openssl/test, branch OpenSSL_1_0_2i

Make update

2016-09-09T21:26:26Z

Reviewed-by: Andy Polyakov

Add basic test for Cisco DTLS1_BAD_VER and record replay handling

2016-08-26T12:44:11Z

(Modified for 1.0.2 by adding selected PACKET_xx() functions and PRF, and subsequent cleanup from commit eb633d03fe2db3666840dee8d0a2dbe491672dfc) Reviewed-by: Rich Salz Reviewed-by: Matt Caswell (cherry picked from commit 40425899200a3dea9ec3684d3eb80bcf50c99baf)

ssltestlib: Tell compiler we don't care about the value when we don't

2016-08-22T12:16:27Z

In mempacket_test_read(), we've already fetched the top value of the stack, so when we shift the stack, we don't care for the value. The compiler needs to be told, or it will complain harshly when we tell it to be picky. Reviewed-by: Matt Caswell (cherry picked from commit 1c288878af42650fbda911b702ae7b551a545b1c)

Have dtlstest run on VMS as well

2016-08-19T13:19:00Z

Reviewed-by: Matt Caswell

Add a DTLS unprocesed records test

2016-08-19T12:50:27Z

Add a test to inject a record from the next epoch during the handshake and make sure it doesn't get processed immediately. Reviewed-by: Richard Levitte

Back port ssltestlib code to 1.0.2

2016-08-19T12:50:27Z

Enables the testing of DTLS code in 1.0.2 Reviewed-by: Richard Levitte

VMS: synchronise tests with Unix

2016-08-18T15:17:12Z

Reviewed-by: Rich Salz

Fix ALPN

2016-04-04T17:45:09Z

* Perform ALPN after the SNI callback; the SSL_CTX may change due to that processing * Add flags to indicate that we actually sent ALPN, to properly error out if unexpectedly received. * document ALPN functions * unit tests Backport of commit 817cd0d52f0462039d1fe60462150be7f59d2002 Reviewed-by: Emilia Käsper Reviewed-by: Dr. Stephen Henson

Fix FIPS SSLv2 test

2016-03-26T15:00:53Z

Reviewed-by: Viktor Dukhovni

Add a test for SSLv2 configuration

2016-03-01T11:20:35Z

SSLv2 should be off by default. You can only turn it on if you have called SSL_CTX_clear_options(SSL_OP_NO_SSLv2) or SSL_clear_options(SSL_OP_NO_SSLv2). You should not be able to inadvertantly turn it on again via SSL_CONF without having done that first. Reviewed-by: Emilia Käsper