summaryrefslogtreecommitdiff
path: root/test/scripts/2000-GnuTLS
AgeCommit message (Collapse)Author
2018-11-29Testsuite: handle change in GnuTLS cert preferenceJeremy Harris
2018-10-21Ensure unique message-id even for rejected messagesJeremy Harris
2018-09-18Testsuite: track newer GnuTLS behaviourJeremy Harris
We have lost one log line, for a ciphers-negotiation failure on an early host in a list from routing. We still get something indicative if the last one fails, so I'm going to let this pass. Test 2025 will fail on earlier GnuTLS library versions as a result. NONE no longer works as documented, in priority string for GnuTLS.
2018-06-25Expansions: A tls option on ${readsocket }. Bug 2282Jeremy Harris
2018-02-10Testsuite: move sha3 tests to separate testcaseJeremy Harris
2018-01-01tidyingJeremy Harris
2017-12-18Testsuite: move CRL testcases away from using SHA1-signed certsJeremy Harris
2017-11-07TLS: support multiple certificate files in server. Bug 2092Jeremy Harris
2017-10-26Testsuite: more time for slow test platformJeremy Harris
2017-10-25Testsuite: more time for slow test platformJeremy Harris
2017-10-14Testsuite: avoid indeterminate delivery orderingJeremy Harris
2017-08-31Logging: TCP Fast OpenJeremy Harris
2017-06-11On a continued-transport delivery, do not check the hostlist for mismatch in theJeremy Harris
transport dispatch level when the transport does hosts-override. Instead do the full trasport process call and let it decide on compatibility with the connection.
2017-06-03Testsuite: stabilize output sequence for 2x35/6Jeremy Harris
2017-05-17Testsuite: delays in 2x3[567]Jeremy Harris
2017-05-17Testsuite: add delays for predictable log sequencing in 2x36, log-sorting ↵Jeremy Harris
for 2x38
2017-05-17TLS: do decent PIPELINING under TLS, at least with GnuTLSJeremy Harris
I've not found an equivalent in OpenSSL of gnutls_record_cork() nor gnutls_record_check_pending() yet.
2017-05-06Teach SMTP input sync check ("input sent too soon") about SMTP input bufferingJeremy Harris
2017-04-30Fix continue_more on TLS connection. Bug 2104Jeremy Harris
2017-03-21Callouts: a "hold" option for receipient-verify, which keeps the connection ↵Jeremy Harris
open both for further recipients and for eventual delivery.
2017-03-07Delivery: contined-connection maintaining TLSJeremy Harris
2016-11-08Testsuite: 2091,5403 independent of calling userJeremy Harris
2016-10-22Testsuite: Add testcase for GnuTLS disconnect after STARTTLSJeremy Harris
2016-10-22TCP Fast OpenJeremy Harris
2016-10-08Fix callouts connection fallback from TLS to cleartext. Bug 1897Jeremy Harris
2016-09-28Drain socket to get clean TCP FINsJeremy Harris
2016-08-22Add automatic macros for compile-time feature optionsJeremy Harris
2016-08-09Testsuite: nail down hostname for CHUNKING test casesJeremy Harris
2016-08-02testcases for TLSJeremy Harris
2016-06-02Expansions: add ${sha3:<string>} itemJeremy Harris
2016-06-02Add support for ${sha256:<string>}Jeremy Harris
2016-05-21Testsuite: GnuTLS server TLD startup errors testcaseJeremy Harris
2016-05-04TLS: when tls_certificates unset, generate a selfsigned certJeremy Harris
2015-03-15SOCKS: as a client, talk SMTP via a socks5 proxy. Bug 1590Jeremy Harris
2015-01-20Testsuite: Experimental_Certnames absorbed into mainlineJeremy Harris
2015-01-12Move certificate name checking to mainline, default enabledJeremy Harris
This is an exim client checking a server certificate.
2014-10-16Handle certificate dir under GnuTLS, if recent enoughJeremy Harris
Add testcases for certificate directories The GnuTLS implementation has been tested on Fedora 21 (alpha), using GnuTLS 3.3.9. The testsuite case is here but with the script commented-out. When enabled, the log/mail/stdout/stderr files will be created fresh.
2014-07-13Fix TLS SNI, and add regression test casesJeremy Harris
2014-05-02Certificate variables and field-extractor expansions. Bug 1358Jeremy Harris
2014-04-20Make testcase more robust vs. timing variationsJeremy Harris
by restricting operations and logging to fewer items of interest
2014-03-19Add tls_verify_hosts and tls_try_verify_hosts to smtp transport, GnuTLS.Wolfgang Breyha
2013-01-26PRDR support, if compiled with EXPERIMENTAL_PRDRJeremy Harris
2012-06-05Testsuite: add per-testcase munge facility; use for dnssec and gnutls.Jeremy Harris
2012-05-17CRL addition returns count of CRLs addedPhil Pennock
A couple more cert1/2 strings updated, plus some disambiguating rhubarb.
2012-05-16Overhaul of GnuTLS code.Phil Pennock
GnuTLS code re-done, using cut&paste for preservation where appropriate. Stop using deprecated APIs. Stop hard-coding lists of ciphers. Use gnutls_priority_init() instead. Turns tls_require_ciphers into a string in the GnuTLS case, not just OpenSSL case. Deprecate three gnutls_require_* options; now ignored but not errors. (No warnings yet). Added TLS SNI support. Made the channel binding integration theoretically actually work. I had it guarded by an #ifdef but the value used was an enum instead. Oops. Fixed. New code much more amenable to future work permitting TLS in callouts. DH param sizes now chosen by GnuTLS maintainers, we use "normal"; that's suddenly a lot more bits, so the saved filename was changed too. (GNUTLS_SEC_PARAM_NORMAL). DH param setup only done for servers now, since clients don't need/use it. GnuTLS a lot more robust to library negotiation using stuff we don't support, error-ing out quickly for other authentication systems (PGP, etc). Renamed pseudo_random_number() to vaguely_random_number() which makes the nature clearer. GnuTLS now provides a vaguely_random_number() implementation, to match OpenSSL. Pull in <inttypes.h> to make the recent arithmetic changes compile on MacOS. Nuke test 2011 which related to the gnutls_require_* options now non-functional.
2012-05-07Testsuite: updates for 8bitmime-as-default.Jeremy Harris
2007-04-16Fix bug in previous patch: following data is permitted after '.' so itPhilip Hazel
must not be diagnosed as an error. The check for vanished socket can only be applied when there is no data pending.
2007-04-13Check for lost connection or unexpected input at end of message.Philip Hazel
2007-01-30Magnus' patch for $sending_ip_address and $sending_port.Philip Hazel
2007-01-18Add gnutls_require_{kx,mac,protocols}.Philip Hazel
generated by cgit v1.2.3 (git 2.39.1) at 2024-10-21 02:33:16 +0000