1 # Generated with generate_ssl_tests.pl 2 3 num_tests = 9 4 5 test-0 = 0-renegotiate-client-no-resume 6 test-1 = 1-renegotiate-client-resume 7 test-2 = 2-renegotiate-server-resume 8 test-3 = 3-renegotiate-client-auth-require 9 test-4 = 4-renegotiate-client-auth-once 10 test-5 = 5-renegotiate-aead-to-non-aead 11 test-6 = 6-renegotiate-non-aead-to-aead 12 test-7 = 7-renegotiate-non-aead-to-non-aead 13 test-8 = 8-renegotiate-aead-to-aead 14 # =========================================================== 15 16 [0-renegotiate-client-no-resume] 17 ssl_conf = 0-renegotiate-client-no-resume-ssl 18 19 [0-renegotiate-client-no-resume-ssl] 20 server = 0-renegotiate-client-no-resume-server 21 client = 0-renegotiate-client-no-resume-client 22 23 [0-renegotiate-client-no-resume-server] 24 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 25 CipherString = DEFAULT:@SECLEVEL=0 26 MaxProtocol = DTLSv1.2 27 Options = NoResumptionOnRenegotiation 28 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 29 30 [0-renegotiate-client-no-resume-client] 31 CipherString = DEFAULT:@SECLEVEL=0 32 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 33 VerifyMode = Peer 34 35 [test-0] 36 ExpectedResult = Success 37 HandshakeMode = RenegotiateClient 38 Method = DTLS 39 ResumptionExpected = No 40 UseSCTP = No 41 42 43 # =========================================================== 44 45 [1-renegotiate-client-resume] 46 ssl_conf = 1-renegotiate-client-resume-ssl 47 48 [1-renegotiate-client-resume-ssl] 49 server = 1-renegotiate-client-resume-server 50 client = 1-renegotiate-client-resume-client 51 52 [1-renegotiate-client-resume-server] 53 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 54 CipherString = DEFAULT:@SECLEVEL=0 55 MaxProtocol = DTLSv1.2 56 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 57 58 [1-renegotiate-client-resume-client] 59 CipherString = DEFAULT:@SECLEVEL=0 60 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 61 VerifyMode = Peer 62 63 [test-1] 64 ExpectedResult = Success 65 HandshakeMode = RenegotiateClient 66 Method = DTLS 67 ResumptionExpected = Yes 68 UseSCTP = No 69 70 71 # =========================================================== 72 73 [2-renegotiate-server-resume] 74 ssl_conf = 2-renegotiate-server-resume-ssl 75 76 [2-renegotiate-server-resume-ssl] 77 server = 2-renegotiate-server-resume-server 78 client = 2-renegotiate-server-resume-client 79 80 [2-renegotiate-server-resume-server] 81 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 82 CipherString = DEFAULT:@SECLEVEL=0 83 MaxProtocol = DTLSv1.2 84 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 85 86 [2-renegotiate-server-resume-client] 87 CipherString = DEFAULT:@SECLEVEL=0 88 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 89 VerifyMode = Peer 90 91 [test-2] 92 ExpectedResult = Success 93 HandshakeMode = RenegotiateServer 94 Method = DTLS 95 ResumptionExpected = No 96 UseSCTP = No 97 98 99 # =========================================================== 100 101 [3-renegotiate-client-auth-require] 102 ssl_conf = 3-renegotiate-client-auth-require-ssl 103 104 [3-renegotiate-client-auth-require-ssl] 105 server = 3-renegotiate-client-auth-require-server 106 client = 3-renegotiate-client-auth-require-client 107 108 [3-renegotiate-client-auth-require-server] 109 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 110 CipherString = DEFAULT:@SECLEVEL=0 111 MaxProtocol = DTLSv1.2 112 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 113 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 114 VerifyMode = Require 115 116 [3-renegotiate-client-auth-require-client] 117 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem 118 CipherString = DEFAULT:@SECLEVEL=0 119 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem 120 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 121 VerifyMode = Peer 122 123 [test-3] 124 ExpectedResult = Success 125 HandshakeMode = RenegotiateServer 126 Method = DTLS 127 ResumptionExpected = No 128 UseSCTP = No 129 130 131 # =========================================================== 132 133 [4-renegotiate-client-auth-once] 134 ssl_conf = 4-renegotiate-client-auth-once-ssl 135 136 [4-renegotiate-client-auth-once-ssl] 137 server = 4-renegotiate-client-auth-once-server 138 client = 4-renegotiate-client-auth-once-client 139 140 [4-renegotiate-client-auth-once-server] 141 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 142 CipherString = DEFAULT:@SECLEVEL=0 143 MaxProtocol = DTLSv1.2 144 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 145 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 146 VerifyMode = Once 147 148 [4-renegotiate-client-auth-once-client] 149 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem 150 CipherString = DEFAULT:@SECLEVEL=0 151 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem 152 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 153 VerifyMode = Peer 154 155 [test-4] 156 ExpectedResult = Success 157 HandshakeMode = RenegotiateServer 158 Method = DTLS 159 ResumptionExpected = No 160 UseSCTP = No 161 162 163 # =========================================================== 164 165 [5-renegotiate-aead-to-non-aead] 166 ssl_conf = 5-renegotiate-aead-to-non-aead-ssl 167 168 [5-renegotiate-aead-to-non-aead-ssl] 169 server = 5-renegotiate-aead-to-non-aead-server 170 client = 5-renegotiate-aead-to-non-aead-client 171 172 [5-renegotiate-aead-to-non-aead-server] 173 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 174 CipherString = DEFAULT 175 Options = NoResumptionOnRenegotiation 176 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 177 178 [5-renegotiate-aead-to-non-aead-client] 179 CipherString = AES128-GCM-SHA256 180 MaxProtocol = DTLSv1.2 181 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 182 VerifyMode = Peer 183 184 [test-5] 185 ExpectedResult = Success 186 HandshakeMode = RenegotiateClient 187 Method = DTLS 188 ResumptionExpected = No 189 UseSCTP = No 190 client = 5-renegotiate-aead-to-non-aead-client-extra 191 192 [5-renegotiate-aead-to-non-aead-client-extra] 193 RenegotiateCiphers = AES128-SHA 194 195 196 # =========================================================== 197 198 [6-renegotiate-non-aead-to-aead] 199 ssl_conf = 6-renegotiate-non-aead-to-aead-ssl 200 201 [6-renegotiate-non-aead-to-aead-ssl] 202 server = 6-renegotiate-non-aead-to-aead-server 203 client = 6-renegotiate-non-aead-to-aead-client 204 205 [6-renegotiate-non-aead-to-aead-server] 206 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 207 CipherString = DEFAULT 208 Options = NoResumptionOnRenegotiation 209 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 210 211 [6-renegotiate-non-aead-to-aead-client] 212 CipherString = AES128-SHA 213 MaxProtocol = DTLSv1.2 214 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 215 VerifyMode = Peer 216 217 [test-6] 218 ExpectedResult = Success 219 HandshakeMode = RenegotiateClient 220 Method = DTLS 221 ResumptionExpected = No 222 UseSCTP = No 223 client = 6-renegotiate-non-aead-to-aead-client-extra 224 225 [6-renegotiate-non-aead-to-aead-client-extra] 226 RenegotiateCiphers = AES128-GCM-SHA256 227 228 229 # =========================================================== 230 231 [7-renegotiate-non-aead-to-non-aead] 232 ssl_conf = 7-renegotiate-non-aead-to-non-aead-ssl 233 234 [7-renegotiate-non-aead-to-non-aead-ssl] 235 server = 7-renegotiate-non-aead-to-non-aead-server 236 client = 7-renegotiate-non-aead-to-non-aead-client 237 238 [7-renegotiate-non-aead-to-non-aead-server] 239 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 240 CipherString = DEFAULT 241 Options = NoResumptionOnRenegotiation 242 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 243 244 [7-renegotiate-non-aead-to-non-aead-client] 245 CipherString = AES128-SHA 246 MaxProtocol = DTLSv1.2 247 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 248 VerifyMode = Peer 249 250 [test-7] 251 ExpectedResult = Success 252 HandshakeMode = RenegotiateClient 253 Method = DTLS 254 ResumptionExpected = No 255 UseSCTP = No 256 client = 7-renegotiate-non-aead-to-non-aead-client-extra 257 258 [7-renegotiate-non-aead-to-non-aead-client-extra] 259 RenegotiateCiphers = AES256-SHA 260 261 262 # =========================================================== 263 264 [8-renegotiate-aead-to-aead] 265 ssl_conf = 8-renegotiate-aead-to-aead-ssl 266 267 [8-renegotiate-aead-to-aead-ssl] 268 server = 8-renegotiate-aead-to-aead-server 269 client = 8-renegotiate-aead-to-aead-client 270 271 [8-renegotiate-aead-to-aead-server] 272 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 273 CipherString = DEFAULT 274 Options = NoResumptionOnRenegotiation 275 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 276 277 [8-renegotiate-aead-to-aead-client] 278 CipherString = AES128-GCM-SHA256 279 MaxProtocol = DTLSv1.2 280 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 281 VerifyMode = Peer 282 283 [test-8] 284 ExpectedResult = Success 285 HandshakeMode = RenegotiateClient 286 Method = DTLS 287 ResumptionExpected = No 288 UseSCTP = No 289 client = 8-renegotiate-aead-to-aead-client-extra 290 291 [8-renegotiate-aead-to-aead-client-extra] 292 RenegotiateCiphers = AES256-GCM-SHA384 293 294 295