingela Anderton Andin | |
Should be zero such processes in the normal case | |||
2019-04-05 | ssl: Do not use broken OpenSSL clients | Ingela Anderton Andin | |
Also remove dead code | |||
2019-04-05 | ssl: sslv2 clients rejected in new way as sslv2 hello compatibility is dropped | Ingela Anderton Andin | |
2019-04-03 | ssl: Run SNI test on specific TLS versions | Ingela Anderton Andin | |
We do not want to test OpenSSL default values as the may not agree with our defaults. | |||
2019-03-29 | ssl: Remove basic test group from ssl_to_openssl_SUITE | Ingela Anderton Andin | |
This group has started to fail as our default has diverged from OpenSSL defaults and we are not really interested in testing OpenSSL defaults. | |||
2019-02-14 | Merge branch 'peterdmv/ssl/fix-failing-testcases' into maint | Péter Dimitrov | |
* peterdmv/ssl/fix-failing-testcases: ssl: Fix renegotiation testcases ssl: Fix failing rizzo testcases ssl: Use IPv4 addresses with openssl s_client ssl: Use sha256 in test certificates if supported Change-Id: I11a326be027545e20fbef6f90996b0c8be8c3e50 | |||
2019-02-13 | ssl: Fix renegotiation testcases | Péter Dimitrov | |
Fix failing renegotiation testcases with openssl-1.1.1a. openssl s_client sends the renegotiation "R\n" connected command to the server side causing testcase failure. This commit updates ssl_to_openssl_SUITE:erlang_ssl_receive to swallow the unexpected packet. Change-Id: I1f5d040ac65c25652f7101ddf109fc84acc4c915 | |||
2019-02-04 | ssl: Enhance error handling | Ingela Anderton Andin | |
2019-01-16 | ssl: Cuddle tests | Ingela Anderton Andin | |
2019-01-14 | ssl: Client shall only save verified sessions | Ingela Anderton Andin | |
Modernize test case option handling | |||
2019-01-10 | ssl: Add renegotiation test case to OpenSSL sanity check | Ingela Anderton Andin | |
2018-12-20 | ssl: Add renegotiate test case | Ingela Anderton Andin | |
2018-12-19 | ssl: Add renegotiate test case | Ingela Anderton Andin | |
2018-09-20 | ssl: Improve interop checks | Ingela Anderton Andin | |
2018-06-18 | Update copyright year | Henrik Nord | |
2018-05-21 | ssl: anon test should use dh or ecdh anon keyexchange | Ingela Anderton Andin | |
2018-05-21 | ssl: Correct option handling to OpenSSL | Ingela Anderton Andin | |
2018-04-30 | ssl: Run all test case combinations | Ingela Anderton Andin | |
Fix test case code to use keyAgreement for ECDH_ECDSA | |||
2018-04-28 | ssl: Update tests to reflect sslv3 is not supported by default | Ingela Anderton Andin | |
2018-03-16 | ssl: Handle EXIT messages from test code correctly | Ingela Anderton Andin | |
2018-03-09 | ssl: Remove interoperability option v2_hello_compatible | Ingela Anderton Andin | |
2018-03-06 | ssl: Fix anonymous suites regression and protocol error | Bram Verburg | |
Anonymous cipher suites were broken altogether, and there was an earlier issue where the server would send a signature in the server key exchange if a certificate was configured, even if an anonymous suite was actually negotiated. Backport of PR-1729 | |||
2018-01-25 | ssl: Check OpenSSL version for DSS (DSA) support | Ingela Anderton Andin | |
LibreSSL-2.6.3 dropped DSS (DSA) support | |||
2018-01-23 | ssl: Add record version sanity check | Ingela Anderton Andin | |
2018-01-11 | ssl: Tune timeouts | Ingela Anderton Andin | |
2017-09-30 | dtls: Compleate DTLS renegotiate implementation | Ingela Anderton Andin | |
2017-09-11 | ssl: OpenSSL-1.0.0 is really broken | Ingela Anderton Andin | |
Add exception for DTLS (not only TLS) against this broken version. Make sure configuration is clean for default test group. | |||
2017-09-01 | ssl: Make sure test initilization is clean | Ingela Anderton Andin | |
Otherwhise test can be wrongly initialized and will fail as they try to run with a broken setup. | |||
2017-08-23 | ssl: Enable more DTLS tests | Ingela Anderton Andin | |
Problems with failure of ssl_certificate_verify_SUITE when enabling DTLS-1 tests in ssl_basic_SUITE was a combination of the bug fixed by the previous commit and missing clean up code for dtls_protocol_versions application environment variable | |||
2017-08-14 | Merge branch 'ingela/ssl/timeout-cuddle' into maint | Ingela Anderton Andin | |
* ingela/ssl/timeout-cuddle: ssl: Longer timeouts for test cases that do many handshakes | |||
2017-08-10 | ssl: Longer timeouts for test cases that do many handshakes | Ingela Anderton Andin | |
2017-08-08 | ssl: Remove test of OpenSSL | Ingela Anderton Andin | |
We are not testing OpenSSL. We want to test interoperability with OpenSSL | |||
2017-08-08 | ssl: Use new cert generation | Ingela Anderton Andin | |
2017-06-30 | ssl: Workaround localhost problems | Ingela Anderton Andin | |
If net_adm:localhost() returns a FQDN we want to use it otherwise we want to use localhost. | |||
2017-05-04 | Update copyright year | Raimo Niskanen | |
2017-04-12 | ssl: Generate correct certificate chains for the ECC tests | Ingela Anderton Andin | |
The certificate chain handling had become quite entangled and was not correct. | |||
2017-03-10 | dtls: Test case fixes | Ingela Anderton Andin | |
2017-03-08 | dtls: Only test this for TLS for now | Ingela Anderton Andin | |
We want to avoid failing test cases but still be able to merge DTLS progress for 19.3 | |||
2017-03-06 | dtls: Enable some DTLS tests in ssl_to_openssl_SUITE | Ingela Anderton Andin | |
We need to figure out a good way of knowing if the OpenSSL-"DTLS server" is up. Some of the code in this commit is attempting this, but it is not really working yet, and hence only tests where OpenSSL is client are enabled. | |||
2016-11-10 | ssl: Use SHA2 for signing ECC certs if possible | Ingela Anderton Andin | |
ECC certs should preferably use SHA2, this is what we want to be testing. Also assembling of all available test suites must consider TLS version. | |||
2016-09-07 | ssl: Make sure tests get a clean start | Ingela Anderton Andin | |
2016-09-05 | ssl: Make sure to have correct default | Ingela Anderton Andin | |
2016-09-02 | ssl: Test ssl v2 clients rejection depending on configuration | Ingela Anderton Andin | |
Even though v2 is never supported v2 hellos can be. No support for v2 client hellos gives "handshake failiure" alert. Support for v2 hello but no higher SSL/TLS version offered gives "protocol version" alert. | |||
2016-08-31 | Merge branch 'ingela/ssl/cuddle' into maint | Ingela Anderton Andin | |
* ingela/ssl/cuddle: ssl: Test and test suites shall be independent of each other | |||
2016-08-30 | ssl: Timeout tuning | Ingela Anderton Andin | |
Skip some test on really slow solaris machines | |||
2016-07-08 | ssl: Test and test suites shall be independent of each other | Ingela Anderton Andin | |
Make sure ssl application has a fresh start, so that test do not fail due to that other tests did not clean up properly. | |||
2016-06-15 | ssl: Make sure openssl client does not use sslv2 hello | Ingela Anderton Andin | |
This should only be used in legacy test case not in test cases testing other functionality. | |||
2016-06-14 | Merge branch 'ingela/ssl_to_openssl_SUITE-timeouts' | Ingela Anderton Andin | |
* ingela/ssl_to_openssl_SUITE-timeouts: ssl: Timeout tuning | |||
2016-06-03 | ssl: Add option to phase out support for sslv2 client hello | Ingela Anderton Andin | |
ssl servers can recognize sslv2 client hellos to interop with clients that support higher version of SSL/TLS but also offers sslv2 Conflicts: lib/ssl/src/tls_connection.erl |