1 # Generated with generate_ssl_tests.pl 2 3 num_tests = 4 4 5 test-0 = 0-default 6 test-1 = 1-Server signature algorithms bug 7 test-2 = 2-verify-cert 8 test-3 = 3-name-constraints-no-san-in-ee 9 # =========================================================== 10 11 [0-default] 12 ssl_conf = 0-default-ssl 13 14 [0-default-ssl] 15 server = 0-default-server 16 client = 0-default-client 17 18 [0-default-server] 19 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 20 CipherString = DEFAULT 21 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 22 23 [0-default-client] 24 CipherString = DEFAULT 25 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 26 VerifyMode = Peer 27 28 [test-0] 29 ExpectedResult = Success 30 31 32 # =========================================================== 33 34 [1-Server signature algorithms bug] 35 ssl_conf = 1-Server signature algorithms bug-ssl 36 37 [1-Server signature algorithms bug-ssl] 38 server = 1-Server signature algorithms bug-server 39 client = 1-Server signature algorithms bug-client 40 41 [1-Server signature algorithms bug-server] 42 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 43 CipherString = DEFAULT 44 ClientSignatureAlgorithms = PSs+SHA512:RsA+SHA512 45 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 46 47 [1-Server signature algorithms bug-client] 48 CipherString = DEFAULT 49 SignatureAlgorithms = Pss+SHA256:RSa+SHA256 50 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 51 VerifyMode = Peer 52 53 [test-1] 54 ExpectedResult = Success 55 56 57 # =========================================================== 58 59 [2-verify-cert] 60 ssl_conf = 2-verify-cert-ssl 61 62 [2-verify-cert-ssl] 63 server = 2-verify-cert-server 64 client = 2-verify-cert-client 65 66 [2-verify-cert-server] 67 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 68 CipherString = DEFAULT 69 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 70 71 [2-verify-cert-client] 72 CipherString = DEFAULT 73 VerifyMode = Peer 74 75 [test-2] 76 ExpectedClientAlert = UnknownCA 77 ExpectedResult = ClientFail 78 79 80 # =========================================================== 81 82 [3-name-constraints-no-san-in-ee] 83 ssl_conf = 3-name-constraints-no-san-in-ee-ssl 84 85 [3-name-constraints-no-san-in-ee-ssl] 86 server = 3-name-constraints-no-san-in-ee-server 87 client = 3-name-constraints-no-san-in-ee-client 88 89 [3-name-constraints-no-san-in-ee-server] 90 Certificate = ${ENV::TEST_CERTS_DIR}/goodcn2-chain.pem 91 CipherString = DEFAULT 92 PrivateKey = ${ENV::TEST_CERTS_DIR}/goodcn2-key.pem 93 94 [3-name-constraints-no-san-in-ee-client] 95 CipherString = DEFAULT 96 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 97 VerifyMode = Peer 98 99 [test-3] 100 ExpectedResult = Success 101 102 103