openssl/test/ssl-tests
Matt Caswell 752aa4a6f0 Add a TLS test for name constraints with an EE cert without a SAN
It is valid for name constraints to be in force but for there to be no
SAN extension in a certificate. Previous versions of OpenSSL mishandled
this.

Test for CVE-2021-4044

Reviewed-by: Tomas Mraz <tomas@openssl.org>
2021-12-14 13:48:34 +00:00
..
01-simple.cnf Add a TLS test for name constraints with an EE cert without a SAN 2021-12-14 13:48:34 +00:00
01-simple.cnf.in Add a TLS test for name constraints with an EE cert without a SAN 2021-12-14 13:48:34 +00:00
02-protocol-version.cnf
02-protocol-version.cnf.in
03-custom_verify.cnf TLS client: allow cert verify callback return -1 for SSL_ERROR_WANT_RETRY_VERIFY 2021-01-26 17:09:13 +01:00
03-custom_verify.cnf.in Update copyright year 2021-01-28 13:54:57 +01:00
04-client_auth.cnf
04-client_auth.cnf.in Stop disabling TLSv1.3 if ec and dh are disabled 2021-02-05 15:22:40 +00:00
05-sni.cnf
05-sni.cnf.in
06-sni-ticket.cnf
06-sni-ticket.cnf.in
07-dtls-protocol-version.cnf
07-dtls-protocol-version.cnf.in
08-npn.cnf
08-npn.cnf.in
09-alpn.cnf
09-alpn.cnf.in
10-resumption.cnf
10-resumption.cnf.in
11-dtls_resumption.cnf
11-dtls_resumption.cnf.in
12-ct.cnf Fix tests for new default security level 2021-10-09 19:57:02 +02:00
12-ct.cnf.in Fix tests for new default security level 2021-10-09 19:57:02 +02:00
13-fragmentation.cnf
13-fragmentation.cnf.in
14-curves.cnf Fix tests for new default security level 2021-10-09 19:57:02 +02:00
14-curves.cnf.in Fix tests for new default security level 2021-10-09 19:57:02 +02:00
15-certstatus.cnf
15-certstatus.cnf.in
16-dtls-certstatus.cnf Adjust ssl_test_new for SHA1 security level 2021-04-29 15:52:49 +01:00
16-dtls-certstatus.cnf.in Update copyright year 2021-05-06 13:03:23 +01:00
17-renegotiate.cnf Move AllowClientRenegotiation tests 2021-06-15 12:36:51 +02:00
17-renegotiate.cnf.in Update copyright year 2021-06-17 13:24:59 +01:00
18-dtls-renegotiate.cnf Adjust ssl_test_new for SHA1 security level 2021-04-29 15:52:49 +01:00
18-dtls-renegotiate.cnf.in Update copyright year 2021-05-06 13:03:23 +01:00
19-mac-then-encrypt.cnf
19-mac-then-encrypt.cnf.in
20-cert-select.cnf Enable brainpool curves for TLS1.3 2021-11-26 06:45:19 +01:00
20-cert-select.cnf.in Enable brainpool curves for TLS1.3 2021-11-26 06:45:19 +01:00
21-key-update.cnf
21-key-update.cnf.in
22-compression.cnf Fix tests for new default security level 2021-10-09 19:57:02 +02:00
22-compression.cnf.in Fix tests for new default security level 2021-10-09 19:57:02 +02:00
23-srp.cnf
23-srp.cnf.in
24-padding.cnf
24-padding.cnf.in
25-cipher.cnf
25-cipher.cnf.in
26-tls13_client_auth.cnf
26-tls13_client_auth.cnf.in
27-ticket-appdata.cnf
27-ticket-appdata.cnf.in Update copyright year 2021-02-18 15:05:17 +00:00
28-seclevel.cnf
28-seclevel.cnf.in test_ssl_new: X448, X25519, and EdDSA are supported with fips 2021-03-03 10:00:21 +10:00
29-dtls-sctp-label-bug.cnf
29-dtls-sctp-label-bug.cnf.in
30-extended-master-secret.cnf
30-extended-master-secret.cnf.in
protocol_version.pm Adjust ssl_test_new for SHA1 security level 2021-04-29 15:52:49 +01:00
ssltests_base.pm