changelog

linux subdivision ying gai ke yi le ba

Mon Jul  5 10:59:17 2004  Joe Orton  <[e-mail]>

	Add regression tests for trio of ne_compress.c bugs:
	
	* compress.c (reader): Validate that a size=0 call comes only
	after the expected response data, and use struct string.
	(do_fetch): Pass a struct string to reader and adapt for failure
	logic.
	(auth_cb, retry_compress_helper, retry_compress,
	retry_notcompress): New tests.

Sun Jul  4 21:55:00 2004  Joe Orton  <[e-mail]>

	* utils.c (serve_sstring_slowly, serve_sstring): Moved from
	sockets.c, renamed from serve_string_slowly, serve_sstring.

	* sockets.c: All callers updated.

Tue May 18 21:00:07 2004  Joe Orton  <[e-mail]>

	* ssl.c (fail_ssl_request):
	* basic.c (do_range): Fix false negatives from gcc
	-Wformat-security.

Sun May  2 21:16:45 2004  Joe Orton  <[e-mail]>

	* util-tests.c (regress_dates): Add regression tests.

Wed Apr 14 10:45:43 2004  Joe Orton  <[e-mail]>

	* props.c (regress, patch_regress): Add regression tests for
	CAN-2004-0179 issues.

Sun Feb 15 12:34:13 2004  Joe Orton  <[e-mail]>

	* makekeys.sh, openssl.conf: Create new utf8subj.cert,
	bmpsubj.cert, t61subj.cert certificates.

	* ssl.c (dname_readable): Test that ne_ssl_readable_dname always
	gives back UTF-8.

Thu Nov 13 20:33:44 2003  Joe Orton  <[e-mail]>

	* request.c (no_body_205): New test.

Sat Oct 25 00:11:29 2003  Joe Orton  <[e-mail]>

	* ssl.c (fail_truncated_eof): Remove test.

Tue Oct 21 20:29:46 2003  Joe Orton  <[e-mail]>

	* ssl.c (fail_tunnel, proxy_tunnel): Fix non-C89 code,
	Radu Greab.

Thu Oct  9 19:42:13 2003  Joe Orton  <[e-mail]>

	* socket.c (ssl_closure): Fix occassional spurious errors.
	
Tue Oct  7 20:23:35 2003  Joe Orton  <[e-mail]>

	* ssl.c (ssl_server): Handle several requests if required.
	(tunnel_header): New function.
	(serve_tunnel): Fail with a 500 if the request included
	an Authenticate header; take an ssl_server_args pointer
	as userdata.
	(fail_tunnel, proxy_tunnel): Adjust accordingly.
	(apt_post_send): Adjust for 401 check.
	(auth_tunnel_creds): New test.	

Wed Oct  1 00:30:25 2003  Joe Orton  <[e-mail]>

	* ssl.c (simple_sslv2): Regression test.
	(ssl_server): Create SSL_CTX locally; optionally create an
	SSLv2-only server.
	(init_ssl): Do not create the SSL_CTX.

Wed Sep 17 19:57:22 2003  Joe Orton  <[e-mail]>

	* ssl.c: Refactor around single SSL server function.
	(ssl_server): Combination of do_ssl_response and old serve_*
	functions.  All callers updated.

Sun Sep 14 12:27:22 2003  Joe Orton  <[e-mail]>

	* socket.c (write_reset, read_reset): Skip if no RESET was
	returned.

Sun Sep 14 11:01:08 2003  Joe Orton  <[e-mail]>

	* Makefile.in: Fix building the 'resolve' tool.

Sat Sep  6 12:29:53 2003  Joe Orton  <[e-mail]>

	* makekeys.sh, openssl.conf: Generate altname5.cert with an IPv4
	address in the subjectAltName attribute.

	* ssl.c (ipaddr_altname): Test for IPv4 address in subjectAltName.

Sat Sep  6 12:28:55 2003  Joe Orton  <[e-mail]>

	* Makefile.in: Clear the SUFFIXES list; use standard make syntax;
	fix build of 'basic' on some platforms.

Sat Aug 30 18:59:24 2003  Joe Orton  <[e-mail]>

	* Makefile.in: Rewrite to use libtool to build object files and
	libtest.

	* run.sh: Don't set LD_LIBRARY_PATH.

Wed Jul 23 23:25:39 2003  Joe Orton  <[e-mail]>

	* compress.c (do_fetch): Check for response truncation
	for success case.
	(fail_corrupt1, fail_corrupt2): New tests.

Sat Jun 21 12:59:49 2003  Joe Orton  <[e-mail]>

	* request.c (versions): Fix and enable test.

Wed Jun 18 20:09:59 2003  Joe Orton  <[e-mail]>

	* request.c (is_alive): Adapt for new socket API.

	* socket.c (do_connect, addr_connect): Likewise.

Tue May 20 20:14:03 2003  Joe Orton  <[e-mail]>

	* ssl.c (cert_fingerprint): Fix for VPATH builds.

Sat May 10 17:13:05 2003  Joe Orton  <[e-mail]>

	* xml.c (matches): Add regression test for prefix matching bug
	fixed in 0.18.0.

Sat Apr 26 19:22:29 2003  Joe Orton  <[e-mail]>

	* request.c (any_te_header): New function.

Wed Apr 23 18:24:19 2003  Joe Orton  <[e-mail]>

	* stubs.c (stub_ssl): Test ne_ssl_cert_import, ne_ssl_cert_export,
	ne_ssl_cert_write stubs.

Wed Apr 23 14:05:38 2003  Joe Orton  <[e-mail]>

	* ssl.c (read_write): New function.

Wed Apr 23 00:34:44 2003  Joe Orton  <[e-mail]>

	* ssl.c (cache_cert, verify_cache): New functions.

Wed Apr 23 00:14:14 2003  Joe Orton  <[e-mail]>

	* ssl.c (any_ssl_request): Free the cert after passing it to
	ne_ssl_trust_cert.

Tue Apr 22 23:24:33 2003  Joe Orton  <[e-mail]>

	* string-tests.c (unbase64): Improve coverage.

Tue Apr 22 20:25:15 2003  Joe Orton  <[e-mail]>

	* ssl.c (import_export, flatten_pem, cert_compare): New functions.

Tue Apr 22 18:32:43 2003  Joe Orton  <[e-mail]>

	* string-tests.c (b64_check, unbase64): New functions.
	(base64): Use b64_check.

Tue Apr 22 15:54:04 2003  Joe Orton  <[e-mail]>

	* string-tests.c (base64): Test decoding binary data which
	contains bytes with the high bit set.

Tue Apr 22 14:18:03 2003  Joe Orton  <[e-mail]>

	* string-tests.c (base64): Moved here...

	* util-tests.c (base64): ...from here.

Tue Apr 22 13:17:48 2003  Joe Orton  <[e-mail]>

	* ssl.c (just_serve_string, fail_not_ssl): New functions.

Tue Apr 22 13:09:13 2003  Joe Orton  <[e-mail]>

	* stubs.c (stub_ssl): Test ne_ssl_cert_validity stub.

Tue Apr 22 11:35:10 2003  Joe Orton  <[e-mail]>

	* request.c (versions): Run test as XFAIL.

Tue Apr 22 11:33:43 2003  Joe Orton  <[e-mail]>

	* util-tests.c (version_string): New function.

Tue Apr 22 09:23:27 2003  Joe Orton  <[e-mail]>

	* ssl.c (check_validity, cert_validity): New functions.

Mon Apr 21 19:45:39 2003  Joe Orton  <[e-mail]>

	* util-tests.c (digest_md5): Replace ne_md5_buffer.
	(md5): Use digest_md5; test 500-byte string.

Mon Apr 21 18:38:02 2003  Joe Orton  <[e-mail]>

	* xml.c (fail_parse): Call ne_xml_parse with length=0 finish
	parse.

Mon Apr 21 17:18:45 2003  Joe Orton  <[e-mail]>

	* props.c: Add tests for ne_207.h interface and ne_simple_propfind
	from ne_props.h.

	* xml.c: Add tests for new XML interface.

	* Makefile.in: Run props tests before lock since the latter is
	implemented using the former.

Mon Apr  7 22:27:18 2003  Joe Orton  <[e-mail]>

	* stubs.c (stub_ssl): Test for ne_ssl_cert_identity stub.

Mon Apr  7 22:17:56 2003  Joe Orton  <[e-mail]>

	* ssl.c (cert_fingerprint): Renamed from fingerprint.
	(check_identity, cert_identities): New functions.	

Sun Apr  6 20:18:30 2003  Joe Orton  <[e-mail]>

	* stubs.c (stub_ssl): Adjust for new clicert API.

Sun Apr  6 20:12:48 2003  Joe Orton  <[e-mail]>

	* ssl.c (dname_compare): Renamed from comparisons.
	(dname_readable): New function.

	* makekeys.sh: Create justmail.cert.

Sun Apr  6 20:00:18 2003  Joe Orton  <[e-mail]>

	* ssl.c (keypw_prompt): Removed function.
	(init, load_client_cert, client_cert_provided): Adapt for new
	clicert API.
	(ccert_unencrypted): New function.

Fri Apr  4 22:34:12 2003  Joe Orton  <[e-mail]>

	* request.c (fail_request_with_error): Refactored from
	fail_request; check for a particular error string.
	(fail_request): Use fail_request_with_error.
	(invalid_response_gives_error): New function.
	(fail_long_header): Use it.
	(fail_corrupt_chunks): New function.

Sat Mar 29 14:39:20 2003  Joe Orton  <[e-mail]>

	* ssl.c (comparisons): New function.

	* stubs.c (stub_ssl): Test ne_ssl_dname_cmp.

Sat Mar 29 13:58:37 2003  Joe Orton  <[e-mail]>

	* makekeys.sh: Generate noclient.p12.

	* ssl.c (load_client_cert): Test ne_ssl_clicert_name.

	* stubs.c (stub_ssl): Check for ne_ssl_clicert_name stub.

Sat Mar 29 13:31:35 2003  Joe Orton  <[e-mail]>

	* ssl.c (load_client_cert): Test ne_ssl_clicert_owner.

Fri Mar 28 22:13:55 2003  Joe Orton  <[e-mail]>

	* ssl.c (fingerprint): New function.

	* stubs.c (stub_ssl): Check for ne_ssl_cert_digest stub.

Wed Mar 26 22:52:15 2003  Joe Orton  <[e-mail]>

	* ssl.c (fail_missing_CN): New function.

	* makekeys.sh: Generate missingcn.cert.

	* openssl.conf: Allow commonName to be omitted from CSR.

Wed Mar 26 22:41:48 2003  Joe Orton  <[e-mail]>

	* ssl.c (load_server_certs): Renamed from load_ca; test loading
	non-existent file.

Wed Mar 26 20:38:08 2003  Joe Orton  <[e-mail]>

	* stubs.c (stub_ssl): Updated for new SSL interface.

Tue Mar 25 20:32:07 2003  Joe Orton  <[e-mail]>

	Update tests for changes to SSL interface:
	
	* socket.c (init_ssl): Use ne_ssl_context_create,
	ne_ssl_cert_read, ne_ssl_ctx_trustcert.
	(begin): Use ne_sock_connect_ssl.

	* ssl.c (serve_ssl_chained, trust_default_ca, load_client_cert,
	check_dname, check_cert_dnames, check_cert, check_chain,
	parse_chain, cc_check_dnames, cc_provided_dnames): New functions.
	(serve_ccert): Always trust SERVER_CERT; optionally call
	SSL_CTX_set_client_CA_list.
	(any_ssl_request, load_ca, fail_truncated_eof): Use
	ne_ssl_cert_read and ne_ssl_trust_cert.
	(keypw_prompt): Fail if userdata is NULL.
	(fail_load_ccerts, load_pkcs12_ccert, load_pem_ccert, check_DNs):
	Removed functions.
	(parse_cert): Use check_cert.
	(client_cert_provided, client_cert_pkcs12): Rewritten for new API.

	* makekeys.sh: Generate calist.pem, unclient.p12.

Wed Mar 12 22:36:27 2003  Joe Orton  <[e-mail]>

	* redirect.c (simple): Fold in tests for 30[237] redirects for
	better coverage.
	(no_redirect): Another test for _location returning NULL.

Wed Mar 12 22:29:45 2003  Joe Orton  <[e-mail]>

	* redirect.c (process_redir): Factored out from check_redir.
	(no_redirect): New function.

Sun Mar  9 17:46:37 2003  Joe Orton  <[e-mail]>

	* lock.c (fail_discover): New function.

Sat Mar  1 10:53:58 2003  Joe Orton  <[e-mail]>

	* uri-tests.c (authinfo): Removed.
	(escapes): Test nothing-to-escape and invalid URI cases.
	(compares): Gain 100% branch coverage in ne_path_compare.
	(default_port): Test unknown scheme case.
	(parse): Test authinfo here, and some edge cases.
	(unparse): Fill in port if default.	

Sat Mar  1 09:20:42 2003  Joe Orton  <[e-mail]>

	* socket.c (multi_init): New function.

Sat Mar  1 08:04:09 2003  Joe Orton  <[e-mail]>

	* string-tests.c (cleaner): New function.

Wed Feb 26 22:13:14 2003  Joe Orton  <[e-mail]>

	* request.c (fail_eof_chunk, fail_eof_badclen): New tests.

Wed Feb 26 21:54:39 2003  Joe Orton  <[e-mail]>

	* util-tests.c (support): New function.
	(bad_sl, accept_sl): More status-lines.

Tue Feb 25 21:06:18 2003  Joe Orton  <[e-mail]>

	* ssl.c (do_ssl_response): Fail if response contains
	"Proxy-Authorization" header.
	(apt_post_send, apt_creds, auth_proxy_tunnel): New functions.

Thu Nov 28 21:25:01 2002  Joe Orton  <[e-mail]>

	* request.c (te_over_clength2): New test.

Sun Nov 17 18:59:04 2002  Joe Orton  <[e-mail]>

	* socket.c (addr_make_v4, addr_make_v6, addr_compare): New
	functions.

Fri Oct 11 00:49:01 2002  Joe Orton  <[e-mail]>

	* props.c (regress): Moved from regress.c:propfind_segv; add
	regression test for ne_props.c segfault fixed in rev 1.83.

	* regress.c: Removed.
	
Tue Oct  8 20:06:55 2002  Joe Orton  <[e-mail]>

	* xml.c (matches): Add tests that entities in attribute values are
	dereferenced by the XML parser.

Fri Oct  4 17:10:19 2002  Joe Orton  <[e-mail]>

	* request.c (no_body_bad_clength, no_body_empty_clength): New
	tests.
	(expect_no_body): Use better paths in the requests.

Tue Sep 24 21:27:33 2002  Joe Orton  <[e-mail]>

	* request.c (fail_long_header, versions, hook_create_req): New
	functions.	

Tue Sep 17 21:08:17 2002  Joe Orton  <[e-mail]>

	* openssl.conf (neonca): Make 'countryName' optional in CA policy.
	(reqDN.CNfirst): New section.

	* makekeys.sh: Generate 'cnfirst.cert', which has commonName as
	first attribute in subject DN.

	* ssl.c (commonName_first): New function.

Tue Sep 10 21:11:18 2002  Joe Orton  <[e-mail]>

	* request.c (fail_double_lookup): New function.

Sun Aug 25 23:16:33 2002  Joe Orton  <[e-mail]>

	* ssl.c (do_ssl_response): Add 'unclean' argument.
	(all callers changed).
	(serve_response_unclean, empty_truncated_eof, fail_truncated_eof):
	New functions.

Sun Aug 25 19:16:00 2002  Joe Orton  <[e-mail]>

	* socket.c (resolve_numeric): Test ne_addr_print too.

Sun Aug 25 13:39:37 2002  Joe Orton  <[e-mail]>

	* resolve.c: New file.

Sun Aug 25 11:25:12 2002  Joe Orton  <[e-mail]>

	* request.c (is_alive): Update for new ne_addr_* interface.

Sun Aug 25 08:31:16 2002  Joe Orton  <[e-mail]>

	* socket.c (serve_truncate, ssl_truncate): New functions.

Sun Aug 25 08:28:17 2002  Joe Orton  <[e-mail]>

	* socket.c (do_connect): New function; use new
	ne_sock_connect/ne_addr interface.
	(begin) [SOCKET_SSL, !SOCKET_SSL]: Use do_connect.
	(resolve_numeric): Adjust for new ne_addr interface.
	(resolve_ipv6): Disable test.

Sat Aug 24 08:50:06 2002  Joe Orton  <[e-mail]>

	* request.c (fail_statusline): New function.

Fri Aug 23 22:52:38 2002  Joe Orton  <[e-mail]>

	* ssl.c (init): FAILHARD if initialization fails.

Wed Aug 21 13:29:58 2002  Joe Orton  <[e-mail]>

	* uri-tests.c (null_uri): Removed test.
	(parse): More tests including IPv6 address tests; use ONCMP macro.
	(failparse): New function.
	(unparse): Add URI with IPv6 address.	

Wed Aug 21 13:28:37 2002  Joe Orton  <[e-mail]>

	* socket.c (resolve_ipv6): New function.

Mon Aug 19 16:59:46 2002  Joe Orton  <[e-mail]>

	* socket.c (resolve): Adapt for new ne_addr_resolve interface.
	(resolve_numeric): New test.

	* request.c (is_alive): Use new ne_addr_resolve interface.

Mon Aug 19 16:57:53 2002  Joe Orton  <[e-mail]>

	* socket.c (begin): Fix handling of connect failure.
	(TO_BEGIN): Handle errors from to_begin properly.

Sun Aug 18 23:37:34 2002  Joe Orton  <[e-mail]>

	* string-tests.c (str_errors): Check return value and behaviour
	when error string is truncated, an

Sun Aug 18 23:31:51 2002  Joe Orton  <[e-mail]>