mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-12-15 06:01:37 +08:00
Code Issues Packages Projects Releases Wiki Activity
25,583 Commits 34 Branches 385 Tags 513 MiB
433deaffce
Commit Graph

15 Commits

Author SHA1 Message Date
Rich Salz
433deaffce Use .cnf for config files, not .conf 
The default is openssl.cnf  The project seems to prefer xxx.conf these
days, but we should use the default convention.

Rename all foo.conf (except for Configurations) to foo.cnf

Fixes #11174

Reviewed-by: Paul Yang <kaishen.yy@antfin.com>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/11176)
 2020-03-06 18:25:13 +01:00
Richard Levitte
909f1a2e51 Following the license change, modify the boilerplates in test/ 
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/7767)
 2018-12-06 14:19:22 +01:00
Matt Caswell
86ed2e1cb0 Fix a bug in test_sslversions 
The TLSv1.4 tolerance test wasn't testing what we thought it was.

Reviewed-by: Ben Kaduk <kaduk@mit.edu>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6741)
 2018-08-15 12:33:30 +01:00
Matt Caswell
35e742ecac Update code for the final RFC version of TLSv1.3 (RFC8446) 
Reviewed-by: Ben Kaduk <kaduk@mit.edu>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6741)
 2018-08-15 12:33:30 +01:00
Matt Caswell
d8434cf856 Validate legacy_version 
The spec says that a client MUST set legacy_version to TLSv1.2, and
requires servers to verify that it isn't SSLv3.

Fixes #6600

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6747)
 2018-07-20 10:52:02 +01:00
Matt Caswell
73cc84a132 Suport TLSv1.3 draft 28 
Also retains support for drafts 27 and 26

Fixes #6257

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6258)
 2018-05-15 10:02:59 +01:00
Matt Caswell
6738bf1417 Update copyright year 
Reviewed-by: Richard Levitte <levitte@openssl.org>
 2018-02-13 13:59:25 +00:00
Richard Levitte
c5856878f7 Enable TLSProxy tests on Windows 
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/5094)
 2018-01-20 09:22:20 +01:00
Matt Caswell
2d729db2f0 Send TLSv1.2 as the record version when using TLSv1.3 
Reviewed-by: Ben Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/4701)
 2017-12-14 15:06:37 +00:00
Matt Caswell
b9647e34ff Add a test for the TLSv1.3 downgrade mechanism 
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/3022)
 2017-03-24 14:07:11 +00:00
Bernd Edlinger
d734582275 Reset executable bits on files where not needed. 
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2835)
 2017-03-03 09:13:40 +01:00
Matt Caswell
16abbd11cd Fix test_sslversions to know that TLSv1.3 sets record version to TLSv1.0 
This also acts as a test for the bug fixed in the previous commit.

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2157)
 2017-01-10 23:02:50 +00:00
Matt Caswell
54682aa357 Give the test with only TLS1.1 and TLS1.0 a better name 
Reviewed-by: Rich Salz <rsalz@openssl.org>
 2016-11-09 16:03:09 +00:00
Matt Caswell
17d01b4201 Add some more version tests 
Send a TLS1.4 ClientHello with supported_versions and get TLS1.3
Send a TLS1.3 ClientHello without supported_versions and get TLS1.2

Reviewed-by: Rich Salz <rsalz@openssl.org>
 2016-11-09 16:03:09 +00:00
Matt Caswell
203b1cdf73 Add a test for the supported_versions extension 
Reviewed-by: Rich Salz <rsalz@openssl.org>
 2016-11-09 16:03:08 +00:00