From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Mon, 25 Aug 2003 09:57:09 +0000 (+0000)
Subject: *** empty log message ***
X-Git-Tag: gnutls_0_9_8~38
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=74dde1ae4f834782880898323db0f94d70fa6cb2;p=thirdparty%2Fgnutls.git

*** empty log message ***
---

diff --git a/doc/tex/programs.tex b/doc/tex/programs.tex
index 493864255e..0d7553de0c 100644
--- a/doc/tex/programs.tex
+++ b/doc/tex/programs.tex
@@ -55,50 +55,45 @@ Resolving 'localhost'...
 Connecting to '127.0.0.1:5556'...
 Checking for TLS 1.0 support... yes
 Checking for SSL 3.0 support... yes
-Checking for certificate information...
-- Certificate type: X.509
- - Certificate info:
- # Certificate is valid since: Sat Jul  7 13:18:00 EEST 2001
- # Certificate expires: Sun Jul  7 13:18:00 EEST 2002
- # Certificate fingerprint: 43 ab a2 a7 d3 6a 28 02 60 73 b4 a5 c3 84 0a 3f 
- # Certificate serial number: 01 
- # Certificate version: #3
- # Certificate public key algorithm: RSA
- #   Modulus: 1024 bits
- #   CN: localhost
- #   OU: GNUTLS dev.
- #   O: GNUTLS
- #   L: Athina
- #   S: Attiki
- #   C: GR
- #   E: root@localhost
- # Certificate Issuer's info:
- #   CN: GNUTLS TEST CA
- #   OU: GNUTLS dev.
- #   O: GNUTLS
- #   L: Athina
- #   S: Attiki
- #   C: GR
- #   E: gnutls-dev@gnupg.org
- 
 Checking for version rollback bug in RSA PMS... no
 Checking for version rollback bug in Client Hello... no
 Checking whether we need to disable TLS 1.0... no
+Checking whether the server ignores the RSA PMS version... no
 Checking whether the server can accept Hello Extensions... yes
 Checking whether the server can accept cipher suites not in SSL 3.0 spec... yes
+Checking whether the server can accept a bogus TLS record version in the client hello... yes
+Checking for certificate information...
+- Certificate type: X.509
+ - Got a certificate list of 1 certificates.
+
+ - Certificate[0] info:
+ # valid since: Sat Jul  7 13:18:00 EEST 2001
+ # expires at: Sun Jul  7 13:18:00 EEST 2002
+ # serial number: 01 
+ # fingerprint: 43 ab a2 a7 d3 6a 28 02 60 73 b4 a5 c3 84 0a 3f 
+ # version: #3
+ # public key algorithm: RSA
+ #   Modulus: 1024 bits
+ # Subject's DN: C=GR,ST=Attiki,L=Athina,O=GNUTLS,OU=GNUTLS dev.,CN=localhost,EMAIL=root@localhost
+ # Issuer's DN: C=GR,ST=Attiki,L=Athina,O=GNUTLS,OU=GNUTLS dev.,CN=GNUTLS TEST CA,EMAIL=gnutls-dev@gnupg.org
+
+ 
+Checking for trusted CAs...
+- Server's trusted authorities:
+   [0]: C=GR,ST=Attiki,L=Athina,O=GNUTLS,OU=GNUTLS dev.,CN=GNUTLS TEST CA,EMAIL=gnutls-dev@gnupg.org
+ 
 Checking whether the server understands TLS closure alerts... yes
-Checking whether the server supports session resumption... yes
+Checking whether the server supports session resumption... no
 Checking for export-grade ciphersuite support... no
-Checking for anonymous authentication support... yes
-Checking for ephemeral Diffie Hellman support... yes
+Checking for ephemeral Diffie Hellman support... no
+Checking for ephemeral Diffie Hellman prime size... N/A
 Checking for AES cipher support... yes
 Checking for 3DES cipher support... yes
 Checking for ARCFOUR cipher support... yes
 Checking for MD5 MAC support... yes
 Checking for SHA1 MAC support... yes
-Checking for max record size TLS extension... yes
-Checking for SRP authentication support (gnutls extension)... no
-Checking for OpenPGP authentication support (gnutls extension)... no
+Checking for max record size (TLS extension)... yes
+Checking for OpenPGP authentication support (TLS extension)... no
 
 \end{verbatim}
 
diff --git a/src/tls_test.c b/src/tls_test.c
index e8afa35562..5c64983cb8 100644
--- a/src/tls_test.c
+++ b/src/tls_test.c
@@ -124,7 +124,7 @@ static int tt = 0;
 		sa.sin_port = htons(port); \
 		sa.sin_addr.s_addr = *((unsigned int *) server_host->h_addr); \
 		inet_ntop(AF_INET, &sa.sin_addr, buffer, MAX_BUF); \
-		if (tt++ == 0) fprintf(stderr, "Connecting to '%s:%d'...\n", buffer, port); \
+		if (tt++ == 0) printf("Connecting to '%s:%d'...\n", buffer, port); \
 		err = connect(sd, (SA *) & sa, sizeof(sa)); \
 		ERR(err, "connect")