openvpn3

mirror of https://github.com/OpenVPN/openvpn3.git synced 2024-09-20 12:12:15 +02:00

History

Arne Schwabe 9fe7a29148 Implement allowing only data channel ciphers that are actually available by the library Signed-off-by: Arne Schwabe <arne@openvpn.net>		2021-11-12 20:58:37 +01:00
..
.gitignore	Updated Windows client for VS 2015.	2015-06-09 11:21:41 -06:00
ca.crt	mbedTLS: Port from polarssl-1.3 to mbedtls-2.3 (functional)	2017-03-18 12:24:54 -06:00
client.crt	mbedTLS: Port from polarssl-1.3 to mbedtls-2.3 (functional)	2017-03-18 12:24:54 -06:00
client.key	mbedTLS: Port from polarssl-1.3 to mbedtls-2.3 (functional)	2017-03-18 12:24:54 -06:00
CMakeLists.txt	docs: Update README	2021-04-22 12:54:34 +02:00
dh.pem	mbedTLS: Port from polarssl-1.3 to mbedtls-2.3 (functional)	2017-03-18 12:24:54 -06:00
go	Added i/o abstraction layer.	2017-03-30 15:48:14 -06:00
proto.cpp	Implement allowing only data channel ciphers that are actually available by the library	2021-11-12 20:58:37 +01:00
protowin.h	Ported minicrypto lib to OS X for PolarSSL optimization.	2014-03-04 17:42:00 -07:00
README.txt	docs: Update README	2021-04-22 12:54:34 +02:00
server.crt	mbedTLS: Port from polarssl-1.3 to mbedtls-2.3 (functional)	2017-03-18 12:24:54 -06:00
server.key	mbedTLS: Port from polarssl-1.3 to mbedtls-2.3 (functional)	2017-03-18 12:24:54 -06:00
tls-auth.key	Updated proto unit test with fresh certs/keys.	2013-01-30 21:08:55 +00:00
tls-crypt-v2-client.key	tls-crypt-v2: implement abstract metadata parser	2018-12-06 09:19:22 +10:00
tls-crypt-v2-server.key	tls-crypt-v2: implement abstract metadata parser	2018-12-06 09:19:22 +10:00

README.txt

The proto test utility can be tweaked with build time options changing
the behaviour.  These are set via CMake variables.

* TEST_PROTO_NTHREADS - Running test threads (default 1)
  The number of test client/server pairs running in parallel.

  $ cd $O3/core/build && cmake -DTEST_PROTO_NTHREADS=4 ..
  $ cmake --build . -- test/ssl/proto

* TEST_PROTO_RENEG - Rengotiation (default 900)
  To simulate less data-channel activity and more SSL renegotiations

  $ cd $O3/core/build && cmake -DTEST_PROTO_RENEG=90 ..
  $ cmake --build . -- test/ssl/proto

* TEST_PROTO_ITER - Iterations (default 1000000)
  For verbose output, lower the number of xmit/recv iterations by defining
  TEST_PROTO_ITER to be 10000 or less, e.g.

  $ cd $O3/core/build && cmake -DTEST_PROTO_ITER=1000 ..
  $ cmake --build . -- test/ssl/proto

* TEST_PROTO_SITER - High-level Session Iterations (default 1)

  $ cd $O3/core/build && cmake -DTEST_PROTO_SITER=2 ..
  $ cmake --build . -- test/ssl/proto

* TEST_PROTO_VERBOSE - Verbose log output (off)
  This will dump details of the protocol traffic as the test runs.  This
  is a boolean flag.

  $ cd $O3/core/build && cmake -DTEST_PROTO_VERBOSE=ON ..
  $ cmake --build . -- test/ssl/proto


* Mbed TLS specific - run the crypto library self-test

  $ cd $O3/core/build/test/ssl && ./proto test

Caveats:

 When using MbedTLS as both client and server, make sure to build
 MbedTLS on Mac OS X with OSX_SERVER=1.

Typical output:

  $ cd $O3/core/test/ssl
  $ time ./proto
  *** app bytes=73301015 net_bytes=146383320 data_bytes=36327640 prog=0000218807/0000218806 D=12600/600/12600/800 N=1982/1982 SH=17800/17800 HE=3/6
  real	0m11.003s
  user	0m10.981s
  sys	0m0.004s