openssl/test/recipes
Tomas Mraz cccf532fef Disallow certs with explicit curve in verification chain
The check is applied only with X509_V_FLAG_X509_STRICT.

Fixes #12139

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/12683)
2020-09-17 17:15:15 +02:00
..
04-test_conf_data
04-test_params_conversion_data
04-test_pem_data Rename NOTES*, README*, VERSION, HACKING, LICENSE to .md or .txt 2020-07-05 11:29:43 +02:00
10-test_bn_data
15-test_ecparam_data
15-test_mp_rsa_data
15-test_rsaoaep_data Test RSA oaep in fips mode 2020-07-23 17:40:40 +10:00
25-test_eai_data EAI test script and data 2020-08-26 14:04:17 +03:00
25-test_rusext_data
30-test_evp_data EVP: Expand the use of EVP_PKEY_CTX_md() 2020-09-08 12:07:36 +02:00
30-test_evp_pkey_provided Update test data for DSA public key text 2020-08-31 14:49:16 +10:00
61-test_bio_prefix_data
65-test_cmp_client_data
65-test_cmp_msg_data Add libctx/provider support to cmp_msg_test 2020-08-21 09:04:13 +02:00
65-test_cmp_protect_data
65-test_cmp_server_data
65-test_cmp_vfy_data
80-test_ca_data apps/ca: allow CRL lastUpdate/nextUpdate fields to be specified 2020-09-11 14:32:27 +03:00
80-test_cms_data
80-test_ocsp_data
81-test_cmp_cli_data test/recipes/81-test_cmp_cli_data/Mock/server.cnf: minor cleanup 2020-09-10 07:35:07 +02:00
90-test_gost_data
90-test_includes_data
90-test_sslapi_data
90-test_store_data
95-test_external_gost_engine_data
95-test_external_krb5_data
95-test_external_pyca_data
01-test_abort.t
01-test_sanity.t
01-test_symbol_presence.t NonStop port updates for 3.0.0. 2020-09-12 20:32:11 +02:00
01-test_test.t
02-test_errstr.t TEST: skip POSIX errcode zero in tesst/recipes/02-test_errstr.t 2020-09-12 03:51:21 +02:00
02-test_internal_context.t
02-test_internal_ctype.t
02-test_internal_keymgmt.t
02-test_internal_provider.t
02-test_lhash.t
02-test_ordinals.t
02-test_sparse_array.t
02-test_stack.t
03-test_exdata.t
03-test_fipsinstall.t Add self tests for rsa encryption 2020-09-16 14:10:23 +10:00
03-test_internal_asn1_dsa.t
03-test_internal_asn1.t
03-test_internal_bn.t
03-test_internal_chacha.t
03-test_internal_curve448.t
03-test_internal_ec.t
03-test_internal_ffc.t
03-test_internal_mdc2.t
03-test_internal_modes.t
03-test_internal_namemap.t
03-test_internal_poly1305.t
03-test_internal_rsa_sp800_56b.t
03-test_internal_siphash.t
03-test_internal_sm2.t
03-test_internal_sm4.t
03-test_internal_ssl_cert_table.t
03-test_internal_x509.t
03-test_params_api.t
03-test_property.t
03-test_ui.t
04-test_asn1_decode.t
04-test_asn1_encode.t
04-test_asn1_string_table.t
04-test_bio_callback.t
04-test_bioprint.t
04-test_conf.t
04-test_encoder_decoder.t Rename OSSL_SERIALIZER / OSSL_DESERIALIZER to OSSL_ENCODE / OSSL_DECODE 2020-08-21 09:23:58 +02:00
04-test_err.t
04-test_hexstring.t
04-test_param_build.t
04-test_params_conversion.t
04-test_params.t
04-test_pem.t
04-test_provider_fallback.t
04-test_provider.t
05-test_bf.t
05-test_cast.t
05-test_cmac.t
05-test_des.t
05-test_hmac.t
05-test_idea.t
05-test_rand.t rand: instantiate the DRBGs upon first use. 2020-08-28 10:19:56 +10:00
05-test_rc2.t
05-test_rc4.t
05-test_rc5.t
06-test-rdrand.t
10-test_bn.t
10-test_exp.t
15-test_dh.t
15-test_dsa.t
15-test_ec.t
15-test_ecdsa.t
15-test_ecparam.t
15-test_gendh.t
15-test_gendsa.t Fix DSA/DH so that legacy keys can still be generated by the default provider 2020-08-17 23:40:20 +10:00
15-test_genec.t Add Explicit EC parameter support to providers. 2020-08-22 14:55:41 +10:00
15-test_genrsa.t TEST: Ensure that the base provider i activated when needed 2020-09-03 17:48:33 +02:00
15-test_mp_rsa.t
15-test_out_option.t
15-test_rsa.t
15-test_rsaoaep.t TEST: Ensure that the base provider i activated when needed 2020-09-03 17:48:33 +02:00
15-test_rsapss.t
20-test_app.t
20-test_cli_fips.t Add CLI tests in FIPS configuration 2020-08-24 14:49:03 +03:00
20-test_dgst.t Test HMAC output from the dgst CLI 2020-09-17 11:12:08 +03:00
20-test_enc_more.t Apps: change provider_path option to provider-path. 2020-08-18 19:31:42 +10:00
20-test_enc.t Apps: change provider_path option to provider-path. 2020-08-18 19:31:42 +10:00
20-test_kdf.t
20-test_mac.t
20-test_passwd.t
20-test_pkeyutl.t "Downgrade" provider-native keys to legacy where needed 2020-09-03 17:48:32 +02:00
20-test_provider.t
25-test_crl.t
25-test_d2i.t
25-test_eai_data.t EAI test script and data 2020-08-26 14:04:17 +03:00
25-test_pkcs7.t
25-test_req.t "Downgrade" provider-native keys to legacy where needed 2020-09-03 17:48:32 +02:00
25-test_rusext.t
25-test_sid.t
25-test_verify_store.t
25-test_verify.t Disallow certs with explicit curve in verification chain 2020-09-17 17:15:15 +02:00
25-test_x509.t Make better use of new load_cert_pass() variant of load_cert() in apps/ 2020-08-20 14:55:52 +02:00
30-test_acvp.t Make -provider_name and -section_name optional 2020-07-15 23:17:29 +02:00
30-test_aesgcm.t
30-test_afalg.t
30-test_defltfips.t Test that EVP_default_properties_is_fips_enabled() works early 2020-08-17 11:27:51 +01:00
30-test_engine.t Update copyright year 2020-08-06 13:22:30 +01:00
30-test_evp_extra.t
30-test_evp_fetch_prov.t Make -provider_name and -section_name optional 2020-07-15 23:17:29 +02:00
30-test_evp_kdf.t
30-test_evp_libctx.t Fix provider cipher reinit issue 2020-07-22 10:40:55 +10:00
30-test_evp_pkey_dparam.t
30-test_evp_pkey_provided.t
30-test_evp.t TEST: Ensure that the base provider i activated when needed 2020-09-03 17:48:33 +02:00
30-test_pbelu.t
30-test_pkey_meth_kdf.t
30-test_pkey_meth.t
30-test_provider_status.t Add 'on demand self test' and status test to providers 2020-08-09 18:06:52 +10:00
40-test_rehash.t
60-test_x509_check_cert_pkey.t
60-test_x509_dup_cert.t
60-test_x509_store.t
60-test_x509_time.t
61-test_bio_prefix.t
65-test_cmp_asn.t
65-test_cmp_client.t TEST: Ensure that the base provider i activated when needed 2020-09-03 17:48:33 +02:00
65-test_cmp_ctx.t
65-test_cmp_hdr.t
65-test_cmp_msg.t TEST: Ensure that the base provider i activated when needed 2020-09-03 17:48:33 +02:00
65-test_cmp_protect.t TEST: Ensure that the base provider i activated when needed 2020-09-03 17:48:33 +02:00
65-test_cmp_server.t Add libctx/provider support to cmp_server_test 2020-08-21 09:04:11 +02:00
65-test_cmp_status.t
65-test_cmp_vfy.t Add libctx/provider support to cmp_vfy_test 2020-08-21 09:04:13 +02:00
66-test_ossl_store.t Fix coverity issue: CID 1466486 - Resource leak in OSSL_STORE 2020-09-12 15:57:23 +10:00
70-test_asyncio.t
70-test_bad_dtls.t
70-test_clienthello.t
70-test_comp.t
70-test_key_share.t
70-test_packet.t
70-test_recordlen.t
70-test_renegotiation.t Update copyright year 2020-07-16 14:47:04 +02:00
70-test_servername.t
70-test_sslcbcpadding.t
70-test_sslcertstatus.t
70-test_sslextension.t Update copyright year 2020-07-16 14:47:04 +02:00
70-test_sslmessages.t
70-test_sslrecords.t Update copyright year 2020-07-16 14:47:04 +02:00
70-test_sslsessiontick.t
70-test_sslsigalgs.t Reduce the security bits for MD5 and SHA1 based signatures in TLS 2020-06-27 08:41:40 +02:00
70-test_sslsignature.t
70-test_sslskewith0p.t
70-test_sslversions.t Reduce the security bits for MD5 and SHA1 based signatures in TLS 2020-06-27 08:41:40 +02:00
70-test_sslvertol.t
70-test_tls13alerts.t
70-test_tls13cookie.t
70-test_tls13downgrade.t Update copyright year 2020-07-16 14:47:04 +02:00
70-test_tls13hrr.t
70-test_tls13kexmodes.t
70-test_tls13messages.t
70-test_tls13psk.t
70-test_tlsextms.t
70-test_verify_extra.t Update copyright year 2020-07-16 14:47:04 +02:00
70-test_wpacket.t
71-test_ssl_ctx.t
80-test_ca.t apps/ca: allow CRL lastUpdate/nextUpdate fields to be specified 2020-09-11 14:32:27 +03:00
80-test_cipherbytes.t
80-test_cipherlist.t
80-test_ciphername.t
80-test_cms.t Add CMS AuthEnvelopedData with AES-GCM support 2020-09-08 15:43:11 +02:00
80-test_cmsapi.t
80-test_ct.t
80-test_dane.t
80-test_dtls_mtu.t
80-test_dtls.t
80-test_dtlsv1listen.t
80-test_http.t
80-test_ocsp.t
80-test_pkcs12.t apps/pkcs12.c: Add -untrusted option 2020-08-27 20:08:44 +02:00
80-test_ssl_new.t TEST: Ensure that the base provider i activated when needed 2020-09-03 17:48:33 +02:00
80-test_ssl_old.t TEST: Ensure that the base provider i activated when needed 2020-09-03 17:48:33 +02:00
80-test_ssl_test_ctx.t
80-test_sslcorrupt.t
80-test_tsa.t Update copyright year 2020-08-06 13:22:30 +01:00
80-test_x509aux.t
81-test_cmp_cli.t 81-test_cmp_cli: Make test output files all different according to #11080 2020-09-10 07:35:07 +02:00
90-test_asn1_time.t
90-test_async.t
90-test_bio_enc.t
90-test_bio_memleak.t
90-test_constant_time.t
90-test_fatalerr.t
90-test_gmdiff.t
90-test_gost.t
90-test_ige.t
90-test_includes.t
90-test_memleak.t
90-test_overhead.t
90-test_secmem.t
90-test_shlibload.t NonStop port updates for 3.0.0. 2020-09-12 20:32:11 +02:00
90-test_srp.t
90-test_sslapi.t TEST: Ensure that the base provider i activated when needed 2020-09-03 17:48:33 +02:00
90-test_sslbuffers.t
90-test_store.t TEST: Modify test/recipes/90-test_store.t for use with different 'file:' loaders 2020-09-03 17:48:32 +02:00
90-test_sysdefault.t
90-test_threads.t
90-test_time_offset.t
90-test_tls13ccs.t
90-test_tls13encryption.t
90-test_tls13secrets.t
90-test_v3name.t
95-test_external_boringssl.t
95-test_external_gost_engine.t
95-test_external_krb5.t Rename NOTES*, README*, VERSION, HACKING, LICENSE to .md or .txt 2020-07-05 11:29:43 +02:00
95-test_external_pyca.t
99-test_ecstress.t
99-test_fuzz.t 99-test_fuzz.t: Clean up and re-organize such that sub-tests could be split easily 2020-07-16 21:44:26 +02:00
fuzz.pl 99-test_fuzz.t: Clean up and re-organize such that sub-tests could be split easily 2020-07-16 21:44:26 +02:00
ocsp-response.der
tconversion.pl