Home | History | Annotate | Line # | Download | only in ssl-tests
      1 # Generated with generate_ssl_tests.pl
      2 
      3 num_tests = 20
      4 
      5 test-0 = 0-npn-simple
      6 test-1 = 1-npn-client-finds-match
      7 test-2 = 2-npn-client-honours-server-pref
      8 test-3 = 3-npn-client-first-pref-on-mismatch
      9 test-4 = 4-npn-no-server-support
     10 test-5 = 5-npn-no-client-support
     11 test-6 = 6-npn-with-sni-no-context-switch
     12 test-7 = 7-npn-with-sni-context-switch
     13 test-8 = 8-npn-selected-sni-server-supports-npn
     14 test-9 = 9-npn-selected-sni-server-does-not-support-npn
     15 test-10 = 10-alpn-preferred-over-npn
     16 test-11 = 11-sni-npn-preferred-over-alpn
     17 test-12 = 12-npn-simple-resumption
     18 test-13 = 13-npn-server-switch-resumption
     19 test-14 = 14-npn-client-switch-resumption
     20 test-15 = 15-npn-client-first-pref-on-mismatch-resumption
     21 test-16 = 16-npn-no-server-support-resumption
     22 test-17 = 17-npn-no-client-support-resumption
     23 test-18 = 18-alpn-preferred-over-npn-resumption
     24 test-19 = 19-npn-used-if-alpn-not-supported-resumption
     25 # ===========================================================
     26 
     27 [0-npn-simple]
     28 ssl_conf = 0-npn-simple-ssl
     29 
     30 [0-npn-simple-ssl]
     31 server = 0-npn-simple-server
     32 client = 0-npn-simple-client
     33 
     34 [0-npn-simple-server]
     35 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
     36 CipherString = DEFAULT
     37 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
     38 
     39 [0-npn-simple-client]
     40 CipherString = DEFAULT
     41 MaxProtocol = TLSv1.2
     42 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
     43 VerifyMode = Peer
     44 
     45 [test-0]
     46 ExpectedNPNProtocol = foo
     47 server = 0-npn-simple-server-extra
     48 client = 0-npn-simple-client-extra
     49 
     50 [0-npn-simple-server-extra]
     51 NPNProtocols = foo
     52 
     53 [0-npn-simple-client-extra]
     54 NPNProtocols = foo
     55 
     56 
     57 # ===========================================================
     58 
     59 [1-npn-client-finds-match]
     60 ssl_conf = 1-npn-client-finds-match-ssl
     61 
     62 [1-npn-client-finds-match-ssl]
     63 server = 1-npn-client-finds-match-server
     64 client = 1-npn-client-finds-match-client
     65 
     66 [1-npn-client-finds-match-server]
     67 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
     68 CipherString = DEFAULT
     69 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
     70 
     71 [1-npn-client-finds-match-client]
     72 CipherString = DEFAULT
     73 MaxProtocol = TLSv1.2
     74 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
     75 VerifyMode = Peer
     76 
     77 [test-1]
     78 ExpectedNPNProtocol = bar
     79 server = 1-npn-client-finds-match-server-extra
     80 client = 1-npn-client-finds-match-client-extra
     81 
     82 [1-npn-client-finds-match-server-extra]
     83 NPNProtocols = baz,bar
     84 
     85 [1-npn-client-finds-match-client-extra]
     86 NPNProtocols = foo,bar
     87 
     88 
     89 # ===========================================================
     90 
     91 [2-npn-client-honours-server-pref]
     92 ssl_conf = 2-npn-client-honours-server-pref-ssl
     93 
     94 [2-npn-client-honours-server-pref-ssl]
     95 server = 2-npn-client-honours-server-pref-server
     96 client = 2-npn-client-honours-server-pref-client
     97 
     98 [2-npn-client-honours-server-pref-server]
     99 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    100 CipherString = DEFAULT
    101 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    102 
    103 [2-npn-client-honours-server-pref-client]
    104 CipherString = DEFAULT
    105 MaxProtocol = TLSv1.2
    106 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    107 VerifyMode = Peer
    108 
    109 [test-2]
    110 ExpectedNPNProtocol = bar
    111 server = 2-npn-client-honours-server-pref-server-extra
    112 client = 2-npn-client-honours-server-pref-client-extra
    113 
    114 [2-npn-client-honours-server-pref-server-extra]
    115 NPNProtocols = bar,foo
    116 
    117 [2-npn-client-honours-server-pref-client-extra]
    118 NPNProtocols = foo,bar
    119 
    120 
    121 # ===========================================================
    122 
    123 [3-npn-client-first-pref-on-mismatch]
    124 ssl_conf = 3-npn-client-first-pref-on-mismatch-ssl
    125 
    126 [3-npn-client-first-pref-on-mismatch-ssl]
    127 server = 3-npn-client-first-pref-on-mismatch-server
    128 client = 3-npn-client-first-pref-on-mismatch-client
    129 
    130 [3-npn-client-first-pref-on-mismatch-server]
    131 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    132 CipherString = DEFAULT
    133 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    134 
    135 [3-npn-client-first-pref-on-mismatch-client]
    136 CipherString = DEFAULT
    137 MaxProtocol = TLSv1.2
    138 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    139 VerifyMode = Peer
    140 
    141 [test-3]
    142 ExpectedNPNProtocol = foo
    143 server = 3-npn-client-first-pref-on-mismatch-server-extra
    144 client = 3-npn-client-first-pref-on-mismatch-client-extra
    145 
    146 [3-npn-client-first-pref-on-mismatch-server-extra]
    147 NPNProtocols = baz
    148 
    149 [3-npn-client-first-pref-on-mismatch-client-extra]
    150 NPNProtocols = foo,bar
    151 
    152 
    153 # ===========================================================
    154 
    155 [4-npn-no-server-support]
    156 ssl_conf = 4-npn-no-server-support-ssl
    157 
    158 [4-npn-no-server-support-ssl]
    159 server = 4-npn-no-server-support-server
    160 client = 4-npn-no-server-support-client
    161 
    162 [4-npn-no-server-support-server]
    163 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    164 CipherString = DEFAULT
    165 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    166 
    167 [4-npn-no-server-support-client]
    168 CipherString = DEFAULT
    169 MaxProtocol = TLSv1.2
    170 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    171 VerifyMode = Peer
    172 
    173 [test-4]
    174 client = 4-npn-no-server-support-client-extra
    175 
    176 [4-npn-no-server-support-client-extra]
    177 NPNProtocols = foo
    178 
    179 
    180 # ===========================================================
    181 
    182 [5-npn-no-client-support]
    183 ssl_conf = 5-npn-no-client-support-ssl
    184 
    185 [5-npn-no-client-support-ssl]
    186 server = 5-npn-no-client-support-server
    187 client = 5-npn-no-client-support-client
    188 
    189 [5-npn-no-client-support-server]
    190 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    191 CipherString = DEFAULT
    192 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    193 
    194 [5-npn-no-client-support-client]
    195 CipherString = DEFAULT
    196 MaxProtocol = TLSv1.2
    197 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    198 VerifyMode = Peer
    199 
    200 [test-5]
    201 server = 5-npn-no-client-support-server-extra
    202 
    203 [5-npn-no-client-support-server-extra]
    204 NPNProtocols = foo
    205 
    206 
    207 # ===========================================================
    208 
    209 [6-npn-with-sni-no-context-switch]
    210 ssl_conf = 6-npn-with-sni-no-context-switch-ssl
    211 
    212 [6-npn-with-sni-no-context-switch-ssl]
    213 server = 6-npn-with-sni-no-context-switch-server
    214 client = 6-npn-with-sni-no-context-switch-client
    215 server2 = 6-npn-with-sni-no-context-switch-server2
    216 
    217 [6-npn-with-sni-no-context-switch-server]
    218 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    219 CipherString = DEFAULT
    220 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    221 
    222 [6-npn-with-sni-no-context-switch-server2]
    223 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    224 CipherString = DEFAULT
    225 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    226 
    227 [6-npn-with-sni-no-context-switch-client]
    228 CipherString = DEFAULT
    229 MaxProtocol = TLSv1.2
    230 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    231 VerifyMode = Peer
    232 
    233 [test-6]
    234 ExpectedNPNProtocol = foo
    235 ExpectedServerName = server1
    236 server = 6-npn-with-sni-no-context-switch-server-extra
    237 server2 = 6-npn-with-sni-no-context-switch-server2-extra
    238 client = 6-npn-with-sni-no-context-switch-client-extra
    239 
    240 [6-npn-with-sni-no-context-switch-server-extra]
    241 NPNProtocols = foo
    242 ServerNameCallback = IgnoreMismatch
    243 
    244 [6-npn-with-sni-no-context-switch-server2-extra]
    245 NPNProtocols = bar
    246 
    247 [6-npn-with-sni-no-context-switch-client-extra]
    248 NPNProtocols = foo,bar
    249 ServerName = server1
    250 
    251 
    252 # ===========================================================
    253 
    254 [7-npn-with-sni-context-switch]
    255 ssl_conf = 7-npn-with-sni-context-switch-ssl
    256 
    257 [7-npn-with-sni-context-switch-ssl]
    258 server = 7-npn-with-sni-context-switch-server
    259 client = 7-npn-with-sni-context-switch-client
    260 server2 = 7-npn-with-sni-context-switch-server2
    261 
    262 [7-npn-with-sni-context-switch-server]
    263 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    264 CipherString = DEFAULT
    265 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    266 
    267 [7-npn-with-sni-context-switch-server2]
    268 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    269 CipherString = DEFAULT
    270 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    271 
    272 [7-npn-with-sni-context-switch-client]
    273 CipherString = DEFAULT
    274 MaxProtocol = TLSv1.2
    275 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    276 VerifyMode = Peer
    277 
    278 [test-7]
    279 ExpectedNPNProtocol = bar
    280 ExpectedServerName = server2
    281 server = 7-npn-with-sni-context-switch-server-extra
    282 server2 = 7-npn-with-sni-context-switch-server2-extra
    283 client = 7-npn-with-sni-context-switch-client-extra
    284 
    285 [7-npn-with-sni-context-switch-server-extra]
    286 NPNProtocols = foo
    287 ServerNameCallback = IgnoreMismatch
    288 
    289 [7-npn-with-sni-context-switch-server2-extra]
    290 NPNProtocols = bar
    291 
    292 [7-npn-with-sni-context-switch-client-extra]
    293 NPNProtocols = foo,bar
    294 ServerName = server2
    295 
    296 
    297 # ===========================================================
    298 
    299 [8-npn-selected-sni-server-supports-npn]
    300 ssl_conf = 8-npn-selected-sni-server-supports-npn-ssl
    301 
    302 [8-npn-selected-sni-server-supports-npn-ssl]
    303 server = 8-npn-selected-sni-server-supports-npn-server
    304 client = 8-npn-selected-sni-server-supports-npn-client
    305 server2 = 8-npn-selected-sni-server-supports-npn-server2
    306 
    307 [8-npn-selected-sni-server-supports-npn-server]
    308 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    309 CipherString = DEFAULT
    310 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    311 
    312 [8-npn-selected-sni-server-supports-npn-server2]
    313 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    314 CipherString = DEFAULT
    315 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    316 
    317 [8-npn-selected-sni-server-supports-npn-client]
    318 CipherString = DEFAULT
    319 MaxProtocol = TLSv1.2
    320 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    321 VerifyMode = Peer
    322 
    323 [test-8]
    324 ExpectedNPNProtocol = bar
    325 ExpectedServerName = server2
    326 server = 8-npn-selected-sni-server-supports-npn-server-extra
    327 server2 = 8-npn-selected-sni-server-supports-npn-server2-extra
    328 client = 8-npn-selected-sni-server-supports-npn-client-extra
    329 
    330 [8-npn-selected-sni-server-supports-npn-server-extra]
    331 ServerNameCallback = IgnoreMismatch
    332 
    333 [8-npn-selected-sni-server-supports-npn-server2-extra]
    334 NPNProtocols = bar
    335 
    336 [8-npn-selected-sni-server-supports-npn-client-extra]
    337 NPNProtocols = foo,bar
    338 ServerName = server2
    339 
    340 
    341 # ===========================================================
    342 
    343 [9-npn-selected-sni-server-does-not-support-npn]
    344 ssl_conf = 9-npn-selected-sni-server-does-not-support-npn-ssl
    345 
    346 [9-npn-selected-sni-server-does-not-support-npn-ssl]
    347 server = 9-npn-selected-sni-server-does-not-support-npn-server
    348 client = 9-npn-selected-sni-server-does-not-support-npn-client
    349 server2 = 9-npn-selected-sni-server-does-not-support-npn-server2
    350 
    351 [9-npn-selected-sni-server-does-not-support-npn-server]
    352 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    353 CipherString = DEFAULT
    354 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    355 
    356 [9-npn-selected-sni-server-does-not-support-npn-server2]
    357 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    358 CipherString = DEFAULT
    359 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    360 
    361 [9-npn-selected-sni-server-does-not-support-npn-client]
    362 CipherString = DEFAULT
    363 MaxProtocol = TLSv1.2
    364 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    365 VerifyMode = Peer
    366 
    367 [test-9]
    368 ExpectedServerName = server2
    369 server = 9-npn-selected-sni-server-does-not-support-npn-server-extra
    370 client = 9-npn-selected-sni-server-does-not-support-npn-client-extra
    371 
    372 [9-npn-selected-sni-server-does-not-support-npn-server-extra]
    373 NPNProtocols = bar
    374 ServerNameCallback = IgnoreMismatch
    375 
    376 [9-npn-selected-sni-server-does-not-support-npn-client-extra]
    377 NPNProtocols = foo,bar
    378 ServerName = server2
    379 
    380 
    381 # ===========================================================
    382 
    383 [10-alpn-preferred-over-npn]
    384 ssl_conf = 10-alpn-preferred-over-npn-ssl
    385 
    386 [10-alpn-preferred-over-npn-ssl]
    387 server = 10-alpn-preferred-over-npn-server
    388 client = 10-alpn-preferred-over-npn-client
    389 
    390 [10-alpn-preferred-over-npn-server]
    391 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    392 CipherString = DEFAULT
    393 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    394 
    395 [10-alpn-preferred-over-npn-client]
    396 CipherString = DEFAULT
    397 MaxProtocol = TLSv1.2
    398 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    399 VerifyMode = Peer
    400 
    401 [test-10]
    402 ExpectedALPNProtocol = foo
    403 server = 10-alpn-preferred-over-npn-server-extra
    404 client = 10-alpn-preferred-over-npn-client-extra
    405 
    406 [10-alpn-preferred-over-npn-server-extra]
    407 ALPNProtocols = foo
    408 NPNProtocols = bar
    409 
    410 [10-alpn-preferred-over-npn-client-extra]
    411 ALPNProtocols = foo
    412 NPNProtocols = bar
    413 
    414 
    415 # ===========================================================
    416 
    417 [11-sni-npn-preferred-over-alpn]
    418 ssl_conf = 11-sni-npn-preferred-over-alpn-ssl
    419 
    420 [11-sni-npn-preferred-over-alpn-ssl]
    421 server = 11-sni-npn-preferred-over-alpn-server
    422 client = 11-sni-npn-preferred-over-alpn-client
    423 server2 = 11-sni-npn-preferred-over-alpn-server2
    424 
    425 [11-sni-npn-preferred-over-alpn-server]
    426 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    427 CipherString = DEFAULT
    428 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    429 
    430 [11-sni-npn-preferred-over-alpn-server2]
    431 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    432 CipherString = DEFAULT
    433 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    434 
    435 [11-sni-npn-preferred-over-alpn-client]
    436 CipherString = DEFAULT
    437 MaxProtocol = TLSv1.2
    438 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    439 VerifyMode = Peer
    440 
    441 [test-11]
    442 ExpectedNPNProtocol = bar
    443 ExpectedServerName = server2
    444 server = 11-sni-npn-preferred-over-alpn-server-extra
    445 server2 = 11-sni-npn-preferred-over-alpn-server2-extra
    446 client = 11-sni-npn-preferred-over-alpn-client-extra
    447 
    448 [11-sni-npn-preferred-over-alpn-server-extra]
    449 ALPNProtocols = foo
    450 ServerNameCallback = IgnoreMismatch
    451 
    452 [11-sni-npn-preferred-over-alpn-server2-extra]
    453 NPNProtocols = bar
    454 
    455 [11-sni-npn-preferred-over-alpn-client-extra]
    456 ALPNProtocols = foo
    457 NPNProtocols = bar
    458 ServerName = server2
    459 
    460 
    461 # ===========================================================
    462 
    463 [12-npn-simple-resumption]
    464 ssl_conf = 12-npn-simple-resumption-ssl
    465 
    466 [12-npn-simple-resumption-ssl]
    467 server = 12-npn-simple-resumption-server
    468 client = 12-npn-simple-resumption-client
    469 resume-server = 12-npn-simple-resumption-server
    470 resume-client = 12-npn-simple-resumption-client
    471 
    472 [12-npn-simple-resumption-server]
    473 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    474 CipherString = DEFAULT
    475 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    476 
    477 [12-npn-simple-resumption-client]
    478 CipherString = DEFAULT
    479 MaxProtocol = TLSv1.2
    480 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    481 VerifyMode = Peer
    482 
    483 [test-12]
    484 ExpectedNPNProtocol = foo
    485 HandshakeMode = Resume
    486 ResumptionExpected = Yes
    487 server = 12-npn-simple-resumption-server-extra
    488 resume-server = 12-npn-simple-resumption-server-extra
    489 client = 12-npn-simple-resumption-client-extra
    490 resume-client = 12-npn-simple-resumption-client-extra
    491 
    492 [12-npn-simple-resumption-server-extra]
    493 NPNProtocols = foo
    494 
    495 [12-npn-simple-resumption-client-extra]
    496 NPNProtocols = foo
    497 
    498 
    499 # ===========================================================
    500 
    501 [13-npn-server-switch-resumption]
    502 ssl_conf = 13-npn-server-switch-resumption-ssl
    503 
    504 [13-npn-server-switch-resumption-ssl]
    505 server = 13-npn-server-switch-resumption-server
    506 client = 13-npn-server-switch-resumption-client
    507 resume-server = 13-npn-server-switch-resumption-resume-server
    508 resume-client = 13-npn-server-switch-resumption-client
    509 
    510 [13-npn-server-switch-resumption-server]
    511 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    512 CipherString = DEFAULT
    513 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    514 
    515 [13-npn-server-switch-resumption-resume-server]
    516 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    517 CipherString = DEFAULT
    518 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    519 
    520 [13-npn-server-switch-resumption-client]
    521 CipherString = DEFAULT
    522 MaxProtocol = TLSv1.2
    523 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    524 VerifyMode = Peer
    525 
    526 [test-13]
    527 ExpectedNPNProtocol = baz
    528 HandshakeMode = Resume
    529 ResumptionExpected = Yes
    530 server = 13-npn-server-switch-resumption-server-extra
    531 resume-server = 13-npn-server-switch-resumption-resume-server-extra
    532 client = 13-npn-server-switch-resumption-client-extra
    533 resume-client = 13-npn-server-switch-resumption-client-extra
    534 
    535 [13-npn-server-switch-resumption-server-extra]
    536 NPNProtocols = bar,foo
    537 
    538 [13-npn-server-switch-resumption-resume-server-extra]
    539 NPNProtocols = baz,foo
    540 
    541 [13-npn-server-switch-resumption-client-extra]
    542 NPNProtocols = foo,bar,baz
    543 
    544 
    545 # ===========================================================
    546 
    547 [14-npn-client-switch-resumption]
    548 ssl_conf = 14-npn-client-switch-resumption-ssl
    549 
    550 [14-npn-client-switch-resumption-ssl]
    551 server = 14-npn-client-switch-resumption-server
    552 client = 14-npn-client-switch-resumption-client
    553 resume-server = 14-npn-client-switch-resumption-server
    554 resume-client = 14-npn-client-switch-resumption-resume-client
    555 
    556 [14-npn-client-switch-resumption-server]
    557 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    558 CipherString = DEFAULT
    559 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    560 
    561 [14-npn-client-switch-resumption-client]
    562 CipherString = DEFAULT
    563 MaxProtocol = TLSv1.2
    564 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    565 VerifyMode = Peer
    566 
    567 [14-npn-client-switch-resumption-resume-client]
    568 CipherString = DEFAULT
    569 MaxProtocol = TLSv1.2
    570 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    571 VerifyMode = Peer
    572 
    573 [test-14]
    574 ExpectedNPNProtocol = bar
    575 HandshakeMode = Resume
    576 ResumptionExpected = Yes
    577 server = 14-npn-client-switch-resumption-server-extra
    578 resume-server = 14-npn-client-switch-resumption-server-extra
    579 client = 14-npn-client-switch-resumption-client-extra
    580 resume-client = 14-npn-client-switch-resumption-resume-client-extra
    581 
    582 [14-npn-client-switch-resumption-server-extra]
    583 NPNProtocols = foo,bar,baz
    584 
    585 [14-npn-client-switch-resumption-client-extra]
    586 NPNProtocols = foo,baz
    587 
    588 [14-npn-client-switch-resumption-resume-client-extra]
    589 NPNProtocols = bar,baz
    590 
    591 
    592 # ===========================================================
    593 
    594 [15-npn-client-first-pref-on-mismatch-resumption]
    595 ssl_conf = 15-npn-client-first-pref-on-mismatch-resumption-ssl
    596 
    597 [15-npn-client-first-pref-on-mismatch-resumption-ssl]
    598 server = 15-npn-client-first-pref-on-mismatch-resumption-server
    599 client = 15-npn-client-first-pref-on-mismatch-resumption-client
    600 resume-server = 15-npn-client-first-pref-on-mismatch-resumption-resume-server
    601 resume-client = 15-npn-client-first-pref-on-mismatch-resumption-client
    602 
    603 [15-npn-client-first-pref-on-mismatch-resumption-server]
    604 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    605 CipherString = DEFAULT
    606 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    607 
    608 [15-npn-client-first-pref-on-mismatch-resumption-resume-server]
    609 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    610 CipherString = DEFAULT
    611 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    612 
    613 [15-npn-client-first-pref-on-mismatch-resumption-client]
    614 CipherString = DEFAULT
    615 MaxProtocol = TLSv1.2
    616 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    617 VerifyMode = Peer
    618 
    619 [test-15]
    620 ExpectedNPNProtocol = foo
    621 HandshakeMode = Resume
    622 ResumptionExpected = Yes
    623 server = 15-npn-client-first-pref-on-mismatch-resumption-server-extra
    624 resume-server = 15-npn-client-first-pref-on-mismatch-resumption-resume-server-extra
    625 client = 15-npn-client-first-pref-on-mismatch-resumption-client-extra
    626 resume-client = 15-npn-client-first-pref-on-mismatch-resumption-client-extra
    627 
    628 [15-npn-client-first-pref-on-mismatch-resumption-server-extra]
    629 NPNProtocols = bar
    630 
    631 [15-npn-client-first-pref-on-mismatch-resumption-resume-server-extra]
    632 NPNProtocols = baz
    633 
    634 [15-npn-client-first-pref-on-mismatch-resumption-client-extra]
    635 NPNProtocols = foo,bar
    636 
    637 
    638 # ===========================================================
    639 
    640 [16-npn-no-server-support-resumption]
    641 ssl_conf = 16-npn-no-server-support-resumption-ssl
    642 
    643 [16-npn-no-server-support-resumption-ssl]
    644 server = 16-npn-no-server-support-resumption-server
    645 client = 16-npn-no-server-support-resumption-client
    646 resume-server = 16-npn-no-server-support-resumption-resume-server
    647 resume-client = 16-npn-no-server-support-resumption-client
    648 
    649 [16-npn-no-server-support-resumption-server]
    650 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    651 CipherString = DEFAULT
    652 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    653 
    654 [16-npn-no-server-support-resumption-resume-server]
    655 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    656 CipherString = DEFAULT
    657 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    658 
    659 [16-npn-no-server-support-resumption-client]
    660 CipherString = DEFAULT
    661 MaxProtocol = TLSv1.2
    662 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    663 VerifyMode = Peer
    664 
    665 [test-16]
    666 HandshakeMode = Resume
    667 ResumptionExpected = Yes
    668 server = 16-npn-no-server-support-resumption-server-extra
    669 client = 16-npn-no-server-support-resumption-client-extra
    670 resume-client = 16-npn-no-server-support-resumption-client-extra
    671 
    672 [16-npn-no-server-support-resumption-server-extra]
    673 NPNProtocols = foo
    674 
    675 [16-npn-no-server-support-resumption-client-extra]
    676 NPNProtocols = foo
    677 
    678 
    679 # ===========================================================
    680 
    681 [17-npn-no-client-support-resumption]
    682 ssl_conf = 17-npn-no-client-support-resumption-ssl
    683 
    684 [17-npn-no-client-support-resumption-ssl]
    685 server = 17-npn-no-client-support-resumption-server
    686 client = 17-npn-no-client-support-resumption-client
    687 resume-server = 17-npn-no-client-support-resumption-server
    688 resume-client = 17-npn-no-client-support-resumption-resume-client
    689 
    690 [17-npn-no-client-support-resumption-server]
    691 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    692 CipherString = DEFAULT
    693 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    694 
    695 [17-npn-no-client-support-resumption-client]
    696 CipherString = DEFAULT
    697 MaxProtocol = TLSv1.2
    698 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    699 VerifyMode = Peer
    700 
    701 [17-npn-no-client-support-resumption-resume-client]
    702 CipherString = DEFAULT
    703 MaxProtocol = TLSv1.2
    704 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    705 VerifyMode = Peer
    706 
    707 [test-17]
    708 HandshakeMode = Resume
    709 ResumptionExpected = Yes
    710 server = 17-npn-no-client-support-resumption-server-extra
    711 resume-server = 17-npn-no-client-support-resumption-server-extra
    712 client = 17-npn-no-client-support-resumption-client-extra
    713 
    714 [17-npn-no-client-support-resumption-server-extra]
    715 NPNProtocols = foo
    716 
    717 [17-npn-no-client-support-resumption-client-extra]
    718 NPNProtocols = foo
    719 
    720 
    721 # ===========================================================
    722 
    723 [18-alpn-preferred-over-npn-resumption]
    724 ssl_conf = 18-alpn-preferred-over-npn-resumption-ssl
    725 
    726 [18-alpn-preferred-over-npn-resumption-ssl]
    727 server = 18-alpn-preferred-over-npn-resumption-server
    728 client = 18-alpn-preferred-over-npn-resumption-client
    729 resume-server = 18-alpn-preferred-over-npn-resumption-resume-server
    730 resume-client = 18-alpn-preferred-over-npn-resumption-client
    731 
    732 [18-alpn-preferred-over-npn-resumption-server]
    733 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    734 CipherString = DEFAULT
    735 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    736 
    737 [18-alpn-preferred-over-npn-resumption-resume-server]
    738 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    739 CipherString = DEFAULT
    740 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    741 
    742 [18-alpn-preferred-over-npn-resumption-client]
    743 CipherString = DEFAULT
    744 MaxProtocol = TLSv1.2
    745 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    746 VerifyMode = Peer
    747 
    748 [test-18]
    749 ExpectedALPNProtocol = foo
    750 HandshakeMode = Resume
    751 ResumptionExpected = Yes
    752 server = 18-alpn-preferred-over-npn-resumption-server-extra
    753 resume-server = 18-alpn-preferred-over-npn-resumption-resume-server-extra
    754 client = 18-alpn-preferred-over-npn-resumption-client-extra
    755 resume-client = 18-alpn-preferred-over-npn-resumption-client-extra
    756 
    757 [18-alpn-preferred-over-npn-resumption-server-extra]
    758 NPNProtocols = bar
    759 
    760 [18-alpn-preferred-over-npn-resumption-resume-server-extra]
    761 ALPNProtocols = foo
    762 NPNProtocols = baz
    763 
    764 [18-alpn-preferred-over-npn-resumption-client-extra]
    765 ALPNProtocols = foo
    766 NPNProtocols = bar,baz
    767 
    768 
    769 # ===========================================================
    770 
    771 [19-npn-used-if-alpn-not-supported-resumption]
    772 ssl_conf = 19-npn-used-if-alpn-not-supported-resumption-ssl
    773 
    774 [19-npn-used-if-alpn-not-supported-resumption-ssl]
    775 server = 19-npn-used-if-alpn-not-supported-resumption-server
    776 client = 19-npn-used-if-alpn-not-supported-resumption-client
    777 resume-server = 19-npn-used-if-alpn-not-supported-resumption-resume-server
    778 resume-client = 19-npn-used-if-alpn-not-supported-resumption-client
    779 
    780 [19-npn-used-if-alpn-not-supported-resumption-server]
    781 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    782 CipherString = DEFAULT
    783 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    784 
    785 [19-npn-used-if-alpn-not-supported-resumption-resume-server]
    786 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
    787 CipherString = DEFAULT
    788 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
    789 
    790 [19-npn-used-if-alpn-not-supported-resumption-client]
    791 CipherString = DEFAULT
    792 MaxProtocol = TLSv1.2
    793 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
    794 VerifyMode = Peer
    795 
    796 [test-19]
    797 ExpectedNPNProtocol = baz
    798 HandshakeMode = Resume
    799 ResumptionExpected = Yes
    800 server = 19-npn-used-if-alpn-not-supported-resumption-server-extra
    801 resume-server = 19-npn-used-if-alpn-not-supported-resumption-resume-server-extra
    802 client = 19-npn-used-if-alpn-not-supported-resumption-client-extra
    803 resume-client = 19-npn-used-if-alpn-not-supported-resumption-client-extra
    804 
    805 [19-npn-used-if-alpn-not-supported-resumption-server-extra]
    806 ALPNProtocols = foo
    807 NPNProtocols = bar
    808 
    809 [19-npn-used-if-alpn-not-supported-resumption-resume-server-extra]
    810 NPNProtocols = baz
    811 
    812 [19-npn-used-if-alpn-not-supported-resumption-client-extra]
    813 ALPNProtocols = foo
    814 NPNProtocols = bar,baz
    815 
    816 
    817