]> git.ipfire.org Git - thirdparty/gnutls.git/commitdiff
tests: tls-fuzzer: enable tests relying on header fragmentation
authorDaiki Ueno <dueno@redhat.com>
Wed, 18 Jul 2018 13:56:17 +0000 (15:56 +0200)
committerDaiki Ueno <dueno@redhat.com>
Mon, 6 Aug 2018 11:33:46 +0000 (13:33 +0200)
Those tests were previously disabled because splitting of handshake
messages in a very short (< 4 bytes) fragments is not implemented.

Signed-off-by: Daiki Ueno <dueno@redhat.com>
tests/suite/tls-fuzzer/gnutls-nocert-tls13.json
tests/suite/tls-fuzzer/gnutls-nocert.json

index db351652bbf5d6197557a7a91d4d2d3c57c6c602..4b01fe4531c1d4a97cfe53deadc7acd55d9f98ec 100644 (file)
         {"name" : "test-tls13-version-negotiation.py",
          "arguments": ["-p", "@PORT@"]},
         {"name" : "test-tls13-zero-length-data.py",
-         "comment" : "in these tests tlsfuzzer splits ClientHello into the first 2 bytes and the remainder, which gnutls doesn't support",
+         "comment" : "gnutls sends NST before receiving client Finished, that is not expected in the disabled test",
          "arguments": ["-p", "@PORT@",
-                       "-e", "zero-length app data interleaved in handshake",
-                       "-e", "zero-len app data with large padding during handshake",
-                       "-e", "zero-len app data with large padding interleaved in handshake",
-                       "-e", "zero-len app data with padding interleaved in handshake"]},
+                       "-e", "zero-len app data with large padding during handshake"]},
         {"name" : "test-tls13-finished.py",
          "commoent" : "the disabled tests timeout very often due to slow tls-fuzzer implementation",
          "arguments": ["-p", "@PORT@", "-n", "5",
index c69ecfaf7ef571e28ffde8fcc1d61511472fe955..d99c17414b76e9107fe21cc6b2b15cd987b0cd4c 100644 (file)
           "ciphers even 8199",
           "ciphers odd 8090",
           "ext padding, 16130 bytes",
-          "ext padding, 65367 bytes"]},
-         {"name" : "test-large-hello.py",
-          "arguments" :
-                 ["multiple extensions 9212",
-                  "multiple extensions 1",
-                  "multiple extensions 16353"]},
-         {"name" : "test-large-hello.py",
-          "comment" : "These tests rely on fragmenting the first bytes of the handshake header. Gnutls is limited on that, and doesn't accept handshake header fragmentation.",
-          "arguments" :
-                 ["sanity check - fragmented",
-                  "fragmented, padding ext 0 bytes",
-                  "fragmented, padding ext 65354 bytes",
-                  "fragmented, padding ext 16213 bytes"],
-          "exp_pass" : false},
+          "ext padding, 65367 bytes",
+          "multiple extensions 9212",
+          "multiple extensions 1",
+          "multiple extensions 16353",
+          "sanity check - fragmented",
+          "fragmented, padding ext 0 bytes",
+          "fragmented, padding ext 65354 bytes",
+          "fragmented, padding ext 16213 bytes"]},
          {"name" : "test-ecdsa-sig-flexibility.py"},
          {"name" : "test-ocsp-stapling.py",
           "arguments" : ["--no-status"] },