openssl/test/cmp_client_test.c, branch master

test/cmp_client_test.c: add RR tests with issuer or serialNumber missing

2026-10-24T09:43:46Z

Issuer and serialNumber are independently OPTIONAL in a CertTemplate, and the library hands them to the process_rr callback separately. The OpenSSL CMP client always sends both, so the mock server has never been exercised with an RR that carries only one of them. Assisted-by: Claude:claude-fable-5-1 Reviewed-by: Dmitry Belyavskiy Reviewed-by: Mounir Idrassi Reviewed-by: Eugene Syromiatnikov Merge-date: Sat Oct 24 09:44:20 2026 Merged-from: https://github.com/openssl/openssl/pull/33071

Add test for CVE-2026-75805

2026-09-29T11:00:43Z

Signed-off-by: Norbert Pocs Reviewed-by: Richard Levitte Reviewed-by: Andrew Dinh Reviewed-by: Tomas Mraz Merge-date: Tue Sep 29 11:00:50 2026

OSSL_CMP_SRV_process_request(): fix wrong handling of aborted polling transaction

2026-08-27T07:47:57Z

The check for acceptable response body types during polling should only be done when we are in an active transaction. Also fix missing parentheses in test/cmp_client_test.c, which had prevented reporting failure. Reviewed-by: Andrew Dinh Reviewed-by: Eugene Syromiatnikov MergeDate: Thu Aug 27 07:25:02 2026 (Merged from https://github.com/openssl/openssl/pull/28988)

cmp_client_test.c: fix partly too generous total_timeout limit for IR session with polling

2026-06-10T06:46:29Z

Reviewed-by: Eugene Syromiatnikov Reviewed-by: Norbert Pocs MergeDate: Wed Jun 10 06:46:36 2026 (Merged from https://github.com/openssl/openssl/pull/31111)

cmp_client_test.c: disable KUR_bad_pkiConf_protection

2026-03-26T15:55:17Z

This is a workaround for an issue that lead to fuzz-checker CI failures; the preliminary solution is to disable the inessential test case test_exec_KUR_bad_pkiConf_protection. References: https://github.com/openssl/openssl/pull/28973 Fixes: 525a4f1efbab "cmp_vfy.c,doc/,test/: when trying to use cached CMP message sender cert, no more check its revocation and chain" Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Thu Mar 26 15:55:34 2026 (Merged from https://github.com/openssl/openssl/pull/30567)

cmp_vfy.c,doc/,test/: when trying to use cached CMP message sender cert, no more check its revocation and chain

2026-03-25T09:42:04Z

Reviewed-by: Neil Horman Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28973)

Copyright year updates

2026-03-10T14:37:52Z

Reviewed-by: Tomas Mraz Reviewed-by: Eugene Syromiatnikov MergeDate: Tue Mar 10 14:37:54 2026 Release: yes

cmp_client_test.c: add print_errors_PKIStatusInfo() and use it for all CMP test executions

2026-02-08T19:39:25Z

Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28985)

cmp_client_test.c: add separator output between the two execute_exec_GENM_ses_test_single() in execute_exec_GENM_ses_test()

2026-02-08T19:39:25Z

Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28985)

cmp_client_test.c: speed up polling tests by reducing checkAfter times

2026-02-08T19:39:25Z

Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/28985)