0
0
mirror of https://github.com/nodejs/node.git synced 2024-12-01 16:10:02 +01:00
nodejs/test/pummel
Ben Noordhuis 3415427dbf tls: mitigate session renegotiation attacks
The TLS protocol allows (and sometimes requires) clients to renegotiate the
session. However, renegotiation requires a disproportional amount of server-side
resources, particularly CPU time, which makes it a potential vector for
denial-of-service attacks.

To mitigate this issue, we keep track of and limit the number of renegotiation
requests over time, emitting an error if the threshold is exceeded.
2012-02-16 18:15:21 +01:00
..
pummel.status Split tests. 2010-02-25 11:41:11 -08:00
test-child-process-spawn-loop.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-debugger-debug-brk.js test: add --debug-brk regression test 2012-02-07 23:42:38 +01:00
test-exec.js test: replace .addListener() calls with .on() 2011-10-15 01:08:36 +02:00
test-fs-watch-file.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-http-client-reconnect-bug.js test: replace .addListener() calls with .on() 2011-10-15 01:08:36 +02:00
test-http-upload-timeout.js Fixed a lot of jslint errors. 2011-10-05 18:51:06 -07:00
test-https-large-response.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-keep-alive.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-net-many-clients.js test: replace .addListener() calls with .on() 2011-10-15 01:08:36 +02:00
test-net-pause.js test: replace .addListener() calls with .on() 2011-10-15 01:08:36 +02:00
test-net-pingpong-delay.js test: replace .addListener() calls with .on() 2011-10-15 01:08:36 +02:00
test-net-pingpong.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-net-throttle.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-net-timeout2.js Tests: fix jslint issues 2012-01-17 19:45:09 +01:00
test-net-timeout.js test: replace .addListener() calls with .on() 2011-10-15 01:08:36 +02:00
test-net-write-callbacks.js Fixed a lot of jslint errors. 2011-10-05 18:51:06 -07:00
test-next-tick-loops-quick.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-process-uptime.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-regress-GH-814_2.js test: add missing copyright headers 2011-12-06 22:02:26 +01:00
test-regress-GH-814.js test: add missing copyright headers 2011-12-06 22:02:26 +01:00
test-regress-GH-892.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-timer-wrap2.js test: add missing copyright headers 2011-12-06 22:02:26 +01:00
test-timer-wrap.js test: add missing copyright headers 2011-12-06 22:02:26 +01:00
test-timers.js test: replace .addListener() calls with .on() 2011-10-15 01:08:36 +02:00
test-tls-ci-reneg-attack.js tls: mitigate session renegotiation attacks 2012-02-16 18:15:21 +01:00
test-tls-throttle.js Remove separation of libuv tests 2011-11-02 16:38:59 -07:00
test-vm-memleak.js Fixed a lot of jslint errors. 2011-10-05 18:51:06 -07:00
test-watch-file.js test: replace .addListener() calls with .on() 2011-10-15 01:08:36 +02:00
testcfg.py Make the pummel test runner not crash on windows when a directory is locked 2011-11-25 10:27:30 +01:00