Get rid of static Atffiles and let bsd.test.mk generate them on the fly.

Do not use awk to generate the test program. Instead, just expand the
code.

While doing this, split the big monolithic test program into more granular
but cohesive test programs.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

openssl: Stop dragging libpthread into every libcrypto user.

With the new _NETBSD_PTHREAD_CREATE_WEAK, libcrypto can have a call
to pthread_create without linking against libpthread, so it is not
necessary to link all libcrypto users against libpthread too.

Applications that link against libcrypto but not libpthread can't use
threaded OpenSSL functionality, of course -- OSSL_set_max_threads
will always fail in such applications.

This reverts all the makefile churn that I found for unnecessary
libpthread linkage since the openssl 3.5 import.

PR lib/59685: libcrypto should not depend on libpthread

branches: 1.17.2;
crypto needs threads

branches: 1.16.2;
libcrypto: Add some trivial tests for truncated SHA-512 variants.

These should use more of the test vectors from

https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Secure-Hashing#Testing

but this will do for now to detect the buffer overrun rake we left
lying around for ourselves.

PR lib/58039

make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.14.2; 1.14.10;
Merge openssl-1.1.1

branches: 1.13.2; 1.13.4;
PR lib/53044: remove tests not provided by OpenSSL 1.1.x

adjust tests for 1.1

Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Remove MKCRYPTO_RC5. Unconditionally include RC5 in libcrypto.so.

This option existed only because RC5 is covered by patents that, twenty
years ago, we had reason to suspect the patent holder, RSA, Inc., might
litigate. The two US patents in question are 5,724,428 and 5,835,600.

According to the USPTO Patent Term Calculator web site at
<https://www.uspto.gov/patent/laws-and-regulations/patent-term-calculator#heading-5>
(retrieved 2017-05-21), patents filed after 1995-06-07 expire twenty
years after the filing date.

number filing date
5,724,428 1995-11-01
5,835,600 1997-04-21

Thus, these patents appear to be expired.

As proposed on tech-crypto and tech-security:

https://mail-index.netbsd.org/tech-crypto/2017/05/05/msg000718.html
https://mail-index.netbsd.org/tech-security/2017/05/05/msg000927.html

MKCRYPTO_{IDEA,MDC2} is no more

branches: 1.8.2; 1.8.4; 1.8.6;
fix a build issue with MKCRYPTO=no.

add tests for evb and srp

branches: 1.6.4;
Get rid of static Atffiles and let bsd.test.mk generate them on the fly.

ldap is configured to depend upon MKCRYPTO no, so force MKLAP=no if
MKCRYPTO=no.
don't build pkg_install, libcrypto tests or rump_smbfs if MKCRYPTO=no.
mark librumpcrypto, rump_smb, pkg_*

fix set lists as appropriate.

Do not use awk to generate the test program. Instead, just expand the
code.

While doing this, split the big monolithic test program into more granular
but cohesive test programs.

branches: 1.3.2;
Convert the threads libcrypto test to ATF and enable it. Drop the old one
in regress.

Remove threads from the list of subdirs. Commited by mistake.

Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

openssl: Stop dragging libpthread into every libcrypto user.

With the new _NETBSD_PTHREAD_CREATE_WEAK, libcrypto can have a call
to pthread_create without linking against libpthread, so it is not
necessary to link all libcrypto users against libpthread too.

Applications that link against libcrypto but not libpthread can't use
threaded OpenSSL functionality, of course -- OSSL_set_max_threads
will always fail in such applications.

This reverts all the makefile churn that I found for unnecessary
libpthread linkage since the openssl 3.5 import.

PR lib/59685: libcrypto should not depend on libpthread

branches: 1.13.2;
don't include 2 copies of libcrypto

crypto needs threads

branches: 1.11.2;
make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.10.10;
Force libcrypto to be loaded after libcryptotest for the benefit of sun2

Merge openssl-1.1.1

branches: 1.8.2; 1.8.4;
include the right test directory for the right openssl version

adjust tests for 1.1

Turn warns on for all tests and fix all the bugs.

branches: 1.5.2;
Default to -Wno-sign-compare -Wno-pointer-sign for clang.
Push -Wno-array-bounds down to the cases that depend on it.
Selectively disable warnings for 3rd party software or non-trivial
issues to be reviewed later to get clang -Werror to build most of the
tree.

add Makefile.inc everywhere so that we can set WARNS=4 by default. Amazing
how many bugs this found :-)

Get rid of static Atffiles and let bsd.test.mk generate them on the fly.

fix for new openssl

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

Do not use awk to generate the test program. Instead, just expand the
code.

While doing this, split the big monolithic test program into more granular
but cohesive test programs.

Timeout for evp test case is still not enough for qemu/sparc

The default timeout of 300 seconds is not enough for the t_ciphers:evp
test case on qemu/sparc since the import of openssl 1.1.0i on 2018-08-18.

Merge openssl-1.1.1

branches: 1.5.8; 1.5.10;
Remove MKCRYPTO_RC5. Unconditionally include RC5 in libcrypto.so.

This option existed only because RC5 is covered by patents that, twenty
years ago, we had reason to suspect the patent holder, RSA, Inc., might
litigate. The two US patents in question are 5,724,428 and 5,835,600.

According to the USPTO Patent Term Calculator web site at
<https://www.uspto.gov/patent/laws-and-regulations/patent-term-calculator#heading-5>
(retrieved 2017-05-21), patents filed after 1995-06-07 expire twenty
years after the filing date.

number filing date
5,724,428 1995-11-01
5,835,600 1997-04-21

Thus, these patents appear to be expired.

As proposed on tech-crypto and tech-security:

https://mail-index.netbsd.org/tech-crypto/2017/05/05/msg000718.html
https://mail-index.netbsd.org/tech-security/2017/05/05/msg000927.html

more MKCRYPTO_IDEA and MKCRYPTO_MDC2 removal (resp, adjustment to IDEA and
MBC2 now always being included)
MKCRYPTO_RC5 now builds shared libs, add the missing files to sets

branches: 1.3.2; 1.3.4; 1.3.6;
add tests for evb and srp

branches: 1.2.4;
increase timeouts of long-running tests

Do not use awk to generate the test program. Instead, just expand the
code.

While doing this, split the big monolithic test program into more granular
but cohesive test programs.

make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.4.10;
Remove tests that don't exist anymore in OpenSSL-1.1.1 (We should add the
one ones it adds though :-)

branches: 1.3.2; 1.3.4;
PR lib/53044: remove tests not provided by OpenSSL 1.1.x

more MKCRYPTO_IDEA and MKCRYPTO_MDC2 removal (resp, adjustment to IDEA and
MBC2 now always being included)
MKCRYPTO_RC5 now builds shared libs, add the missing files to sets

branches: 1.1.6; 1.1.8; 1.1.10;
Do not use awk to generate the test program. Instead, just expand the
code.

While doing this, split the big monolithic test program into more granular
but cohesive test programs.

Do not use awk to generate the test program. Instead, just expand the
code.

While doing this, split the big monolithic test program into more granular
but cohesive test programs.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

Do not use awk to generate the test program. Instead, just expand the
code.

While doing this, split the big monolithic test program into more granular
but cohesive test programs.

atf-0.9 introduces an use.fs test-case property to allow tests to write to
their work directory. The purpose is to be able to know which tests intend
to touch the file system and to allow a minor optimization in atf-run.

Define use.fs=true for all those tests requiring it. (This highlights that
some tests currently require modifying the file system but conceptually
they shouldn't be... which leaves room for further improvements/cleanups
later :-)

branches: 1.2.2;
Convert the threads libcrypto test to ATF and enable it. Drop the old one
in regress.

Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

tests: replace deprecated '-s eq:...' with '-s exit:...'

make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.8.2;
PR 56875: Bump timeout for the bignumber test to 2h, as suggested
by Tom Lane to give slower architectures a chance to complete it.

Double the timeout for the bn test case; 360 seconds is no longer
sufficient under qemu since the latest openssl update.

Remove tests that don't exist anymore in OpenSSL-1.1.1 (We should add the
one ones it adds though :-)

branches: 1.5.2; 1.5.4;
PR lib/53044: remove tests not provided by OpenSSL 1.1.x

Bump timeouts so they work on a 32bit sparc (poor Krups)

branches: 1.3.28;
increase timeouts of long-running tests

Adjusts tests after import of atf-0.12:

- The use.fs property is gone.
- Mark the tests/fs/t_create:attrs test as broken when using the default
unprivileged-user:_atf setting. This probably deserves a fix somehow
but I'm not sure at this point.

Do not use awk to generate the test program. Instead, just expand the
code.

While doing this, split the big monolithic test program into more granular
but cohesive test programs.

Increase timeout for the dsa test slightly

Set a longish timeout for the dsa test - my landisk machine needs a bit
more than 926s to pass this test.

branches: 1.7.2;
make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.6.10;
The runtime of the ecdsa test case increased approximately sixfold
with the openssl update on 2019-06-09, and it is now timing out on
sparc. Increase the timeout by roughly the same factor.

A timeout of 480 seconds is not enough for the t_pubkey:ec test case
on qemu/sparc.

branches: 1.4.12; 1.4.14;
Bump timeouts so they work on a 32bit sparc (poor Krups)

branches: 1.3.24;
add tests for evb and srp

branches: 1.2.4;
increase timeouts of long-running tests

Do not use awk to generate the test program. Instead, just expand the
code.

While doing this, split the big monolithic test program into more granular
but cohesive test programs.

branches: 1.2.2; 1.2.4;
libcrypto: Fix buffer overrun in truncated SHA-512 functions.

Further fallout from the libc/openssl sha2 symbol collision.

PR lib/58039

libcrypto: Add some trivial tests for truncated SHA-512 variants.

These should use more of the test vectors from

https://csrc.nist.gov/Projects/Cryptographic-Algorithm-Validation-Program/Secure-Hashing#Testing

but this will do for now to detect the buffer overrun rake we left
lying around for ourselves.

PR lib/58039

openssl: libcrypto bf test needs -Wno-missing-field-initializers

fix 1.0 build; thanks ODE make.

adjust tests for 1.1

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

openssl: More tests need -Wno-missing-field-initializers.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

Don't force debug build.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

tests/bignum/div: modernize BN_rand

https://docs.openssl.org/3.5/man3/BN_rand/#history

branches: 1.1.16;
adjust tests for 1.1

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.1.2; 1.1.58;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.1.2;
make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.1.2; 1.1.58;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

s/rouine/routine/

adjust tests for 1.1

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

openssl: Stop dragging libpthread into every libcrypto user.

With the new _NETBSD_PTHREAD_CREATE_WEAK, libcrypto can have a call
to pthread_create without linking against libpthread, so it is not
necessary to link all libcrypto users against libpthread too.

Applications that link against libcrypto but not libpthread can't use
threaded OpenSSL functionality, of course -- OSSL_set_max_threads
will always fail in such applications.

This reverts all the makefile churn that I found for unnecessary
libpthread linkage since the openssl 3.5 import.

PR lib/59685: libcrypto should not depend on libpthread

branches: 1.3.2;
dh test now needs pthread

branches: 1.2.2;
make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.1.2; 1.1.58;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

Remove PROGDPLIBSSTATIC from ec and threads; dh still needs it because it
references internal symbols in libcrypto like ossl_dh_compute_key which
have been made static by the linker script (they are still visible in the
archive version).

aarch64 needs static

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

adjust tests for 1.1

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

openssl: More tests need -Wno-missing-field-initializers.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

openssl: More tests need -Wno-missing-field-initializers.

make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.2.10;
Merge openssl-1.1.1

branches: 1.1.40; 1.1.42;
add tests for evb and srp

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

Merge openssl-1.1.1

branches: 1.4.30; 1.4.32;
MKCRYPTO_{IDEA,MDC2} is no more

branches: 1.3.2; 1.3.4; 1.3.6;
give the idea, rc5 and mdc2 checks a chance of working if they are defined
to be compiled

Fix patented algo compilation

branches: 1.1.2; 1.1.6;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

Merge openssl-1.1.1

branches: 1.4.30; 1.4.32;
MKCRYPTO_{IDEA,MDC2} is no more

branches: 1.3.2; 1.3.4; 1.3.6;
give the idea, rc5 and mdc2 checks a chance of working if they are defined
to be compiled

Fix patented algo compilation

branches: 1.1.2; 1.1.6;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

periphereal updates and generated files for the new openssl.
Expect at least one more commit until the tree builds again.

branches: 1.1.2; 1.1.30;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

Merge openssl-1.1.1

branches: 1.4.8; 1.4.10;
Remove MKCRYPTO_RC5. Unconditionally include RC5 in libcrypto.so.

This option existed only because RC5 is covered by patents that, twenty
years ago, we had reason to suspect the patent holder, RSA, Inc., might
litigate. The two US patents in question are 5,724,428 and 5,835,600.

According to the USPTO Patent Term Calculator web site at
<https://www.uspto.gov/patent/laws-and-regulations/patent-term-calculator#heading-5>
(retrieved 2017-05-21), patents filed after 1995-06-07 expire twenty
years after the filing date.

number filing date
5,724,428 1995-11-01
5,835,600 1997-04-21

Thus, these patents appear to be expired.

As proposed on tech-crypto and tech-security:

https://mail-index.netbsd.org/tech-crypto/2017/05/05/msg000718.html
https://mail-index.netbsd.org/tech-security/2017/05/05/msg000927.html

branches: 1.3.6;
give the idea, rc5 and mdc2 checks a chance of working if they are defined
to be compiled

Fix patented algo compilation

branches: 1.1.2; 1.1.6;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.

openssl: More tests need -Wno-missing-field-initializers.

add tests for evb and srp

Deal with this test needing to use libcrypto internal symbols

branches: 1.8.2;
Remove PROGDPLIBSSTATIC from ec and threads; dh still needs it because it
references internal symbols in libcrypto like ossl_dh_compute_key which
have been made static by the linker script (they are still visible in the
archive version).

openssl: More tests need -Wno-missing-field-initializers.

make tests support both 1.x and 3.x.
Lot of work needed to add all the 3.x tests, but that can wait until all
is switched

branches: 1.5.14;
put .PATH after the variable is defined.

fix 1.0 build; thanks ODE make.

adjust tests for 1.1

branches: 1.2.2;
Use the correct dir to find source files. NetBSD finally builds again.
Please have the decency to at least do a test build when you import such a
huge amount of code.

Convert the threads libcrypto test to ATF and enable it. Drop the old one
in regress.

adjust tests for 1.1

branches: 1.1.2;
Convert libcrypto tests to ATF. Original work done by Lukasz Strzygowski
in the GSoC 2008 atfify project. Reorganization of files and build system
reworked by me.