CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2020/08/13 11:16:05
Modified files:
security/py-tlsfuzzer: Makefile
security/py-tlsfuzzer/pkg: PLIST
Added files:
security/py-tlsfuzzer/files: test-tls13-zero-content-type.py
Log message:
Add a test for zero content type from jsing
This checks whether a TLSv1.3 server handles the case of a record
with all-zero plaintext correctly (i.e., by sending an unexpected
message alert) in various contexts. This would have caught a bug
where the LibreSSL TLSv1.3 record layer would call freezero() with
a size of -1.
What's missing is a test that sends a completely empty record. The
framework doesn't seem to permit that easily.
