search

Mbed-TLS / mbedtls

An open source, portable, easy to use, readable and flexible TLS library, and reference implementation of the PSA Cryptography API. Releases are on a varying cadence, typically around 3 - 6 months between releases.
https://www.trustedfirmware.org/projects/mbed-tls/
Other
5.47k stars 2.59k forks source link

Overflow when running TLS 1.3 tests without all dependencies satisfied #6405

Closed AndrzejKurek closed 9 months ago

AndrzejKurek commented 2 years ago

Starting from https://github.com/AndrzejKurek/mbedtls/tree/ssl-tls-1-3-bugs

./scripts/config.pl full
./scripts/config.pl unset MBEDTLS_ECDH_C
./scripts/config.pl unset MBEDTLS_ECDSA_C
./scripts/config.pl unset MBEDTLS_ECJPAKE_C
./scripts/config.pl unset MBEDTLS_ECP_C
./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
make
cd tests
./test_suite_ssl

Results in:

SSL TLS 1.3 Key schedule: Secret evolution #1 ..................... PASS
SSL TLS 1.3 Key schedule: Secret evolution #2 ..................... *** buffer overflow detected ***: terminated

Please note that there's one change to TLS 1.3 introduced (however this probably should not result in an overflow): https://github.com/AndrzejKurek/mbedtls/commit/7864a0f9caff202a37f91f8018c0499eab9e7f52

yuhaoth commented 1 year ago

The configuration reports config error now.

In file included from ../include/mbedtls/build_info.h:186,
                 from common.h:26,
                 from aes.c:26:
../include/mbedtls/check_config.h:135:2: error: #error "MBEDTLS_ECP_RESTARTABLE defined, but not all prerequisites"
  135 | #error "MBEDTLS_ECP_RESTARTABLE defined, but not all prerequisites"
      |  ^~~~~
In file included from ../include/mbedtls/build_info.h:186,
                 from common.h:26,
                 from aes.c:26:
../include/mbedtls/check_config.h:824:2: error: #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED defined, but not all prerequisites"
  824 | #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED defined, but not all prerequisites"
      |  ^~~~~
../include/mbedtls/check_config.h:830:2: error: #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED defined, but not all prerequisites"
  830 | #error "MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED defined, but not all prerequisites"
      |  ^~~~~
ronald-cron-arm commented 1 year ago

Likely not an issue anymore as TLS 1.3 key exchange mode enablement has been decoupled from TLS 1.2 ciphersuites enablement.

tom-cosgrove-arm commented 9 months ago

I am no longer able to reproduce this issue

Script started on Thu Jan 11 09:45:44 2024

$ git log -n1
commit f149cd1a3a980db39d406ed52e24906f33826ba8
Merge: 3eb902527 315c3ca9e
Author: Paul Elliott <62069445+paul-elliott-arm@users.noreply.github.com>
Date:   Wed Jan 10 16:57:16 2024 +0000

    Merge pull request #8688 from jwinzig-at-hilscher/development

    Fix bug in mbedtls_x509_set_extension

$ git status -uno
On branch development
Your branch is up to date with 'origin/development'.

nothing to commit (use -u to show untracked files)

$ ./scripts/config.pl full
$ ./scripts/config.pl unset MBEDTLS_ECDH_C
$ ./scripts/config.pl unset MBEDTLS_ECDSA_C
$ ./scripts/config.pl unset MBEDTLS_ECJPAKE_C
$ ./scripts/config.pl unset MBEDTLS_ECP_C
$ ./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
$ ./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
$ ./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
$ ./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED
$ ./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED
$ ./scripts/config.pl unset MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED

$ make -j10 CFLAGS="-Wall -Wextra -Weverything -Wno-unused-macros -Wno-sign-conversion -Wno-implicit-int-conversion -Wno-poison-system-directories -Wno-cast-qual -Wno-static-in-inline -Wno-padded -Wno-cast-align -Wno-switch-enum -Wno-documentation-deprecated-sync -Wno-documentation-pedantic -Wno-shorten-64-to-32 -Wno-unreachable-code-break -Wno-used-but-marked-unused -Wno-unreachable-code-return -Wno-conditional-uninitialized -Wno-missing-prototypes -Wno-missing-variable-declarations -Wno-format-pedantic -Wno-missing-noreturn -Wno-covered-switch-default -Wno-bad-function-cast -Wno-double-promotion -Wno-undef -Wno-comma -Wno-assign-enum -Wno-string-conversion -Werror"
  CC    aes.c
  CC    aesni.c
  CC    aesce.c
  CC    asn1write.c
  CC    asn1parse.c
  CC    aria.c
  CC    base64.c
  CC    bignum.c
  CC    bignum_core.c
  CC    bignum_mod.c
  CC    block_cipher.c
  CC    bignum_mod_raw.c
  CC    camellia.c
  CC    ccm.c
  CC    chacha20.c
  CC    chachapoly.c
  CC    cipher.c
  CC    cipher_wrap.c
  CC    constant_time.c
  CC    cmac.c
  CC    ctr_drbg.c
  CC    des.c
  CC    dhm.c
  CC    ecdh.c
  CC    ecdsa.c
  CC    ecjpake.c
  CC    ecp.c
  CC    ecp_curves.c
  CC    ecp_curves_new.c
  CC    src/asn1_helpers.c
  CC    entropy.c
  CC    src/bignum_helpers.c
  CC    entropy_poll.c
  Gen   error.c
  CC    gcm.c
  CC    src/certs.c
  CC    src/fake_external_rng_for_test.c
  CC    src/helpers.c
  CC    src/psa_crypto_helpers.c
  CC    src/psa_exercise_key.c
  CC    hkdf.c
  CC    hmac_drbg.c
  CC    src/random.c
  CC    src/threading_helpers.c
  CC    lmots.c
  CC    lms.c
  CC    src/drivers/hash.c
  CC    src/drivers/platform_builtin_keys.c
  CC    src/drivers/test_driver_aead.c
  CC    src/drivers/test_driver_asymmetric_encryption.c
  CC    md.c
  CC    src/drivers/test_driver_cipher.c
  CC    src/drivers/test_driver_key_agreement.c
  CC    md5.c
  CC    src/drivers/test_driver_key_management.c
  CC    src/drivers/test_driver_mac.c
  CC    memory_buffer_alloc.c
  CC    src/drivers/test_driver_pake.c
  CC    src/drivers/test_driver_signature.c
  CC    src/test_helpers/ssl_helpers.c
  CC    nist_kw.c
  CC    oid.c
  CC    pem.c
  CC    padlock.c
  CC    pk.c
  CC    pk_wrap.c
  CC    pkcs12.c
  CC    pkcs5.c
  CC    pkparse.c
  CC    pkwrite.c
  CC    platform.c
  CC    platform_util.c
  CC    poly1305.c
  CC    psa_crypto.c
  CC    psa_crypto_aead.c
  CC    psa_crypto_cipher.c
  CC    psa_crypto_client.c
  CC    psa_crypto_driver_wrappers_no_static.c
  CC    psa_crypto_ecp.c
  CC    psa_crypto_hash.c
  CC    psa_crypto_ffdh.c
  CC    psa_crypto_mac.c
  CC    psa_crypto_pake.c
  CC    psa_crypto_rsa.c
  CC    psa_crypto_se.c
  CC    psa_crypto_slot_management.c
  CC    psa_crypto_storage.c
  CC    psa_its_file.c
  CC    psa_util.c
  CC    ripemd160.c
  CC    rsa.c
  CC    rsa_alt_helpers.c
  CC    sha1.c
  CC    sha256.c
  CC    sha512.c
  CC    threading.c
  CC    sha3.c
  CC    timing.c
  CC    version.c
  CC    version_features.c
  CC    ../3rdparty/everest/library/everest.c
  CC    ../3rdparty/everest/library/x25519.c
  CC    ../3rdparty/everest/library/Hacl_Curve25519_joined.c
  CC    ../3rdparty/p256-m//p256-m_driver_entrypoints.c
  CC    ../3rdparty/p256-m//p256-m/p256-m.c
  CC    x509.c
  CC    x509_create.c
  CC    x509_crl.c
  CC    x509_crt.c
  CC    x509_csr.c
  CC    x509write.c
  CC    x509write_crt.c
  CC    x509write_csr.c
  CC    pkcs7.c
  CC    debug.c
  CC    mps_reader.c
  CC    mps_trace.c
  CC    net_sockets.c
  CC    ssl_cache.c
  CC    ssl_ciphersuites.c
  CC    ssl_client.c
  CC    ssl_cookie.c
  Gen   ssl_debug_helpers_generated.c
  CC    ssl_msg.c
  CC    ssl_ticket.c
  CC    ssl_tls.c
  CC    ssl_tls12_client.c
  CC    ssl_tls12_server.c
  CC    ssl_tls13_keys.c
  CC    ssl_tls13_client.c
  CC    ssl_tls13_server.c
  CC    ssl_tls13_generic.c
  CC    error.c
  AR    libmbedx509.a
  CC    ssl_debug_helpers_generated.c
  RL    libmbedx509.a
  AR    libmbedcrypto.a
  RL    libmbedcrypto.a
  AR    libmbedtls.a
  RL    libmbedtls.a
  CC    aes/crypt_and_hash.c
  CC    cipher/cipher_aead_demo.c
  CC    hash/generic_sum.c
  CC    hash/hello.c
  CC    hash/md_hmac_demo.c
  CC    pkey/dh_client.c
  CC    pkey/dh_genprime.c
  CC    pkey/dh_server.c
  CC    pkey/ecdh_curve25519.c
  CC    pkey/ecdsa.c
  CC    pkey/gen_key.c
  CC    pkey/key_app_writer.c
  CC    pkey/key_app.c
  CC    pkey/mpi_demo.c
  CC    pkey/pk_encrypt.c
  CC    pkey/pk_sign.c
  CC    pkey/pk_decrypt.c
  CC    pkey/pk_verify.c
  CC    pkey/rsa_encrypt.c
  CC    pkey/rsa_decrypt.c
  CC    pkey/rsa_genkey.c
  CC    pkey/rsa_sign_pss.c
  CC    pkey/rsa_verify_pss.c
  CC    pkey/rsa_sign.c
  CC    pkey/rsa_verify.c
  CC    psa/aead_demo.c
  CC    psa/crypto_examples.c
  Gen   test_suite_aes.cbc.c
  CC    psa/hmac_demo.c
  Gen   test_suite_aes.cfb.c
  CC    psa/key_ladder_demo.c
  Gen   psa/psa_constant_names_generated.c
  Gen   test_suite_aes.ecb.c
  CC    psa/psa_hash.c
  CC    random/gen_entropy.c
  CC    random/gen_random_ctr_drbg.c
  CC    ssl/dtls_client.c
  Gen   test_suite_aes.ofb.c
  Gen   test_suite_aes.rest.c
  Gen   test_suite_aes.xts.c
  CC    ssl/dtls_server.c
  Gen   test_suite_alignment.c
  CC    ssl/mini_client.c
  Gen   test_suite_aria.c
  CC    ssl/ssl_client1.c
  CC    test/query_config.c
  Gen   test_suite_asn1parse.c
  CC    ssl/ssl_test_lib.c
  Gen   test_suite_asn1write.c
  CC    ssl/ssl_fork_server.c
  Gen   test_suite_base64.c
  CC    ssl/ssl_mail_client.c
  CC    ssl/ssl_server.c
  CC    test/benchmark.c
  CC    test/metatest.c
  Gen   test_suite_bignum.generated.c
  CC    test/query_included_headers.c
  Gen   test_suite_bignum.misc.c
  CC    test/selftest.c
  CC    test/udp_proxy.c
  CC    test/zeroize.c
  Gen   test_suite_bignum_core.generated.c
  CC    util/pem2der.c
  Gen   test_suite_bignum_core.misc.c
  CC    util/strerror.c
  Gen   test_suite_bignum_mod.generated.c
  CC    x509/cert_app.c
  CC    x509/cert_req.c
  CC    x509/cert_write.c
  Gen   test_suite_bignum_mod.misc.c
  CC    x509/crl_app.c
  Gen   test_suite_bignum_mod_raw.c
  CC    x509/load_roots.c
  CC    x509/req_app.c
  Gen   test_suite_bignum_mod_raw.generated.c
  CC    psa/psa_constant_names.c
  Gen   test_suite_bignum_random.c
  CC    ssl/ssl_client2.c
  CC    ssl/ssl_context_info.c
  CC    ssl/ssl_server2.c
  Gen   test_suite_block_cipher.c
  CC    test/query_compile_time_config.c
  Gen   test_suite_block_cipher.psa.c
  Gen   test_suite_camellia.c
  Gen   test_suite_ccm.c
  Gen   test_suite_chacha20.c
  Gen   test_suite_chachapoly.c
  Gen   test_suite_cipher.aes.c
 cc common.o onefile.o fuzz_client.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_client
 cc common.o onefile.o fuzz_dtlsclient.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_dtlsclient
  Gen   test_suite_cipher.aria.c
 cc common.o onefile.o fuzz_dtlsserver.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_dtlsserver
 cc common.o onefile.o fuzz_pkcs7.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_pkcs7
 cc common.o onefile.o fuzz_privkey.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_privkey
 cc common.o onefile.o fuzz_pubkey.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_pubkey
  Gen   test_suite_cipher.camellia.c
 cc common.o onefile.o fuzz_server.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_server
 cc common.o onefile.o fuzz_x509crl.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_x509crl
  Gen   test_suite_cipher.ccm.c
 cc common.o onefile.o fuzz_x509crt.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_x509crt
 cc common.o onefile.o fuzz_x509csr.o ../../tests/src/asn1_helpers.o ../../tests/src/bignum_helpers.o ../../tests/src/certs.o ../../tests/src/fake_external_rng_for_test.o ../../tests/src/helpers.o ../../tests/src/psa_crypto_helpers.o ../../tests/src/psa_exercise_key.o ../../tests/src/random.o ../../tests/src/threading_helpers.o ../../tests/src/drivers/hash.o ../../tests/src/drivers/platform_builtin_keys.o ../../tests/src/drivers/test_driver_aead.o ../../tests/src/drivers/test_driver_asymmetric_encryption.o ../../tests/src/drivers/test_driver_cipher.o ../../tests/src/drivers/test_driver_key_agreement.o ../../tests/src/drivers/test_driver_key_management.o ../../tests/src/drivers/test_driver_mac.o ../../tests/src/drivers/test_driver_pake.o ../../tests/src/drivers/test_driver_signature.o -L../../library -lmbedtls -lmbedx509 -lmbedcrypto  -o fuzz_x509csr
  Gen   test_suite_cipher.chacha20.c
  Gen   test_suite_cipher.chachapoly.c
  Gen   test_suite_cipher.des.c
  Gen   test_suite_cipher.gcm.c
  Gen   test_suite_cipher.misc.c
  Gen   test_suite_cipher.nist_kw.c
  Gen   test_suite_cipher.null.c
  Gen   test_suite_cipher.padding.c
  Gen   test_suite_cmac.c
  Gen   test_suite_common.c
  Gen   test_suite_constant_time.c
  Gen   test_suite_constant_time_hmac.c
  Gen   test_suite_ctr_drbg.c
  Gen   test_suite_debug.c
  Gen   test_suite_des.c
  Gen   test_suite_dhm.c
  Gen   test_suite_ecdh.c
  Gen   test_suite_ecdsa.c
  Gen   test_suite_ecjpake.c
  Gen   test_suite_ecp.c
  Gen   test_suite_ecp.generated.c
  Gen   test_suite_entropy.c
  Gen   test_suite_error.c
  Gen   test_suite_gcm.aes128_de.c
  Gen   test_suite_gcm.aes128_en.c
  Gen   test_suite_gcm.aes192_de.c
  Gen   test_suite_gcm.aes192_en.c
  Gen   test_suite_gcm.aes256_de.c
  Gen   test_suite_gcm.aes256_en.c
  Gen   test_suite_gcm.camellia.c
  Gen   test_suite_gcm.misc.c
  Gen   test_suite_hkdf.c
  Gen   test_suite_hmac_drbg.misc.c
  Gen   test_suite_hmac_drbg.no_reseed.c
  Gen   test_suite_hmac_drbg.nopr.c
  Gen   test_suite_hmac_drbg.pr.c
  Gen   test_suite_lmots.c
  Gen   test_suite_lms.c
  Gen   test_suite_md.c
  Gen   test_suite_md.psa.c
  Gen   test_suite_mdx.c
  Gen   test_suite_memory_buffer_alloc.c
  Gen   test_suite_mps.c
  Gen   test_suite_net.c
  Gen   test_suite_nist_kw.c
  Gen   test_suite_oid.c
  Gen   test_suite_pem.c
  Gen   test_suite_pk.c
  Gen   test_suite_pkcs12.c
  Gen   test_suite_pkcs1_v15.c
  Gen   test_suite_pkcs1_v21.c
  Gen   test_suite_pkcs5.c
  Gen   test_suite_pkcs7.c
  Gen   test_suite_pkparse.c
  Gen   test_suite_pkwrite.c
  Gen   test_suite_platform.c
  Gen   test_suite_platform_printf.c
  Gen   test_suite_platform_util.c
  Gen   test_suite_poly1305.c
  Gen   test_suite_psa_crypto.c
  Gen   test_suite_psa_crypto.pbkdf2.c
  Gen   test_suite_psa_crypto_attributes.c
  Gen   test_suite_psa_crypto_driver_wrappers.c
  Gen   test_suite_psa_crypto_entropy.c
  Gen   suites/test_suite_psa_crypto_generate_key.generated.data suites/test_suite_psa_crypto_low_hash.generated.data suites/test_suite_psa_crypto_not_supported.generated.data suites/test_suite_psa_crypto_op_fail.generated.data suites/test_suite_psa_crypto_storage_format.current.data suites/test_suite_psa_crypto_storage_format.v0.data ...
  Gen   test_suite_psa_crypto_hash.c
  Gen   test_suite_psa_crypto_init.c
  Gen   test_suite_psa_crypto_metadata.c
  Gen   test_suite_psa_crypto_not_supported.misc.c
  Gen   test_suite_psa_crypto_op_fail.misc.c
  Gen   test_suite_psa_crypto_pake.c
  Gen   test_suite_psa_crypto_persistent_key.c
  Gen   test_suite_psa_crypto_se_driver_hal.c
  Gen   test_suite_psa_crypto_se_driver_hal_mocks.c
  Gen   test_suite_psa_crypto_slot_management.c
  Gen   test_suite_psa_crypto_storage_format.misc.c
  Gen   test_suite_psa_its.c
  Gen   test_suite_random.c
  Gen   test_suite_rsa.c
  Gen   test_suite_shax.c
  Gen   test_suite_ssl.c
  Gen   test_suite_ssl_decrypt.misc.c
  Gen   test_suite_timing.c
  Gen   test_suite_version.c
  Gen   test_suite_x509parse.c
  Gen   test_suite_x509write.c
  CC    test_suite_aes.cbc.c
  CC    test_suite_aes.cfb.c
  CC    test_suite_aes.ecb.c
  CC    test_suite_aes.ofb.c
  CC    test_suite_aes.rest.c
  CC    test_suite_aes.xts.c
  CC    test_suite_alignment.c
  CC    test_suite_aria.c
  CC    test_suite_asn1parse.c
  CC    test_suite_base64.c
  CC    test_suite_asn1write.c
  CC    test_suite_bignum.generated.c
  CC    test_suite_bignum.misc.c
  CC    test_suite_bignum_mod.generated.c
  CC    test_suite_bignum_core.misc.c
  CC    test_suite_bignum_core.generated.c
  CC    test_suite_bignum_mod.misc.c
  CC    test_suite_bignum_mod_raw.c
  CC    test_suite_bignum_mod_raw.generated.c
  CC    test_suite_bignum_random.c
  CC    test_suite_block_cipher.c
  CC    test_suite_camellia.c
  CC    test_suite_block_cipher.psa.c
  CC    test_suite_ccm.c
  CC    test_suite_chacha20.c
  CC    test_suite_chachapoly.c
  CC    test_suite_cipher.aes.c
  CC    test_suite_cipher.aria.c
  CC    test_suite_cipher.camellia.c
  CC    test_suite_cipher.ccm.c
  CC    test_suite_cipher.chacha20.c
  CC    test_suite_cipher.chachapoly.c
  CC    test_suite_cipher.des.c
  CC    test_suite_cipher.gcm.c
  CC    test_suite_cipher.misc.c
  CC    test_suite_cipher.nist_kw.c
  CC    test_suite_cipher.null.c
  CC    test_suite_cipher.padding.c
  CC    test_suite_cmac.c
  CC    test_suite_common.c
  CC    test_suite_constant_time.c
  CC    test_suite_constant_time_hmac.c
  CC    test_suite_ctr_drbg.c
  CC    test_suite_debug.c
  CC    test_suite_des.c
  CC    test_suite_dhm.c
  CC    test_suite_ecdh.c
  CC    test_suite_ecdsa.c
  CC    test_suite_ecjpake.c
  CC    test_suite_ecp.c
  CC    test_suite_ecp.generated.c
  CC    test_suite_error.c
  CC    test_suite_entropy.c
  CC    test_suite_gcm.aes128_de.c
  CC    test_suite_gcm.aes128_en.c
  CC    test_suite_gcm.aes192_de.c
  CC    test_suite_gcm.aes192_en.c
  CC    test_suite_gcm.aes256_de.c
  CC    test_suite_gcm.aes256_en.c
  CC    test_suite_gcm.camellia.c
  CC    test_suite_gcm.misc.c
  CC    test_suite_hkdf.c
  CC    test_suite_hmac_drbg.misc.c
  CC    test_suite_hmac_drbg.no_reseed.c
  CC    test_suite_hmac_drbg.nopr.c
  CC    test_suite_hmac_drbg.pr.c
  CC    test_suite_lmots.c
  CC    test_suite_lms.c
  CC    test_suite_md.c
  CC    test_suite_md.psa.c
  CC    test_suite_mdx.c
  CC    test_suite_memory_buffer_alloc.c
  CC    test_suite_mps.c
  CC    test_suite_net.c
  CC    test_suite_nist_kw.c
  CC    test_suite_oid.c
  CC    test_suite_pem.c
  CC    test_suite_pk.c
  CC    test_suite_pkcs12.c
  CC    test_suite_pkcs1_v15.c
  CC    test_suite_pkcs1_v21.c
  CC    test_suite_pkcs5.c
  CC    test_suite_pkparse.c
  CC    test_suite_pkcs7.c
  CC    test_suite_pkwrite.c
  CC    test_suite_platform.c
  CC    test_suite_platform_printf.c
  CC    test_suite_platform_util.c
  CC    test_suite_poly1305.c
  CC    test_suite_psa_crypto.c
  CC    test_suite_psa_crypto.pbkdf2.c
  CC    test_suite_psa_crypto_attributes.c
  CC    test_suite_psa_crypto_driver_wrappers.c
  CC    test_suite_psa_crypto_entropy.c
  Gen   test_suite_psa_crypto_generate_key.generated.c
  CC    test_suite_psa_crypto_hash.c
  CC    test_suite_psa_crypto_init.c
  Gen   test_suite_psa_crypto_low_hash.generated.c
  CC    test_suite_psa_crypto_metadata.c
  Gen   test_suite_psa_crypto_not_supported.generated.c
  CC    test_suite_psa_crypto_not_supported.misc.c
  Gen   test_suite_psa_crypto_op_fail.generated.c
  CC    test_suite_psa_crypto_pake.c
  CC    test_suite_psa_crypto_op_fail.misc.c
  CC    test_suite_psa_crypto_persistent_key.c
  CC    test_suite_psa_crypto_se_driver_hal.c
  CC    test_suite_psa_crypto_se_driver_hal_mocks.c
  CC    test_suite_psa_crypto_slot_management.c
  Gen   test_suite_psa_crypto_storage_format.current.c
  CC    test_suite_psa_crypto_storage_format.misc.c
  Gen   test_suite_psa_crypto_storage_format.v0.c
  CC    test_suite_psa_its.c
  CC    test_suite_random.c
  CC    test_suite_rsa.c
  CC    test_suite_shax.c
  CC    test_suite_ssl.c
  CC    test_suite_ssl_decrypt.misc.c
  CC    test_suite_timing.c
  CC    test_suite_version.c
  CC    test_suite_x509parse.c
  CC    test_suite_x509write.c
  CC    test_suite_psa_crypto_generate_key.generated.c
  CC    test_suite_psa_crypto_low_hash.generated.c
  CC    test_suite_psa_crypto_not_supported.generated.c
  CC    test_suite_psa_crypto_storage_format.v0.c
  CC    test_suite_psa_crypto_storage_format.current.c
  CC    test_suite_psa_crypto_op_fail.generated.c

$ cd tests
$ ./test_suite_ssl
Attempt to register multiple PSKs ................................. PASS
Attempt to register multiple PSKS, incl. opaque PSK, #0 ........... PASS
Attempt to register multiple PSKs, incl. opaque PSK, #1 ........... PASS
Attempt to register multiple PSKs, incl. opaque PSK, #2 ........... PASS
Test callback buffer sanity ....................................... PASS
Callback buffer test: Exercise simple write/read .................. PASS
Callback buffer test: Filling up the buffer ....................... PASS
Callback buffer test: Filling up the buffer in two steps .......... PASS
Callback buffer test: Reading out the buffer in two steps ......... PASS
Callback buffer test: Data wraps in buffer ........................ PASS
Callback buffer test: Data starts at the end ...................... PASS
Callback buffer test: Can write less than requested ............... PASS
Callback buffer test: Can read less than requested ................ PASS
Callback buffer test: Writing to full buffer ...................... PASS
Callback buffer test: Reading from empty buffer ................... PASS
Test mock socket sanity ........................................... PASS
Test mock blocking TCP connection ................................. PASS
Test mock non-blocking TCP connection ............................. PASS
Test mock blocking TCP connection (interleaving) .................. PASS
Test mock non-blocking TCP connection (interleaving) .............. PASS
Message queue - sanity ............................................ PASS
Message queue - basic test ........................................ PASS
Message queue - overflow/underflow ................................ PASS
Message queue - interleaved ....................................... PASS
Message queue - insufficient buffer ............................... PASS
Message transport mock - uninitialized structures ................. PASS
Message transport mock - basic test ............................... PASS
Message transport mock - queue overflow/underflow ................. PASS
Message transport mock - socket overflow .......................... PASS
Message transport mock - truncated message ........................ PASS
Message transport mock - socket read error ........................ PASS
Message transport mock - one-way interleaved sends/reads .......... PASS
Message transport mock - two-way interleaved sends/reads .......... PASS
Test mbedtls_endpoint sanity for the client ....................... ----
Test mbedtls_endpoint sanity for the server ....................... ----
TLS 1.2:Move client handshake to HELLO_REQUEST .................... PASS
TLS 1.2:Move client handshake to CLIENT_HELLO ..................... PASS
TLS 1.2:Move client handshake to SERVER_HELLO ..................... PASS
TLS 1.2:Move client handshake to SERVER_CERTIFICATE ............... ----
TLS 1.2:Move client handshake to SERVER_KEY_EXCHANGE .............. PASS
TLS 1.2:Move client handshake to CERTIFICATE_REQUEST .............. PASS
TLS 1.2:Move client handshake to SERVER_HELLO_DONE ................ PASS
TLS 1.2:Move client handshake to CLIENT_CERTIFICATE ............... PASS
TLS 1.2:Move client handshake to CLIENT_KEY_EXCHANGE .............. PASS
TLS 1.2:Move client handshake to CERTIFICATE_VERIFY ............... PASS
TLS 1.2:Move client handshake to CLIENT_CHANGE_CIPHER_SPEC ........ PASS
TLS 1.2:Move client handshake to CLIENT_FINISHED .................. PASS
TLS 1.2:Move client handshake to SERVER_CHANGE_CIPHER_SPEC ........ PASS
TLS 1.2:Move client handshake to SERVER_FINISHED .................. PASS
TLS 1.2:Move client handshake to FLUSH_BUFFERS .................... PASS
TLS 1.2:Move client handshake to HANDSHAKE_WRAPUP ................. PASS
TLS 1.2:Move client handshake to HANDSHAKE_OVER ................... PASS
TLS 1.3:Move client handshake to HELLO_REQUEST .................... PASS
TLS 1.3:Move client handshake to CLIENT_HELLO ..................... PASS
TLS 1.3:Move client handshake to SERVER_HELLO ..................... PASS
TLS 1.3:Move client handshake to ENCRYPTED_EXTENSIONS ............. PASS
TLS 1.3:Move client handshake to CERTIFICATE_REQUEST .............. PASS
TLS 1.3:Move client handshake to SERVER_CERTIFICATE ............... PASS
TLS 1.3:Move client handshake to CERTIFICATE_VERIFY ............... PASS
TLS 1.3:Move client handshake to SERVER_FINISHED .................. PASS
TLS 1.3:Move client handshake to CLIENT_CERTIFICATE ............... PASS
TLS 1.3:Move client handshake to CLIENT_CERTIFICATE_VERIFY ........ PASS
TLS 1.3:Move client handshake to CLIENT_FINISHED .................. PASS
TLS 1.3:Move client handshake to FLUSH_BUFFERS .................... PASS
TLS 1.3:Move client handshake to HANDSHAKE_WRAPUP ................. PASS
TLS 1.3:Move client handshake to CLIENT_CCS_AFTER_SERVER_FINISHED . PASS
TLS 1.2:Move server handshake to HELLO_REQUEST .................... PASS
TLS 1.2:Move server handshake to CLIENT_HELLO ..................... PASS
TLS 1.2:Move server handshake to SERVER_HELLO ..................... PASS
TLS 1.2:Move server handshake to SERVER_CERTIFICATE ............... PASS
TLS 1.2:Move server handshake to SERVER_KEY_EXCHANGE .............. PASS
TLS 1.2:Move server handshake to CERTIFICATE_REQUEST .............. PASS
TLS 1.2:Move server handshake to SERVER_HELLO_DONE ................ PASS
TLS 1.2:Move server handshake to CLIENT_CERTIFICATE ............... PASS
TLS 1.2:Move server handshake to CLIENT_KEY_EXCHANGE .............. PASS
TLS 1.2:Move server handshake to CERTIFICATE_VERIFY ............... PASS
TLS 1.2:Move server handshake to CLIENT_CHANGE_CIPHER_SPEC ........ PASS
TLS 1.2:Move server handshake to CLIENT_FINISHED .................. PASS
TLS 1.2:Move server handshake to SERVER_CHANGE_CIPHER_SPEC ........ PASS
TLS 1.2:Move server handshake to SERVER_FINISHED .................. PASS
TLS 1.2:Move server handshake to FLUSH_BUFFERS .................... PASS
TLS 1.2:Move server handshake to HANDSHAKE_WRAPUP ................. PASS
TLS 1.2:Move server handshake to HANDSHAKE_OVER ................... PASS
TLS 1.3:Move server handshake to HELLO_REQUEST .................... PASS
TLS 1.3:Move server handshake to CLIENT_HELLO ..................... PASS
TLS 1.3:Move server handshake to SERVER_HELLO ..................... PASS
TLS 1.3:Move server handshake to ENCRYPTED_EXTENSIONS ............. PASS
TLS 1.3:Move server handshake to CERTIFICATE_REQUEST .............. PASS
TLS 1.3:Move server handshake to SERVER_CERTIFICATE ............... PASS
TLS 1.3:Move server handshake to CERTIFICATE_VERIFY ............... PASS
TLS 1.3:Move server handshake to SERVER_CCS_AFTER_SERVER_HELLO .... PASS
TLS 1.3:Move server handshake to SERVER_FINISHED .................. PASS
TLS 1.3:Move server handshake to CLIENT_FINISHED .................. PASS
TLS 1.3:Move server handshake to HANDSHAKE_WRAPUP ................. PASS
TLS 1.3:Move server handshake to CLIENT_CERTIFICATE ............... PASS
TLS 1.3:Move server handshake to CLIENT_CERTIFICATE_VERIFY ........ PASS
TLS 1.2:Negative test moving clients ssl to state: VERIFY_REQUEST_  PASS
TLS 1.2:Negative test moving servers ssl to state: NEW_SESSION_TIC  PASS
Handshake, tls1_2 ................................................. PASS
Handshake, tls1_3 ................................................. PASS
Handshake, ECDHE-RSA-WITH-AES-256-GCM-SHA384 ...................... ----
Handshake, RSA-WITH-AES-128-CCM ................................... PASS
Handshake, DHE-RSA-WITH-AES-256-CBC-SHA256 ........................ PASS
Handshake, ECDHE-ECDSA-WITH-AES-256-CCM ........................... ----
Handshake, ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384 ................ ----
Handshake, PSK-WITH-AES-128-CBC-SHA ............................... PASS
DTLS Handshake, tls1_2 ............................................ PASS
DTLS Handshake, ECDHE-RSA-WITH-AES-256-GCM-SHA384 ................. ----
DTLS Handshake, RSA-WITH-AES-128-CCM .............................. PASS
DTLS Handshake, DHE-RSA-WITH-AES-256-CBC-SHA256 ................... PASS
DTLS Handshake, ECDHE-ECDSA-WITH-AES-256-CCM ...................... ----
DTLS Handshake, ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384 ........... ----
DTLS Handshake, PSK-WITH-AES-128-CBC-SHA .......................... PASS
DTLS Handshake with serialization, tls1_2 ......................... PASS
DTLS Handshake fragmentation, MFL=512 ............................. ----
DTLS Handshake fragmentation, MFL=1024 ............................ ----
Handshake min/max version check, all -> 1.2 ....................... ----
Handshake min/max version check, all -> 1.3 ....................... PASS
Handshake, select RSA-WITH-AES-256-CBC-SHA256, non-opaque ......... PASS
Handshake, select RSA-WITH-AES-256-CBC-SHA256, opaque ............. PASS
Handshake, select RSA-WITH-AES-256-CBC-SHA256, opaque, bad alg .... PASS
Handshake, select RSA-WITH-AES-256-CBC-SHA256, opaque, bad usage .. PASS
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, non-opaque ..... PASS
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, opaque ......... PASS
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, opaque, bad alg  PASS
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, opaque, bad usa  PASS
Handshake, select RSA-PSK-WITH-AES-256-CBC-SHA384, opaque, no psk . PASS
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, non-opaque ..... PASS
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, PSA_ALG  PASS
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, PSA_ALG  PASS
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, invalid  PASS
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, bad alg  PASS
Handshake, select DHE-RSA-WITH-AES-256-GCM-SHA384, opaque, bad usa  PASS
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, non-opaque ... ----
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, PSA_A  ----
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, PSA_A  ----
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, inval  ----
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, bad a  ----
Handshake, select ECDHE-RSA-WITH-AES-256-GCM-SHA384, opaque, bad u  ----
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, non-opaque ........ ----
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, PSA_ALG_AN  ----
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, PSA_ALG_SH  ----
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, bad alg ... ----
Handshake, select ECDHE-ECDSA-WITH-AES-256-CCM, opaque, bad usage . ----
Handshake, select ECDH-RSA-WITH-AES-256-CBC-SHA384, non-opaque .... ----
Handshake, select ECDH-RSA-WITH-AES-256-CBC-SHA384, opaque ........ ----
Handshake, select ECDH-RSA-WITH-AES-256-CBC-SHA384, opaque, bad al  ----
Handshake, select ECDH-RSA-WITH-AES-256-CBC-SHA384, opaque, bad us  ----
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, non-opa  ----
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, opaque,  ----
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, opaque,  ----
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, opaque,  ----
Handshake, select ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384, opaque,  ----
Sending app data via TLS, MFL=512 without fragmentation ........... PASS
Sending app data via TLS, MFL=512 with fragmentation .............. PASS
Sending app data via TLS, MFL=1024 without fragmentation .......... PASS
Sending app data via TLS, MFL=1024 with fragmentation ............. PASS
Sending app data via TLS, MFL=2048 without fragmentation .......... PASS
Sending app data via TLS, MFL=2048 with fragmentation ............. PASS
Sending app data via TLS, MFL=4096 without fragmentation .......... PASS
Sending app data via TLS, MFL=4096 with fragmentation ............. PASS
Sending app data via TLS without MFL and without fragmentation .... PASS
Sending app data via TLS without MFL and with fragmentation ....... PASS
Sending app data via DTLS, MFL=512 without fragmentation .......... ----
Sending app data via DTLS, MFL=512 with fragmentation ............. ----
Sending app data via DTLS, MFL=1024 without fragmentation ......... ----
Sending app data via DTLS, MFL=1024 with fragmentation ............ ----
Sending app data via DTLS, MFL=2048 without fragmentation ......... ----
Sending app data via DTLS, MFL=2048 with fragmentation ............ ----
Sending app data via DTLS, MFL=4096 without fragmentation ......... ----
Sending app data via DTLS, MFL=4096 with fragmentation ............ ----
Sending app data via DTLS, without MFL and without fragmentation .. ----
Sending app data via DTLS, without MFL and with fragmentation ..... ----
DTLS renegotiation: no legacy renegotiation ....................... ----
DTLS renegotiation: legacy renegotiation .......................... ----
DTLS renegotiation: legacy break handshake ........................ ----
DTLS serialization with MFL=512 ................................... ----
DTLS serialization with MFL=1024 .................................. ----
DTLS serialization with MFL=2048 .................................. ----
DTLS serialization with MFL=4096 .................................. ----
DTLS no legacy renegotiation with MFL=512 ......................... ----
DTLS no legacy renegotiation with MFL=1024 ........................ ----
DTLS no legacy renegotiation with MFL=2048 ........................ ----
DTLS no legacy renegotiation with MFL=4096 ........................ ----
DTLS legacy allow renegotiation with MFL=512 ...................... ----
DTLS legacy allow renegotiation with MFL=1024 ..................... ----
DTLS legacy allow renegotiation with MFL=2048 ..................... ----
DTLS legacy allow renegotiation with MFL=4096 ..................... ----
DTLS legacy break handshake renegotiation with MFL=512 ............ ----
DTLS legacy break handshake renegotiation with MFL=1024 ........... ----
DTLS legacy break handshake renegotiation with MFL=2048 ........... ----
DTLS legacy break handshake renegotiation with MFL=4096 ........... ----
DTLS no legacy renegotiation with MFL=512, ECDHE-RSA-WITH-AES-256-  ----
DTLS no legacy renegotiation with MFL=1024, ECDHE-RSA-WITH-AES-256  ----
DTLS no legacy renegotiation with MFL=2048, ECDHE-RSA-WITH-AES-256  ----
DTLS no legacy renegotiation with MFL=4096, ECDHE-RSA-WITH-AES-256  ----
DTLS legacy allow renegotiation with MFL=512, ECDHE-RSA-WITH-AES-2  ----
DTLS legacy allow renegotiation with MFL=1024, ECDHE-RSA-WITH-AES-  ----
DTLS legacy allow renegotiation with MFL=2048, ECDHE-RSA-WITH-AES-  ----
DTLS legacy allow renegotiation with MFL=4096, ECDHE-RSA-WITH-AES-  ----
DTLS legacy break handshake renegotiation with MFL=512, ECDHE-RSA-  ----
DTLS legacy break handshake renegotiation with MFL=1024, ECDHE-RSA  ----
DTLS legacy break handshake renegotiation with MFL=2048, ECDHE-RSA  ----
DTLS legacy break handshake renegotiation with MFL=4096, ECDHE-RSA  ----
DTLS no legacy renegotiation with MFL=512, RSA-WITH-AES-128-CCM ... ----
DTLS no legacy renegotiation with MFL=1024, RSA-WITH-AES-128-CCM .. ----
DTLS no legacy renegotiation with MFL=2048, RSA-WITH-AES-128-CCM .. ----
DTLS no legacy renegotiation with MFL=4096, RSA-WITH-AES-128-CCM .. ----
DTLS legacy allow renegotiation with MFL=512, RSA-WITH-AES-128-CCM  ----
DTLS legacy allow renegotiation with MFL=1024, RSA-WITH-AES-128-CC  ----
DTLS legacy allow renegotiation with MFL=2048, RSA-WITH-AES-128-CC  ----
DTLS legacy allow renegotiation with MFL=4096, RSA-WITH-AES-128-CC  ----
DTLS legacy break handshake renegotiation with MFL=512, RSA-WITH-A  ----
DTLS legacy break handshake renegotiation with MFL=1024, RSA-WITH-  ----
DTLS legacy break handshake renegotiation with MFL=2048, RSA-WITH-  ----
DTLS legacy break handshake renegotiation with MFL=4096, RSA-WITH-  ----
DTLS no legacy renegotiation with MFL=512, DHE-RSA-WITH-AES-256-CB  ----
DTLS no legacy renegotiation with MFL=1024, DHE-RSA-WITH-AES-256-C  ----
DTLS no legacy renegotiation with MFL=2048, DHE-RSA-WITH-AES-256-C  ----
DTLS no legacy renegotiation with MFL=4096, DHE-RSA-WITH-AES-256-C  ----
DTLS legacy allow renegotiation with MFL=512, DHE-RSA-WITH-AES-256  ----
DTLS legacy allow renegotiation with MFL=1024, DHE-RSA-WITH-AES-25  ----
DTLS legacy allow renegotiation with MFL=2048, DHE-RSA-WITH-AES-25  ----
DTLS legacy allow renegotiation with MFL=4096, DHE-RSA-WITH-AES-25  ----
DTLS legacy break handshake renegotiation with MFL=512, DHE-RSA-WI  ----
DTLS legacy break handshake renegotiation with MFL=1024, DHE-RSA-W  ----
DTLS legacy break handshake renegotiation with MFL=2048, DHE-RSA-W  ----
DTLS legacy break handshake renegotiation with MFL=4096, DHE-RSA-W  ----
SSL DTLS replay: initial state, seqnum 0 .......................... PASS
SSL DTLS replay: 0 seen, 1 arriving ............................... PASS
SSL DTLS replay: 0 seen, 0 replayed ............................... PASS
SSL DTLS replay: 0-1 seen, 2 arriving ............................. PASS
SSL DTLS replay: 0-1 seen, 1 replayed ............................. PASS
SSL DTLS replay: 0-1 seen, 0 replayed ............................. PASS
SSL DTLS replay: new .............................................. PASS
SSL DTLS replay: way new .......................................... PASS
SSL DTLS replay: delayed .......................................... PASS
SSL DTLS replay: last replayed .................................... PASS
SSL DTLS replay: older replayed ................................... PASS
SSL DTLS replay: most recent in window, replayed .................. PASS
SSL DTLS replay: oldest in window, replayed ....................... PASS
SSL DTLS replay: oldest in window, not replayed ................... PASS
SSL DTLS replay: just out of the window ........................... PASS
SSL DTLS replay: way out of the window ............................ PASS
SSL DTLS replay: big jump then replay ............................. PASS
SSL DTLS replay: big jump then new ................................ PASS
SSL DTLS replay: big jump then just delayed ....................... PASS
SSL SET_HOSTNAME memory leak: call ssl_set_hostname twice ......... PASS
SSL session serialization: Wrong major version .................... PASS
SSL session serialization: Wrong minor version .................... PASS
SSL session serialization: Wrong patch version .................... PASS
SSL session serialization: Wrong config ........................... PASS
TLS 1.3: CLI: session serialization: Wrong major version .......... PASS
TLS 1.3: CLI: session serialization: Wrong minor version .......... PASS
TLS 1.3: CLI: session serialization: Wrong patch version .......... PASS
TLS 1.3: CLI: session serialization: Wrong config ................. PASS
TLS 1.3: SRV: session serialization: Wrong major version .......... PASS
TLS 1.3: SRV: session serialization: Wrong minor version .......... PASS
TLS 1.3: SRV: session serialization: Wrong patch version .......... PASS
TLS 1.3: SRV: session serialization: Wrong config ................. PASS
Record crypt, AES-128-CBC, 1.2, SHA-384 ........................... PASS
Record crypt, AES-128-CBC, 1.2, SHA-384, CID 4+4 .................. PASS
Record crypt, AES-128-CBC, 1.2, SHA-384, CID 4+0 .................. PASS
Record crypt, AES-128-CBC, 1.2, SHA-384, EtM ...................... PASS
Record crypt, AES-128-CBC, 1.2, SHA-384, EtM, CID 4+4 ............. PASS
Record crypt, AES-128-CBC, 1.2, SHA-384, EtM, CID 4+0 ............. PASS
Record crypt, AES-128-CBC, 1.2, SHA-256 ........................... PASS
Record crypt, AES-128-CBC, 1.2, SHA-256, CID 4+4 .................. PASS
Record crypt, AES-128-CBC, 1.2, SHA-256, CID 4+0 .................. PASS
Record crypt, AES-128-CBC, 1.2, SHA-256, EtM ...................... PASS
Record crypt, AES-128-CBC, 1.2, SHA-256, EtM, CID 4+4 ............. PASS
Record crypt, AES-128-CBC, 1.2, SHA-256, EtM, CID 4+0 ............. PASS
Record crypt, AES-128-CBC, 1.2, SHA-1 ............................. PASS
Record crypt, AES-128-CBC, 1.2, SHA-1, CID 4+4 .................... PASS
Record crypt, AES-128-CBC, 1.2, SHA-1, CID 4+0 .................... PASS
Record crypt, AES-128-CBC, 1.2, SHA-1, EtM ........................ PASS
Record crypt, AES-128-CBC, 1.2, SHA-1, EtM, CID 4+4 ............... PASS
Record crypt, AES-128-CBC, 1.2, SHA-1, EtM, CID 4+0 ............... PASS
Record crypt, AES-128-CBC, 1.2, MD5 ............................... PASS
Record crypt, AES-128-CBC, 1.2, MD5, CID 4+4 ...................... PASS
Record crypt, AES-128-CBC, 1.2, MD5, CID 4+0 ...................... PASS
Record crypt, AES-128-CBC, 1.2, MD5, EtM .......................... PASS
Record crypt, AES-128-CBC, 1.2, MD5, EtM, CID 4+4 ................. PASS
Record crypt, AES-128-CBC, 1.2, MD5, EtM, CID 4+0 ................. PASS
Record crypt, AES-256-CBC, 1.2, SHA-384 ........................... PASS
Record crypt, AES-256-CBC, 1.2, SHA-384, CID 4+4 .................. PASS
Record crypt, AES-256-CBC, 1.2, SHA-384, CID 4+0 .................. PASS
Record crypt, AES-256-CBC, 1.2, SHA-384, EtM ...................... PASS
Record crypt, AES-256-CBC, 1.2, SHA-384, EtM, CID 4+4 ............. PASS
Record crypt, AES-256-CBC, 1.2, SHA-384, EtM, CID 4+0 ............. PASS
Record crypt, AES-256-CBC, 1.2, SHA-256 ........................... PASS
Record crypt, AES-256-CBC, 1.2, SHA-256, CID 4+4 .................. PASS
Record crypt, AES-256-CBC, 1.2, SHA-256, CID 4+0 .................. PASS
Record crypt, AES-256-CBC, 1.2, SHA-256, EtM ...................... PASS
Record crypt, AES-256-CBC, 1.2, SHA-256, EtM, CID 4+4 ............. PASS
Record crypt, AES-256-CBC, 1.2, SHA-256, EtM, CID 4+0 ............. PASS
Record crypt, AES-256-CBC, 1.2, SHA-1 ............................. PASS
Record crypt, AES-256-CBC, 1.2, SHA-1, CID 4+4 .................... PASS
Record crypt, AES-256-CBC, 1.2, SHA-1, CID 4+0 .................... PASS
Record crypt, AES-256-CBC, 1.2, SHA-1, EtM ........................ PASS
Record crypt, AES-256-CBC, 1.2, SHA-1, EtM, CID 4+4 ............... PASS
Record crypt, AES-256-CBC, 1.2, SHA-1, EtM, CID 4+0 ............... PASS
Record crypt, AES-256-CBC, 1.2, MD5 ............................... PASS
Record crypt, AES-256-CBC, 1.2, MD5, CID 4+4 ...................... PASS
Record crypt, AES-256-CBC, 1.2, MD5, CID 4+0 ...................... PASS
Record crypt, AES-256-CBC, 1.2, MD5, EtM .......................... PASS
Record crypt, AES-256-CBC, 1.2, MD5, EtM, CID 4+4 ................. PASS
Record crypt, AES-256-CBC, 1.2, MD5, EtM, CID 4+0 ................. PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-384 .......................... PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-384, CID 4+4 ................. PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-384, CID 4+0 ................. PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-384, EtM ..................... PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-384, EtM, CID 4+4 ............ PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-384, EtM, CID 4+0 ............ PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-256 .......................... PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-256, CID 4+4 ................. PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-256, CID 4+0 ................. PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-256, EtM ..................... PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-256, EtM, CID 4+4 ............ PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-256, EtM, CID 4+0 ............ PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-1 ............................ PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-1, CID 4+4 ................... PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-1, CID 4+0 ................... PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-1, EtM ....................... PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-1, EtM, CID 4+4 .............. PASS
Record crypt, ARIA-128-CBC, 1.2, SHA-1, EtM, CID 4+0 .............. PASS
Record crypt, ARIA-128-CBC, 1.2, MD5 .............................. PASS
Record crypt, ARIA-128-CBC, 1.2, MD5, CID 4+4 ..................... PASS
Record crypt, ARIA-128-CBC, 1.2, MD5, CID 4+0 ..................... PASS
Record crypt, ARIA-128-CBC, 1.2, MD5, EtM ......................... PASS
Record crypt, ARIA-128-CBC, 1.2, MD5, EtM, CID 4+4 ................ PASS
Record crypt, ARIA-128-CBC, 1.2, MD5, EtM, CID 4+0 ................ PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-384 .......................... PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-384, CID 4+4 ................. PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-384, CID 4+0 ................. PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-384, EtM ..................... PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-384, EtM, CID 4+4 ............ PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-384, EtM, CID 4+0 ............ PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-256 .......................... PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-256, CID 4+4 ................. PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-256, CID 4+0 ................. PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-256, EtM ..................... PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-256, EtM, CID 4+4 ............ PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-256, EtM, CID 4+0 ............ PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-1 ............................ PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-1, CID 4+4 ................... PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-1, CID 4+0 ................... PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-1, EtM ....................... PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-1, EtM, CID 4+4 .............. PASS
Record crypt, ARIA-256-CBC, 1.2, SHA-1, EtM, CID 4+0 .............. PASS
Record crypt, ARIA-256-CBC, 1.2, MD5 .............................. PASS
Record crypt, ARIA-256-CBC, 1.2, MD5, CID 4+4 ..................... PASS
Record crypt, ARIA-256-CBC, 1.2, MD5, CID 4+0 ..................... PASS
Record crypt, ARIA-256-CBC, 1.2, MD5, EtM ......................... PASS
Record crypt, ARIA-256-CBC, 1.2, MD5, EtM, CID 4+4 ................ PASS
Record crypt, ARIA-256-CBC, 1.2, MD5, EtM, CID 4+0 ................ PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384 ...................... PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, CID 4+4 ............. PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, CID 4+0 ............. PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, EtM ................. PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, EtM, CID 4+4 ........ PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-384, EtM, CID 4+0 ........ PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256 ...................... PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, CID 4+4 ............. PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, CID 4+0 ............. PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, EtM ................. PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, EtM, CID 4+4 ........ PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-256, EtM, CID 4+0 ........ PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1 ........................ PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, CID 4+4 ............... PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, CID 4+0 ............... PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, EtM ................... PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, EtM, CID 4+4 .......... PASS
Record crypt, CAMELLIA-128-CBC, 1.2, SHA-1, EtM, CID 4+0 .......... PASS
Record crypt, CAMELLIA-128-CBC, 1.2, MD5 .......................... PASS
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, CID 4+4 ................. PASS
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, CID 4+0 ................. PASS
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, EtM ..................... PASS
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, EtM, CID 4+4 ............ PASS
Record crypt, CAMELLIA-128-CBC, 1.2, MD5, EtM, CID 4+0 ............ PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384 ...................... PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, CID 4+4 ............. PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, CID 4+0 ............. PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, EtM ................. PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, EtM, CID 4+4 ........ PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-384, EtM, CID 4+0 ........ PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256 ...................... PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, CID 4+4 ............. PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, CID 4+0 ............. PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, EtM ................. PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, EtM, CID 4+4 ........ PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-256, EtM, CID 4+0 ........ PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1 ........................ PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, CID 4+4 ............... PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, CID 4+0 ............... PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, EtM ................... PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, EtM, CID 4+4 .......... PASS
Record crypt, CAMELLIA-256-CBC, 1.2, SHA-1, EtM, CID 4+0 .......... PASS
Record crypt, CAMELLIA-256-CBC, 1.2, MD5 .......................... PASS
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, CID 4+4 ................. PASS
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, CID 4+0 ................. PASS
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, EtM ..................... PASS
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, EtM, CID 4+4 ............ PASS
Record crypt, CAMELLIA-256-CBC, 1.2, MD5, EtM, CID 4+0 ............ PASS
Record crypt, AES-128-GCM, 1.2 .................................... PASS
Record crypt, AES-128-GCM, 1.3 .................................... PASS
Record crypt, AES-128-GCM, 1.2, CID 4+4 ........................... PASS
Record crypt, AES-128-GCM, 1.2, CID 4+0 ........................... PASS
Record crypt, AES-192-GCM, 1.2 .................................... PASS
Record crypt, AES-192-GCM, 1.3 .................................... PASS
Record crypt, AES-192-GCM, 1.2, CID 4+4 ........................... PASS
Record crypt, AES-192-GCM, 1.2, CID 4+0 ........................... PASS
Record crypt, AES-256-GCM, 1.2 .................................... PASS
Record crypt, AES-256-GCM, 1.3 .................................... PASS
Record crypt, AES-256-GCM, 1.2, CID 4+4 ........................... PASS
Record crypt, AES-256-GCM, 1.2, CID 4+0 ........................... PASS
Record crypt, CAMELLIA-128-GCM, 1.2 ............................... PASS
Record crypt, CAMELLIA-128-GCM, 1.2, CID 4+4 ...................... PASS
Record crypt, CAMELLIA-128-GCM, 1.2, CID 4+0 ...................... PASS
Record crypt, CAMELLIA-192-GCM, 1.2 ............................... PASS
Record crypt, CAMELLIA-192-GCM, 1.2, CID 4+4 ...................... PASS
Record crypt, CAMELLIA-192-GCM, 1.2, CID 4+0 ...................... PASS
Record crypt, CAMELLIA-256-GCM, 1.2 ............................... PASS
Record crypt, CAMELLIA-256-GCM, 1.2, CID 4+4 ...................... PASS
Record crypt, CAMELLIA-256-GCM, 1.2, CID 4+0 ...................... PASS
Record crypt, AES-128-CCM, 1.2 .................................... PASS
Record crypt, AES-128-CCM, 1.3 .................................... PASS
Record crypt, AES-128-CCM, 1.2, CID 4+4 ........................... PASS
Record crypt, AES-128-CCM, 1.2, CID 4+0 ........................... PASS
Record crypt, AES-128-CCM, 1.2, short tag ......................... PASS
Record crypt, AES-128-CCM, 1.2, short tag, CID 4+4 ................ PASS
Record crypt, AES-128-CCM, 1.2, short tag, CID 4+0 ................ PASS
Record crypt, AES-192-CCM, 1.2 .................................... PASS
Record crypt, AES-192-CCM, 1.3 .................................... PASS
Record crypt, AES-192-CCM, 1.2, CID 4+4 ........................... PASS
Record crypt, AES-192-CCM, 1.2, CID 4+0 ........................... PASS
Record crypt, AES-192-CCM, 1.2, short tag ......................... PASS
Record crypt, AES-192-CCM, 1.2, short tag, CID 4+4 ................ PASS
Record crypt, AES-192-CCM, 1.2, short tag, CID 4+0 ................ PASS
Record crypt, AES-256-CCM, 1.2 .................................... PASS
Record crypt, AES-256-CCM, 1.3 .................................... PASS
Record crypt, AES-256-CCM, 1.2, CID 4+4 ........................... PASS
Record crypt, AES-256-CCM, 1.2, CID 4+0 ........................... PASS
Record crypt, AES-256-CCM, 1.2, short tag ......................... PASS
Record crypt, AES-256-CCM, 1.2, short tag, CID 4+4 ................ PASS
Record crypt, AES-256-CCM, 1.2, short tag, CID 4+0 ................ PASS
Record crypt, CAMELLIA-128-CCM, 1.2 ............................... PASS
Record crypt, CAMELLIA-128-CCM, 1.2, CID 4+4 ...................... PASS
Record crypt, CAMELLIA-128-CCM, 1.2, CID 4+0 ...................... PASS
Record crypt, CAMELLIA-128-CCM, 1.2, short tag .................... PASS
Record crypt, CAMELLIA-128-CCM, 1.2, short tag, CID 4+4 ........... PASS
Record crypt, CAMELLIA-128-CCM, 1.2, short tag, CID 4+0 ........... PASS
Record crypt, CAMELLIA-192-CCM, 1.2 ............................... PASS
Record crypt, CAMELLIA-192-CCM, 1.2, CID 4+4 ...................... PASS
Record crypt, CAMELLIA-192-CCM, 1.2, CID 4+0 ...................... PASS
Record crypt, CAMELLIA-192-CCM, 1.2, short tag .................... PASS
Record crypt, CAMELLIA-192-CCM, 1.2, short tag, CID 4+4 ........... PASS
Record crypt, CAMELLIA-192-CCM, 1.2, short tag, CID 4+0 ........... PASS
Record crypt, CAMELLIA-256-CCM, 1.2 ............................... PASS
Record crypt, CAMELLIA-256-CCM, 1.2, CID 4+4 ...................... PASS
Record crypt, CAMELLIA-256-CCM, 1.2, CID 4+0 ...................... PASS
Record crypt, CAMELLIA-256-CCM, 1.2, short tag .................... PASS
Record crypt, CAMELLIA-256-CCM, 1.2, short tag, CID 4+4 ........... PASS
Record crypt, CAMELLIA-256-CCM, 1.2, short tag, CID 4+0 ........... PASS
Record crypt, NULL cipher, 1.2, SHA-384 ........................... PASS
Record crypt, NULL cipher, 1.2, SHA-384, EtM ...................... PASS
Record crypt, NULL cipher, 1.2, SHA-256 ........................... PASS
Record crypt, NULL cipher, 1.2, SHA-256, EtM ...................... PASS
Record crypt, NULL cipher, 1.2, SHA-1 ............................. PASS
Record crypt, NULL cipher, 1.2, SHA-1, EtM ........................ PASS
Record crypt, NULL cipher, 1.2, MD5 ............................... PASS
Record crypt, NULL cipher, 1.2, MD5, EtM .......................... PASS
Record crypt, ChachaPoly .......................................... PASS
Record crypt, ChachaPoly, 1.3 ..................................... PASS
Record crypt, little space, ChachaPoly ............................ PASS
Record crypt, little space, ChachaPoly, 1.3 ....................... PASS
Record crypt, little space, ChachaPoly, CID 4+4 ................... PASS
Record crypt, little space, ChachaPoly, CID 4+0 ................... PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-384 ............. PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, CID 4+4 .... PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, CID 4+0 .... PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, EtM ........ PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, EtM, CID 4+  PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-384, EtM, CID 4+  PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-256 ............. PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, CID 4+4 .... PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, CID 4+0 .... PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, EtM ........ PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, EtM, CID 4+  PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-256, EtM, CID 4+  PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-1 ............... PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, CID 4+4 ...... PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, CID 4+0 ...... PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, EtM .......... PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, EtM, CID 4+4 . PASS
Record crypt, little space, AES-128-CBC, 1.2, SHA-1, EtM, CID 4+0 . PASS
Record crypt, little space, AES-128-CBC, 1.2, MD5 ................. PASS
Record crypt, little space, AES-128-CBC, 1.2, MD5, CID 4+4 ........ PASS
Record crypt, little space, AES-128-CBC, 1.2, MD5, CID 4+0 ........ PASS
Record crypt, little space, AES-128-CBC, 1.2, MD5, EtM ............ PASS
Record crypt, little space, AES-128-CBC, 1.2, MD5, EtM, CID 4+4 ... PASS
Record crypt, little space, AES-128-CBC, 1.2, MD5, EtM, CID 4+0 ... PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-384 ............. PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, CID 4+4 .... PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, CID 4+0 .... PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, EtM ........ PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, EtM, CID 4+  PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-384, EtM, CID 4+  PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-256 ............. PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, CID 4+4 .... PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, CID 4+0 .... PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, EtM ........ PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, EtM, CID 4+  PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-256, EtM, CID 4+  PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-1 ............... PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, CID 4+4 ...... PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, CID 4+0 ...... PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, EtM .......... PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, EtM, CID 4+4 . PASS
Record crypt, little space, AES-256-CBC, 1.2, SHA-1, EtM, CID 4+0 . PASS
Record crypt, little space, AES-256-CBC, 1.2, MD5 ................. PASS
Record crypt, little space, AES-256-CBC, 1.2, MD5, CID 4+4 ........ PASS
Record crypt, little space, AES-256-CBC, 1.2, MD5, CID 4+0 ........ PASS
Record crypt, little space, AES-256-CBC, 1.2, MD5, EtM ............ PASS
Record crypt, little space, AES-256-CBC, 1.2, MD5, EtM, CID 4+4 ... PASS
Record crypt, little space, AES-256-CBC, 1.2, MD5, EtM, CID 4+0 ... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384 ............ PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, CID 4+4 ... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, CID 4+0 ... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, EtM ....... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, EtM, CID 4  PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-384, EtM, CID 4  PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256 ............ PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, CID 4+4 ... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, CID 4+0 ... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, EtM ....... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, EtM, CID 4  PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-256, EtM, CID 4  PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1 .............. PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, CID 4+4 ..... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, CID 4+0 ..... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, EtM ......... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, EtM, CID 4+4  PASS
Record crypt, little space, ARIA-128-CBC, 1.2, SHA-1, EtM, CID 4+0  PASS
Record crypt, little space, ARIA-128-CBC, 1.2, MD5 ................ PASS
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, CID 4+4 ....... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, CID 4+0 ....... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, EtM ........... PASS
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, EtM, CID 4+4 .. PASS
Record crypt, little space, ARIA-128-CBC, 1.2, MD5, EtM, CID 4+0 .. PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384 ............ PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, CID 4+4 ... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, CID 4+0 ... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, EtM ....... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, EtM, CID 4  PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-384, EtM, CID 4  PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256 ............ PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, CID 4+4 ... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, CID 4+0 ... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, EtM ....... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, EtM, CID 4  PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-256, EtM, CID 4  PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1 .............. PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, CID 4+4 ..... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, CID 4+0 ..... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, EtM ......... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, EtM, CID 4+4  PASS
Record crypt, little space, ARIA-256-CBC, 1.2, SHA-1, EtM, CID 4+0  PASS
Record crypt, little space, ARIA-256-CBC, 1.2, MD5 ................ PASS
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, CID 4+4 ....... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, CID 4+0 ....... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, EtM ........... PASS
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, EtM, CID 4+4 .. PASS
Record crypt, little space, ARIA-256-CBC, 1.2, MD5, EtM, CID 4+0 .. PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384 ........ PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, CID 4+  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, CID 4+  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, EtM ... PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, EtM, C  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-384, EtM, C  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256 ........ PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, CID 4+  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, CID 4+  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, EtM ... PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, EtM, C  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-256, EtM, C  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1 .......... PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, CID 4+4 . PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, CID 4+0 . PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, EtM ..... PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, EtM, CID  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, SHA-1, EtM, CID  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5 ............ PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, CID 4+4 ... PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, CID 4+0 ... PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, EtM ....... PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, EtM, CID 4  PASS
Record crypt, little space, CAMELLIA-128-CBC, 1.2, MD5, EtM, CID 4  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384 ........ PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, CID 4+  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, CID 4+  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, EtM ... PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, EtM, C  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-384, EtM, C  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256 ........ PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, CID 4+  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, CID 4+  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, EtM ... PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, EtM, C  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-256, EtM, C  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1 .......... PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, CID 4+4 . PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, CID 4+0 . PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, EtM ..... PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, EtM, CID  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, SHA-1, EtM, CID  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5 ............ PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, CID 4+4 ... PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, CID 4+0 ... PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, EtM ....... PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, EtM, CID 4  PASS
Record crypt, little space, CAMELLIA-256-CBC, 1.2, MD5, EtM, CID 4  PASS
Record crypt, little space, AES-128-GCM, 1.2 ...................... PASS
Record crypt, little space, AES-128-GCM, 1.3 ...................... PASS
Record crypt, little space, AES-128-GCM, 1.2, CID 4+4 ............. PASS
Record crypt, little space, AES-128-GCM, 1.2, CID 4+0 ............. PASS
Record crypt, little space, AES-192-GCM, 1.2 ...................... PASS
Record crypt, little space, AES-192-GCM, 1.3 ...................... PASS
Record crypt, little space, AES-192-GCM, 1.2, CID 4+4 ............. PASS
Record crypt, little space, AES-192-GCM, 1.2, CID 4+0 ............. PASS
Record crypt, little space, AES-256-GCM, 1.2 ...................... PASS
Record crypt, little space, AES-256-GCM, 1.3 ...................... PASS
Record crypt, little space, AES-256-GCM, 1.2, CID 4+4 ............. PASS
Record crypt, little space, AES-256-GCM, 1.2, CID 4+0 ............. PASS
Record crypt, little space, CAMELLIA-128-GCM, 1.2 ................. PASS
Record crypt, little space, CAMELLIA-128-GCM, 1.2, CID 4+4 ........ PASS
Record crypt, little space, CAMELLIA-128-GCM, 1.2, CID 4+0 ........ PASS
Record crypt, little space, CAMELLIA-192-GCM, 1.2 ................. PASS
Record crypt, little space, CAMELLIA-192-GCM, 1.2, CID 4+4 ........ PASS
Record crypt, little space, CAMELLIA-192-GCM, 1.2, CID 4+0 ........ PASS
Record crypt, little space, CAMELLIA-256-GCM, 1.2 ................. PASS
Record crypt, little space, CAMELLIA-256-GCM, 1.2, CID 4+4 ........ PASS
Record crypt, little space, CAMELLIA-256-GCM, 1.2, CID 4+0 ........ PASS
Record crypt, little space, AES-128-CCM, 1.2 ...................... PASS
Record crypt, little space, AES-128-CCM, 1.3 ...................... PASS
Record crypt, little space, AES-128-CCM, 1.2, CID 4+4 ............. PASS
Record crypt, little space, AES-128-CCM, 1.2, CID 4+0 ............. PASS
Record crypt, little space, AES-128-CCM, 1.2, short tag ........... PASS
Record crypt, little space, AES-128-CCM, 1.2, short tag, CID 4+4 .. PASS
Record crypt, little space, AES-128-CCM, 1.2, short tag, CID 4+0 .. PASS
Record crypt, little space, AES-192-CCM, 1.2 ...................... PASS
Record crypt, little space, AES-192-CCM, 1.3 ...................... PASS
Record crypt, little space, AES-192-CCM, 1.2, CID 4+4 ............. PASS
Record crypt, little space, AES-192-CCM, 1.2, CID 4+0 ............. PASS
Record crypt, little space, AES-192-CCM, 1.2, short tag ........... PASS
Record crypt, little space, AES-192-CCM, 1.2, short tag, CID 4+4 .. PASS
Record crypt, little space, AES-192-CCM, 1.2, short tag, CID 4+0 .. PASS
Record crypt, little space, AES-256-CCM, 1.2 ...................... PASS
Record crypt, little space, AES-256-CCM, 1.3 ...................... PASS
Record crypt, little space, AES-256-CCM, 1.2, CID 4+4 ............. PASS
Record crypt, little space, AES-256-CCM, 1.2, CID 4+0 ............. PASS
Record crypt, little space, AES-256-CCM, 1.2, short tag ........... PASS
Record crypt, little space, AES-256-CCM, 1.2, short tag, CID 4+4 .. PASS
Record crypt, little space, AES-256-CCM, 1.2, short tag, CID 4+0 .. PASS
Record crypt, little space, CAMELLIA-128-CCM, 1.2 ................. PASS
Record crypt, little space, CAMELLIA-128-CCM, 1.2, CID 4+4 ........ PASS
Record crypt, little space, CAMELLIA-128-CCM, 1.2, CID 4+0 ........ PASS
Record crypt, little space, CAMELLIA-128-CCM, 1.2, short tag ...... PASS
Record crypt, little space, CAMELLIA-128-CCM, 1.2, short tag, CID   PASS
Record crypt, little space, CAMELLIA-128-CCM, 1.2, short tag, CID   PASS
Record crypt, little space, CAMELLIA-192-CCM, 1.2 ................. PASS
Record crypt, little space, CAMELLIA-192-CCM, 1.2, CID 4+4 ........ PASS
Record crypt, little space, CAMELLIA-192-CCM, 1.2, CID 4+0 ........ PASS
Record crypt, little space, CAMELLIA-192-CCM, 1.2, short tag ...... PASS
Record crypt, little space, CAMELLIA-192-CCM, 1.2, short tag, CID   PASS
Record crypt, little space, CAMELLIA-192-CCM, 1.2, short tag, CID   PASS
Record crypt, little space, CAMELLIA-256-CCM, 1.2 ................. PASS
Record crypt, little space, CAMELLIA-256-CCM, 1.2, CID 4+4 ........ PASS
Record crypt, little space, CAMELLIA-256-CCM, 1.2, CID 4+0 ........ PASS
Record crypt, little space, CAMELLIA-256-CCM, 1.2, short tag ...... PASS
Record crypt, little space, CAMELLIA-256-CCM, 1.2, short tag, CID   PASS
Record crypt, little space, CAMELLIA-256-CCM, 1.2, short tag, CID   PASS
Record crypt, little space, NULL cipher, 1.2, SHA-384 ............. PASS
Record crypt, little space, NULL cipher, 1.2, SHA-384, EtM ........ PASS
Record crypt, little space, NULL cipher, 1.2, SHA-256 ............. PASS
Record crypt, little space, NULL cipher, 1.2, SHA-256, EtM ........ PASS
Record crypt, little space, NULL cipher, 1.2, SHA-1 ............... PASS
Record crypt, little space, NULL cipher, 1.2, SHA-1, EtM .......... PASS
Record crypt, little space, NULL cipher, 1.2, MD5 ................. PASS
Record crypt, little space, NULL cipher, 1.2, MD5, EtM ............ PASS
SSL TLS 1.3 Key schedule: Secret evolution #1 ..................... PASS
SSL TLS 1.3 Key schedule: Secret evolution #2 ..................... PASS
SSL TLS 1.3 Key schedule: Secret evolution #3 ..................... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #1 .................... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #2 .................... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #3 .................... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #4 .................... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #5 (RFC 8448) ......... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #6 (RFC 8448) ......... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #7 (RFC 8448) ......... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #8 (RFC 8448) ......... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #9 (RFC 8448) ......... PASS
SSL TLS 1.3 Key schedule: HKDF Expand Label #10 (RFC 8448) ........ PASS
SSL TLS 1.3 Key schedule: Traffic key generation #1 ............... PASS
SSL TLS 1.3 Key schedule: Traffic key generation #2 (RFC 8448) .... PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "derived", "") ........ PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "s ap traffic", hash)   PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "c e traffic", hash) .. PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "e exp master", hash) . PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "c hs traffic", hash) . PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "s hs traffic", hash) . PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "c ap traffic", hash) . PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "s ap traffic", hash)   PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "exp master", hash) ... PASS
SSL TLS 1.3 Key schedule: Derive-Secret( ., "res master", hash) ... PASS
SSL TLS 1.3 Key schedule: Early secrets derivation helper ......... PASS
SSL TLS 1.3 Key schedule: Handshake secrets derivation helper ..... PASS
SSL TLS 1.3 Record Encryption, tls13.ulfheim.net Example #1 ....... ----
SSL TLS 1.3 Record Encryption, tls13.ulfheim.net Example #2 ....... ----
SSL TLS 1.3 Record Encryption RFC 8448 Example #1 ................. ----
SSL TLS 1.3 Record Encryption RFC 8448 Example #2 ................. ----
SSL TLS 1.3 Key schedule: Application secrets derivation helper ... PASS
SSL TLS 1.3 Key schedule: Resumption secrets derivation helper .... PASS
SSL TLS 1.3 Key schedule: PSK binder .............................. PASS
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_NONE .............................. PASS
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_SHA384 ............................ PASS
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_SHA256 ............................ PASS
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_SHA384 SHA-384 not enabled ........ ----
SSL TLS_PRF MBEDTLS_SSL_TLS_PRF_SHA256 SHA-256 not enabled ........ ----
Session serialization, save-load: no ticket, no cert .............. PASS
Session serialization, save-load: small ticket, no cert ........... PASS
Session serialization, save-load: large ticket, no cert ........... PASS
Session serialization, save-load: no ticket, cert ................. PASS
Session serialization, save-load: small ticket, cert .............. PASS
Session serialization, save-load: large ticket, cert .............. PASS
TLS 1.3: CLI: Session serialization, save-load: no ticket ......... PASS
TLS 1.3: CLI: Session serialization, save-load: small ticket ...... PASS
TLS 1.3: CLI: Session serialization, save-load: large ticket ...... PASS
TLS 1.3: SRV: Session serialization, save-load: large ticket ...... PASS
Session serialization, load-save: no ticket, no cert .............. PASS
Session serialization, load-save: small ticket, no cert ........... PASS
Session serialization, load-save: large ticket, no cert ........... PASS
Session serialization, load-save: no ticket, cert ................. PASS
Session serialization, load-save: small ticket, cert .............. PASS
Session serialization, load-save: large ticket, cert .............. PASS
TLS 1.3: CLI: Session serialization, load-save: no ticket ......... PASS
TLS 1.3: CLI: Session serialization, load-save: small ticket ...... PASS
TLS 1.3: CLI: Session serialization, load-save: large ticket ...... PASS
TLS 1.3: SRV: Session serialization, load-save .................... PASS
Session serialization, save buffer size: no ticket, no cert ....... PASS
Session serialization, save buffer size: small ticket, no cert .... PASS
Session serialization, save buffer size: large ticket, no cert .... PASS
Session serialization, save buffer size: no ticket, cert .......... PASS
Session serialization, save buffer size: small ticket, cert ....... PASS
Session serialization, save buffer size: large ticket, cert ....... PASS
TLS 1.3: CLI: Session serialization, save buffer size: no ticket .. PASS
TLS 1.3: CLI: Session serialization, save buffer size: small ticke  PASS
TLS 1.3: CLI: Session serialization, save buffer size: large ticke  PASS
TLS 1.3: SRV: Session serialization, save buffer size ............. PASS
Session serialization, load buffer size: no ticket, no cert ....... PASS
Session serialization, load buffer size: small ticket, no cert .... PASS
Session serialization, load buffer size: large ticket, no cert .... PASS
Session serialization, load buffer size: no ticket, cert .......... PASS
Session serialization, load buffer size: small ticket, cert ....... PASS
Session serialization, load buffer size: large ticket, cert ....... PASS
TLS 1.3: CLI: Session serialization, load buffer size: no ticket .. PASS
TLS 1.3: CLI: Session serialization, load buffer size: small ticke  PASS
TLS 1.3: CLI: Session serialization, load buffer size: large ticke  PASS
TLS 1.3: SRV: Session serialization, load buffer size ............. PASS
Test configuration of groups for DHE through mbedtls_ssl_conf_curv  PASS
Test configuration of groups for DHE through mbedtls_ssl_conf_grou  ----
Version config: valid client TLS 1.2 only ......................... PASS
Version config: valid client DTLS 1.2 only ........................ PASS
Version config: valid server TLS 1.2 only ......................... PASS
Version config: valid server DTLS 1.2 only ........................ PASS
Version config: invalid client TLS 1.2 only ....................... ----
Version config: invalid client DTLS 1.2 only ...................... ----
Version config: invalid server TLS 1.2 only ....................... ----
Version config: invalid server DTLS 1.2 only ...................... ----
Version config: valid client TLS 1.3 only ......................... PASS
Version config: unsupported client DTLS 1.3 only .................. PASS
Version config: valid server TLS 1.3 only ......................... PASS
Version config: unsupported server DTLS 1.3 only .................. PASS
Version config: invalid client TLS 1.3 only ....................... ----
Version config: invalid client DTLS 1.3 only ...................... ----
Version config: invalid server TLS 1.3 only ....................... ----
Version config: invalid server DTLS 1.3 only ...................... ----
Version config: valid client hybrid TLS 1.2/3 ..................... PASS
Version config: unsupported client hybrid DTLS 1.2/3 .............. PASS
Version config: valid server hybrid TLS 1.2/3 ..................... PASS
Version config: unsupported server hybrid DTLS 1.2/3 .............. PASS
Version config: valid client hybrid TLS 1.2/3, no TLS 1.2 ......... ----
Version config: unsupported client hybrid DTLS 1.2/3, no TLS 1.2 .. ----
Version config: valid server hybrid TLS 1.2/3, no TLS 1.2 ......... ----
Version config: unsupported server hybrid DTLS 1.2/3, no TLS 1.2 .. ----
Version config: valid client hybrid TLS 1.2/3, no TLS 1.3 ......... ----
Version config: unsupported client hybrid DTLS 1.2/3, no TLS 1.3 .. ----
Version config: valid server hybrid TLS 1.2/3, no TLS 1.3 ......... ----
Version config: unsupported server hybrid DTLS 1.2/3, no TLS 1.3 .. ----
Version config: invalid minimum version ........................... PASS
Version config: invalid maximum version ........................... PASS
Test accessor into timing_delay_context ........................... PASS
Sanity test cid functions ......................................... PASS
Raw key agreement: nominal ........................................ ----
Raw key agreement: bad server key ................................. ----
Force a bad session id length ..................................... ----
Cookie parsing: nominal run ....................................... PASS
Cookie parsing: cookie_len overflow ............................... PASS
Cookie parsing: non-zero fragment offset .......................... PASS
Cookie parsing: sid_len overflow .................................. PASS
Cookie parsing: record too short .................................. PASS
Cookie parsing: one byte overread ................................. PASS
TLS 1.3 srv Certificate msg - wrong vector lengths ................ ----
EC-JPAKE set password ............................................. ----
EC-JPAKE set opaque password ...................................... ----
Test Elliptic curves' info parsing ................................ PASS

----------------------------------------------------------------------------

PASSED (816 / 816 tests (126 skipped))

Script done on Thu Jan 11 09:47:43 2024
tom-cosgrove-arm commented 9 months ago

Specifically:

SSL TLS 1.3 Key schedule: Secret evolution #1 ..................... PASS
SSL TLS 1.3 Key schedule: Secret evolution #2 ..................... PASS
SSL TLS 1.3 Key schedule: Secret evolution #3 ..................... PASS
tom-cosgrove-arm commented 9 months ago

Closing as no longer able to reproduce