Skip to content

Commit

Permalink
Extend tlsfuzzer coverage
Browse files Browse the repository at this point in the history
Signed-off-by: Jakub Jelen <[email protected]>
  • Loading branch information
Jakuje committed Dec 16, 2024
1 parent 924c9de commit 8b80298
Show file tree
Hide file tree
Showing 7 changed files with 79 additions and 19 deletions.
4 changes: 3 additions & 1 deletion .reuse/dep5
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,9 @@ Files: .github/*
tools/openssl*.cnf
tests/*.pem
tests/cert.json.in
tests/cert.json.part.in
tests/cert.json.rsa.in
tests/cert.json.ecdsa.in
tests/cert.json.eddsa.in
scripts/clean-dist.sh
Copyright: (C) 2022 - 2024 Simo Sorce <[email protected]>
License: Apache-2.0
Expand Down
21 changes: 21 additions & 0 deletions tests/cert.json.ecdsa.in
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
,
{"server_command": [@CHECKER@"openssl", "s_server", @PROPQ@"-www", "-port", "@PORT@", "-key", "@PRIURI@", "-cert", "@CRTURI@"],
"comment": "Run test with @PRIURI@ without certificate verify",
"environment": {"PYTHONPATH" : "."},
"server_hostname": "localhost",
"server_port": @PORT@,
"tests" : [
{"name" : "test-tls13-conversation.py",
"arguments" : ["-p", "@PORT@"]},
{"name" : "test-conversation.py",
"arguments" : ["-p", "@PORT@", "-d"]},
{"name" : "test-signature-algorithms.py",
"arguments" : [
"-p", "@PORT@", "-n", "0", "--ecdsa", "-g", "secp384r1", "-x", "sanity",
"-X", "handshake_failure", "-x", "explicit SHA-256+RSA or ECDSA",
"-X", "handshake_failure", "sanity", "explicit SHA-256+RSA or ECDSA"
]
}
]
}

25 changes: 25 additions & 0 deletions tests/cert.json.eddsa.in
Original file line number Diff line number Diff line change
@@ -0,0 +1,25 @@
,
{"server_command": [@CHECKER@"openssl", "s_server", @PROPQ@"-www", "-port", "@PORT@", "-key", "@PRIURI@", "-cert", "@CRTURI@"],
"comment": "Run test with @PRIURI@ without certificate verify",
"environment": {"PYTHONPATH" : "."},
"server_hostname": "localhost",
"server_port": @PORT@,
"tests" : [
{"name" : "test-tls13-conversation.py",
"arguments" : ["-p", "@PORT@"]},
{"name" : "test-conversation.py",
"arguments" : ["-p", "@PORT@", "-d"]},
{"name" : "test-signature-algorithms.py",
"arguments" : [
"-p", "@PORT@", "--ecdsa", "-x", "implicit SHA-1 check",
"-X", "handshake_failure", "sanity", "implicit SHA-1 check"
]
},
{"name" : "test-tls13-eddsa.py",
"arguments" : [
"-p", "@PORT@", "-x", "ed448 only", "-X", "handshake_failure"
]
}
]
}

15 changes: 0 additions & 15 deletions tests/cert.json.part.in

This file was deleted.

26 changes: 26 additions & 0 deletions tests/cert.json.rsa.in
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
,
{"server_command": [@CHECKER@"openssl", "s_server", @PROPQ@"-www", "-port", "@PORT@", "-key", "@PRIURI@", "-cert", "@CRTURI@"],
"comment": "Run test with @PRIURI@ without certificate verify",
"environment": {"PYTHONPATH" : "."},
"server_hostname": "localhost",
"server_port": @PORT@,
"tests" : [
{"name" : "test-tls13-conversation.py",
"arguments" : ["-p", "@PORT@"]},
{"name" : "test-conversation.py",
"arguments" : ["-p", "@PORT@", "-d"]},
{"name" : "test-sig-algs.py",
"arguments" : [
"-p", "@PORT@", "-n", "0",
"-x", "rsa_pss_pss_sha256 only", "-X", "handshake_failure",
"-x", "rsa_pss_pss_sha384 only", "-X", "handshake_failure",
"-x", "rsa_pss_pss_sha512 only", "-X", "handshake_failure"
]
},
{"name" : "test-tls13-rsa-signatures.py",
"arguments" : ["-p", "@PORT@"]},
{"name" : "test-tls13-signature-algorithms.py",
"arguments" : ["-p", "@PORT@", "-n", "0"]}
]
}

1 change: 1 addition & 0 deletions tests/meson.build
Original file line number Diff line number Diff line change
Expand Up @@ -157,6 +157,7 @@ foreach t, extra_args : tests
env: test_env,
depends: test_executables,
is_parallel: false,
timeout: 60,
)
endforeach
endforeach
6 changes: 3 additions & 3 deletions tests/ttlsfuzzer
Original file line number Diff line number Diff line change
Expand Up @@ -55,14 +55,14 @@ run_tests() {
prepare_test cert.json.in "$PRIURI" "$CRTURI"

title PARA "Prepare test for RSA"
prepare_test cert.json.part.in "$PRIURI" "$CRTURI"
prepare_test cert.json.rsa.in "$PRIURI" "$CRTURI"

title PARA "Prepare test for ECDSA"
prepare_test cert.json.part.in "$ECPRIURI" "$ECCRTURI"
prepare_test cert.json.ecdsa.in "$ECPRIURI" "$ECCRTURI"

if [[ -n "$EDBASEURI" ]]; then
title PARA "Prepare test for EdDSA"
prepare_test cert.json.part.in "$EDPRIURI" "$EDCRTURI"
prepare_test cert.json.eddsa.in "$EDPRIURI" "$EDCRTURI"
fi

# the missing closing brace
Expand Down

0 comments on commit 8b80298

Please sign in to comment.