Commit Graph

4 Commits

Author SHA1 Message Date
Daniel McCarney 52f4db4b85 tests: add BetterTLS path building test suite.
[`git cherry-pick 4a39e2b67d4cddf58b0ea16dd821a04ee2240058`, with support
for Edition 2018 added by Brian.]

This commit introduces the Netflix BetterTLS[0]'s path building test
suite to the webpki integration tests.

This project has a test runner for Rustls that will stand up TLS servers
to exercise these tests but:

* It requires Go.
* It needs Rustls in order to do a full TLS handshake with the test
  servers.
* It's slower than testing the path building directly without the TLS
  bits.

To avoid these issues this commit takes a different approach and vendors
the exported path building test suite. This is a supported feature[1] of
the upstream project and allow us to directly test webpki's path
building against the test suite without needing Rustls or Go.

[0]: https://github.com/Netflix/bettertls
[1]: https://github.com/Netflix/bettertls#exporting-tests-to-run-outside-of-the-bettertls-executor
2023-09-29 21:50:11 -07:00
Brian Smith 2786e94a45 Remove unused annotate_test_data.py script.
We can look at the version in the Chromium repo if we need to refer to
it to understand the Chromium test vectors.
2017-02-07 11:42:44 -10:00
Joseph Birr-Pixton 82080d02ba Add support for PSS.
This has tests generated by openssl, and integrated with
the existing chromium verify_signed_data corpus.

The PSS parameter encodings are slightly unwieldy, and
are included from files rather than embedded in the source.

There are python scripts for regenerating the parameter encodings
and tests.
2016-11-21 12:36:46 -10:00
Brian Smith 7f0632ba67 Import Chromium's |verify_signed_data| test data. 2015-08-27 10:23:28 -07:00