| Age | Commit message (Collapse) | Author |
|---|
|
* Added conditional dev CI routing
Added the dev pull-request and push workflow with mandatory smoke coverage, component-aware profile selection, conservative full fallbacks, and a stable aggregate gate. Added a validated profile map and regression coverage for classifier and gate behavior.
Assisted-by: Codex (gpt-5.6-sol) <[email protected]>
* Fixed GCC 14 CI regressions
Exposed the DNS internal API prototypes to its dedicated error-checking regression target and tolerated the documented gcov suspicious-hit counter defect while retaining a warning.
Assisted-by: Codex (gpt-5.6-sol) <[email protected]>
* Sharded secure interoperability CI profiles
Capped individual interoperability tests at 180 seconds so retryable hangs cannot consume the complete workflow budget.\n\nAssisted-by: Codex (gpt-5.6-sol)
* Allowed legacy server connections in disabled-renegotiation tests
Scope OpenSSL's legacy server connection opt-in to interoperability profiles that deliberately disable RFC 5746 support. Cover both the default and opt-in wrapper behavior.
Assisted-by: Codex (gpt-5.6-sol)
* Hardened secure interoperability profile execution
Permit legacy server connections only for DTLS and RFC 5746-disabled profiles, and keep legacy cases on TLS 1.2 in TLS 1.3-enabled builds unless a protocol is explicit. Extend the bounded OpenSSL startup window for loaded runners and cover the client wrapper behavior.
Assisted-by: Codex (gpt-5.6-sol)
* Corrected DTLS interoperability CA path
Resolve the ECC CA certificate relative to the OpenSSL client script, matching the wrapper's execution directory and the other certificate-bearing interoperability cases.
Assisted-by: Codex (gpt-5.6-sol)
* Corrected TLS 1.3 interoperability selection
Assisted-by: Codex (gpt-5.6-sol)
* Corrected TLS 1.3 PSK server port
Assisted-by: Codex (gpt-5.6-sol)
* Corrected TLS 1.3 PSK client port
Assisted-by: Codex (gpt-5.6-sol)
* Extended secure dependency installation timeout
Assisted-by: Codex (gpt-5.6-sol)
|
|
Wait for OpenSSL TCP and DTLS listeners before releasing NetX clients. Retry transient PCAP setup and transmission failures, propagate driver errors, and improve connection diagnostics.
Assisted-by: Codex (gpt-5.6-sol) <[email protected]>
|
|
* Fixed renewed certificate test regressions
* Fixed OpenSSL server readiness detection
Assisted-by: Codex (gpt-5.6-sol) <[email protected]>
|
|
* Replaced interoperability ifconfig usage with iproute2
* Fixed the OpenSSL 3.5 protocol argument
Assisted-by: Codex (gpt-5.6-sol) <[email protected]>
|
|
Pinned OpenSSL 3.5.7 for the maintained protocol matrix and isolated static-ECDH curve tests behind wolfSSL 5.9.2. Added checksum verification and wrapper regression coverage without replacing the system OpenSSL binary.
Assisted-by: Codex (gpt-5.6-sol) <[email protected]>
|
|
Replace expired TLS, DTLS, and MQTT credentials with test-only certificates valid through 2046. Keep PEM and embedded DER/CRL fixtures synchronized, retain the legacy curve and extension cases, and add a CTest validation that checks validity, keys, chains, CRLs, and embedded byte arrays.
Assisted-by: Codex (gpt-5.6-sol) <[email protected]>
|
|
Applied the standard MIT license header to all project-owned C, header,
assembly, shell, and Python files that were missing a copyright notice.
Third-party, toolchain startup, and auto-generated files were excluded.
Co-authored-by: Copilot <[email protected]>
|
|
|
|
|
