openssl/test
Richard Levitte 3262300a2c Adjust the few places where the string length was confused
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14168)
2021-02-18 16:58:17 +01:00
..
certs check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS 2021-01-28 15:05:04 +01:00
ct
d2i-tests
helpers Add internal X509_add_certs_new(), which simplifies matters 2021-02-18 16:50:12 +01:00
ocsp-tests
ossl_shim Add more diagnostics to ossl_shim 2020-11-02 11:28:24 -08:00
recipes Update copyright year 2021-02-18 15:05:17 +00:00
smime-certs Update copyright year 2021-01-28 13:54:57 +01:00
ssl-tests Update copyright year 2021-02-18 15:05:17 +00:00
testutil TEST: move cert, key, and CSR loading aux functions to new testutil/load.c 2021-01-13 09:09:36 +01:00
aborttest.c
acvp_test.c Update copyright year 2021-02-18 15:05:17 +00:00
acvp_test.inc Drop OPENSSL_NO_RSA everywhere 2020-12-20 12:19:42 +01:00
aesgcmtest.c Update copyright year 2021-01-28 13:54:57 +01:00
afalgtest.c Update copyright year 2020-07-16 14:47:04 +02:00
algorithmid_test.c TEST: Add an algorithm ID tester for libcrypto vs provider 2021-02-05 15:44:39 +01:00
asn1_decode_test.c Add a test for encoding/decoding using an invalid ASN.1 Template 2020-12-08 10:17:03 +00:00
asn1_dsa_internal_test.c Update copyright year 2020-10-15 14:10:06 +01:00
asn1_encode_test.c Add a test for encoding/decoding using an invalid ASN.1 Template 2020-12-08 10:17:03 +00:00
asn1_internal_test.c
asn1_string_table_test.c
asn1_time_test.c
asynciotest.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
asynctest.c Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 2020-10-15 11:59:53 +01:00
bad_dtls_test.c Revert "The EVP_MAC functions have been renamed for consistency. The EVP_MAC_CTX_*" 2020-07-16 14:21:07 +02:00
bftest.c
bio_callback_test.c
bio_enc_test.c
bio_memleak_test.c
bio_prefix_text.c
bioprinttest.c
bn_internal_test.c
bn_rand_range.h Test of uniformity of BN_rand_range output. 2019-05-29 09:54:29 +10:00
bntest.c Update copyright year 2020-10-15 14:10:06 +01:00
bntests.pl
build.info Deprecate the libssl level SRP APIs 2021-02-12 08:47:32 +00:00
ca-and-certs.cnf
casttest.c
CAtsa.cnf
chacha_internal_test.c
cipher_overhead_test.c Update copyright year 2021-02-18 15:05:17 +00:00
cipherbytes_test.c Fix safestack issues in ssl.h 2020-09-13 11:09:45 +01:00
cipherlist_test.c Fix safestack issues in ssl.h 2020-09-13 11:09:45 +01:00
ciphername_test.c Fix safestack issues in ssl.h 2020-09-13 11:09:45 +01:00
clienthellotest.c
cmactest.c
cmp_asn_test.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
cmp_client_test.c Update copyright year 2021-01-28 13:54:57 +01:00
cmp_ctx_test.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
cmp_hdr_test.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
cmp_msg_test.c Update copyright year 2021-01-28 13:54:57 +01:00
cmp_protect_test.c Update copyright year 2021-01-28 13:54:57 +01:00
cmp_server_test.c Use adapted test_get_libctx() for simpler test setup and better error reporting 2020-12-10 11:01:26 +01:00
cmp_status_test.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
cmp_vfy_test.c Update copyright year 2021-01-28 13:54:57 +01:00
cms-examples.pl
cmsapitest.c Update copyright year 2021-01-28 13:54:57 +01:00
conf_include_test.c
confdump.c Fix safestack issues in conf.h 2020-09-13 11:11:20 +01:00
constant_time_test.c
context_internal_test.c Update copyright year 2020-10-15 14:10:06 +01:00
crltest.c Fix safestack issues in x509.h 2020-09-13 11:09:45 +01:00
ct_test.c Fix safestack issues in ct.h 2020-09-13 11:10:41 +01:00
ctype_internal_test.c
curve448_internal_test.c Fix ecx so that is uses a settable propertyquery 2020-09-23 17:31:40 +10:00
d2i_test.c
danetest.c Update copyright year 2021-02-18 15:05:17 +00:00
danetest.in
danetest.pem
data2.bin TEST: Make our test data binary 2020-11-24 11:01:58 +01:00
data.bin TEST: Make our test data binary 2020-11-24 11:01:58 +01:00
default-and-fips.cnf
default-and-legacy.cnf
default.cnf
defltfips_test.c Test that EVP_default_properties_is_fips_enabled() works early 2020-08-17 11:27:51 +01:00
destest.c
dhtest.c
drbgtest.c Update copyright year 2021-01-28 13:54:57 +01:00
dsa_no_digest_size_test.c
dsatest.c Swap to FIPS186-2 DSA generation outside of the FIPS module 2020-11-18 14:54:18 +00:00
dtls_mtu_test.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
dtlstest.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
dtlsv1listentest.c
ec_internal_test.c Update copyright year 2021-02-18 15:05:17 +00:00
ecdsatest.c Add SM2 key management 2020-09-22 08:17:57 +01:00
ecdsatest.h
ecstresstest.c
ectest.c Simplify the EVP_PKEY_XXX_fromdata_XX methods. 2021-02-08 16:33:43 +10:00
endecode_test.c Update copyright year 2021-02-18 15:05:17 +00:00
endecoder_legacy_test.c Update copyright year 2021-02-18 15:05:17 +00:00
enginetest.c EVP: deprecate the EVP_X_meth_ functions. 2020-07-22 20:19:01 +10:00
errtest.c TEST: Adapt test/errtest for the 'no-err' configuration 2020-11-27 12:02:56 +01:00
evp_extra_test2.c Use adapted test_get_libctx() for simpler test setup and better error reporting 2020-12-10 11:01:26 +01:00
evp_extra_test.c Rename OSSL_ENCODER_CTX_new_by_EVP_PKEY and OSSL_DECODER_CTX_new_by_EVP_PKEY 2021-02-17 15:26:12 +01:00
evp_fetch_prov_test.c Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 2020-10-15 11:59:53 +01:00
evp_kdf_test.c Adjust the few places where the string length was confused 2021-02-18 16:58:17 +01:00
evp_libctx_test.c Rename OSSL_ENCODER_CTX_new_by_EVP_PKEY and OSSL_DECODER_CTX_new_by_EVP_PKEY 2021-02-17 15:26:12 +01:00
evp_pkey_dparams_test.c Add necessary checks of OPENSSL_NO_DH, OPENSSL_NO_DSA and OPENSSL_NO_EC 2020-12-16 11:56:38 +01:00
evp_pkey_provided_test.c Update copyright year 2021-02-18 15:05:17 +00:00
evp_test.c Update copyright year 2021-01-28 13:54:57 +01:00
exdatatest.c
exptest.c
fatalerrtest.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
ffc_internal_test.c Deprecate more DH functions 2020-11-27 11:04:54 +00:00
filterprov.c Update copyright year 2021-02-18 15:05:17 +00:00
fips-and-base.cnf Add CLI tests in FIPS configuration 2020-08-24 14:49:03 +03:00
fips.cnf Test that EVP_default_properties_is_fips_enabled() works early 2020-08-17 11:27:51 +01:00
generate_buildtest.pl
generate_ssl_tests.pl
gmdifftest.c
gosttest.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
hexstr_test.c Change OPENSSL_hexstr2buf_ex() & OPENSSL_buf2hexstr_ex() to pass the separator 2020-12-07 17:14:58 +10:00
hmactest.c
http_test.c Update copyright year 2021-01-28 13:54:57 +01:00
ideatest.c
igetest.c
insta_ca.cert.pem
insta.priv.pem
keymgmt_internal_test.c Deprecate RSA harder 2020-11-18 23:38:34 +01:00
legacy.cnf
lhash_test.c Update copyright year 2020-10-15 14:10:06 +01:00
mdc2_internal_test.c
mdc2test.c
memleaktest.c
modes_internal_test.c
moduleloadtest.c TEST: Add a simple module loader, and test the FIPS module with it 2020-12-01 11:06:03 +01:00
namemap_internal_test.c
ocspapitest.c Fix safestack issues in x509.h 2020-09-13 11:09:45 +01:00
ossl_store_test.c STORE: clear err after ossl_store_get0_loader_int 2020-12-08 18:23:29 +01:00
p_test.c
packettest.c
param_build_test.c
params_api_test.c OSSL_PARAM: Correct the assumptions on the UTF8 string length 2021-02-18 16:58:17 +01:00
params_conversion_test.c
params_test.c OSSL_PARAM: Correct the assumptions on the UTF8 string length 2021-02-18 16:58:17 +01:00
pbelutest.c
pem_read_depr_test.c Test various deprecated PEM_read_bio_* APIs 2020-11-25 10:02:59 +00:00
pemtest.c
pkcs7-1.pem
pkcs7.pem
pkcs12_format_test.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
pkey_meth_kdf_test.c Update copyright year 2020-10-15 14:10:06 +01:00
pkey_meth_test.c Update copyright year 2020-08-06 13:22:30 +01:00
pkits-test.pl
poly1305_internal_test.c
property_test.c Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 2020-10-15 11:59:53 +01:00
provider_fallback_test.c Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 2020-10-15 11:59:53 +01:00
provider_internal_test.c CORE: Separate OSSL_PROVIDER activation from OSSL_PROVIDER reference 2020-12-17 12:02:08 +01:00
provider_internal_test.cnf.in
provider_status_test.c Rename OPENSSL_CTX prefix to OSSL_LIB_CTX 2020-10-15 11:59:53 +01:00
provider_test.c
proxy.cnf
rand_status_test.c rand: instantiate the DRBGs upon first use. 2020-08-28 10:19:56 +10:00
rc2test.c
rc4test.c
rc5test.c
rdrand_sanitytest.c
README-dev.md
README-external.md
README.md test: document the random test ordering env variable 2020-12-15 20:03:07 +10:00
README.ssltest.md
recordlentest.c Update copyright year 2021-02-18 15:05:17 +00:00
rsa_complex.c
rsa_mp_test.c Drop OPENSSL_NO_RSA everywhere 2020-12-20 12:19:42 +01:00
rsa_sp800_56b_test.c Drop OPENSSL_NO_RSA everywhere 2020-12-20 12:19:42 +01:00
rsa_test.c Update copyright year 2021-02-18 15:05:17 +00:00
run_tests.pl Update copyright year 2021-02-18 15:05:17 +00:00
sanitytest.c
secmemtest.c
serverinfo2.pem
serverinfo.pem
servername_test.c Update copyright year 2021-02-18 15:05:17 +00:00
session.pem
shibboleth.pfx
shlibloadtest.c TEST: Break out the local dynamic loading code from shlibloadtest.c 2020-12-01 11:06:03 +01:00
simpledynamic.c Fix simpledynamic.c - a typo and missed a header 2020-12-02 00:25:01 +11:00
simpledynamic.h Update copyright year 2021-01-28 13:54:57 +01:00
siphash_internal_test.c
sm2_internal_test.c
sm4_internal_test.c
smcont_zero.txt Tests for processing zero-length content in SMIME format 2020-10-08 18:17:44 +03:00
smcont.txt
sparse_array_test.c
srptest.c Update copyright year 2021-02-18 15:05:17 +00:00
ssl_cert_table_internal_test.c
ssl_ctx_test.c
ssl_old_test.c Stop disabling TLSv1.3 if ec and dh are disabled 2021-02-05 15:22:40 +00:00
ssl_test_ctx_test.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
ssl_test_ctx_test.cnf
ssl_test.c Update copyright year 2021-02-18 15:05:17 +00:00
ssl_test.tmpl
sslapitest.c Simplify the EVP_PKEY_XXX_fromdata_XX methods. 2021-02-08 16:33:43 +10:00
sslbuffertest.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
sslcorrupttest.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
stack_test.c Update copyright year 2021-02-18 15:05:17 +00:00
sysdefault.cnf
sysdefaulttest.c
test_test.c
test.cnf
testcrl.pem
testdsa.pem
testdsapub.pem
testec-p256.pem
testecpub-p256.pem
tested448.pem
tested448pub.pem
tested25519.pem
tested25519pub.pem
testp7.pem
testreq2.pem
testrsa2048.pem Add fips checks for rsa encryption 2020-09-18 14:20:38 +01:00
testrsa.pem Support writing RSA keys using the traditional format again 2020-09-09 18:32:10 +02:00
testrsapss.pem rsa_kmgmt: Return OSSL_PKEY_PARAM_DEFAULT_DIGEST for unrestricted PSS keys 2021-01-29 10:47:02 +01:00
testrsapssmandatory.pem RSA: properly generate algorithm identifier for RSA-PSS signatures 2021-02-05 14:04:59 +01:00
testrsapub.pem
testsid.pem
testutil.h Update copyright year 2021-01-28 13:54:57 +01:00
testx509.pem Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set,vfy}.c 2020-09-11 07:42:22 +02:00
threadstest.c Add a multi-thread test for shared EVP_PKEYs 2021-02-02 12:21:21 +00:00
time_offset_test.c
tls13ccstest.c test cleanup: move helper .c and .h files to test/helpers/ 2020-12-01 07:49:38 +01:00
tls13encryptiontest.c
tls13secretstest.c Update copyright year 2021-01-28 13:54:57 +01:00
tls-provider.c Update copyright year 2021-02-18 15:05:17 +00:00
uitest.c Update copyright year 2020-10-15 14:10:06 +01:00
v3_ca_exts.cnf make various test CA certs RFC 5280 compliant w.r.t. X509 extensions 2021-01-20 15:53:47 +01:00
v3-cert1.pem
v3-cert2.pem
v3ext.c
v3nametest.c v3nametest: Make the gennames structure static 2020-12-09 13:41:30 +01:00
verify_extra_test.c Update copyright year 2021-01-28 13:54:57 +01:00
versions.c
wpackettest.c
x509_check_cert_pkey_test.c
x509_dup_cert_test.c
x509_internal_test.c
x509_time_test.c
x509aux.c Update copyright year 2021-01-28 13:54:57 +01:00

Using OpenSSL Tests

After a successful build, and before installing, the libraries should be tested. Run:

$ make test                                      # Unix
$ mms test                                       ! OpenVMS
$ nmake test                                     # Windows

Warning: you MUST run the tests from an unprivileged account (or disable your privileges temporarily if your platform allows it).

If some tests fail, take a look at the section Test Failures below.

Test Failures

If some tests fail, look at the output. There may be reasons for the failure that isn't a problem in OpenSSL itself (like an OS malfunction or a Perl issue). You may want increased verbosity, that can be accomplished like this:

Full verbosity, showing full output of all successful and failed test cases (make macro VERBOSE or V):

$ make V=1 test                                  # Unix
$ mms /macro=(V=1) test                          ! OpenVMS
$ nmake V=1 test                                 # Windows

Verbosity on failed (sub-)tests only (VERBOSE_FAILURE or VF or REPORT_FAILURES):

$ make test VF=1

Verbosity on failed (sub-)tests, in addition progress on succeeded (sub-)tests (VERBOSE_FAILURE_PROGRESS or VFP or REPORT_FAILURES_PROGRESS):

$ make test VFP=1

If you want to run just one or a few specific tests, you can use the make variable TESTS to specify them, like this:

$ make TESTS='test_rsa test_dsa' test            # Unix
$ mms/macro="TESTS=test_rsa test_dsa" test       ! OpenVMS
$ nmake TESTS='test_rsa test_dsa' test           # Windows

And of course, you can combine (Unix examples shown):

$ make test TESTS='test_rsa test_dsa' VF=1
$ make test TESTS="test_cmp_*" VFP=1

You can find the list of available tests like this:

$ make list-tests                                # Unix
$ mms list-tests                                 ! OpenVMS
$ nmake list-tests                               # Windows

Have a look at the manual for the perl module Test::Harness to see what other HARNESS_* variables there are.

To report a bug please open an issue on GitHub, at https://github.com/openssl/openssl/issues.

For more details on how the make variables TESTS can be used, see section Running Selected Tests below.

Running Selected Tests

The make variable TESTS supports a versatile set of space separated tokens with which you can specify a set of tests to be performed. With a "current set of tests" in mind, initially being empty, here are the possible tokens:

 alltests      The current set of tests becomes the whole set of available
               tests (as listed when you do 'make list-tests' or similar).

 xxx           Adds the test 'xxx' to the current set of tests.

-xxx           Removes 'xxx' from the current set of tests.  If this is the
               first token in the list, the current set of tests is first
               assigned the whole set of available tests, effectively making
               this token equivalent to TESTS="alltests -xxx".

 nn            Adds the test group 'nn' (which is a number) to the current
               set of tests.

-nn            Removes the test group 'nn' from the current set of tests.
               If this is the first token in the list, the current set of
               tests is first assigned the whole set of available tests,
               effectively making this token equivalent to
               TESTS="alltests -xxx".

Also, all tokens except for "alltests" may have wildcards, such as *. (on Unix and Windows, BSD style wildcards are supported, while on VMS, it's VMS style wildcards)

Examples

Run all tests except for the fuzz tests:

$ make TESTS='-test_fuzz*' test

or, if you want to be explicit:

$ make TESTS='alltests -test_fuzz*' test

Run all tests that have a name starting with "test_ssl" but not those starting with "test_ssl_":

$ make TESTS='test_ssl* -test_ssl_*' test

Run only test group 10:

$ make TESTS='10' test

Run all tests except the slow group (group 99):

$ make TESTS='-99' test

Run all tests in test groups 80 to 99 except for tests in group 90:

$ make TESTS='[89]? -90' test

To run specific fuzz tests you can use for instance:

$ make test TESTS='test_fuzz_cmp test_fuzz_cms'

To stochastically verify that the algorithm that produces uniformly distributed random numbers is operating correctly (with a false positive rate of 0.01%):

$ ./util/wrap.sh test/bntest -stochastic

Running Tests in Parallel

By default the test harness will execute the selected tests sequentially. Depending on the platform characteristics, running more than one test job in parallel may speed up test execution. This can be requested by setting the HARNESS_JOBS environment variable to a positive integer value. This specifies the maximum number of test jobs to run in parallel.

Depending on the Perl version different strategies could be adopted to select which test recipes can be run in parallel. In recent versions of Perl, unless specified otherwise, any task can be run in parallel. Consult the documentation for TAP::Harness to know more.

To run up to four tests in parallel at any given time:

$ make HARNESS_JOBS=4 test

Randomisation of Test Ordering

By default, the test harness will execute tests in the order they were added. By setting the OPENSSL_TEST_RAND_ORDER environment variable to zero, the test ordering will be randomised. If a randomly ordered test fails, the seed value used will be reported. Setting the OPENSSL_TEST_RAND_ORDER environment variable to this value will rerun the tests in the same order. This assures repeatability of randomly ordered test runs. This repeatability is independent of the operating system, processor or platform used.

To randomise the test ordering:

$ make OPENSSL_TEST_RAND_ORDER=0 test

To run the tests using the order defined by the random seed 42:

$ make OPENSSL_TEST_RAND_ORDER=42 test