kernel/linux.git/tools/testing/selftests/net/tls.c, branch v6.4

selftests: net: tls: check if FIPS mode is enabled

2023-06-16T05:24:01+00:00

TLS selftests use the ChaCha20-Poly1305 and SM4 algorithms, which are not FIPS compliant. When fips=1, this set of tests fails. Add a check and only run these tests if not in FIPS mode. Fixes: 4f336e88a870 ("selftests/tls: add CHACHA20-POLY1305 to tls selftests") Fixes: e506342a03c7 ("selftests/tls: add SM4 GCM/CCM to tls selftests") Reviewed-by: Jakub Kicinski Signed-off-by: Magali Lemes Signed-off-by: Jakub Kicinski

selftests: tls: add a test for queuing data before setting the ULP

2023-03-27T07:54:02+00:00

Other tests set up the connection fully on both ends before communicating any data. Add a test which will queue up TLS records to TCP before the TLS ULP is installed. Signed-off-by: Jakub Kicinski Signed-off-by: David S. Miller

selftests: tls: handful of memrnd() and length checks

2022-07-29T04:49:59+00:00

Add a handful of memory randomizations and precise length checks. Nothing is really broken here, I did this to increase confidence when debugging. It does fix a GCC warning, tho. Apparently GCC recognizes that memory needs to be initialized for send() but does not recognize that for write(). Signed-off-by: Jakub Kicinski

selftests: tls: add a test for timeo vs lock

2022-07-22T01:58:11+00:00

Add a test for recv timeout. Place it in the tls_err group, so it only runs for TLS 1.2 and 1.3 but not for every AEAD out there. Link: https://lore.kernel.org/r/20220720203701.2179034-2-kuba@kernel.org Signed-off-by: Jakub Kicinski

selftests: tls: add test for NoPad getsockopt

2022-07-12T02:48:33+00:00

Make sure setsockopt / getsockopt behave as expected. Signed-off-by: Jakub Kicinski

selftests: tls: add selftest variant for pad

2022-07-06T11:56:35+00:00

Add a self-test variant with TLS 1.3 nopad set. Signed-off-by: Jakub Kicinski Signed-off-by: David S. Miller

selftests: tls: skip cmsg_to_pipe tests with TLS=n

2022-03-26T21:15:16+00:00

These are negative tests, testing TLS code rejects certain operations. They won't pass without TLS enabled, pure TCP accepts those operations. Reported-by: Linux Kernel Functional Testing Fixes: d87d67fd61ef ("selftests: tls: test splicing cmsgs") Signed-off-by: Jakub Kicinski Reviewed-by: Shuah Khan Signed-off-by: David S. Miller

selftests: tls: add missing AES256-GCM cipher

2021-12-08T04:18:07+00:00

Add tests for TLSv1.2 and TLSv1.3 with AES256-GCM cipher Signed-off-by: Vadim Fedorenko Signed-off-by: Jakub Kicinski

selftests: tls: add missing AES-CCM cipher tests

2021-12-08T04:18:07+00:00

Add tests for TLSv1.2 and TLSv1.3 with AES-CCM cipher. Signed-off-by: Vadim Fedorenko Signed-off-by: Jakub Kicinski

selftests: tls: test for correct proto_ops

2021-11-26T03:28:17+00:00

Previous patch fixes overriding callbacks incorrectly. Triggering the crash in sendpage_locked would be more spectacular but it's hard to get to, so take the easier path of proving this is broken and call getname. We're currently getting IPv4 socket info on an IPv6 socket. Signed-off-by: Jakub Kicinski