Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ssl-opt.sh requirement checker #4767

Draft
wants to merge 2 commits into
base: development
Choose a base branch
from
Draft

ssl-opt.sh requirement checker #4767

wants to merge 2 commits into from
+252 −0

Commits on Jul 9, 2021

  1. Initial work on a script to check requirements in ssl-opt.sh 

    Patch ssl-opt.sh to make it just print information about each run_test call
and the applicable requires_xxx calls.

Analyze the resulting information to detect missing or spurious
requirements.

This commit analyzes:
* requires_config_enabled for MBEDTLS_SSL_DTLS_CONNECTION_ID,
  MBEDTLS_SSL_CONTEXT_SERIALIZATION and
  MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK. The analysis matches the
  script.
* requires_max_content_len. The analysis has some false positives.

This is a work in progress, fragile and not always well documented.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
    @gilles-peskine-arm
    gilles-peskine-arm committed Jul 9, 2021
    Configuration menu
    Copy the full SHA
    7debfcb View commit details
    Browse the repository at this point in the history

Commits on Jul 21, 2021

  1. Define variables needed by the 2.x ssl-opt.sh 

    Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
    @gilles-peskine-arm
    gilles-peskine-arm committed Jul 21, 2021
    Configuration menu
    Copy the full SHA
    49e1934 View commit details
    Browse the repository at this point in the history