1 1.1 christos # Generated with generate_ssl_tests.pl 2 1.1 christos 3 1.1 christos num_tests = 14 4 1.1 christos 5 1.1 christos test-0 = 0-renegotiate-client-no-resume 6 1.1 christos test-1 = 1-renegotiate-client-resume 7 1.1 christos test-2 = 2-renegotiate-server-no-resume 8 1.1 christos test-3 = 3-renegotiate-server-resume 9 1.1 christos test-4 = 4-renegotiate-client-auth-require 10 1.1 christos test-5 = 5-renegotiate-client-auth-once 11 1.1 christos test-6 = 6-renegotiate-aead-to-non-aead 12 1.1 christos test-7 = 7-renegotiate-non-aead-to-aead 13 1.1 christos test-8 = 8-renegotiate-non-aead-to-non-aead 14 1.1 christos test-9 = 9-renegotiate-aead-to-aead 15 1.1 christos test-10 = 10-no-renegotiation-server-by-client 16 1.1 christos test-11 = 11-no-renegotiation-server-by-server 17 1.1 christos test-12 = 12-no-renegotiation-client-by-server 18 1.1 christos test-13 = 13-no-renegotiation-client-by-client 19 1.1 christos # =========================================================== 20 1.1 christos 21 1.1 christos [0-renegotiate-client-no-resume] 22 1.1 christos ssl_conf = 0-renegotiate-client-no-resume-ssl 23 1.1 christos 24 1.1 christos [0-renegotiate-client-no-resume-ssl] 25 1.1 christos server = 0-renegotiate-client-no-resume-server 26 1.1 christos client = 0-renegotiate-client-no-resume-client 27 1.1 christos 28 1.1 christos [0-renegotiate-client-no-resume-server] 29 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 30 1.1 christos CipherString = DEFAULT 31 1.1 christos MaxProtocol = TLSv1.2 32 1.1 christos Options = NoResumptionOnRenegotiation 33 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 34 1.1 christos 35 1.1 christos [0-renegotiate-client-no-resume-client] 36 1.1 christos CipherString = DEFAULT 37 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 38 1.1 christos VerifyMode = Peer 39 1.1 christos 40 1.1 christos [test-0] 41 1.1 christos ExpectedResult = Success 42 1.1 christos HandshakeMode = RenegotiateClient 43 1.1 christos Method = TLS 44 1.1 christos ResumptionExpected = No 45 1.1 christos 46 1.1 christos 47 1.1 christos # =========================================================== 48 1.1 christos 49 1.1 christos [1-renegotiate-client-resume] 50 1.1 christos ssl_conf = 1-renegotiate-client-resume-ssl 51 1.1 christos 52 1.1 christos [1-renegotiate-client-resume-ssl] 53 1.1 christos server = 1-renegotiate-client-resume-server 54 1.1 christos client = 1-renegotiate-client-resume-client 55 1.1 christos 56 1.1 christos [1-renegotiate-client-resume-server] 57 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 58 1.1 christos CipherString = DEFAULT 59 1.1 christos MaxProtocol = TLSv1.2 60 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 61 1.1 christos 62 1.1 christos [1-renegotiate-client-resume-client] 63 1.1 christos CipherString = DEFAULT 64 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 65 1.1 christos VerifyMode = Peer 66 1.1 christos 67 1.1 christos [test-1] 68 1.1 christos ExpectedResult = Success 69 1.1 christos HandshakeMode = RenegotiateClient 70 1.1 christos Method = TLS 71 1.1 christos ResumptionExpected = Yes 72 1.1 christos 73 1.1 christos 74 1.1 christos # =========================================================== 75 1.1 christos 76 1.1 christos [2-renegotiate-server-no-resume] 77 1.1 christos ssl_conf = 2-renegotiate-server-no-resume-ssl 78 1.1 christos 79 1.1 christos [2-renegotiate-server-no-resume-ssl] 80 1.1 christos server = 2-renegotiate-server-no-resume-server 81 1.1 christos client = 2-renegotiate-server-no-resume-client 82 1.1 christos 83 1.1 christos [2-renegotiate-server-no-resume-server] 84 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 85 1.1 christos CipherString = DEFAULT 86 1.1 christos MaxProtocol = TLSv1.2 87 1.1 christos Options = NoResumptionOnRenegotiation 88 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 89 1.1 christos 90 1.1 christos [2-renegotiate-server-no-resume-client] 91 1.1 christos CipherString = DEFAULT 92 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 93 1.1 christos VerifyMode = Peer 94 1.1 christos 95 1.1 christos [test-2] 96 1.1 christos ExpectedResult = Success 97 1.1 christos HandshakeMode = RenegotiateServer 98 1.1 christos Method = TLS 99 1.1 christos ResumptionExpected = No 100 1.1 christos 101 1.1 christos 102 1.1 christos # =========================================================== 103 1.1 christos 104 1.1 christos [3-renegotiate-server-resume] 105 1.1 christos ssl_conf = 3-renegotiate-server-resume-ssl 106 1.1 christos 107 1.1 christos [3-renegotiate-server-resume-ssl] 108 1.1 christos server = 3-renegotiate-server-resume-server 109 1.1 christos client = 3-renegotiate-server-resume-client 110 1.1 christos 111 1.1 christos [3-renegotiate-server-resume-server] 112 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 113 1.1 christos CipherString = DEFAULT 114 1.1 christos MaxProtocol = TLSv1.2 115 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 116 1.1 christos 117 1.1 christos [3-renegotiate-server-resume-client] 118 1.1 christos CipherString = DEFAULT 119 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 120 1.1 christos VerifyMode = Peer 121 1.1 christos 122 1.1 christos [test-3] 123 1.1 christos ExpectedResult = Success 124 1.1 christos HandshakeMode = RenegotiateServer 125 1.1 christos Method = TLS 126 1.1 christos ResumptionExpected = Yes 127 1.1 christos 128 1.1 christos 129 1.1 christos # =========================================================== 130 1.1 christos 131 1.1 christos [4-renegotiate-client-auth-require] 132 1.1 christos ssl_conf = 4-renegotiate-client-auth-require-ssl 133 1.1 christos 134 1.1 christos [4-renegotiate-client-auth-require-ssl] 135 1.1 christos server = 4-renegotiate-client-auth-require-server 136 1.1 christos client = 4-renegotiate-client-auth-require-client 137 1.1 christos 138 1.1 christos [4-renegotiate-client-auth-require-server] 139 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 140 1.1 christos CipherString = DEFAULT 141 1.1 christos MaxProtocol = TLSv1.2 142 1.1 christos Options = NoResumptionOnRenegotiation 143 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 144 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 145 1.1 christos VerifyMode = Require 146 1.1 christos 147 1.1 christos [4-renegotiate-client-auth-require-client] 148 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem 149 1.1 christos CipherString = DEFAULT 150 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem 151 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 152 1.1 christos VerifyMode = Peer 153 1.1 christos 154 1.1 christos [test-4] 155 1.1 christos ExpectedResult = Success 156 1.1 christos HandshakeMode = RenegotiateServer 157 1.1 christos Method = TLS 158 1.1 christos ResumptionExpected = No 159 1.1 christos 160 1.1 christos 161 1.1 christos # =========================================================== 162 1.1 christos 163 1.1 christos [5-renegotiate-client-auth-once] 164 1.1 christos ssl_conf = 5-renegotiate-client-auth-once-ssl 165 1.1 christos 166 1.1 christos [5-renegotiate-client-auth-once-ssl] 167 1.1 christos server = 5-renegotiate-client-auth-once-server 168 1.1 christos client = 5-renegotiate-client-auth-once-client 169 1.1 christos 170 1.1 christos [5-renegotiate-client-auth-once-server] 171 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 172 1.1 christos CipherString = DEFAULT 173 1.1 christos MaxProtocol = TLSv1.2 174 1.1 christos Options = NoResumptionOnRenegotiation 175 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 176 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 177 1.1 christos VerifyMode = Once 178 1.1 christos 179 1.1 christos [5-renegotiate-client-auth-once-client] 180 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem 181 1.1 christos CipherString = DEFAULT 182 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem 183 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 184 1.1 christos VerifyMode = Peer 185 1.1 christos 186 1.1 christos [test-5] 187 1.1 christos ExpectedResult = Success 188 1.1 christos HandshakeMode = RenegotiateServer 189 1.1 christos Method = TLS 190 1.1 christos ResumptionExpected = No 191 1.1 christos 192 1.1 christos 193 1.1 christos # =========================================================== 194 1.1 christos 195 1.1 christos [6-renegotiate-aead-to-non-aead] 196 1.1 christos ssl_conf = 6-renegotiate-aead-to-non-aead-ssl 197 1.1 christos 198 1.1 christos [6-renegotiate-aead-to-non-aead-ssl] 199 1.1 christos server = 6-renegotiate-aead-to-non-aead-server 200 1.1 christos client = 6-renegotiate-aead-to-non-aead-client 201 1.1 christos 202 1.1 christos [6-renegotiate-aead-to-non-aead-server] 203 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 204 1.1 christos CipherString = DEFAULT 205 1.1 christos Options = NoResumptionOnRenegotiation 206 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 207 1.1 christos 208 1.1 christos [6-renegotiate-aead-to-non-aead-client] 209 1.1 christos CipherString = AES128-GCM-SHA256 210 1.1 christos MaxProtocol = TLSv1.2 211 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 212 1.1 christos VerifyMode = Peer 213 1.1 christos 214 1.1 christos [test-6] 215 1.1 christos ExpectedResult = Success 216 1.1 christos HandshakeMode = RenegotiateClient 217 1.1 christos Method = TLS 218 1.1 christos ResumptionExpected = No 219 1.1 christos client = 6-renegotiate-aead-to-non-aead-client-extra 220 1.1 christos 221 1.1 christos [6-renegotiate-aead-to-non-aead-client-extra] 222 1.1 christos RenegotiateCiphers = AES128-SHA 223 1.1 christos 224 1.1 christos 225 1.1 christos # =========================================================== 226 1.1 christos 227 1.1 christos [7-renegotiate-non-aead-to-aead] 228 1.1 christos ssl_conf = 7-renegotiate-non-aead-to-aead-ssl 229 1.1 christos 230 1.1 christos [7-renegotiate-non-aead-to-aead-ssl] 231 1.1 christos server = 7-renegotiate-non-aead-to-aead-server 232 1.1 christos client = 7-renegotiate-non-aead-to-aead-client 233 1.1 christos 234 1.1 christos [7-renegotiate-non-aead-to-aead-server] 235 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 236 1.1 christos CipherString = DEFAULT 237 1.1 christos Options = NoResumptionOnRenegotiation 238 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 239 1.1 christos 240 1.1 christos [7-renegotiate-non-aead-to-aead-client] 241 1.1 christos CipherString = AES128-SHA 242 1.1 christos MaxProtocol = TLSv1.2 243 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 244 1.1 christos VerifyMode = Peer 245 1.1 christos 246 1.1 christos [test-7] 247 1.1 christos ExpectedResult = Success 248 1.1 christos HandshakeMode = RenegotiateClient 249 1.1 christos Method = TLS 250 1.1 christos ResumptionExpected = No 251 1.1 christos client = 7-renegotiate-non-aead-to-aead-client-extra 252 1.1 christos 253 1.1 christos [7-renegotiate-non-aead-to-aead-client-extra] 254 1.1 christos RenegotiateCiphers = AES128-GCM-SHA256 255 1.1 christos 256 1.1 christos 257 1.1 christos # =========================================================== 258 1.1 christos 259 1.1 christos [8-renegotiate-non-aead-to-non-aead] 260 1.1 christos ssl_conf = 8-renegotiate-non-aead-to-non-aead-ssl 261 1.1 christos 262 1.1 christos [8-renegotiate-non-aead-to-non-aead-ssl] 263 1.1 christos server = 8-renegotiate-non-aead-to-non-aead-server 264 1.1 christos client = 8-renegotiate-non-aead-to-non-aead-client 265 1.1 christos 266 1.1 christos [8-renegotiate-non-aead-to-non-aead-server] 267 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 268 1.1 christos CipherString = DEFAULT 269 1.1 christos Options = NoResumptionOnRenegotiation 270 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 271 1.1 christos 272 1.1 christos [8-renegotiate-non-aead-to-non-aead-client] 273 1.1 christos CipherString = AES128-SHA 274 1.1 christos MaxProtocol = TLSv1.2 275 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 276 1.1 christos VerifyMode = Peer 277 1.1 christos 278 1.1 christos [test-8] 279 1.1 christos ExpectedResult = Success 280 1.1 christos HandshakeMode = RenegotiateClient 281 1.1 christos Method = TLS 282 1.1 christos ResumptionExpected = No 283 1.1 christos client = 8-renegotiate-non-aead-to-non-aead-client-extra 284 1.1 christos 285 1.1 christos [8-renegotiate-non-aead-to-non-aead-client-extra] 286 1.1 christos RenegotiateCiphers = AES256-SHA 287 1.1 christos 288 1.1 christos 289 1.1 christos # =========================================================== 290 1.1 christos 291 1.1 christos [9-renegotiate-aead-to-aead] 292 1.1 christos ssl_conf = 9-renegotiate-aead-to-aead-ssl 293 1.1 christos 294 1.1 christos [9-renegotiate-aead-to-aead-ssl] 295 1.1 christos server = 9-renegotiate-aead-to-aead-server 296 1.1 christos client = 9-renegotiate-aead-to-aead-client 297 1.1 christos 298 1.1 christos [9-renegotiate-aead-to-aead-server] 299 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 300 1.1 christos CipherString = DEFAULT 301 1.1 christos Options = NoResumptionOnRenegotiation 302 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 303 1.1 christos 304 1.1 christos [9-renegotiate-aead-to-aead-client] 305 1.1 christos CipherString = AES128-GCM-SHA256 306 1.1 christos MaxProtocol = TLSv1.2 307 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 308 1.1 christos VerifyMode = Peer 309 1.1 christos 310 1.1 christos [test-9] 311 1.1 christos ExpectedResult = Success 312 1.1 christos HandshakeMode = RenegotiateClient 313 1.1 christos Method = TLS 314 1.1 christos ResumptionExpected = No 315 1.1 christos client = 9-renegotiate-aead-to-aead-client-extra 316 1.1 christos 317 1.1 christos [9-renegotiate-aead-to-aead-client-extra] 318 1.1 christos RenegotiateCiphers = AES256-GCM-SHA384 319 1.1 christos 320 1.1 christos 321 1.1 christos # =========================================================== 322 1.1 christos 323 1.1 christos [10-no-renegotiation-server-by-client] 324 1.1 christos ssl_conf = 10-no-renegotiation-server-by-client-ssl 325 1.1 christos 326 1.1 christos [10-no-renegotiation-server-by-client-ssl] 327 1.1 christos server = 10-no-renegotiation-server-by-client-server 328 1.1 christos client = 10-no-renegotiation-server-by-client-client 329 1.1 christos 330 1.1 christos [10-no-renegotiation-server-by-client-server] 331 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 332 1.1 christos CipherString = DEFAULT 333 1.1 christos MaxProtocol = TLSv1.2 334 1.1 christos Options = NoRenegotiation 335 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 336 1.1 christos 337 1.1 christos [10-no-renegotiation-server-by-client-client] 338 1.1 christos CipherString = DEFAULT 339 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 340 1.1 christos VerifyMode = Peer 341 1.1 christos 342 1.1 christos [test-10] 343 1.1 christos ExpectedResult = ClientFail 344 1.1 christos HandshakeMode = RenegotiateClient 345 1.1 christos Method = TLS 346 1.1 christos ResumptionExpected = No 347 1.1 christos 348 1.1 christos 349 1.1 christos # =========================================================== 350 1.1 christos 351 1.1 christos [11-no-renegotiation-server-by-server] 352 1.1 christos ssl_conf = 11-no-renegotiation-server-by-server-ssl 353 1.1 christos 354 1.1 christos [11-no-renegotiation-server-by-server-ssl] 355 1.1 christos server = 11-no-renegotiation-server-by-server-server 356 1.1 christos client = 11-no-renegotiation-server-by-server-client 357 1.1 christos 358 1.1 christos [11-no-renegotiation-server-by-server-server] 359 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 360 1.1 christos CipherString = DEFAULT 361 1.1 christos MaxProtocol = TLSv1.2 362 1.1 christos Options = NoRenegotiation 363 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 364 1.1 christos 365 1.1 christos [11-no-renegotiation-server-by-server-client] 366 1.1 christos CipherString = DEFAULT 367 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 368 1.1 christos VerifyMode = Peer 369 1.1 christos 370 1.1 christos [test-11] 371 1.1 christos ExpectedResult = ServerFail 372 1.1 christos HandshakeMode = RenegotiateServer 373 1.1 christos Method = TLS 374 1.1 christos ResumptionExpected = No 375 1.1 christos 376 1.1 christos 377 1.1 christos # =========================================================== 378 1.1 christos 379 1.1 christos [12-no-renegotiation-client-by-server] 380 1.1 christos ssl_conf = 12-no-renegotiation-client-by-server-ssl 381 1.1 christos 382 1.1 christos [12-no-renegotiation-client-by-server-ssl] 383 1.1 christos server = 12-no-renegotiation-client-by-server-server 384 1.1 christos client = 12-no-renegotiation-client-by-server-client 385 1.1 christos 386 1.1 christos [12-no-renegotiation-client-by-server-server] 387 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 388 1.1 christos CipherString = DEFAULT 389 1.1 christos MaxProtocol = TLSv1.2 390 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 391 1.1 christos 392 1.1 christos [12-no-renegotiation-client-by-server-client] 393 1.1 christos CipherString = DEFAULT 394 1.1 christos Options = NoRenegotiation 395 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 396 1.1 christos VerifyMode = Peer 397 1.1 christos 398 1.1 christos [test-12] 399 1.1 christos ExpectedResult = ServerFail 400 1.1 christos HandshakeMode = RenegotiateServer 401 1.1 christos Method = TLS 402 1.1 christos ResumptionExpected = No 403 1.1 christos 404 1.1 christos 405 1.1 christos # =========================================================== 406 1.1 christos 407 1.1 christos [13-no-renegotiation-client-by-client] 408 1.1 christos ssl_conf = 13-no-renegotiation-client-by-client-ssl 409 1.1 christos 410 1.1 christos [13-no-renegotiation-client-by-client-ssl] 411 1.1 christos server = 13-no-renegotiation-client-by-client-server 412 1.1 christos client = 13-no-renegotiation-client-by-client-client 413 1.1 christos 414 1.1 christos [13-no-renegotiation-client-by-client-server] 415 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 416 1.1 christos CipherString = DEFAULT 417 1.1 christos MaxProtocol = TLSv1.2 418 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 419 1.1 christos 420 1.1 christos [13-no-renegotiation-client-by-client-client] 421 1.1 christos CipherString = DEFAULT 422 1.1 christos Options = NoRenegotiation 423 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 424 1.1 christos VerifyMode = Peer 425 1.1 christos 426 1.1 christos [test-13] 427 1.1 christos ExpectedResult = ClientFail 428 1.1 christos HandshakeMode = RenegotiateClient 429 1.1 christos Method = TLS 430 1.1 christos ResumptionExpected = No 431 1.1 christos 432 1.1 christos 433