lukechilds/node - node - Gitea: Git with a cup of tea

Author	SHA1	Message	Date
Timothy J Fontaine	de56ffa58b	test: pummel/ci-reneg handle EPIPE When calling out to the openssl client handle the child closing and returning EPIPE on writes	11 years ago
Fedor Indutny	442d2d0cde	test: ignore tests when built without OpenSSL CLI fix #6880	11 years ago
Fedor Indutny	6f3d60388e	gyp: build openssl-cli tool and use it in tests fix #6663	11 years ago
Ben Noordhuis	14a4245051	net: don't suppress ECONNRESET Let ECONNRESET network errors bubble up so clients can detect them. Commit `c4454d2e` suppressed and turned them into regular end-of-stream events to fix the then-failing simple/test-regress-GH-1531 test. See also issue #1571 for (scant) details. It turns out that special handling is no longer necessary. Remove the special casing and let the error bubble up naturally. pummel/test-https-ci-reneg-attack and pummel/test-tls-ci-reneg-attack are updated because they expected an EPIPE error code that is now an ECONNRESET. Suppression of the ECONNRESET prevented the test from detecting that the connection has been severed whereupon the next write would fail with an EPIPE. Fixes #1776.	12 years ago
isaacs	dec16aa5c2	Test client renegotiation attacks on HTTPS This test should output roughly the same results as the tls ci-reneg attack pummel test. However, it does not.	13 years ago
Ben Noordhuis	ff552ddbaa	tls: fix off-by-one error in renegotiation check Make CLIENT_RENEG_LIMIT inclusive instead of exclusive, i.e. a limit of 2 means the peer can renegotiate twice, not just once. Update pummel/test-tls-ci-reneg-attack accordingly and make it less timing sensitive (and run faster) while we're at it.	13 years ago
isaacs	0cdf85e28d	Lint all the JavaScripts.	13 years ago
Ben Noordhuis	3415427dbf	tls: mitigate session renegotiation attacks The TLS protocol allows (and sometimes requires) clients to renegotiate the session. However, renegotiation requires a disproportional amount of server-side resources, particularly CPU time, which makes it a potential vector for denial-of-service attacks. To mitigate this issue, we keep track of and limit the number of renegotiation requests over time, emitting an error if the threshold is exceeded.	13 years ago