cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-09-24 05:00:45 -04:00
Code Issues Packages Projects Releases Wiki Activity

ssl-opt: Added 4 and 128 bytes tests to HS defragmentation for server initiated reneg

Browse Source 
Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>
This commit is contained in:
Minos Galanakis 2025-03-18 10:31:37 +00:00
parent 5c6d3173fa
commit 6c129c36ff
1 changed files with 35 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

44
tests/ssl-opt.sh
View File

@ -14571,6 +14571,15 @@ run_test "Handshake defragmentation on server: len=4, client-initiated server
-s "Consume: waiting for more handshake fragments 4/" \
# Test server-initiated renegotiation with fragmented handshake on TLS1.2
# Note: The /reneg endpoint serves as a directive for OpenSSL's s_server
# to initiate a handshake renegotiation.
# Note: Adjusting the renegotiation delay beyond the library's default
# value of 16 is necessary. This parameter defines the maximum
# number of records received before renegotiation is completed.
# By fragmenting records and thereby increasing their quantity,
# the default threshold can be reached more quickly.
# Setting it to -1 disables that policy's enforment.
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
run_test "Handshake defragmentation on client: len=512, server-initiated renegotiation" \
@ -14584,15 +14593,6 @@ run_test "Handshake defragmentation on client: len=512, server-initiated rene
-c "found renegotiation extension" \
-c "=> renegotiate"
# Note: The /reneg endpoint serves as a directive for OpenSSL's s_server
# to initiate a handshake renegotiation.
# Note: Adjusting the renegotiation delay beyond the library's default
# value of 16 is necessary. This parameter defines the maximum
# number of records received before renegotiation is completed.
# By fragmenting records and thereby increasing their quantity,
# the default threshold can be reached more quickly.
# Setting it to -1 disables that policy's enforment.
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
run_test "Handshake defragmentation on client: len=256, server-initiated renegotiation" \
@ -14606,6 +14606,32 @@ run_test "Handshake defragmentation on client: len=256, server-initiated rene
-c "found renegotiation extension" \
-c "=> renegotiate"
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
run_test "Handshake defragmentation on client: len=128, server-initiated renegotiation" \
"$O_NEXT_SRV -tls1_2 -split_send_frag 128 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
"$P_CLI debug_level=3 renegotiation=1 renego_delay=-1 request_page=/reneg" \
0 \
-c "initial handshake fragment: 128, 0\\.\\.128 of [0-9]\\+" \
-c "Prepare: waiting for more handshake fragments 128/" \
-c "Consume: waiting for more handshake fragments 128/" \
-c "client hello, adding renegotiation extension" \
-c "found renegotiation extension" \
-c "=> renegotiate"
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
run_test "Handshake defragmentation on client: len=4, server-initiated renegotiation" \
"$O_NEXT_SRV -tls1_2 -split_send_frag 4 -cert $DATA_FILES_PATH/server5.crt -key $DATA_FILES_PATH/server5.key" \
"$P_CLI debug_level=3 renegotiation=1 renego_delay=-1 request_page=/reneg" \
0 \
-c "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
-c "Prepare: waiting for more handshake fragments 4/" \
-c "Consume: waiting for more handshake fragments 4/" \
-c "client hello, adding renegotiation extension" \
-c "found renegotiation extension" \
-c "=> renegotiate"
# Test heap memory usage after handshake
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
requires_config_enabled MBEDTLS_MEMORY_DEBUG