Home | History | Annotate | Line # | Download | only in ssl-tests
      1 # Generated with generate_ssl_tests.pl
      2 
      3 num_tests = 9
      4 
      5 test-0 = 0-renegotiate-client-no-resume
      6 test-1 = 1-renegotiate-client-resume
      7 test-2 = 2-renegotiate-server-resume
      8 test-3 = 3-renegotiate-client-auth-require
      9 test-4 = 4-renegotiate-client-auth-once
     10 test-5 = 5-renegotiate-aead-to-non-aead
     11 test-6 = 6-renegotiate-non-aead-to-aead
     12 test-7 = 7-renegotiate-non-aead-to-non-aead
     13 test-8 = 8-renegotiate-aead-to-aead
     14 # ===========================================================
     15 
     16 [0-renegotiate-client-no-resume]
     17 ssl_conf = 0-renegotiate-client-no-resume-ssl
     18 
     19 [0-renegotiate-client-no-resume-ssl]
     20 server = 0-renegotiate-client-no-resume-server
     21 client = 0-renegotiate-client-no-resume-client
     22 
     23 [0-renegotiate-client-no-resume-server]
     24 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
     25 CipherString = DEFAULT:@SECLEVEL=0
     26 MaxProtocol = DTLSv1.2
     27 Options = NoResumptionOnRenegotiation
     28 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
     29 
     30 [0-renegotiate-client-no-resume-client]
     31 CipherString = DEFAULT:@SECLEVEL=0
     32 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
     33 VerifyMode = Peer
     34 
     35 [test-0]
     36 ExpectedResult = Success
     37 HandshakeMode = RenegotiateClient
     38 Method = DTLS
     39 ResumptionExpected = No
     40 UseSCTP = No
     41 
     42 
     43 # ===========================================================
     44 
     45 [1-renegotiate-client-resume]
     46 ssl_conf = 1-renegotiate-client-resume-ssl
     47 
     48 [1-renegotiate-client-resume-ssl]
     49 server = 1-renegotiate-client-resume-server
     50 client = 1-renegotiate-client-resume-client
     51 
     52 [1-renegotiate-client-resume-server]
     53 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
     54 CipherString = DEFAULT:@SECLEVEL=0
     55 MaxProtocol = DTLSv1.2
     56 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
     57 
     58 [1-renegotiate-client-resume-client]
     59 CipherString = DEFAULT:@SECLEVEL=0
     60 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
     61 VerifyMode = Peer
     62 
     63 [test-1]
     64 ExpectedResult = Success
     65 HandshakeMode = RenegotiateClient
     66 Method = DTLS
     67 ResumptionExpected = Yes
     68 UseSCTP = No
     69 
     70 
     71 # ===========================================================
     72 
     73 [2-renegotiate-server-resume]
     74 ssl_conf = 2-renegotiate-server-resume-ssl
     75 
     76 [2-renegotiate-server-resume-ssl]
     77 server = 2-renegotiate-server-resume-server
     78 client = 2-renegotiate-server-resume-client
     79 
     80 [2-renegotiate-server-resume-server]
     81 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
     82 CipherString = DEFAULT:@SECLEVEL=0
     83 MaxProtocol = DTLSv1.2
     84 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
     85 
     86 [2-renegotiate-server-resume-client]
     87 CipherString = DEFAULT:@SECLEVEL=0
     88 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
     89 VerifyMode = Peer
     90 
     91 [test-2]
     92 ExpectedResult = Success
     93 HandshakeMode = RenegotiateServer
     94 Method = DTLS
     95 ResumptionExpected = No
     96 UseSCTP = No
     97 
     98 
     99 # ===========================================================
    100 
    101 [3-renegotiate-client-auth-require]
    102 ssl_conf = 3-renegotiate-client-auth-require-ssl
    103 
    104 [3-renegotiate-client-auth-require-ssl]
    105 server = 3-renegotiate-client-auth-require-server
    106 client = 3-renegotiate-client-auth-require-client
    107 
    108 [3-renegotiate-client-auth-require-server]
    109 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    110 CipherString = DEFAULT:@SECLEVEL=0
    111 MaxProtocol = DTLSv1.2
    112 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    113 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
    114 VerifyMode = Require
    115 
    116 [3-renegotiate-client-auth-require-client]
    117 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
    118 CipherString = DEFAULT:@SECLEVEL=0
    119 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
    120 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    121 VerifyMode = Peer
    122 
    123 [test-3]
    124 ExpectedResult = Success
    125 HandshakeMode = RenegotiateServer
    126 Method = DTLS
    127 ResumptionExpected = No
    128 UseSCTP = No
    129 
    130 
    131 # ===========================================================
    132 
    133 [4-renegotiate-client-auth-once]
    134 ssl_conf = 4-renegotiate-client-auth-once-ssl
    135 
    136 [4-renegotiate-client-auth-once-ssl]
    137 server = 4-renegotiate-client-auth-once-server
    138 client = 4-renegotiate-client-auth-once-client
    139 
    140 [4-renegotiate-client-auth-once-server]
    141 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    142 CipherString = DEFAULT:@SECLEVEL=0
    143 MaxProtocol = DTLSv1.2
    144 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    145 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
    146 VerifyMode = Once
    147 
    148 [4-renegotiate-client-auth-once-client]
    149 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
    150 CipherString = DEFAULT:@SECLEVEL=0
    151 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
    152 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    153 VerifyMode = Peer
    154 
    155 [test-4]
    156 ExpectedResult = Success
    157 HandshakeMode = RenegotiateServer
    158 Method = DTLS
    159 ResumptionExpected = No
    160 UseSCTP = No
    161 
    162 
    163 # ===========================================================
    164 
    165 [5-renegotiate-aead-to-non-aead]
    166 ssl_conf = 5-renegotiate-aead-to-non-aead-ssl
    167 
    168 [5-renegotiate-aead-to-non-aead-ssl]
    169 server = 5-renegotiate-aead-to-non-aead-server
    170 client = 5-renegotiate-aead-to-non-aead-client
    171 
    172 [5-renegotiate-aead-to-non-aead-server]
    173 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    174 CipherString = DEFAULT
    175 Options = NoResumptionOnRenegotiation
    176 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    177 
    178 [5-renegotiate-aead-to-non-aead-client]
    179 CipherString = AES128-GCM-SHA256
    180 MaxProtocol = DTLSv1.2
    181 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    182 VerifyMode = Peer
    183 
    184 [test-5]
    185 ExpectedResult = Success
    186 HandshakeMode = RenegotiateClient
    187 Method = DTLS
    188 ResumptionExpected = No
    189 UseSCTP = No
    190 client = 5-renegotiate-aead-to-non-aead-client-extra
    191 
    192 [5-renegotiate-aead-to-non-aead-client-extra]
    193 RenegotiateCiphers = AES128-SHA
    194 
    195 
    196 # ===========================================================
    197 
    198 [6-renegotiate-non-aead-to-aead]
    199 ssl_conf = 6-renegotiate-non-aead-to-aead-ssl
    200 
    201 [6-renegotiate-non-aead-to-aead-ssl]
    202 server = 6-renegotiate-non-aead-to-aead-server
    203 client = 6-renegotiate-non-aead-to-aead-client
    204 
    205 [6-renegotiate-non-aead-to-aead-server]
    206 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    207 CipherString = DEFAULT
    208 Options = NoResumptionOnRenegotiation
    209 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    210 
    211 [6-renegotiate-non-aead-to-aead-client]
    212 CipherString = AES128-SHA
    213 MaxProtocol = DTLSv1.2
    214 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    215 VerifyMode = Peer
    216 
    217 [test-6]
    218 ExpectedResult = Success
    219 HandshakeMode = RenegotiateClient
    220 Method = DTLS
    221 ResumptionExpected = No
    222 UseSCTP = No
    223 client = 6-renegotiate-non-aead-to-aead-client-extra
    224 
    225 [6-renegotiate-non-aead-to-aead-client-extra]
    226 RenegotiateCiphers = AES128-GCM-SHA256
    227 
    228 
    229 # ===========================================================
    230 
    231 [7-renegotiate-non-aead-to-non-aead]
    232 ssl_conf = 7-renegotiate-non-aead-to-non-aead-ssl
    233 
    234 [7-renegotiate-non-aead-to-non-aead-ssl]
    235 server = 7-renegotiate-non-aead-to-non-aead-server
    236 client = 7-renegotiate-non-aead-to-non-aead-client
    237 
    238 [7-renegotiate-non-aead-to-non-aead-server]
    239 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    240 CipherString = DEFAULT
    241 Options = NoResumptionOnRenegotiation
    242 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    243 
    244 [7-renegotiate-non-aead-to-non-aead-client]
    245 CipherString = AES128-SHA
    246 MaxProtocol = DTLSv1.2
    247 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    248 VerifyMode = Peer
    249 
    250 [test-7]
    251 ExpectedResult = Success
    252 HandshakeMode = RenegotiateClient
    253 Method = DTLS
    254 ResumptionExpected = No
    255 UseSCTP = No
    256 client = 7-renegotiate-non-aead-to-non-aead-client-extra
    257 
    258 [7-renegotiate-non-aead-to-non-aead-client-extra]
    259 RenegotiateCiphers = AES256-SHA
    260 
    261 
    262 # ===========================================================
    263 
    264 [8-renegotiate-aead-to-aead]
    265 ssl_conf = 8-renegotiate-aead-to-aead-ssl
    266 
    267 [8-renegotiate-aead-to-aead-ssl]
    268 server = 8-renegotiate-aead-to-aead-server
    269 client = 8-renegotiate-aead-to-aead-client
    270 
    271 [8-renegotiate-aead-to-aead-server]
    272 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    273 CipherString = DEFAULT
    274 Options = NoResumptionOnRenegotiation
    275 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    276 
    277 [8-renegotiate-aead-to-aead-client]
    278 CipherString = AES128-GCM-SHA256
    279 MaxProtocol = DTLSv1.2
    280 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    281 VerifyMode = Peer
    282 
    283 [test-8]
    284 ExpectedResult = Success
    285 HandshakeMode = RenegotiateClient
    286 Method = DTLS
    287 ResumptionExpected = No
    288 UseSCTP = No
    289 client = 8-renegotiate-aead-to-aead-client-extra
    290 
    291 [8-renegotiate-aead-to-aead-client-extra]
    292 RenegotiateCiphers = AES256-GCM-SHA384
    293 
    294 
    295