 Hideki Miyazaki
|
69e390f8b9
works OCSP Stapling with TLS1.3 like OCSPv2Multi
|
vor 5 Monaten |
 Daniel Pouzzner
|
1c68da282c
portability enhancement: use "#!/usr/bin/env <interpreter>" on all perl scripts and shell scripts that use bash extensions, and use "#!/bin/sh" on the rest.
|
vor 3 Monaten |
 Juliusz Sosinowicz
|
dabfad9f6c
Fix ocsp stapling test 2
|
vor 5 Monaten |
|
Hideki Miyazaki
|
30eb558d58
fix ocsp response when using DTLS
|
vor 5 Monaten |
 JacobBarthelmeh
|
f1aa43dc48
Merge pull request #6230 from bandi13/zd15855
|
vor 1 Jahr |
 Lealem Amedie
|
591089664d
Fixes for sniffer with enable all
|
vor 1 Jahr |
 Andras Fekete
|
d57d6d2b78
Fix for variable server startup time
|
vor 1 Jahr |
|
Andras Fekete
|
fdb0338473
Be more aggressive in killing processes
|
vor 1 Jahr |
 kaleb-himes
|
9a193a3e02
Address Issue pointed out in (now deleted) comment on an old merge
|
vor 2 Jahren |
|
kaleb-himes
|
77dec16b3b
Supplemental fix in addition to #5470
|
vor 2 Jahren |
|
kaleb-himes
|
8efc8b0819
Fix up other test scripts using the same logic
|
vor 2 Jahren |
 Lealem Amedie
|
40d9473e6a
Display SKIP instead of PASS when tests skipped for make check
|
vor 2 Jahren |
|
Daniel Pouzzner
|
368854b243
scripts/: refactor TLS version support tests to use -V, rather than -v (which makes frivolous connection attempts).
|
vor 2 Jahren |
|
Daniel Pouzzner
|
4d4145e6a0
add support for $NETWORK_UNSHARE_HELPER to the relevant scripts/.
|
vor 2 Jahren |
|
Daniel Pouzzner
|
abfc788389
script cleanup: use #!/bin/bash on all scripts that use "echo -e" (/bin/sh is sometimes a non-Bourne/non-POSIX shell, e.g. dash/ash, with no support for "echo -e"); fix whitespace.
|
vor 2 Jahren |
|
Daniel Pouzzner
|
c9a7393923
fixes for shell script errors detected by shellcheck --severity=error.
|
vor 2 Jahren |
 Elms
|
12eddee104
scripts: fix tests for out of tree `distcheck`
|
vor 3 Jahren |
|
Daniel Pouzzner
|
eeefe043ec
scripts/: nix `timeout` wrappers in ocsp-stapling.test and ocsp-stapling2.test, for portability.
|
vor 4 Jahren |
|
Daniel Pouzzner
|
139b0431cb
ocsp-stapling*.test: prefix waited servers with "timeout 60" to avoid deadlock failure modes; grep output from "openssl s_client" in "test interop fail case" for expected error message ("self signed certificate in certificate chain").
|
vor 4 Jahren |
|
Daniel Pouzzner
|
94a3f86dcd
scripts/ocsp-stapling*.test: check if IPv6 is supported by the installed openssl and nc executables, and if not, don't attempt to wrestle the version. with no IPv6 support, and an --enable-ipv6 wolfssl build, skip the test entirely. also, restore a couple -b (bind-all-interfaces) flags to examples/server/server recipes in case that's useful.
|
vor 4 Jahren |
|
Daniel Pouzzner
|
7a5cbaa9bc
fix scripts/ocsp-stapling*.test to accommodate IPv6 examples/ client/server build.
|
vor 4 Jahren |
 Sean Parkinson
|
60b0b0170b
TLS OCSP Stapling: MUST staple option
|
vor 4 Jahren |
|
Daniel Pouzzner
|
5ed2fe8092
scripts/: more race elimination/mitigation.
|
vor 4 Jahren |
|
Daniel Pouzzner
|
26901d1cd9
scripts/ocsp-stapling2.test: eliminate races.
|
vor 4 Jahren |
|
Daniel Pouzzner
|
b669f8eeb9
scripts/: tweak scripts/include.am to run ocsp tests before rather than after testsuite and unit.test; revert POSIXish scripts/*.test to use /bin/sh.
|
vor 4 Jahren |
|
Daniel Pouzzner
|
d8dc6be5b9
scripts/ocsp-stapling2.test: try using a static prechecked port for the servers on ready_file5 too.
|
vor 4 Jahren |
|
Daniel Pouzzner
|
51046d45d3
add bwrapping on all other scripts/*.test except those that make Internet connections, and remove test for setuid bit, as some systems are configured to not require setuid/CAP_NET_ADMIN for CLONE_NEWNET.
|
vor 4 Jahren |
|
Daniel Pouzzner
|
1e9971f64c
scripts/ocsp-stapling*.test: add bwrap attempt at top, to isolate network namespace.
|
vor 4 Jahren |
|
Daniel Pouzzner
|
8f25456f86
scripts/ocsp-stapling*.test, wolfssl/test.h: refactor scripts/ocsp-stapling*.test for orthogonality and robustness, with retries and early failure detection. also, reduce sleeps in ocsp-stapling-with-ca-as-responder.test to 0.1, matching sleeps in other 2 scripts. finally, in wolfssl/test.h, #ifdef SO_REUSEPORT do that when binding ports, and add optional rendering of errno strings for failed syscalls using err_sys_with_errno() when -DDEBUG_TEST_ERR_SYS_WITH_ERRNO.
|
vor 4 Jahren |
 David Garske
|
6a984da53f
Fixes and Improvements to OCSP scripts. Fix for OCSP test with IPV6 enabled (use `-b` bind to any on server). Fix to use random port number for the `oscp-stapling.test` script. Reduce delay times in scripts.
|
vor 4 Jahren |
