openssl/test/helpers, branch master

Increase BIO_dgram_pair ring buffer size on AIX for quic tests

2026-10-01T19:13:25Z

AIX has a unique definition of struct sockaddr_un (AF_UNIX addresses). Whereas most unixes define the structure to have a sun_path field of 108 bytes, AIX defines sun_path to be an array of 1023 bytes. Because BIO_dgram_pairs use two BIO_ADDR's (which are a union containing sockaddr_un) to define a pseudo UDP header, any dgram pair with a fixed ring buffer size is likely to be unable to transmit a complete frame if the ring buffer is sized with less than sizeof(BIO_ADDR)*2 + 1200 bytes allocated on AIX. Fix it by increasing the ring buffer size for such tests Fixes #32506 Reviewed-by: Saša Nedvědický Reviewed-by: Eugene Syromiatnikov Reviewed-by: Norbert Pocs Reviewed-by: Andrew Dinh Merge-date: Thu Oct 1 19:13:27 2026 Merged-from: https://github.com/openssl/openssl/pull/32838

More accurate ssl_new curve tests

2026-09-23T14:40:13Z

- Prefer negotiated group value over tmp pkey type heuristic - Drop no longer needed brainpool NID workaround. - Test 14-curves.cnf unless both "ec" and "dh" are disabled. - Expect specific FFDHE group with TLS 1.3 - Specify "DHE" ciphers when testing FFDHE groups with TLS 1.2 - Test ML-KEM-512 hybrids in FIPS mode after version bump to 4.2 Reviewed-by: Eugene Syromiatnikov Reviewed-by: Neil Horman MergeDate: Mon Sep 21 11:52:07 2026 (Merged from https://github.com/openssl/openssl/pull/32670)

ML-KEM-512 hybrid TLS KEMs

2026-09-23T14:40:11Z

Per the new codepoints assigned by IANA for draft-rosomakho-tls-ecdhe-mlkem512-00. Reviewed-by: Eugene Syromiatnikov Reviewed-by: Neil Horman MergeDate: Mon Sep 21 11:52:03 2026 (Merged from https://github.com/openssl/openssl/pull/32670)

Copyright year updates

2026-09-09T13:12:46Z

Reviewed-by: Daniel Kubec Reviewed-by: Eugene Syromiatnikov Merge-date: Wed Sep 9 13:12:46 2026 Release: yes

Addressing how DTLS 1.3 handles Read Record Layer transitions.

2026-08-25T11:41:25Z

Currently the state machine moves the read record layer to the next epoch base off of state events. The problem with this is when either the client or the server sent out a record during the handshake that causes an alert. If the state machine moved either the client or server to the next epoch it will not be able to handle that alert message. This approach delays moving the read record layer to the next epoch until we actually receive a record in that epoch. This allows us to process the alert messages. Fixes: openssl/project#1786 Fixes: openssl/project#1785 Reviewed-by: Matt Caswell Reviewed-by: Frederik Wedel-Heinen MergeDate: Thu Apr 16 17:22:48 2026 (Merged from https://github.com/openssl/openssl/pull/29946)

Fixing comment out tests for DTLS1.3 in sslapitest

2026-08-25T11:41:25Z

Several tests where commented out for the behavior of DTLS1.3 is different then TLS1.3. The main difference is around the ACK message. This means some tests needed to be massaged to for the peer to ACK to a certain message. This PR does not remove all TODO's for DTLS1.3. Currently there are two TODOs. One around padding for messages less than 16 bytes and one for authentication and integrity only messages. Also this PR still has a lot of memory leaks. Looking into it it has to deal with how new record layers are allocated for new epochs. Because record layers are also stored in a list of messages sent in case they need to be resent it wasn't a simple fix. I feel like the memory leaks should be tackled in a separate PR. Fixes: https://github.com/openssl/project/issues/1667 Reviewed-by: Frederik Wedel-Heinen Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/29067)

Support DTLS 1.3 Unified Headers

2026-08-25T11:41:24Z

Also set correct AAD for DTLS 1.3 message de-/encryption. Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25668)

Adds DTLS1.3 to ssl protocol to text structs

2026-08-25T11:41:23Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/22273)

test: use portable function-name macro in QUIC test helper

2026-08-13T07:18:24Z

Use OPENSSL_FUNC instead of __func__ so the helper compiles in strict ANSI/C90 builds. Fixes: 0461a5636dec ("test/quicapitest.c: add test for pending connections limit enforcement") Signed-off-by: Nikola Pajkovsky Reviewed-by: Viktor Dukhovni Reviewed-by: Saša Nedvědický Reviewed-by: Milan Broz Merge-date: Thu Aug 13 07:18:30 2026 Merged-from: https://github.com/openssl/openssl/pull/32337

test/quictestlib.c: add functions to create QUIC objects on dgram bio

2026-08-12T14:59:36Z

Add the following helper functions: * create_quic_ctx_pair() - creates pair of SSL_CTX (server, client). * create_quic_conn_objects() - creates pair of SSL objects, client and listener. They both are 'connected' by BIO_dgram_pair. * create_quic_client() - creates SSL QUIC client object bound to BIO object provided by caller. Reviewed-by: Eugene Syromiatnikov Reviewed-by: Andrew Dinh Reviewed-by: Neil Horman MergeDate: Wed Aug 12 15:00:27 2026 (Merged from https://github.com/openssl/openssl/pull/32052)