1 # Generated with generate_ssl_tests.pl 2 3 num_tests = 6 4 5 test-0 = 0-SECLEVEL 3 with default key 6 test-1 = 1-SECLEVEL 4 with ED448 key 7 test-2 = 2-SECLEVEL 5 server with ED448 key 8 test-3 = 3-SECLEVEL 5 client with ED448 key 9 test-4 = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE 10 test-5 = 5-SECLEVEL 3 with ED448 key, TLSv1.2 11 # =========================================================== 12 13 [0-SECLEVEL 3 with default key] 14 ssl_conf = 0-SECLEVEL 3 with default key-ssl 15 16 [0-SECLEVEL 3 with default key-ssl] 17 server = 0-SECLEVEL 3 with default key-server 18 client = 0-SECLEVEL 3 with default key-client 19 20 [0-SECLEVEL 3 with default key-server] 21 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 22 CipherString = DEFAULT:@SECLEVEL=3 23 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 24 25 [0-SECLEVEL 3 with default key-client] 26 CipherString = DEFAULT 27 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 28 VerifyMode = Peer 29 30 [test-0] 31 ExpectedResult = ServerFail 32 33 34 # =========================================================== 35 36 [1-SECLEVEL 4 with ED448 key] 37 ssl_conf = 1-SECLEVEL 4 with ED448 key-ssl 38 39 [1-SECLEVEL 4 with ED448 key-ssl] 40 server = 1-SECLEVEL 4 with ED448 key-server 41 client = 1-SECLEVEL 4 with ED448 key-client 42 43 [1-SECLEVEL 4 with ED448 key-server] 44 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 45 CipherString = DEFAULT:@SECLEVEL=4 46 Groups = ?X448:?secp521r1 47 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 48 49 [1-SECLEVEL 4 with ED448 key-client] 50 CipherString = DEFAULT:@SECLEVEL=4 51 Groups = ?X448:?secp521r1 52 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 53 VerifyMode = Peer 54 55 [test-1] 56 ExpectedResult = Success 57 58 59 # =========================================================== 60 61 [2-SECLEVEL 5 server with ED448 key] 62 ssl_conf = 2-SECLEVEL 5 server with ED448 key-ssl 63 64 [2-SECLEVEL 5 server with ED448 key-ssl] 65 server = 2-SECLEVEL 5 server with ED448 key-server 66 client = 2-SECLEVEL 5 server with ED448 key-client 67 68 [2-SECLEVEL 5 server with ED448 key-server] 69 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 70 CipherString = DEFAULT:@SECLEVEL=5 71 Groups = ?X448:?secp521r1 72 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 73 74 [2-SECLEVEL 5 server with ED448 key-client] 75 CipherString = DEFAULT:@SECLEVEL=4 76 Groups = ?X448:?secp521r1 77 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 78 VerifyMode = Peer 79 80 [test-2] 81 ExpectedResult = ServerFail 82 83 84 # =========================================================== 85 86 [3-SECLEVEL 5 client with ED448 key] 87 ssl_conf = 3-SECLEVEL 5 client with ED448 key-ssl 88 89 [3-SECLEVEL 5 client with ED448 key-ssl] 90 server = 3-SECLEVEL 5 client with ED448 key-server 91 client = 3-SECLEVEL 5 client with ED448 key-client 92 93 [3-SECLEVEL 5 client with ED448 key-server] 94 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 95 CipherString = DEFAULT:@SECLEVEL=4 96 Groups = ?X448:?secp521r1 97 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 98 99 [3-SECLEVEL 5 client with ED448 key-client] 100 CipherString = DEFAULT:@SECLEVEL=5 101 Groups = ?X448:?secp521r1 102 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 103 VerifyMode = Peer 104 105 [test-3] 106 ExpectedResult = ServerFail 107 108 109 # =========================================================== 110 111 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE] 112 ssl_conf = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl 113 114 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl] 115 server = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server 116 client = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client 117 118 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server] 119 Certificate = ${ENV::TEST_CERTS_DIR}/p384-server-cert.pem 120 CipherString = DEFAULT:@SECLEVEL=3 121 Groups = X25519 122 PrivateKey = ${ENV::TEST_CERTS_DIR}/p384-server-key.pem 123 124 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client] 125 CipherString = ECDHE:@SECLEVEL=3 126 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/p384-root.pem 127 VerifyMode = Peer 128 129 [test-4] 130 ExpectedResult = Success 131 132 133 # =========================================================== 134 135 [5-SECLEVEL 3 with ED448 key, TLSv1.2] 136 ssl_conf = 5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl 137 138 [5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl] 139 server = 5-SECLEVEL 3 with ED448 key, TLSv1.2-server 140 client = 5-SECLEVEL 3 with ED448 key, TLSv1.2-client 141 142 [5-SECLEVEL 3 with ED448 key, TLSv1.2-server] 143 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 144 CipherString = DEFAULT:@SECLEVEL=3 145 MaxProtocol = TLSv1.2 146 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 147 148 [5-SECLEVEL 3 with ED448 key, TLSv1.2-client] 149 CipherString = DEFAULT 150 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 151 VerifyMode = Peer 152 153 [test-5] 154 ExpectedResult = Success 155 156 157