aboutsummaryrefslogtreecommitdiffstats
path: root/src/scripts/test_cli.py
Commit message (Collapse)AuthorAgeFilesLines
* Don't block forever in cli tests if something goes wrongJack Lloyd2019-07-131-3/+13
| | | | Or at least, not on Python3 which actually supports timeouts
* Prevent exception from taking down entire test scriptJack Lloyd2019-06-081-1/+5
|
* Fix lintJack Lloyd2019-05-311-2/+2
|
* Connect twice to excercise both accept and non-accept pathsJack Lloyd2019-05-311-10/+18
|
* Add --max-clients option to tls_proxy and tls_http_serverJack Lloyd2019-05-311-4/+14
| | | | A clean exit is required in order to get coverage results
* Python...Jack Lloyd2019-05-301-2/+2
|
* Fixes for Python2Jack Lloyd2019-05-301-3/+23
|
* Improve CLI testsJack Lloyd2019-05-301-63/+201
|
* Argon2: minor optimizations, add tests of CLI, tweak tuningJack Lloyd2019-05-301-1/+12
|
* Improve test coverage. Fix Argon2 default paramsJack Lloyd2019-05-291-0/+8
|
* Add --format option for RNG cmdletJack Lloyd2019-05-091-0/+4
|
* Add a cmdlet to print UUIDsJack Lloyd2019-04-261-0/+13
|
* Add a wrapper class that wraps macOS or Linux certificate stores.Jack Lloyd2019-04-131-2/+17
|
* Allow creating intermediate CAs using CLIJack Lloyd2019-04-101-0/+28
| | | | Closes #1879
* Split CLI utils.cpp into more partsJack Lloyd2019-02-281-0/+8
| | | | | | Add base58 encoding/decoding CLI Use decrypt_or_random in pk_decrypt
* Move hash util to hash.cpp and add --format optionJack Lloyd2019-01-221-0/+9
| | | | | | | For example/documentation purposes, having distinct files makes the code easier to find. New --format option allows encoding as base64 or base58
* Test how long it takes to precompute base point multiplesJack Lloyd2018-12-161-1/+1
|
* Work around a problem when built with OpenSSLJack Lloyd2018-12-101-1/+1
| | | | | | | It appears OpenSSL has a different interpretation from us of how the message representative is formed for P-521 when given a hash to sign that is larger than the group order; signatures generated by us do not verify with OpenSSL and vice versa.
* Support recovering ECDSA public key from message/signature pairJack Lloyd2018-12-101-2/+8
| | | | | | See http://www.secg.org/sec1-v2.pdf section 4.1.6 Closes #664
* Pylint fixesJack Lloyd2018-12-031-2/+1
|
* Add a const-time division algorithmJack Lloyd2018-12-021-1/+1
| | | | | | | | It is stupid and slow (~50-100x slower than variable time version) but still useful for protecting critical algorithms. Not currently used, waiting for OSS-Fuzz to test it for a while before we commit to it.
* Lint fix [ci skip]Jack Lloyd2018-10-301-4/+4
|
* Add test for TSS cli utilJack Lloyd2018-10-301-2/+47
|
* Fix CLI testsJack Lloyd2018-10-161-9/+13
| | | | Changing the sieve in 0536fe92 changed which primes we generate
* Add testsJack Lloyd2018-09-101-4/+25
| | | | This is a contribution of Ribose Inc (@riboseinc)
* Default disable support for TLS v1.0/v1.1 and all CBC and CCM suitesJack Lloyd2018-08-221-4/+14
|
* Lint fixJack Lloyd2018-08-101-1/+1
|
* Improve speed of cli testsJack Lloyd2018-08-101-37/+49
| | | | | Exit early from scrypt bench if we only computed a single value in the requested msec bounds. Reduce speed timeouts across board.
* Fix complaints from latest pylintJack Lloyd2018-08-021-6/+6
|
* More CLI testsJack Lloyd2018-08-021-1/+9
|
* Additional CLI testsJack Lloyd2018-08-021-0/+38
|
* In ECC private key encoding, include the optional public key fieldJack Lloyd2018-07-231-7/+8
| | | | Otherwise GnuTLS refuses to parse the private key. Fixes #1634
* Update password hashing default settingsJack Lloyd2018-07-131-1/+1
| | | | | | | | Bcrypt work factor 10 is looking pretty low these days, as is 100K iterations of PBKDF2. Increase bcrypt to 12 and PBKDF2 to 150K, and also transition passhash9 to using SHA-512 instead of SHA-256. Also document bcrypt better, and add speed tests for bcrypt and passhash9
* Tighten up error checking in pk_decryptJack Lloyd2018-07-131-1/+1
|
* More CLI testsJack Lloyd2018-07-041-15/+68
|
* Need to bypass OpenSSL-based RSA keygenJack Lloyd2018-07-041-1/+1
|
* Add pk_encrypt/pk_decrypt commandsJack Lloyd2018-07-041-0/+29
|
* Correct command to check for PSK cli testsJack Lloyd2018-07-021-1/+1
|
* Lint fixesJack Lloyd2018-06-301-8/+5
|
* Correct test for subcommand existingJack Lloyd2018-06-301-1/+1
|
* Add a timing check for modular exponentiationJack Lloyd2018-06-301-1/+18
|
* Fix CLI tests when OpenSSL is enabledJack Lloyd2018-06-291-1/+1
|
* More CLI testsJack Lloyd2018-06-291-5/+66
|
* More cli tests, and a lint fixJack Lloyd2018-06-281-3/+4
|
* Add --max-clients= option to tls_server CLIJack Lloyd2018-06-281-2/+2
| | | | | | | Killing the process seems to result in the coverage info being lost. I think because gcov writes during an exit handler which ends up not running if we SIGTERM
* Lint fixesJack Lloyd2018-06-281-7/+4
|
* More CLI testsJack Lloyd2018-06-281-2/+95
|
* More cli testsJack Lloyd2018-06-191-0/+27
|
* Fix CLI testJack Lloyd2018-06-141-0/+1
|
* Add 192-bit Suite B policyJack Lloyd2018-06-141-2/+2
| | | | Since 128-bit policy is actually not even allowed since 2015.