Skip to content

Add negative tests for TLS handshake verification paths#10166

Merged
SparkiDev merged 1 commit intowolfSSL:masterfrom
JeremiahM37:test-coverage
Apr 17, 2026
Merged

Add negative tests for TLS handshake verification paths#10166
SparkiDev merged 1 commit intowolfSSL:masterfrom
JeremiahM37:test-coverage

Conversation

@JeremiahM37
Copy link
Copy Markdown
Contributor

Fixes F-2117, F-2118, F-1825, F-1826, F-1830, F-2119, F-2120, F-2125

  • Add tests for TLS 1.3 and TLS 1.2 Finished verify_data rejection (VERIFY_FINISHED_ERROR)
  • Add tests for peerAuthGood fail-safe checks in TLS 1.2 and TLS 1.3 client/server
  • Add test for corrupted HRR cookie HMAC rejection (HRR_COOKIE_ERROR)
  • Add test for zero inner content type rejection in TLS 1.3 encrypted records (PARSE_ERROR)
  • Add test for TLS 1.3 downgrade sentinel detection in ServerHello random (VERSION_ERROR)
  • Add test for invalid/un-offered cipher suite in TLS 1.3 ServerHello (INVALID_PARAMETER)

@JeremiahM37 JeremiahM37 self-assigned this Apr 8, 2026
@JeremiahM37 JeremiahM37 marked this pull request as ready for review April 13, 2026 15:50
@JeremiahM37
Copy link
Copy Markdown
Contributor Author

Jenkins retest this please

@github-actions
Copy link
Copy Markdown

MemBrowse Memory Report

No memory changes detected for:

Copy link
Copy Markdown

@wolfSSL-Fenrir-bot wolfSSL-Fenrir-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fenrir Automated Review — PR #10166

No scan targets match the changed files in this PR. Review skipped.

@SparkiDev SparkiDev merged commit 460463a into wolfSSL:master Apr 17, 2026
414 of 415 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants