Gilles Peskine a21f97139f Add tests for renegotiation with badmac_seen=1 on the client
After a message with a bad MAC (invalid application data record), try to
renegotiate:

* Test cases where renegotiation (nominal or delayed) is rejected.
  Nothing bad happens.
* A test where renegotiation is misparsed and rejected.
  The subsequent parsing fails.
* A test where the renegotiation request is delayed.
  This causes a heap buffer overflow in `ssl_buffer_message()`.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2026-06-15 19:08:08 +02:00
..
.jenkins
configs Remove deprecated items 2025-08-01 11:45:14 +01:00
git-scripts Header updates 2023-11-03 12:21:36 +00:00
include Add some hooks in mbedtls_test_ssl_perform_handshake() 2026-06-15 19:02:01 +02:00
opt-testcases Do not check fail cases for verify skipped 2026-03-13 18:04:16 +00:00
scripts Merge pull request #10696 from yiwu0b11/destdir_install_env_support-4.1 2026-04-29 14:37:40 +00:00
src Add some hooks in mbedtls_test_ssl_perform_handshake() 2026-06-15 19:02:01 +02:00
suites Test DTLS renegotiation when badmac_seen_or_in_hsfraglen != 0 2026-06-15 19:06:37 +02:00
.gitignore cmake: Generate test_keys.h and test_certs.h in the build tree 2025-03-26 21:19:28 +01:00
CMakeLists.txt cmake: Introduce TF_PSA_CRYPTO_PRIVATE_INCLUDE_DIRS 2026-03-09 08:28:51 +01:00
compat-in-docker.sh Header updates 2023-11-03 12:21:36 +00:00
compat.sh Revert "ssl_server2.c: DTLS: Attempt to read the response to the close notification" 2026-03-24 18:38:37 +01:00
context-info.sh Fix test and formatting in ssl_context_info 2025-04-29 22:02:24 +02:00
Descriptions.txt
make-in-docker.sh Header updates 2023-11-03 12:21:36 +00:00
Makefile Remove PSA status coverage log test 2026-03-12 10:18:33 +01:00
ssl-opt.sh Add tests for renegotiation with badmac_seen=1 on the client 2026-06-15 19:08:08 +02:00