]> git.ipfire.org Git - thirdparty/gnutls.git/commitdiff
tlsfuzzer: update to the latest upstream for record_size_limit tests
authorDaiki Ueno <dueno@redhat.com>
Wed, 23 Jan 2019 16:52:47 +0000 (17:52 +0100)
committerDaiki Ueno <dueno@redhat.com>
Thu, 24 Jan 2019 12:36:53 +0000 (13:36 +0100)
Signed-off-by: Daiki Ueno <dueno@redhat.com>
tests/suite/tls-fuzzer/gnutls-nocert.json
tests/suite/tls-fuzzer/tls-fuzzer-common.sh
tests/suite/tls-fuzzer/tlsfuzzer
tests/suite/tls-fuzzer/tlslite-ng

index 6e2a2ea47c5654e025560d76665c8f3540f1e0b3..04376f40ea88c7478e967ed441c2cea0af4b04aa 100644 (file)
                          "-e", "non fragmented, over fragmentation limit: 65535 fragment - 16332B extension",
                          "-e", "small, maximum fragmentation: 1 fragment - 20B extension",
                          "-e", "medium, maximum fragmentation: 1 fragment - 1024B extension"]},
+         {"name" : "test-record-size-limit.py",
+         "comment" : "These tests rely on too small lower limit we don't support; TLS 1.3 high limit is not what we expect; 1/n-1 splitting is not supported in TLS 1.0; we don't reject too large appliation_data records in TLS 1.2 #676",
+          "arguments" : ["-p", "@PORT@", "--reply-AD-size", "{expected_size}",
+                         "-e", "change size in TLS 1.2 resumption",
+                         "-e", "change size in TLS 1.3 session resumption",
+                         "-e", "check if server accepts maximum size in TLS 1.0",
+                         "-e", "check if server accepts maximum size in TLS 1.3",
+                         "-e", "check if server accepts minimal size in TLS 1.0",
+                         "-e", "check if server accepts minimal size in TLS 1.1",
+                         "-e", "check if server accepts minimal size in TLS 1.2",
+                         "-e", "check if server accepts minimal size in TLS 1.3",
+                         "-e", "check interaction with sha256 prf",
+                         "-e", "check interaction with sha384 prf",
+                         "-e", "check server sent size in TLS 1.0",
+                         "-e", "check server sent size in TLS 1.3",
+                         "-e", "drop extension in TLS 1.3 session resumption",
+                         "-e", "HRR sanity",
+                         "-e", "modified extension in 2nd CH in HRR handshake",
+                         "-e", "renegotiation with changed limit",
+                         "-e", "renegotiation with dropped extension",
+                         "-e", "too large record in TLS 1.2",
+                         "-e", "too large record payload in TLS 1.3"] },
          {"name" : "test-sessionID-resumption.py",
           "arguments" : ["-p", "@PORT@"] },
          {"name" : "test-serverhello-random.py",
index 111fd44970e2a6c17e0044a4a0f5bb991e9b72b3..b41f068a07a91ba9141378b7986c003e880c8780 100755 (executable)
@@ -44,7 +44,7 @@ retval=0
 
 tls_fuzzer_prepare
 
-PYTHONPATH=. python tests/scripts_retention.py ${TMPFILE} ${SERV}
+PYTHONPATH=. python tests/scripts_retention.py ${TMPFILE} ${SERV} 821
 retval=$?
 
 rm -f ${TMPFILE}
index b9dec4fde7bedfac90850b86c2c3f644349f6c33..7b2ebe4c8bd06e5a1059a8aeb5bfe2b014e2b521 160000 (submodule)
@@ -1 +1 @@
-Subproject commit b9dec4fde7bedfac90850b86c2c3f644349f6c33
+Subproject commit 7b2ebe4c8bd06e5a1059a8aeb5bfe2b014e2b521
index 3696909715ba73ee807d3959a26d36b56f718ba3..029425144f6b26d5ab8acc3a79e3ead79253ad71 160000 (submodule)
@@ -1 +1 @@
-Subproject commit 3696909715ba73ee807d3959a26d36b56f718ba3
+Subproject commit 029425144f6b26d5ab8acc3a79e3ead79253ad71