openssl/test
Matt Caswell 79d8c16785 Extend ServerKeyExchange parsing to work with a signature
Previously SKE in TLSProxy only knew about one anonymous ciphersuite so
there was never a signature. Extend that to include a ciphersuite that is
not anonymous. This also fixes a bug where the existing SKE processing was
checking against the wrong anon ciphersuite value. This has a knock on
impact on the sslskewith0p test. The bug meant the test was working...but
entirely by accident!

Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2157)
2017-01-10 23:02:50 +00:00
..
certs
ct
d2i-tests add test for CVE-2016-7053 2016-11-10 13:04:11 +00:00
ocsp-tests
ossl_shim Move extension data into sub-structs 2017-01-09 22:26:47 -05:00
recipes Extend ServerKeyExchange parsing to work with a signature 2017-01-10 23:02:50 +00:00
smime-certs
ssl-tests Add server temp key type checks 2017-01-08 19:36:59 +00:00
testlib Create Certificate messages in TLS1.3 format 2017-01-06 10:25:13 +00:00
aborttest.c
afalgtest.c
asn1_internal_test.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
asynciotest.c Fix an uninit variable usage 2016-11-23 16:06:46 +00:00
asynctest.c
bad_dtls_test.c Solution proposal for issue #1647. 2016-11-12 22:26:20 -05:00
bftest.c
bio_enc_test.c
bioprinttest.c
bntest.c Make bntest be (mostly) file-based. 2016-11-28 12:26:05 -05:00
bntests.pl Make bntest be (mostly) file-based. 2016-11-28 12:26:05 -05:00
bntests.txt Make bntest be (mostly) file-based. 2016-11-28 12:26:05 -05:00
build.info Provide some tests for the sig algs API 2016-12-30 20:58:58 +00:00
CAss.cnf
CAssdh.cnf
CAssdsa.cnf
CAssrsa.cnf
casttest.c
CAtsa.cnf
cipher_overhead_test.c
cipherlist_test.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
clienthellotest.c Fix a warning about an uninit var 2016-11-24 18:02:43 +00:00
cms-examples.pl
constant_time_test.c constant time test: include our internal/numbers.h rather than limits.h 2016-11-05 11:38:29 +01:00
crltest.c CRL critical extension bugfix 2016-12-14 12:32:49 -05:00
ct_test.c Make sure things get deleted when test setup fails in ct_test.c 2016-11-16 13:54:17 +00:00
d2i_test.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
danetest.c
danetest.in
danetest.pem
destest.c
dhtest.c
dsatest.c
dtls_mtu_test.c dtl_mtu_test doesn't follow BIO_* conventions and make Windows build fail 2016-11-09 15:54:41 +01:00
dtlstest.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
dtlsv1listentest.c
ecdhtest_cavs.h
ecdhtest.c
ecdsatest.c
ectest.c
enginetest.c
evp_extra_test.c
evp_test.c Remove BIO_seek/BIO_tell from evp_test.c 2017-01-05 23:00:28 +00:00
evptests.txt add test for invalid key parameters 2017-01-08 01:42:50 +00:00
exdatatest.c
exptest.c
generate_buildtest.pl
generate_ssl_tests.pl
gmdifftest.c
handshake_helper.c Move extension data into sub-structs 2017-01-09 22:26:47 -05:00
handshake_helper.h Add new ssl_test option. 2017-01-08 19:36:59 +00:00
hmactest.c
ideatest.c
igetest.c
md2test.c
md4test.c
md5test.c
mdc2_internal_test.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
mdc2test.c
memleaktest.c
methtest.c
modes_internal_test.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
p5_crpt2_test.c
P1ss.cnf
P2ss.cnf
packettest.c
pbelutest.c
pkcs7-1.pem
pkcs7.pem
pkey_meth_test.c Add test to check EVP_PKEY method ordering. 2016-11-20 00:22:02 +00:00
pkits-test.pl
poly1305_internal_test.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
r160test.c
randtest.c
rc2test.c
rc4test.c
rc5test.c
README
README.external
README.ssltest.md Add new ssl_test option. 2017-01-08 19:36:59 +00:00
rmdtest.c
rsa_test.c
run_tests.pl
sanitytest.c
secmemtest.c
serverinfo.pem
sha1test.c
sha256t.c
sha512t.c
shibboleth.pfx
shlibloadtest.c Fix no-dso (shlibloadtest) 2016-11-10 10:12:00 +00:00
smcont.txt
srptest.c
ssl_test_ctx_test.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
ssl_test_ctx_test.conf
ssl_test_ctx.c Add new ssl_test option. 2017-01-08 19:36:59 +00:00
ssl_test_ctx.h Add new ssl_test option. 2017-01-08 19:36:59 +00:00
ssl_test.c Add new ssl_test option. 2017-01-08 19:36:59 +00:00
ssl_test.tmpl
sslapitest.c Don't build OCSP stuff when OCSP is disabled 2017-01-04 15:27:00 +01:00
sslcorrupttest.c Update the record layer to use TLSv1.3 style record construction 2016-12-05 17:05:40 +00:00
ssltest_old.c Move extension data into sub-structs 2017-01-09 22:26:47 -05:00
ssltestlib.c Fix the tests following the state machine changes for TLSv1.3 2016-11-23 15:31:21 +00:00
ssltestlib.h
Sssdsa.cnf
Sssrsa.cnf
test_main_custom.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
test_main_custom.h Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
test_main.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
test_main.h Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
test.cnf
testcrl.pem
testdsa.pem
testdsapub.pem
testec-p256.pem
testecpub-p256.pem
testp7.pem
testreq2.pem
testrsa.pem
testrsapub.pem
testsid.pem
testutil.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
testutil.h Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
testx509.pem
threadstest.c
tls13encryptiontest.c Make refdata in tls13encryptest static 2016-11-30 10:57:10 +00:00
tls13secretstest.c Verify that the sig algs extension has been sent for TLSv1.3 2017-01-10 23:02:50 +00:00
Uss.cnf
v3-cert1.pem
v3-cert2.pem
v3ext.c
v3nametest.c
verify_extra_test.c
wp_test.c
wpackettest.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
x509_internal_test.c Add main() test methods to reduce test boilerplate. 2016-11-09 16:07:16 +01:00
x509aux.c

How to add recipes
==================

For any test that you want to perform, you write a script located in
test/recipes/, named {nn}-test_{name}.t, where {nn} is a two digit number and
{name} is a unique name of your choice.

Please note that if a test involves a new testing executable, you will need to
do some additions in test/Makefile.  More on this later.


Naming conventions
=================

A test executable is named test/{name}test.c

A test recipe is named test/recipes/{nn}-test_{name}.t, where {nn} is a two
digit number and {name} is a unique name of your choice.

The number {nn} is (somewhat loosely) grouped as follows:

05  individual symmetric cipher algorithms
10  math (bignum)
15  individual asymmetric cipher algorithms
20  openssl commands (some otherwise not tested)
25  certificate forms, generation and verification
30  engine and evp
70  PACKET layer
80  "larger" protocols (CA, CMS, OCSP, SSL, TSA)
90  misc


A recipe that just runs a test executable
=========================================

A script that just runs a program looks like this:

    #! /usr/bin/perl
    
    use OpenSSL::Test::Simple;
    
    simple_test("test_{name}", "{name}test", "{name}");

{name} is the unique name you have chosen for your test.

The second argument to `simple_test' is the test executable, and `simple_test'
expects it to be located in test/

For documentation on OpenSSL::Test::Simple, do
`perldoc test/testlib/OpenSSL/Test/Simple.pm'.


A recipe that runs a more complex test
======================================

For more complex tests, you will need to read up on Test::More and
OpenSSL::Test.  Test::More is normally preinstalled, do `man Test::More' for
documentation.  For OpenSSL::Test, do `perldoc test/testlib/OpenSSL/Test.pm'.

A script to start from could be this:

    #! /usr/bin/perl
    
    use strict;
    use warnings;
    use OpenSSL::Test;
    
    setup("test_{name}");
    
    plan tests => 2;                # The number of tests being performed
    
    ok(test1, "test1");
    ok(test2, "test1");
    
    sub test1
    {
        # test feature 1
    }
    
    sub test2
    {
        # test feature 2
    }
    

Changes to test/Makefile
========================

Whenever a new test involves a new test executable you need to do the
following (at all times, replace {NAME} and {name} with the name of your
test):

* among the variables for test executables at the beginning, add a line like
  this:

    {NAME}TEST= {name}test

* add `$({NAME}TEST)$(EXE_EXT)' to the assignment of EXE:

* add `$({NAME}TEST).o' to the assignment of OBJ:

* add `$({NAME}TEST).c' to the assignment of SRC:

* add the following lines for building the executable:

    $({NAME}TEST)$(EXE_EXT): $({NAME}TEST).o $(DLIBCRYPTO)
           @target=$({NAME}TEST); $(BUILD_CMD)