linux-toradex.git/tools/testing/selftests/net/tls.c, branch v6.3

selftests: tls: handful of memrnd() and length checks

2022-07-29T04:49:59+00:00

Add a handful of memory randomizations and precise length checks.
Nothing is really broken here, I did this to increase confidence
when debugging. It does fix a GCC warning, tho. Apparently GCC
recognizes that memory needs to be initialized for send() but
does not recognize that for write().

Signed-off-by: Jakub Kicinski

selftests: tls: add a test for timeo vs lock

2022-07-22T01:58:11+00:00

Add a test for recv timeout. Place it in the tls_err
group, so it only runs for TLS 1.2 and 1.3 but not
for every AEAD out there.

Link: https://lore.kernel.org/r/20220720203701.2179034-2-kuba@kernel.org
Signed-off-by: Jakub Kicinski

selftests: tls: add test for NoPad getsockopt

2022-07-12T02:48:33+00:00

Make sure setsockopt / getsockopt behave as expected.

Signed-off-by: Jakub Kicinski

selftests: tls: add selftest variant for pad

2022-07-06T11:56:35+00:00

Add a self-test variant with TLS 1.3 nopad set.

Signed-off-by: Jakub Kicinski 
Signed-off-by: David S. Miller

selftests: tls: skip cmsg_to_pipe tests with TLS=n

2022-03-26T21:15:16+00:00

These are negative tests, testing TLS code rejects certain
operations. They won't pass without TLS enabled, pure TCP
accepts those operations.

Reported-by: Linux Kernel Functional Testing 
Fixes: d87d67fd61ef ("selftests: tls: test splicing cmsgs")
Signed-off-by: Jakub Kicinski 
Reviewed-by: Shuah Khan 
Signed-off-by: David S. Miller

selftests: tls: add missing AES256-GCM cipher

2021-12-08T04:18:07+00:00

Add tests for TLSv1.2 and TLSv1.3 with AES256-GCM cipher

Signed-off-by: Vadim Fedorenko 
Signed-off-by: Jakub Kicinski

selftests: tls: add missing AES-CCM cipher tests

2021-12-08T04:18:07+00:00

Add tests for TLSv1.2 and TLSv1.3 with AES-CCM cipher.

Signed-off-by: Vadim Fedorenko 
Signed-off-by: Jakub Kicinski

selftests: tls: test for correct proto_ops

2021-11-26T03:28:17+00:00

Previous patch fixes overriding callbacks incorrectly. Triggering
the crash in sendpage_locked would be more spectacular but it's
hard to get to, so take the easier path of proving this is broken
and call getname. We're currently getting IPv4 socket info on an
IPv6 socket.

Signed-off-by: Jakub Kicinski

selftests: tls: test splicing decrypted records

2021-11-26T03:28:16+00:00

Add tests for half-received and peeked records.

Signed-off-by: Jakub Kicinski

selftests: tls: test splicing cmsgs

2021-11-26T03:28:16+00:00

Make sure we correctly reject splicing non-data records.

Signed-off-by: Jakub Kicinski