openssl/test
Matt Caswell e729aac19d Add a test for small subgroup attacks on DH/DHE
Following on from the previous commit, add a test to ensure that
DH_compute_key correctly fails if passed a bad y such that:

y^q (mod p) != 1

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
2016-01-28 14:41:19 +00:00
..
Attic
certs More X509_verify_cert() tests via verify(1). 2016-01-20 19:04:11 -05:00
ocsp-tests
recipes Skip all explicitely if the number of tests is 0 2016-01-27 18:41:34 +01:00
smime-certs
testlib/OpenSSL Be careful when applying EXE_SHELL 2016-01-27 12:11:52 +01:00
asynctest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
bftest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
bntest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
CAss.cnf
CAssdh.cnf
CAssdsa.cnf
CAssrsa.cnf
casttest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
CAtsa.cnf
clean_test.com
clienthellotest.c Enable/disable crypto-mdebug just like other features 2016-01-11 02:41:16 +00:00
cms-examples.pl
constant_time_test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
danetest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
danetest.in DANE support for X509_verify_cert() 2016-01-07 13:48:59 -05:00
danetest.pem DANE support for X509_verify_cert() 2016-01-07 13:48:59 -05:00
destest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
dhtest.c Add a test for small subgroup attacks on DH/DHE 2016-01-28 14:41:19 +00:00
dsatest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
dummytest.c Rename some BUF_xxx to OPENSSL_xxx 2015-12-16 16:14:49 -05:00
ecdhtest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
ecdsatest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
ectest.c Test all built-in curves and let the library choose the EC_METHOD 2016-01-27 18:49:09 +01:00
enginetest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
evp_extra_test.c Enable/disable crypto-mdebug just like other features 2016-01-11 02:41:16 +00:00
evp_test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
evptests.txt add TLS1-PRF tests 2016-01-19 14:00:33 +00:00
exdatatest.c
exptest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
gmdifftest.c
heartbeat_test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
hmactest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
ideatest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
igetest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
jpaketest.c fix jpaketest and correct comment 2016-01-12 18:45:25 +00:00
Makefile.in Remove update tags 2016-01-20 09:09:14 -05:00
maketests.com
md2test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
md4test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
md5test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
mdc2test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
memleaktest.c Update leak test to check return values. 2016-01-11 02:41:16 +00:00
methtest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
nptest.c
p5_crpt2_test.c Enable/disable crypto-mdebug just like other features 2016-01-11 02:41:16 +00:00
P1ss.cnf
P2ss.cnf
packettest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
pbelutest.c
pkcs7-1.pem
pkcs7.pem
pkits-test.pl
r160test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
randtest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
rc2test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
rc4test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
rc5test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
README
rmdtest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
rsa_test.c Enable/disable crypto-mdebug just like other features 2016-01-11 02:41:16 +00:00
run_tests.pl few typo fixes 2016-01-22 11:47:24 -05:00
secmemtest.c
serverinfo.pem
sha1test.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
sha256t.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
sha512t.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
smcont.txt
srptest.c Enable/disable crypto-mdebug just like other features 2016-01-11 02:41:16 +00:00
ssltest.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
Sssdsa.cnf
Sssrsa.cnf
test_aesni
test_padlock
test_t4
test.cnf
testcrl.pem
testdsa.pem
testdsapub.pem
testec-p256.pem
testecpub-p256.pem
testp7.pem
testreq2.pem
testrsa.pem
testrsapub.pem
tests.com
testsid.pem
testutil.c Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
testutil.h Remove /* foo.c */ comments 2016-01-26 16:40:43 -05:00
testx509.pem
times
Uss.cnf
v3-cert1.pem
v3-cert2.pem
v3nametest.c NGX-2040 - fix wildcard match on punycode/IDNA DNS names 2016-01-15 14:46:58 -05:00
verify_extra_test.c Enable/disable crypto-mdebug just like other features 2016-01-11 02:41:16 +00:00
wp_test.c

How to add recipes
==================

For any test that you want to perform, you write a script located in
test/recipes/, named {nn}-test_{name}.t, where {nn} is a two digit number and
{name} is a unique name of your choice.

Please note that if a test involves a new testing executable, you will need to
do some additions in test/Makefile.  More on this later.


Naming convetions
=================

A test executable is named test/{name}test.c

A test recipe is named test/recipes/{nn}-test_{name}.t, where {nn} is a two
digit number and {name} is a unique name of your choice.

The number {nn} is (somewhat loosely) grouped as follows:

05  individual symmetric cipher algorithms
10  math (bignum)
15  individual asymmetric cipher algorithms
20  openssl enc
25  certificate forms, generation and verification
30  engine and evp
70  PACKET layer
80  "larger" protocols (CA, CMS, OCSP, SSL, TSA)
90  misc


A recipe that just runs a test executable
=========================================

A script that just runs a program looks like this:

    #! /usr/bin/perl
    
    use OpenSSL::Test::Simple;
    
    simple_test("test_{name}", "{name}test", "{name}");

{name} is the unique name you have chosen for your test.

The second argument to `simple_test' is the test executable, and `simple_test'
expects it to be located in test/

For documentation on OpenSSL::Test::Simple, do
`perldoc test/testlib/OpenSSL/Test/Simple.pm'.


A recipe that runs a more complex test
======================================

For more complex tests, you will need to read up on Test::More and
OpenSSL::Test.  Test::More is normally preinstalled, do `man Test::More' for
documentation.  For OpenSSL::Test, do `perldoc test/testlib/OpenSSL/Test.pm'.

A script to start from could be this:

    #! /usr/bin/perl
    
    use strict;
    use warnings;
    use OpenSSL::Test;
    
    setup("test_{name}");
    
    plan tests => 2;                # The number of tests being performed
    
    ok(test1, "test1");
    ok(test2, "test1");
    
    sub test1
    {
        # test feature 1
    }
    
    sub test2
    {
        # test feature 2
    }
    

Changes to test/Makefile
========================

Whenever a new test involves a new test executable you need to do the
following (at all times, replace {NAME} and {name} with the name of your
test):

* among the variables for test executables at the beginning, add a line like
  this:

    {NAME}TEST= {name}test

* add `$({NAME}TEST)$(EXE_EXT)' to the assignment of EXE:

* add `$({NAME}TEST).o' to the assignment of OBJ:

* add `$({NAME}TEST).c' to the assignment of SRC:

* add the following lines for building the executable:

    $({NAME}TEST)$(EXE_EXT): $({NAME}TEST).o $(DLIBCRYPTO)
           @target=$({NAME}TEST); $(BUILD_CMD)