openssl/test
Matt Caswell 464175692f Simplify SSL BIO buffering logic
The write BIO for handshake messages is bufferred so that we only write
out to the network when we have a complete flight. There was some
complexity in the buffering logic so that we switched buffering on and
off at various points through out the handshake. The only real reason to
do this was historically it complicated the state machine when you wanted
to flush because you had to traverse through the "flush" state (in order
to cope with NBIO). Where we knew up front that there was only going to
be one message in the flight we switched off buffering to avoid that.

In the new state machine there is no longer a need for a flush state so
it is simpler just to have buffering on for the whole handshake. This
also gives us the added benefit that we can simply call flush after every
flight even if it only has one message in it. This means that BIO authors
can implement their own buffering strategies and not have to be aware of
the state of the SSL object (previously they would have to switch off
their own buffering during the handshake because they could not rely on
a flush being received when they really needed to write data out). This
last point addresses GitHub Issue #322.

Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-05-20 14:11:11 +01:00
..
certs Move peer chain security checks into x509_vfy.c 2016-04-03 11:35:35 -04:00
ct
d2i-tests Add ASN.1 INTEGER tests. 2016-05-03 13:06:15 +01:00
ocsp-tests
recipes VMS perl: Fix glob output 2016-05-13 14:33:41 +02:00
smime-certs
ssl-tests Remove proxy tests. Add verify callback tests. 2016-05-12 19:02:42 +02:00
testlib/OpenSSL testlib/OpenSSL/Test.pm: address 5.10 warnings. 2016-05-06 09:44:50 +02:00
aborttest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
afalgtest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
asynctest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
bftest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
bntest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
build.info Replace cipherlist test 2016-05-11 18:59:46 +02:00
CAss.cnf
CAssdh.cnf
CAssdsa.cnf
CAssrsa.cnf
casttest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
CAtsa.cnf
cipherlist_test.c Replace cipherlist test 2016-05-11 18:59:46 +02:00
clienthellotest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
cms-examples.pl Copyright consolidation: perl files 2016-04-20 09:45:40 -04:00
constant_time_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ct_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
d2i_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
danetest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
danetest.in
danetest.pem
destest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
dhtest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
dsatest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
dtlsv1listentest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ecdhtest_cavs.h Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ecdhtest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ecdsatest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ectest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
enginetest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
evp_extra_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
evp_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
evptests.txt
exdatatest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
exptest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
generate_ssl_tests.pl New SSL test framework 2016-04-05 13:44:46 +02:00
gmdifftest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
handshake_helper.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
handshake_helper.h Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
heartbeat_test.c Simplify SSL BIO buffering logic 2016-05-20 14:11:11 +01:00
hmactest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ideatest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
igetest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
md2test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
md4test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
md5test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
mdc2test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
memleaktest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
methtest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
nptest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
p5_crpt2_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
P1ss.cnf
P2ss.cnf
packettest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
pbelutest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
pkcs7-1.pem
pkcs7.pem
pkits-test.pl Copyright consolidation: perl files 2016-04-20 09:45:40 -04:00
r160test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
randtest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
rc2test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
rc4test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
rc5test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
README
README.ssltest.md Remove proxy tests. Add verify callback tests. 2016-05-12 19:02:42 +02:00
rmdtest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
rsa_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
run_tests.pl Replace cipherlist test 2016-05-11 18:59:46 +02:00
secmemtest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
serverinfo.pem
sha1test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
sha256t.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
sha512t.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
smcont.txt
srptest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ssl_test_ctx_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ssl_test_ctx_test.conf Remove proxy tests. Add verify callback tests. 2016-05-12 19:02:42 +02:00
ssl_test_ctx.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ssl_test_ctx.h Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ssl_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
ssl_test.tmpl New SSL test framework 2016-04-05 13:44:46 +02:00
ssltest_old.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
Sssdsa.cnf
Sssrsa.cnf
test_aesni
test_padlock
test_t4
test.cnf
testcrl.pem
testdsa.pem
testdsapub.pem
testec-p256.pem
testecpub-p256.pem
testp7.pem
testreq2.pem
testrsa.pem
testrsapub.pem
testsid.pem
testutil.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
testutil.h Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
testx509.pem
threadstest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
times
Uss.cnf
v3-cert1.pem
v3-cert2.pem
v3nametest.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
verify_extra_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
wp_test.c Copyright consolidation 02/10 2016-05-17 14:20:27 -04:00
x509aux.c Fix i2d_X509_AUX, update docs and add tests 2016-05-11 01:46:06 -04:00

How to add recipes
==================

For any test that you want to perform, you write a script located in
test/recipes/, named {nn}-test_{name}.t, where {nn} is a two digit number and
{name} is a unique name of your choice.

Please note that if a test involves a new testing executable, you will need to
do some additions in test/Makefile.  More on this later.


Naming convetions
=================

A test executable is named test/{name}test.c

A test recipe is named test/recipes/{nn}-test_{name}.t, where {nn} is a two
digit number and {name} is a unique name of your choice.

The number {nn} is (somewhat loosely) grouped as follows:

05  individual symmetric cipher algorithms
10  math (bignum)
15  individual asymmetric cipher algorithms
20  openssl enc
25  certificate forms, generation and verification
30  engine and evp
70  PACKET layer
80  "larger" protocols (CA, CMS, OCSP, SSL, TSA)
90  misc


A recipe that just runs a test executable
=========================================

A script that just runs a program looks like this:

    #! /usr/bin/perl
    
    use OpenSSL::Test::Simple;
    
    simple_test("test_{name}", "{name}test", "{name}");

{name} is the unique name you have chosen for your test.

The second argument to `simple_test' is the test executable, and `simple_test'
expects it to be located in test/

For documentation on OpenSSL::Test::Simple, do
`perldoc test/testlib/OpenSSL/Test/Simple.pm'.


A recipe that runs a more complex test
======================================

For more complex tests, you will need to read up on Test::More and
OpenSSL::Test.  Test::More is normally preinstalled, do `man Test::More' for
documentation.  For OpenSSL::Test, do `perldoc test/testlib/OpenSSL/Test.pm'.

A script to start from could be this:

    #! /usr/bin/perl
    
    use strict;
    use warnings;
    use OpenSSL::Test;
    
    setup("test_{name}");
    
    plan tests => 2;                # The number of tests being performed
    
    ok(test1, "test1");
    ok(test2, "test1");
    
    sub test1
    {
        # test feature 1
    }
    
    sub test2
    {
        # test feature 2
    }
    

Changes to test/Makefile
========================

Whenever a new test involves a new test executable you need to do the
following (at all times, replace {NAME} and {name} with the name of your
test):

* among the variables for test executables at the beginning, add a line like
  this:

    {NAME}TEST= {name}test

* add `$({NAME}TEST)$(EXE_EXT)' to the assignment of EXE:

* add `$({NAME}TEST).o' to the assignment of OBJ:

* add `$({NAME}TEST).c' to the assignment of SRC:

* add the following lines for building the executable:

    $({NAME}TEST)$(EXE_EXT): $({NAME}TEST).o $(DLIBCRYPTO)
           @target=$({NAME}TEST); $(BUILD_CMD)