thodg/libgit2/tests/online/badssl.c

• Show log

  Commit

• Hash : c1ec732f
  Author :
  Date : 2016-03-14T12:02:00
  

  Setup better defaults for OpenSSL ciphers This ensures that when using OpenSSL a safe default set of ciphers is selected. This is done so that the client communicates securely and we don't accidentally enable unsafe ciphers like RC4, or even worse some old export ciphers. Implements the first part of https://github.com/libgit2/libgit2/issues/3682

Download

• tests/online/badssl.c

• #include "clar_libgit2.h"
  
  #include "git2/clone.h"
  
  static git_repository *g_repo;
  
  #if defined(GIT_OPENSSL) || defined(GIT_WINHTTP) || defined(GIT_SECURE_TRANSPORT)
  static bool g_has_ssl = true;
  #else
  static bool g_has_ssl = false;
  #endif
  
  void test_online_badssl__expired(void)
  {
  	if (!g_has_ssl)
  		cl_skip();
  
  	cl_git_fail_with(GIT_ECERTIFICATE,
  			 git_clone(&g_repo, "https://expired.badssl.com/fake.git", "./fake", NULL));
  }
  
  void test_online_badssl__wrong_host(void)
  {
  	if (!g_has_ssl)
  		cl_skip();
  
  	cl_git_fail_with(GIT_ECERTIFICATE,
  			 git_clone(&g_repo, "https://wrong.host.badssl.com/fake.git", "./fake", NULL));
  }
  
  void test_online_badssl__self_signed(void)
  {
  	if (!g_has_ssl)
  		cl_skip();
  
  	cl_git_fail_with(GIT_ECERTIFICATE,
  			 git_clone(&g_repo, "https://self-signed.badssl.com/fake.git", "./fake", NULL));
  }
  
  void test_online_badssl__old_cipher(void)
  {
  	if (!g_has_ssl)
  		cl_skip();
  
  	cl_git_fail(git_clone(&g_repo, "https://rc4.badssl.com/fake.git", "./fake", NULL));
  }
  

Download