LibreSSL languishes on Linux

Posted Jan 6, 2021 23:20 UTC (Wed) by marcH (subscriber, #57642)
In reply to: LibreSSL languishes on Linux by hkario
Parent article: LibreSSL languishes on Linux

> from the project's repo: "SSL and TLS protocol test suite and fuzzer". it works both as a test suite and a fuzzer,

My assumption that it was just a fuzzer was based on the README there; you may want to rephrase it a bit. I missed the title in the top-right corner and scroll straight down to the README which starts like this:

> Fuzzer and test suite for TLS (SSLv2, SSLv3, v1.0, v1.1, v1.2, v1.3) implementations.

... which I misread as "Fuzzer and [fuzzing] test suite for...".

The name "tlsfuzzer" does obviously not help either.

> they don't

Thanks for all the info!

to post comments

LibreSSL languishes on Linux

Posted Jan 7, 2021 15:12 UTC (Thu) by hkario (subscriber, #94864) [Link]

> you may want to rephrase it a bit.

I did, please check if it's clear now.

> The name "tlsfuzzer" does obviously not help either.

there are 2 things that are hard in computer science: cache invalidation, naming things and off by one errors ;)

on more serious note: you can use it as a simple, dumb, fuzzer, but all included scripts (with exception of like 1 or 2) don't; they expect very well defined behaviour from the server. Recently we're extended test coverage to testing even the timing of server responses.

also, it's more about the future scope of the project; I want to make it actually mutate the existing scripts to create new test scenarios randomly

so it's a more like "TLS property based tester" but that doesn't exactly roll off the tongue