Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | unit-tests: Pass stringyfied assertion statement as non-format string argument | Martin Willi | 2015-04-15 | 1 | -3/+3 | |
| | | | | | | If the assertion contains a modulo (%) operation, test_fail_msg() handles this as printf() format specifier. Pass the assertion string as argument for an explicit "%s" in the format string, instead. | |||||
* | utils: Add malloc/free wrappers returning aligned data | Martin Willi | 2015-04-15 | 1 | -0/+39 | |
| | | | | | | | | | | | | | While we could use posix_memalign(3), that is not fully portable. Further, it might be difficult on some platforms to properly catch it in leak-detective, which results in invalid free()s when releasing such memory. We instead use a simple wrapper, which allocates larger data, and saves the padding size in the allocated header. This requires that memory is released using a dedicated function. To reduce the risk of invalid free() when working on corrupted data, we fill up all the padding with the padding length, and verify it during free_align(). | |||||
* | utils: Add a constant time chunk_equals() variant for cryptographic purposes | Martin Willi | 2015-04-14 | 1 | -0/+27 | |
| | ||||||
* | utils: Add a constant time memeq() variant for cryptographic purposes | Martin Willi | 2015-04-14 | 1 | -0/+47 | |
| | ||||||
* | diffie-hellman: Add a bool return value to set_other_public_value() | Martin Willi | 2015-03-23 | 1 | -7/+7 | |
| | ||||||
* | diffie-hellman: Add a bool return value to get_my_public_value() | Martin Willi | 2015-03-23 | 1 | -11/+11 | |
| | ||||||
* | diffie-hellman: Use bool instead of status_t as get_shared_secret() return value | Martin Willi | 2015-03-23 | 1 | -7/+4 | |
| | | | | | While such a change is not unproblematic, keeping status_t makes the API inconsistent once we introduce return values for the public value operations. | |||||
* | unit-tests: Fix settings test after merging multi-line strings | Tobias Brunner | 2015-03-23 | 1 | -2/+2 | |
| | ||||||
* | unit-tests: Depend on SHA1/SHA256 features for mgf1 test cases | Martin Willi | 2015-03-23 | 2 | -5/+16 | |
| | ||||||
* | public-key: Add helper to determine acceptable signature schemes for keys | Tobias Brunner | 2015-03-04 | 1 | -1/+44 | |
| | ||||||
* | enum: Extend printf hook to print flags | Thomas Egerer | 2015-03-03 | 1 | -2/+164 | |
| | | | | Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> | |||||
* | unit-tests: Don't fail host_create_from_dns() test if IPv6 not supported | Martin Willi | 2015-03-02 | 1 | -4/+10 | |
| | | | | | On some systems, such as the Ubuntu daily build machine, localhost does not resolve to an IPv6 address. Accept such a lookup failure. | |||||
* | Allow SHA256 and SHA384 data hash for BLISS signatures. | Andreas Steffen | 2015-02-26 | 1 | -0/+3 | |
| | | | | | The default is SHA512 since this hash function is also used for the c_indices random oracle. | |||||
* | unit-tests: Add host_create_from_dns() test cases resolving "localhost" | Martin Willi | 2015-02-24 | 1 | -0/+42 | |
| | ||||||
* | unit-tests: Accept numerical protocol/port numbers in traffic selector tests | Martin Willi | 2015-02-23 | 1 | -11/+16 | |
| | ||||||
* | unit-tests: Add an initial set of traffic selector unit tests | Martin Willi | 2015-02-20 | 3 | -0/+281 | |
| | ||||||
* | unit-tests: Adapted to coverity fixes | Andreas Steffen | 2014-12-23 | 1 | -3/+15 | |
| | ||||||
* | Implemented get_byte() method for mgf1_bitspender class | Andreas Steffen | 2014-11-29 | 1 | -6/+16 | |
| | | | | | | The new get_byte() method returns a pseudo-random byte at a time. Changed the get_bits() interface to the same interface as get_byte(). Updated the mgf1 unit-tests accordingly. | |||||
* | unit-tests: Created separate mgf1 test suite | Andreas Steffen | 2014-11-29 | 4 | -140/+261 | |
| | ||||||
* | Moved mgf1 class to libstrongswan/crypto/mgf1 | Andreas Steffen | 2014-11-29 | 1 | -18/+10 | |
| | ||||||
* | unit-tests: Test cancellability of some cancellation points we rely on | Martin Willi | 2014-11-21 | 1 | -0/+192 | |
| | ||||||
* | host: Ignore spaces around - when parsing ranges | Tobias Brunner | 2014-10-30 | 1 | -2/+8 | |
| | ||||||
* | host: Add function to create two hosts from a range definition | Tobias Brunner | 2014-10-30 | 1 | -0/+83 | |
| | ||||||
* | constraints: Add permitted/excludedNameConstraints check | Martin Willi | 2014-10-30 | 3 | -0/+400 | |
| | ||||||
* | constraints: Add requireExplicitPolicy tests | Martin Willi | 2014-10-30 | 1 | -0/+44 | |
| | ||||||
* | constraints: Add inhibitAnyPolicy tests | Martin Willi | 2014-10-30 | 1 | -0/+44 | |
| | ||||||
* | constraints: Add inhibitPolicyMapping tests | Martin Willi | 2014-10-30 | 1 | -4/+83 | |
| | ||||||
* | constraints: Add certificate policy and policy mapping unit tests | Martin Willi | 2014-10-30 | 3 | -0/+472 | |
| | ||||||
* | identification: Support custom types in string constructor prefixes | Martin Willi | 2014-10-30 | 1 | -0/+6 | |
| | ||||||
* | identification: Support prefixes in string constructors for an explicit type | Martin Willi | 2014-10-30 | 1 | -0/+4 | |
| | ||||||
* | unit-tests: Re-align identification_create_from_string() unit test table data | Martin Willi | 2014-10-30 | 1 | -52/+52 | |
| | ||||||
* | threading: Add a more explicit rwlock try_write_lock() testing | Martin Willi | 2014-10-30 | 1 | -0/+44 | |
| | ||||||
* | unit-tests: Fix internet checksum tests on big-endian systems | Tobias Brunner | 2014-10-23 | 1 | -4/+9 | |
| | | | | | | | We actually need to do a byte-swap, which ntohs() only does on little-endian systems. Fixes #747. | |||||
* | process: Don't use the shells built-in echo in tests | Martin Willi | 2014-10-14 | 1 | -1/+1 | |
| | | | | On OS X, the /bin/sh built-in echo does not support -n. | |||||
* | process: Don't use absolute path names for true/false/cat in unit tests | Martin Willi | 2014-10-14 | 1 | -4/+10 | |
| | | | | | But use the (builtin) shell commands instead, as on OS X true/false are under /usr/bin. | |||||
* | process: Add a wrapper to invoke a command under the system default shell | Martin Willi | 2014-10-06 | 1 | -0/+16 | |
| | ||||||
* | process: Port child process spawning to the Windows platform | Martin Willi | 2014-10-06 | 1 | -0/+32 | |
| | ||||||
* | process: Provide an abstraction to spawn child processes with redirected I/O | Martin Willi | 2014-10-06 | 3 | -0/+175 | |
| | ||||||
* | unit-tests: Give worker threads time to clean up when testing thread_t.detach() | Tobias Brunner | 2014-09-09 | 1 | -2/+4 | |
| | ||||||
* | unit-tests: Add option to exclude specific test suites | Tobias Brunner | 2014-09-09 | 2 | -14/+32 | |
| | | | | | Listing test suites in TESTS_SUITES_EXCLUDE allows excluding specific test suites from running. | |||||
* | chunk: Add function to calculate Internet Checksums according to RFC 1071 | Tobias Brunner | 2014-07-22 | 1 | -0/+49 | |
| | ||||||
* | settings: Allow spaces in time settings before the optional unit | Martin Willi | 2014-07-07 | 1 | -2/+2 | |
| | ||||||
* | settings: Be more strict in converting settings to specific data types | Martin Willi | 2014-07-07 | 1 | -20/+15 | |
| | | | | | | | As the behavior was inconsistent for empty strings or strings with characters appended to a number, testing the code failed on some platforms. The new rules are more strict, returning the default if additional characters or an empty string was found for a setting. | |||||
* | unit-tests: Add tests for DH factory | Tobias Brunner | 2014-06-20 | 1 | -0/+157 | |
| | ||||||
* | unit-tests: Add test for crypto_factory_t's rng_create method | Tobias Brunner | 2014-06-20 | 3 | -0/+157 | |
| | ||||||
* | unit-tests: Make fixture functions optional | Tobias Brunner | 2014-06-19 | 1 | -2/+8 | |
| | ||||||
* | identification: Only use either , or / to separate RDNs | Tobias Brunner | 2014-06-18 | 1 | -4/+4 | |
| | | | | | If a DN starts with a slash (or whitespace and a slash) slashes will be used, otherwise commas. | |||||
* | windows: Use WINAPI call convention for Windows API callbacks | Martin Willi | 2014-06-06 | 1 | -2/+2 | |
| | | | | | For x86_64 it does not actually matter, but for i686 builds the call convention is different with WINAPI. | |||||
* | unit-tests: Zero-initialize chunk to avoid free on non-successful fetch | Martin Willi | 2014-06-04 | 1 | -1/+1 | |
| | | | | | If the fetch fails, the fetcher is not required to return an empty chunk. Avoid the resulting invalid free() by initializing data.ptr to NULL. | |||||
* | unit-tests: Support testable functions on Windows, avoid weak GCC symbols | Martin Willi | 2014-06-04 | 1 | -28/+5 | |
| | | | | | | | Instead of using weak symbols, we use dlsym() on Windows to find an arbitrary symbol in libtest to detect its linkage. Instead of creating the associated hashtable in the test runner, we maintain it in libstrongswan, making it significantly simpler. |