[PATCH 02 of 20] Tests: LibreSSL and BoringSSL session reuse with TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679105692 -10800 # Sat Mar 18 05:14:52 2023 +0300 # Node ID 125fb8461d88a81a62ccb40d0e205a01ecc759f5 # Parent 86c394a226d2a7d463da7a1b7e88375c71c0c69b Tests: LibreSSL and BoringSSL session reuse with TLSv1.3. LibreSSL does not support session

[PATCH 04 of 20] Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in mail

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679107858 -10800 # Sat Mar 18 05:50:58 2023 +0300 # Node ID 3ab3b2d1c2e67bc1f05e386218ceb08da873a477 # Parent 97b09b6633f69747c0d6ef13c76739bdd6b7f3bb Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in mail. LibreSSL does not support

[PATCH 00 of 20] tests suite fixes for TLSv1.3

2023-03-18 Thread Maxim Dounin
Hello! Here are patch series for the test suite to address test failures observed with TLSv1.3 enabled with BoringSSL and LibreSSL. Short summary of the issues seen: - BoringSSL with TLSv1.3 does not support session reuse via server-side session cache, only with tickets. - BoringSSL with TLSv

[PATCH 01 of 20] Tests: separate SSL session reuse tests

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679105686 -10800 # Sat Mar 18 05:14:46 2023 +0300 # Node ID 86c394a226d2a7d463da7a1b7e88375c71c0c69b # Parent 3c9aa6c23fc836725b96cf056d218217a5a81603 Tests: separate SSL session reuse tests. Instead of being mixed with generic SSL tests, ses

[PATCH 03 of 20] Tests: separate SSL session reuse tests in mail

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679107816 -10800 # Sat Mar 18 05:50:16 2023 +0300 # Node ID 97b09b6633f69747c0d6ef13c76739bdd6b7f3bb # Parent 125fb8461d88a81a62ccb40d0e205a01ecc759f5 Tests: separate SSL session reuse tests in mail. Instead of being mixed with generic SSL te

[PATCH 08 of 20] Tests: enabled session reuse via TLS session tickets

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679140615 -10800 # Sat Mar 18 14:56:55 2023 +0300 # Node ID 01721a51ba94e022d1f59485b9da490683ac0c2f # Parent 36b78c9dc2db19bb92becb5cac0090c34538313e Tests: enabled session reuse via TLS session tickets. This fixes tests with TLSv1.3 enabled

[PATCH 07 of 20] Tests: BoringSSL does not provide session ids with TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679140613 -10800 # Sat Mar 18 14:56:53 2023 +0300 # Node ID 36b78c9dc2db19bb92becb5cac0090c34538313e # Parent d90fe31a80d5e85b59e525e874d24f409716b64c Tests: BoringSSL does not provide session ids with TLSv1.3. diff --git a/stream_ssl_variabl

[PATCH 09 of 20] Tests: restored proper port numbers in ssl_sni_sessions.t

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679140616 -10800 # Sat Mar 18 14:56:56 2023 +0300 # Node ID 8d33ee433f58be6100fb084a12ae8c569259666a # Parent 01721a51ba94e022d1f59485b9da490683ac0c2f Tests: restored proper port numbers in ssl_sni_sessions.t. While using port 8080 for SSL co

[PATCH 10 of 20] Tests: disabled ssl_sni_sessions.t with LibreSSL and BoringSSL

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679140619 -10800 # Sat Mar 18 14:56:59 2023 +0300 # Node ID 79177a6c535839517137dd7e3c7e7d57a5aa35dd # Parent 8d33ee433f58be6100fb084a12ae8c569259666a Tests: disabled ssl_sni_sessions.t with LibreSSL and BoringSSL. With TLSv1.3, LibreSSL does

[PATCH 05 of 20] Tests: separate SSL session reuse tests in stream

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679140351 -10800 # Sat Mar 18 14:52:31 2023 +0300 # Node ID 530336cb449dcb028a55a5a401a122d07521e3a4 # Parent 3ab3b2d1c2e67bc1f05e386218ceb08da873a477 Tests: separate SSL session reuse tests in stream. Instead of being mixed with generic SSL

[PATCH 12 of 20] Tests: fixed ssl_session_ticket_key.t with LibreSSL and TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148620 -10800 # Sat Mar 18 17:10:20 2023 +0300 # Node ID 25c625a731909efe2978b1fd497e9bdda9217a35 # Parent 7dec25ecd3db606258647bd2ce2bca15e793accb Tests: fixed ssl_session_ticket_key.t with LibreSSL and TLSv1.3. LibreSSL does not support

[PATCH 06 of 20] Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in mail

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679140402 -10800 # Sat Mar 18 14:53:22 2023 +0300 # Node ID d90fe31a80d5e85b59e525e874d24f409716b64c # Parent 530336cb449dcb028a55a5a401a122d07521e3a4 Tests: LibreSSL and BoringSSL session reuse with TLSv1.3 in mail. LibreSSL does not support

[PATCH 13 of 20] Tests: fixed ssl_sni.t with LibreSSL and TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148654 -10800 # Sat Mar 18 17:10:54 2023 +0300 # Node ID c6a91e9fa97e2c99ddaa26471364f2345837e698 # Parent 25c625a731909efe2978b1fd497e9bdda9217a35 Tests: fixed ssl_sni.t with LibreSSL and TLSv1.3. LibreSSL does not support session reuse w

[PATCH 11 of 20] Tests: fixed proxy_ssl.t with LibreSSL and TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148613 -10800 # Sat Mar 18 17:10:13 2023 +0300 # Node ID 7dec25ecd3db606258647bd2ce2bca15e793accb # Parent 79177a6c535839517137dd7e3c7e7d57a5aa35dd Tests: fixed proxy_ssl.t with LibreSSL and TLSv1.3. LibreSSL does not support session reuse

[PATCH 15 of 20] Tests: LibreSSL does not send CA lists with TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148737 -10800 # Sat Mar 18 17:12:17 2023 +0300 # Node ID 6d5bede76a77ca86483f63088587913a61b8b18d # Parent 230b9cadce9b57213bf529940ca04224f9f121eb Tests: LibreSSL does not send CA lists with TLSv1.3. diff --git a/ssl_verify_client.t b/ssl

[PATCH 14 of 20] Tests: LibreSSL certificate negotiation with TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148657 -10800 # Sat Mar 18 17:10:57 2023 +0300 # Node ID 230b9cadce9b57213bf529940ca04224f9f121eb # Parent c6a91e9fa97e2c99ddaa26471364f2345837e698 Tests: LibreSSL certificate negotiation with TLSv1.3. LibreSSL fails to negotiate certifica

[PATCH 16 of 20] Tests: fixed stream_proxy_ssl.t with LibreSSL and TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148836 -10800 # Sat Mar 18 17:13:56 2023 +0300 # Node ID 778dcba0f619808fef92999b174c86cf9668ffeb # Parent 6d5bede76a77ca86483f63088587913a61b8b18d Tests: fixed stream_proxy_ssl.t with LibreSSL and TLSv1.3. LibreSSL does not support sessio

[PATCH 20 of 20] Tests: fixed ssl_ocsp.t with LibreSSL and TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148869 -10800 # Sat Mar 18 17:14:29 2023 +0300 # Node ID f6f6a21b1c2a0d88cb2a4993f4c0113a3fb1e019 # Parent 782531c3cd79dcf700276e10bef00e524de009d1 Tests: fixed ssl_ocsp.t with LibreSSL and TLSv1.3. LibreSSL does not support session reuse

[PATCH 18 of 20] Tests: cleaned up ssl_ocsp.t

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148851 -10800 # Sat Mar 18 17:14:11 2023 +0300 # Node ID c140f78fbc8f62c9694d3b969d1309570a96f2e7 # Parent fc68109603c10abff643444b39cf52daa240a3e2 Tests: cleaned up ssl_ocsp.t. Fixed verbose logging, added $SIG{PIPE} handling to avoid han

[PATCH 19 of 20] Tests: removed multiple server certificates from ssl_ocsp.t

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148855 -10800 # Sat Mar 18 17:14:15 2023 +0300 # Node ID 782531c3cd79dcf700276e10bef00e524de009d1 # Parent c140f78fbc8f62c9694d3b969d1309570a96f2e7 Tests: removed multiple server certificates from ssl_ocsp.t. Multiple server certificates a

[PATCH 17 of 20] Tests: fixed stream_ssl_variables.t.t with LibreSSL and TLSv1.3

2023-03-18 Thread Maxim Dounin
# HG changeset patch # User Maxim Dounin # Date 1679148849 -10800 # Sat Mar 18 17:14:09 2023 +0300 # Node ID fc68109603c10abff643444b39cf52daa240a3e2 # Parent 778dcba0f619808fef92999b174c86cf9668ffeb Tests: fixed stream_ssl_variables.t.t with LibreSSL and TLSv1.3. LibreSSL does not support