Skip to content

Add SSL log validator script#296

Open
gilles-peskine-arm wants to merge 4 commits intoMbed-TLS:mainfrom
gilles-peskine-arm:ssl_fork_server-rng-test-framework
Open

Add SSL log validator script#296
gilles-peskine-arm wants to merge 4 commits intoMbed-TLS:mainfrom
gilles-peskine-arm:ssl_fork_server-rng-test-framework

Conversation

@gilles-peskine-arm
Copy link
Copy Markdown
Contributor

@gilles-peskine-arm gilles-peskine-arm commented Apr 1, 2026

Add a script scripts/validate_ssl_logs.py to validate logs from ssl_client2 and ssl_server2. Useful for testing things that we can't test from within a single run of a test programs. Use this to check that when two clients connect to the same server, the connections use different random values.

PR checklist

@gilles-peskine-arm
New script to cross-validate SSL client and server logs
98c1274 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
@gilles-peskine-arm
Also parse bignum value dumps
b0c3668 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
@gilles-peskine-arm
New validation: distinct_server_ephemeral, distinct_server_random
f911af9 
When two clients connect to the same server, validate that they get distinct
server_random values and distinct ephemeral public keys.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
@gilles-peskine-arm
Fix spurious match of data in DUMP_CHUNK_RE
dd68332 
If the data from `MBEDTLS_SSL_DEBUG_BUF` that's listed in text form after
the hex digits starts with two bytes that happen to be hex digits, this
could be interpreted as an extra pair of hex digits. Fix this.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
@gilles-peskine-arm gilles-peskine-arm added needs-ci Needs to pass CI tests size-s Estimated task size: small (~2d) priority-high High priority - will be reviewed soon labels Apr 1, 2026
@gilles-peskine-arm gilles-peskine-arm added needs-review Every commit must be reviewed by at least two team members. needs-reviewer This PR needs someone to pick it up for review and removed needs-ci Needs to pass CI tests labels Apr 1, 2026
@gilles-peskine-arm gilles-peskine-arm mentioned this pull request Apr 1, 2026
Open
6 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

needs-review Every commit must be reviewed by at least two team members. needs-reviewer This PR needs someone to pick it up for review priority-high High priority - will be reviewed soon size-s Estimated task size: small (~2d)

Projects

Roadmap pull requests (new board)
Status: In Development

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@gilles-peskine-arm