Skip to content

Commit 4de8e09

Browse files
kostiskostis
committed
WIP: Add a test for OpenSSL 3.5.0 clients to CI
1 parent acdb671 commit 4de8e09

File tree

3 files changed

+97
-0
lines changed
  • .github/workflows
  • experiments/models/regression/clients/rounds/openssl-3.5.0_client_ecdhe_cert_reneg

3 files changed

+97
-0
lines changed

‎.github/workflows/ci.yml

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -288,6 +288,32 @@ jobs:
288288
java -jar target/dtls-fuzzer.jar args/openssl/learn_openssl_server_all_cert_none -Dopenssl.version=3.5.0 -roundLimit 9
289289
experiments/scripts/diff_hyps.sh experiments/models/regression/servers/rounds/openssl-3.5.0_server_all_cert_none output/openssl-3.5.0_server_all_cert_none 9
290290
291+
OpenSSL-3-5-0_Client_ecdhe_cert_reneg:
292+
if: ${{ !contains(github.event.head_commit.message, 'ci skip') }}
293+
runs-on: ubuntu-latest
294+
strategy:
295+
fail-fast: true
296+
steps:
297+
- name: Checkout code
298+
uses: actions/checkout@v4
299+
300+
- name: Set up JDK 17
301+
uses: actions/setup-java@v4
302+
with:
303+
java-version: '17'
304+
distribution: 'temurin'
305+
306+
- name: Install DTLS-Fuzzer
307+
run: ./install.sh
308+
309+
- name: Setup SUT
310+
run: ./setup_sut.sh openssl-3.5.0
311+
312+
- name: Test openssl-3.5.0 Client (ecdhe_cert_reneg)
313+
run: |
314+
java -jar target/dtls-fuzzer.jar args/openssl/learn_openssl_client_ecdhe_cert_reneg -Dopenssl.version=3.5.0 -roundLimit 2
315+
experiments/scripts/diff_hyps.sh experiments/models/regression/clients/rounds/openssl-3.5.0_client_ecdhe_cert_reneg output/openssl-3.5.0_client_ecdhe_cert_reneg 2
316+
291317
PionDTLS-2-0-9_Server_psk:
292318
if: ${{ !contains(github.event.head_commit.message, 'ci skip') }}
293319
runs-on: ubuntu-24.04 # due to needing an old version of golang

‎experiments/models/regression/clients/rounds/openssl-3.5.0_client_ecdhe_cert_reneg/hyp1.dot

Lines changed: 26 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,26 @@
1+
digraph g {
2+
3+
s0 [shape="circle" label="s0"];
4+
s0 -> s0 [label="HELLO_VERIFY_REQUEST / CLIENT_HELLO"];
5+
s0 -> s0 [label="ECDH_SERVER_HELLO / Alert(FATAL,HANDSHAKE_FAILURE)"];
6+
s0 -> s0 [label="ECDH_SERVER_KEY_EXCHANGE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
7+
s0 -> s0 [label="RSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
8+
s0 -> s0 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
9+
s0 -> s0 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
10+
s0 -> s0 [label="DSS_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
11+
s0 -> s0 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
12+
s0 -> s0 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
13+
s0 -> s0 [label="HELLO_REQUEST / TIMEOUT"];
14+
s0 -> s0 [label="SERVER_HELLO_DONE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
15+
s0 -> s0 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
16+
s0 -> s0 [label="FINISHED / Alert(FATAL,UNEXPECTED_MESSAGE)"];
17+
s0 -> s0 [label="APPLICATION / Alert(FATAL,UNEXPECTED_MESSAGE)"];
18+
s0 -> s0 [label="CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
19+
s0 -> s0 [label="EMPTY_CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
20+
s0 -> s0 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
21+
s0 -> s0 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];
22+
23+
__start0 [label="" shape="none" width="0" height="0"];
24+
__start0 -> s0;
25+
26+
}

‎experiments/models/regression/clients/rounds/openssl-3.5.0_client_ecdhe_cert_reneg/hyp2.dot

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
digraph g {
2+
3+
s0 [shape="circle" label="s0"];
4+
s1 [shape="circle" label="s1"];
5+
s0 -> s0 [label="HELLO_VERIFY_REQUEST / CLIENT_HELLO"];
6+
s0 -> s1 [label="ECDH_SERVER_HELLO / Alert(FATAL,HANDSHAKE_FAILURE)"];
7+
s0 -> s1 [label="ECDH_SERVER_KEY_EXCHANGE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
8+
s0 -> s1 [label="RSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
9+
s0 -> s1 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
10+
s0 -> s1 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
11+
s0 -> s1 [label="DSS_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
12+
s0 -> s1 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
13+
s0 -> s1 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / Alert(FATAL,UNEXPECTED_MESSAGE)"];
14+
s0 -> s1 [label="HELLO_REQUEST / TIMEOUT"];
15+
s0 -> s1 [label="SERVER_HELLO_DONE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
16+
s0 -> s1 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
17+
s0 -> s1 [label="FINISHED / Alert(FATAL,UNEXPECTED_MESSAGE)"];
18+
s0 -> s1 [label="APPLICATION / Alert(FATAL,UNEXPECTED_MESSAGE)"];
19+
s0 -> s1 [label="CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
20+
s0 -> s1 [label="EMPTY_CERTIFICATE / Alert(FATAL,UNEXPECTED_MESSAGE)"];
21+
s0 -> s1 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
22+
s0 -> s1 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];
23+
s1 -> s1 [label="HELLO_VERIFY_REQUEST / TIMEOUT"];
24+
s1 -> s1 [label="ECDH_SERVER_HELLO / TIMEOUT"];
25+
s1 -> s1 [label="ECDH_SERVER_KEY_EXCHANGE / TIMEOUT"];
26+
s1 -> s1 [label="RSA_SIGN_CERTIFICATE_REQUEST / TIMEOUT"];
27+
s1 -> s1 [label="RSA_FIXED_ECDH_CERTIFICATE_REQUEST / TIMEOUT"];
28+
s1 -> s1 [label="RSA_FIXED_DH_CERTIFICATE_REQUEST / TIMEOUT"];
29+
s1 -> s1 [label="DSS_SIGN_CERTIFICATE_REQUEST / TIMEOUT"];
30+
s1 -> s1 [label="DSS_FIXED_DH_CERTIFICATE_REQUEST / TIMEOUT"];
31+
s1 -> s1 [label="ECDSA_SIGN_CERTIFICATE_REQUEST / TIMEOUT"];
32+
s1 -> s1 [label="HELLO_REQUEST / TIMEOUT"];
33+
s1 -> s1 [label="SERVER_HELLO_DONE / TIMEOUT"];
34+
s1 -> s1 [label="CHANGE_CIPHER_SPEC / TIMEOUT"];
35+
s1 -> s1 [label="FINISHED / TIMEOUT"];
36+
s1 -> s1 [label="APPLICATION / TIMEOUT"];
37+
s1 -> s1 [label="CERTIFICATE / TIMEOUT"];
38+
s1 -> s1 [label="EMPTY_CERTIFICATE / TIMEOUT"];
39+
s1 -> s1 [label="Alert(WARNING,CLOSE_NOTIFY) / TIMEOUT"];
40+
s1 -> s1 [label="Alert(FATAL,UNEXPECTED_MESSAGE) / TIMEOUT"];
41+
42+
__start0 [label="" shape="none" width="0" height="0"];
43+
__start0 -> s0;
44+
45+
}

0 commit comments

Comments
 (0)