No unit tests?

[benlaurie]

I welcome this project, its something I've been meaning to include in OpenSSL for some time now, but...

In http://www.isecpartners.com/blog/2012/10/14/the-lurking-menace-of-broken-tls-validation.html you blame "the absence of proper unit tests to insure that validation is performed correctly" - yet ... no unit tests!

Also, btw, "ensure". :-)

[lxcode]

Hi Ben,

Thanks! We've been using TLSPretense for evaluating such things so far:

https://github.com/iSECPartners/tlspretense

But yes, it certainly wouldn't hurt to have some easier automated ones.