Skip to content

Add negative tests for TLS handshake verification paths#10166

Draft
JeremiahM37 wants to merge 1 commit intowolfSSL:masterfrom
JeremiahM37:test-coverage
Draft

Add negative tests for TLS handshake verification paths#10166
JeremiahM37 wants to merge 1 commit intowolfSSL:masterfrom
JeremiahM37:test-coverage

Conversation

@JeremiahM37
Copy link
Copy Markdown
Contributor

Fixes F-2117, F-2118, F-1825, F-1826, F-1830, F-2119, F-2120, F-2125

  • Add tests for TLS 1.3 and TLS 1.2 Finished verify_data rejection (VERIFY_FINISHED_ERROR)
  • Add tests for peerAuthGood fail-safe checks in TLS 1.2 and TLS 1.3 client/server
  • Add test for corrupted HRR cookie HMAC rejection (HRR_COOKIE_ERROR)
  • Add test for zero inner content type rejection in TLS 1.3 encrypted records (PARSE_ERROR)
  • Add test for TLS 1.3 downgrade sentinel detection in ServerHello random (VERSION_ERROR)
  • Add test for invalid/un-offered cipher suite in TLS 1.3 ServerHello (INVALID_PARAMETER)

@JeremiahM37 JeremiahM37 self-assigned this Apr 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant