Instead of unhooking libssl/client regress tests, flag them as expected
to fail.

ok tb@

Disable client handshake test for now for pending changes.

ok jsing@

Enable shutdown regress test.

Link symbols test to build

Reenable clienttest and servertest

Disable TLS 1.0 and TLS 1.1 in libssl

Their time has long since past, and they should not be used.
This change restricts ssl to versions 1.2 and 1.3, and changes
the regression tests to understand we no longer speak the legacy
protocols.

For the moment the magical "golden" byte for byte comparison
tests of raw handshake values are disabled util jsing fixes them.

ok jsing@ tb@

Add regress coverage for TLS exporters.

Link rust-openssl to regress

Wire up QUIC regress.

Provide regress for SSL public APIs.

This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().

Add a regress test for TLS client/server.

This currently exercises various combinations of TLS versions and their
associated key exchange mechanisms. Note that this currently fails for
TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly).

Over time all of the ssl regress should be moved into the dtls and tls
regress tests.

hook verify regress test to build

Revert accidental commit

link verify regress tests to build

Hook openssl-ruby test to regress tree

Hook up dtls regress.

Hook up tlslegacy regress.

1) Move the interop tests to the end so we see tlsfuzzer first
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf

ok jsing@

hook tlsfuzzer to regress

Re-enable the client test now that it passes again.

Add regress for TLSv1.3 sequence number handling.

Disable the client hello message regress test for now.

The golden values have changed due to TLSv1.3 and will likely change more
in the near future. This will be updated and re-enabled when things settle.

Discussed with beck@

hook handshake test

Hook record regress.

Add regress for extensible buffer code.

Speling

Make sure the interop test happen last (since they take a long time)

remove the not yet implemented "handshake" subdirectory

Add subdirectires with SUBDIR += instead of a single assignment with
line continuations.

Add in key_schedule regress tests to regress build

+interop

Provide a new regress test for TLS extension handlers, currently covering
the newly converted SNI code.

Add an initial regress test that covers the server-side of libssl, by
providing SSL_accept() with fixed ClientHello messages.

Move pqueue regress from libcrypto to libssl, since that's where the pqueue
code now lives. Also unbreak the regress following the symbol hiding
changes in libssl.

Add an initial TLS client regress, which currently covers ClientHello
message generation.

Convert ssl_bytes_to_cipher_list to CBS.

Link in the new 'unit' regress and expand the invalid tests to include
some that would fail before the CBS conversion.

input + ok miod@ jsing@

Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.

This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.

BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.

Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.

input + ok jsing@, miod@

Add libssl ciphers regress, which currently only covers
get_cipher_by_char/put_cipher_by_char.

Add a regress test for the ASN1 handling of SSL session tickets.

Move ssltest.c to a regress test.

Move the regress tests that are in lib/libssl to usr.sbin/openssl,
since they are really testing openssl(1) (although this also tests
libcrypto and libssl), rather than actual parts of the libssl library.

Discussed with miod@

Remove the ossltests target, these are now all in libcrypto regress
except sha256t/sha512t which are likely to be removed for license reasons.

adapt to test file moves
md2test and rsatest targets removed as the files have been removed

don't use non-standard CFLAGS; ok miod@, deraadt@

update for openssl-0.9.8h

missing blowfish test

un-break test; report and test by davidkrause

remove MDC2; patents

Rename a bunch of the old bsd.regress.mk variables into the new ones.

ok art@

e_os.h is longer installed

Build and run openssl regress tests in addition to our own.

Move the enc tests into the Makefile and split them into
several small tests.
beck@ ok

Convert to bsd.regress.mk.
Not finished yet.

uncomment rsa test; ok millert@

$OpenBSD$

Fix up for make regress. Should handle objdir now.

ssl lib test scripts. Need to be tested so as not to break build process
before this libssl dir is added to the upper level Makefile.

Disable client handshake test for now for pending changes.

ok jsing@

Enable shutdown regress test.

Link symbols test to build

Reenable clienttest and servertest

Disable TLS 1.0 and TLS 1.1 in libssl

Their time has long since past, and they should not be used.
This change restricts ssl to versions 1.2 and 1.3, and changes
the regression tests to understand we no longer speak the legacy
protocols.

For the moment the magical "golden" byte for byte comparison
tests of raw handshake values are disabled util jsing fixes them.

ok jsing@ tb@

Add regress coverage for TLS exporters.

Link rust-openssl to regress

Wire up QUIC regress.

Provide regress for SSL public APIs.

This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().

Add a regress test for TLS client/server.

This currently exercises various combinations of TLS versions and their
associated key exchange mechanisms. Note that this currently fails for
TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly).

Over time all of the ssl regress should be moved into the dtls and tls
regress tests.

hook verify regress test to build

Revert accidental commit

link verify regress tests to build

Hook openssl-ruby test to regress tree

Hook up dtls regress.

Hook up tlslegacy regress.

1) Move the interop tests to the end so we see tlsfuzzer first
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf

ok jsing@

hook tlsfuzzer to regress

Re-enable the client test now that it passes again.

Add regress for TLSv1.3 sequence number handling.

Disable the client hello message regress test for now.

The golden values have changed due to TLSv1.3 and will likely change more
in the near future. This will be updated and re-enabled when things settle.

Discussed with beck@

hook handshake test

Hook record regress.

Add regress for extensible buffer code.

Speling

Make sure the interop test happen last (since they take a long time)

remove the not yet implemented "handshake" subdirectory

Add subdirectires with SUBDIR += instead of a single assignment with
line continuations.

Add in key_schedule regress tests to regress build

+interop

Provide a new regress test for TLS extension handlers, currently covering
the newly converted SNI code.

Add an initial regress test that covers the server-side of libssl, by
providing SSL_accept() with fixed ClientHello messages.

Move pqueue regress from libcrypto to libssl, since that's where the pqueue
code now lives. Also unbreak the regress following the symbol hiding
changes in libssl.

Add an initial TLS client regress, which currently covers ClientHello
message generation.

Convert ssl_bytes_to_cipher_list to CBS.

Link in the new 'unit' regress and expand the invalid tests to include
some that would fail before the CBS conversion.

input + ok miod@ jsing@

Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.

This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.

BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.

Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.

input + ok jsing@, miod@

Add libssl ciphers regress, which currently only covers
get_cipher_by_char/put_cipher_by_char.

Add a regress test for the ASN1 handling of SSL session tickets.

Move ssltest.c to a regress test.

Move the regress tests that are in lib/libssl to usr.sbin/openssl,
since they are really testing openssl(1) (although this also tests
libcrypto and libssl), rather than actual parts of the libssl library.

Discussed with miod@

Remove the ossltests target, these are now all in libcrypto regress
except sha256t/sha512t which are likely to be removed for license reasons.

adapt to test file moves
md2test and rsatest targets removed as the files have been removed

don't use non-standard CFLAGS; ok miod@, deraadt@

update for openssl-0.9.8h

missing blowfish test

un-break test; report and test by davidkrause

remove MDC2; patents

Rename a bunch of the old bsd.regress.mk variables into the new ones.

ok art@

e_os.h is longer installed

Build and run openssl regress tests in addition to our own.

Move the enc tests into the Makefile and split them into
several small tests.
beck@ ok

Convert to bsd.regress.mk.
Not finished yet.

uncomment rsa test; ok millert@

$OpenBSD$

Fix up for make regress. Should handle objdir now.

ssl lib test scripts. Need to be tested so as not to break build process
before this libssl dir is added to the upper level Makefile.

Enable shutdown regress test.

Link symbols test to build

Reenable clienttest and servertest

Disable TLS 1.0 and TLS 1.1 in libssl

Their time has long since past, and they should not be used.
This change restricts ssl to versions 1.2 and 1.3, and changes
the regression tests to understand we no longer speak the legacy
protocols.

For the moment the magical "golden" byte for byte comparison
tests of raw handshake values are disabled util jsing fixes them.

ok jsing@ tb@

Add regress coverage for TLS exporters.

Link rust-openssl to regress

Wire up QUIC regress.

Provide regress for SSL public APIs.

This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().

Add a regress test for TLS client/server.

This currently exercises various combinations of TLS versions and their
associated key exchange mechanisms. Note that this currently fails for
TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly).

Over time all of the ssl regress should be moved into the dtls and tls
regress tests.

hook verify regress test to build

Revert accidental commit

link verify regress tests to build

Hook openssl-ruby test to regress tree

Hook up dtls regress.

Hook up tlslegacy regress.

1) Move the interop tests to the end so we see tlsfuzzer first
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf

ok jsing@

hook tlsfuzzer to regress

Re-enable the client test now that it passes again.

Add regress for TLSv1.3 sequence number handling.

Disable the client hello message regress test for now.

The golden values have changed due to TLSv1.3 and will likely change more
in the near future. This will be updated and re-enabled when things settle.

Discussed with beck@

hook handshake test

Hook record regress.

Add regress for extensible buffer code.

Speling

Make sure the interop test happen last (since they take a long time)

remove the not yet implemented "handshake" subdirectory

Add subdirectires with SUBDIR += instead of a single assignment with
line continuations.

Add in key_schedule regress tests to regress build

+interop

Provide a new regress test for TLS extension handlers, currently covering
the newly converted SNI code.

Add an initial regress test that covers the server-side of libssl, by
providing SSL_accept() with fixed ClientHello messages.

Move pqueue regress from libcrypto to libssl, since that's where the pqueue
code now lives. Also unbreak the regress following the symbol hiding
changes in libssl.

Add an initial TLS client regress, which currently covers ClientHello
message generation.

Convert ssl_bytes_to_cipher_list to CBS.

Link in the new 'unit' regress and expand the invalid tests to include
some that would fail before the CBS conversion.

input + ok miod@ jsing@

Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.

This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.

BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.

Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.

input + ok jsing@, miod@

Add libssl ciphers regress, which currently only covers
get_cipher_by_char/put_cipher_by_char.

Add a regress test for the ASN1 handling of SSL session tickets.

Move ssltest.c to a regress test.

Move the regress tests that are in lib/libssl to usr.sbin/openssl,
since they are really testing openssl(1) (although this also tests
libcrypto and libssl), rather than actual parts of the libssl library.

Discussed with miod@

Remove the ossltests target, these are now all in libcrypto regress
except sha256t/sha512t which are likely to be removed for license reasons.

adapt to test file moves
md2test and rsatest targets removed as the files have been removed

don't use non-standard CFLAGS; ok miod@, deraadt@

update for openssl-0.9.8h

missing blowfish test

un-break test; report and test by davidkrause

remove MDC2; patents

Rename a bunch of the old bsd.regress.mk variables into the new ones.

ok art@

e_os.h is longer installed

Build and run openssl regress tests in addition to our own.

Move the enc tests into the Makefile and split them into
several small tests.
beck@ ok

Convert to bsd.regress.mk.
Not finished yet.

uncomment rsa test; ok millert@

$OpenBSD$

Fix up for make regress. Should handle objdir now.

ssl lib test scripts. Need to be tested so as not to break build process
before this libssl dir is added to the upper level Makefile.

Link symbols test to build

Reenable clienttest and servertest

Disable TLS 1.0 and TLS 1.1 in libssl

Their time has long since past, and they should not be used.
This change restricts ssl to versions 1.2 and 1.3, and changes
the regression tests to understand we no longer speak the legacy
protocols.

For the moment the magical "golden" byte for byte comparison
tests of raw handshake values are disabled util jsing fixes them.

ok jsing@ tb@

Add regress coverage for TLS exporters.

Link rust-openssl to regress

Wire up QUIC regress.

Provide regress for SSL public APIs.

This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().

Add a regress test for TLS client/server.

This currently exercises various combinations of TLS versions and their
associated key exchange mechanisms. Note that this currently fails for
TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly).

Over time all of the ssl regress should be moved into the dtls and tls
regress tests.

hook verify regress test to build

Revert accidental commit

link verify regress tests to build

Hook openssl-ruby test to regress tree

Hook up dtls regress.

Hook up tlslegacy regress.

1) Move the interop tests to the end so we see tlsfuzzer first
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf

ok jsing@

hook tlsfuzzer to regress

Re-enable the client test now that it passes again.

Add regress for TLSv1.3 sequence number handling.

Disable the client hello message regress test for now.

The golden values have changed due to TLSv1.3 and will likely change more
in the near future. This will be updated and re-enabled when things settle.

Discussed with beck@

hook handshake test

Hook record regress.

Add regress for extensible buffer code.

Speling

Make sure the interop test happen last (since they take a long time)

remove the not yet implemented "handshake" subdirectory

Add subdirectires with SUBDIR += instead of a single assignment with
line continuations.

Add in key_schedule regress tests to regress build

+interop

Provide a new regress test for TLS extension handlers, currently covering
the newly converted SNI code.

Add an initial regress test that covers the server-side of libssl, by
providing SSL_accept() with fixed ClientHello messages.

Move pqueue regress from libcrypto to libssl, since that's where the pqueue
code now lives. Also unbreak the regress following the symbol hiding
changes in libssl.

Add an initial TLS client regress, which currently covers ClientHello
message generation.

Convert ssl_bytes_to_cipher_list to CBS.

Link in the new 'unit' regress and expand the invalid tests to include
some that would fail before the CBS conversion.

input + ok miod@ jsing@

Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.

This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.

BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.

Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.

input + ok jsing@, miod@

Add libssl ciphers regress, which currently only covers
get_cipher_by_char/put_cipher_by_char.

Add a regress test for the ASN1 handling of SSL session tickets.

Move ssltest.c to a regress test.

Move the regress tests that are in lib/libssl to usr.sbin/openssl,
since they are really testing openssl(1) (although this also tests
libcrypto and libssl), rather than actual parts of the libssl library.

Discussed with miod@

Remove the ossltests target, these are now all in libcrypto regress
except sha256t/sha512t which are likely to be removed for license reasons.

adapt to test file moves
md2test and rsatest targets removed as the files have been removed

don't use non-standard CFLAGS; ok miod@, deraadt@

update for openssl-0.9.8h

missing blowfish test

un-break test; report and test by davidkrause

remove MDC2; patents

Rename a bunch of the old bsd.regress.mk variables into the new ones.

ok art@

e_os.h is longer installed

Build and run openssl regress tests in addition to our own.

Move the enc tests into the Makefile and split them into
several small tests.
beck@ ok

Convert to bsd.regress.mk.
Not finished yet.

uncomment rsa test; ok millert@

$OpenBSD$

Fix up for make regress. Should handle objdir now.

ssl lib test scripts. Need to be tested so as not to break build process
before this libssl dir is added to the upper level Makefile.

Reenable clienttest and servertest

Disable TLS 1.0 and TLS 1.1 in libssl

Their time has long since past, and they should not be used.
This change restricts ssl to versions 1.2 and 1.3, and changes
the regression tests to understand we no longer speak the legacy
protocols.

For the moment the magical "golden" byte for byte comparison
tests of raw handshake values are disabled util jsing fixes them.

ok jsing@ tb@

Add regress coverage for TLS exporters.

Link rust-openssl to regress

Wire up QUIC regress.

Provide regress for SSL public APIs.

This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().

Add a regress test for TLS client/server.

This currently exercises various combinations of TLS versions and their
associated key exchange mechanisms. Note that this currently fails for
TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly).

Over time all of the ssl regress should be moved into the dtls and tls
regress tests.

hook verify regress test to build

Revert accidental commit

link verify regress tests to build

Hook openssl-ruby test to regress tree

Hook up dtls regress.

Hook up tlslegacy regress.

1) Move the interop tests to the end so we see tlsfuzzer first
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf

ok jsing@

hook tlsfuzzer to regress

Re-enable the client test now that it passes again.

Add regress for TLSv1.3 sequence number handling.

Disable the client hello message regress test for now.

The golden values have changed due to TLSv1.3 and will likely change more
in the near future. This will be updated and re-enabled when things settle.

Discussed with beck@

hook handshake test

Hook record regress.

Add regress for extensible buffer code.

Speling

Make sure the interop test happen last (since they take a long time)

remove the not yet implemented "handshake" subdirectory

Add subdirectires with SUBDIR += instead of a single assignment with
line continuations.

Add in key_schedule regress tests to regress build

+interop

Provide a new regress test for TLS extension handlers, currently covering
the newly converted SNI code.

Add an initial regress test that covers the server-side of libssl, by
providing SSL_accept() with fixed ClientHello messages.

Move pqueue regress from libcrypto to libssl, since that's where the pqueue
code now lives. Also unbreak the regress following the symbol hiding
changes in libssl.

Add an initial TLS client regress, which currently covers ClientHello
message generation.

Convert ssl_bytes_to_cipher_list to CBS.

Link in the new 'unit' regress and expand the invalid tests to include
some that would fail before the CBS conversion.

input + ok miod@ jsing@

Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.

This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.

BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.

Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.

input + ok jsing@, miod@

Add libssl ciphers regress, which currently only covers
get_cipher_by_char/put_cipher_by_char.

Add a regress test for the ASN1 handling of SSL session tickets.

Move ssltest.c to a regress test.

Move the regress tests that are in lib/libssl to usr.sbin/openssl,
since they are really testing openssl(1) (although this also tests
libcrypto and libssl), rather than actual parts of the libssl library.

Discussed with miod@

Remove the ossltests target, these are now all in libcrypto regress
except sha256t/sha512t which are likely to be removed for license reasons.

adapt to test file moves
md2test and rsatest targets removed as the files have been removed

don't use non-standard CFLAGS; ok miod@, deraadt@

update for openssl-0.9.8h

missing blowfish test

un-break test; report and test by davidkrause

remove MDC2; patents

Rename a bunch of the old bsd.regress.mk variables into the new ones.

ok art@

e_os.h is longer installed

Build and run openssl regress tests in addition to our own.

Move the enc tests into the Makefile and split them into
several small tests.
beck@ ok

Convert to bsd.regress.mk.
Not finished yet.

uncomment rsa test; ok millert@

$OpenBSD$

Fix up for make regress. Should handle objdir now.

ssl lib test scripts. Need to be tested so as not to break build process
before this libssl dir is added to the upper level Makefile.

Disable TLS 1.0 and TLS 1.1 in libssl

Their time has long since past, and they should not be used.
This change restricts ssl to versions 1.2 and 1.3, and changes
the regression tests to understand we no longer speak the legacy
protocols.

For the moment the magical "golden" byte for byte comparison
tests of raw handshake values are disabled util jsing fixes them.

ok jsing@ tb@

Add regress coverage for TLS exporters.

Link rust-openssl to regress

Wire up QUIC regress.

Provide regress for SSL public APIs.

This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().

Add a regress test for TLS client/server.

This currently exercises various combinations of TLS versions and their
associated key exchange mechanisms. Note that this currently fails for
TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly).

Over time all of the ssl regress should be moved into the dtls and tls
regress tests.

hook verify regress test to build

Revert accidental commit

link verify regress tests to build

Hook openssl-ruby test to regress tree

Hook up dtls regress.

Hook up tlslegacy regress.

1) Move the interop tests to the end so we see tlsfuzzer first
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf

ok jsing@

hook tlsfuzzer to regress

Re-enable the client test now that it passes again.

Add regress for TLSv1.3 sequence number handling.

Disable the client hello message regress test for now.

The golden values have changed due to TLSv1.3 and will likely change more
in the near future. This will be updated and re-enabled when things settle.

Discussed with beck@

hook handshake test

Hook record regress.

Add regress for extensible buffer code.

Speling

Make sure the interop test happen last (since they take a long time)

remove the not yet implemented "handshake" subdirectory

Add subdirectires with SUBDIR += instead of a single assignment with
line continuations.

Add in key_schedule regress tests to regress build

+interop

Provide a new regress test for TLS extension handlers, currently covering
the newly converted SNI code.

Add an initial regress test that covers the server-side of libssl, by
providing SSL_accept() with fixed ClientHello messages.

Move pqueue regress from libcrypto to libssl, since that's where the pqueue
code now lives. Also unbreak the regress following the symbol hiding
changes in libssl.

Add an initial TLS client regress, which currently covers ClientHello
message generation.

Convert ssl_bytes_to_cipher_list to CBS.

Link in the new 'unit' regress and expand the invalid tests to include
some that would fail before the CBS conversion.

input + ok miod@ jsing@

Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.

This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.

BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.

Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.

input + ok jsing@, miod@

Add libssl ciphers regress, which currently only covers
get_cipher_by_char/put_cipher_by_char.

Add a regress test for the ASN1 handling of SSL session tickets.

Move ssltest.c to a regress test.

Move the regress tests that are in lib/libssl to usr.sbin/openssl,
since they are really testing openssl(1) (although this also tests
libcrypto and libssl), rather than actual parts of the libssl library.

Discussed with miod@

Remove the ossltests target, these are now all in libcrypto regress
except sha256t/sha512t which are likely to be removed for license reasons.

adapt to test file moves
md2test and rsatest targets removed as the files have been removed

don't use non-standard CFLAGS; ok miod@, deraadt@

update for openssl-0.9.8h

missing blowfish test

un-break test; report and test by davidkrause

remove MDC2; patents

Rename a bunch of the old bsd.regress.mk variables into the new ones.

ok art@

e_os.h is longer installed

Build and run openssl regress tests in addition to our own.

Move the enc tests into the Makefile and split them into
several small tests.
beck@ ok

Convert to bsd.regress.mk.
Not finished yet.

uncomment rsa test; ok millert@

$OpenBSD$

Fix up for make regress. Should handle objdir now.

ssl lib test scripts. Need to be tested so as not to break build process
before this libssl dir is added to the upper level Makefile.

Add regress coverage for TLS exporters.

Link rust-openssl to regress

Wire up QUIC regress.

Provide regress for SSL public APIs.

This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().

Add a regress test for TLS client/server.

This currently exercises various combinations of TLS versions and their
associated key exchange mechanisms. Note that this currently fails for
TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly).

Over time all of the ssl regress should be moved into the dtls and tls
regress tests.

hook verify regress test to build

Revert accidental commit

link verify regress tests to build

Hook openssl-ruby test to regress tree

Hook up dtls regress.

Hook up tlslegacy regress.

1) Move the interop tests to the end so we see tlsfuzzer first
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf

ok jsing@

hook tlsfuzzer to regress

Re-enable the client test now that it passes again.

Add regress for TLSv1.3 sequence number handling.

Disable the client hello message regress test for now.

The golden values have changed due to TLSv1.3 and will likely change more
in the near future. This will be updated and re-enabled when things settle.

Discussed with beck@

hook handshake test

Hook record regress.

Add regress for extensible buffer code.

Speling

Make sure the interop test happen last (since they take a long time)

remove the not yet implemented "handshake" subdirectory

Add subdirectires with SUBDIR += instead of a single assignment with
line continuations.

Add in key_schedule regress tests to regress build

+interop

Provide a new regress test for TLS extension handlers, currently covering
the newly converted SNI code.

Add an initial regress test that covers the server-side of libssl, by
providing SSL_accept() with fixed ClientHello messages.

Move pqueue regress from libcrypto to libssl, since that's where the pqueue
code now lives. Also unbreak the regress following the symbol hiding
changes in libssl.

Add an initial TLS client regress, which currently covers ClientHello
message generation.

Convert ssl_bytes_to_cipher_list to CBS.

Link in the new 'unit' regress and expand the invalid tests to include
some that would fail before the CBS conversion.

input + ok miod@ jsing@

Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.

This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.

BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.

Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.

input + ok jsing@, miod@

Add libssl ciphers regress, which currently only covers
get_cipher_by_char/put_cipher_by_char.

Add a regress test for the ASN1 handling of SSL session tickets.

Move ssltest.c to a regress test.

Move the regress tests that are in lib/libssl to usr.sbin/openssl,
since they are really testing openssl(1) (although this also tests
libcrypto and libssl), rather than actual parts of the libssl library.

Discussed with miod@

Remove the ossltests target, these are now all in libcrypto regress
except sha256t/sha512t which are likely to be removed for license reasons.

adapt to test file moves
md2test and rsatest targets removed as the files have been removed

don't use non-standard CFLAGS; ok miod@, deraadt@

update for openssl-0.9.8h

missing blowfish test

un-break test; report and test by davidkrause

remove MDC2; patents

Rename a bunch of the old bsd.regress.mk variables into the new ones.

ok art@

e_os.h is longer installed

Build and run openssl regress tests in addition to our own.

Move the enc tests into the Makefile and split them into
several small tests.
beck@ ok

Convert to bsd.regress.mk.
Not finished yet.

uncomment rsa test; ok millert@

$OpenBSD$

Fix up for make regress. Should handle objdir now.

ssl lib test scripts. Need to be tested so as not to break build process
before this libssl dir is added to the upper level Makefile.

Link rust-openssl to regress

Wire up QUIC regress.

Provide regress for SSL public APIs.

This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().

Add a regress test for TLS client/server.

This currently exercises various combinations of TLS versions and their
associated key exchange mechanisms. Note that this currently fails for
TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly).

Over time all of the ssl regress should be moved into the dtls and tls
regress tests.

hook verify regress test to build

Revert accidental commit

link verify regress tests to build

Hook openssl-ruby test to regress tree

Hook up dtls regress.

Hook up tlslegacy regress.

1) Move the interop tests to the end so we see tlsfuzzer first
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf

ok jsing@

hook tlsfuzzer to regress

Re-enable the client test now that it passes again.

Add regress for TLSv1.3 sequence number handling.

Disable the client hello message regress test for now.

The golden values have changed due to TLSv1.3 and will likely change more
in the near future. This will be updated and re-enabled when things settle.

Discussed with beck@

hook handshake test

Hook record regress.

Add regress for extensible buffer code.

Speling

Make sure the interop test happen last (since they take a long time)

remove the not yet implemented "handshake" subdirectory

Add subdirectires with SUBDIR += instead of a single assignment with
line continuations.

Add in key_schedule regress tests to regress build

+interop

Provide a new regress test for TLS extension handlers, currently covering
the newly converted SNI code.

Add an initial regress test that covers the server-side of libssl, by
providing SSL_accept() with fixed ClientHello messages.

Move pqueue regress from libcrypto to libssl, since that's where the pqueue
code now lives. Also unbreak the regress following the symbol hiding
changes in libssl.

Add an initial TLS client regress, which currently covers ClientHello
message generation.

Convert ssl_bytes_to_cipher_list to CBS.

Link in the new 'unit' regress and expand the invalid tests to include
some that would fail before the CBS conversion.

input + ok miod@ jsing@

Import BoringSSL's crypto bytestring and crypto bytebuilder APIs.

This is imported with as few changes as possible for the initial commit.
I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc()
and changed a few header includes.

BoringSSL has this as part of their public API. We're leaving it internal
to libssl for now.

Based on BoringSSL's CBB/CBS API as of commit
c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54.

input + ok jsing@, miod@

Add libssl ciphers regress, which currently only covers
get_cipher_by_char/put_cipher_by_char.

Add a regress test for the ASN1 handling of SSL session tickets.

Move ssltest.c to a regress test.

Move the regress tests that are in lib/libssl to usr.sbin/openssl,
since they are really testing openssl(1) (although this also tests
libcrypto and libssl), rather than actual parts of the libssl library.

Discussed with miod@

Remove the ossltests target, these are now all in libcrypto regress
except sha256t/sha512t which are likely to be removed for license reasons.

adapt to test file moves
md2test and rsatest targets removed as the files have been removed

don't use non-standard CFLAGS; ok miod@, deraadt@

update for openssl-0.9.8h

missing blowfish test

un-break test; report and test by davidkrause

remove MDC2; patents

Rename a bunch of the old bsd.regress.mk variables into the new ones.

ok art@

e_os.h is longer installed

Build and run openssl regress tests in addition to our own.

Move the enc tests into the Makefile and split them into
several small tests.
beck@ ok

Convert to bsd.regress.mk.
Not finished yet.

uncomment rsa test; ok millert@

$OpenBSD$

Fix up for make regress. Should handle objdir now.

ssl lib test scripts. Need to be tested so as not to break build process
before this libssl dir is added to the upper level Makefile.

Wire up QUIC regress.

Provide regress for SSL public APIs.

This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().

Add a regress test for TLS client/server.

This currently exercises various combinations of TLS versions and their
associated key exchange mechanisms. Note that this currently fails for
TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly).

Over time all of the ssl regress should be moved into the dtls and tls
regress tests.

hook verify regress test to build

Revert accidental commit

link verify regress tests to build

Hook openssl-ruby test to regress tree

Hook up dtls regress.

Hook up tlslegacy regress.

1) Move the interop tests to the end so we see tlsfuzzer first
2) Reorder the interop tests so the really slow "cert" test is at the end
3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination
of client and server that does not involve libressl. This way we can
skip testing openssl to openssl11 when running these manually by
setting REGRESS_SKIP_SLOW to "yet" in mk.conf

ok jsing@

hook tlsfuzzer to regress

Re-enable the client test now that it passes again.

Add regress for TLSv1.3 sequence number handling.

Disable the client hello message regress test for now.

The golden values have changed due to TLSv1.3 and will likely change more
in the near future. This will be updated and re-enabled when things settle.

Discussed with beck@

hook handshake test

Hook record regress.