1 1.1 christos # Generated with generate_ssl_tests.pl 2 1.1 christos 3 1.1 christos num_tests = 56 4 1.1 christos 5 1.1 christos test-0 = 0-ECDSA CipherString Selection 6 1.1 christos test-1 = 1-ECDSA CipherString Selection 7 1.1 christos test-2 = 2-ECDSA CipherString Selection 8 1.1 christos test-3 = 3-Ed25519 CipherString and Signature Algorithm Selection 9 1.1 christos test-4 = 4-Ed448 CipherString and Signature Algorithm Selection 10 1.1 christos test-5 = 5-ECDSA with brainpool 11 1.1 christos test-6 = 6-RSA CipherString Selection 12 1.1 christos test-7 = 7-RSA-PSS Certificate CipherString Selection 13 1.1 christos test-8 = 8-P-256 CipherString and Signature Algorithm Selection 14 1.1 christos test-9 = 9-Ed25519 CipherString and Curves Selection 15 1.1 christos test-10 = 10-Ed448 CipherString and Curves Selection 16 1.1 christos test-11 = 11-ECDSA CipherString Selection, no ECDSA certificate 17 1.1 christos test-12 = 12-ECDSA Signature Algorithm Selection 18 1.1 christos test-13 = 13-ECDSA Signature Algorithm Selection SHA384 19 1.1 christos test-14 = 14-ECDSA Signature Algorithm Selection SHA1 20 1.1 christos test-15 = 15-ECDSA Signature Algorithm Selection compressed point 21 1.1 christos test-16 = 16-ECDSA Signature Algorithm Selection, no ECDSA certificate 22 1.1 christos test-17 = 17-RSA Signature Algorithm Selection 23 1.1 christos test-18 = 18-RSA-PSS Signature Algorithm Selection 24 1.1 christos test-19 = 19-RSA-PSS Certificate Legacy Signature Algorithm Selection 25 1.1 christos test-20 = 20-RSA-PSS Certificate Unified Signature Algorithm Selection 26 1.1 christos test-21 = 21-Only RSA-PSS Certificate 27 1.1 christos test-22 = 22-Only RSA-PSS Certificate Valid Signature Algorithms 28 1.1 christos test-23 = 23-RSA-PSS Certificate, no PSS signature algorithms 29 1.1 christos test-24 = 24-Only RSA-PSS Restricted Certificate 30 1.1 christos test-25 = 25-RSA-PSS Restricted Certificate Valid Signature Algorithms 31 1.1 christos test-26 = 26-RSA-PSS Restricted Cert client prefers invalid Signature Algorithm 32 1.1 christos test-27 = 27-RSA-PSS Restricted Certificate Invalid Signature Algorithms 33 1.1 christos test-28 = 28-RSA key exchange with all RSA certificate types 34 1.1 christos test-29 = 29-RSA key exchange with only RSA-PSS certificate 35 1.1 christos test-30 = 30-Suite B P-256 Hash Algorithm Selection 36 1.1 christos test-31 = 31-Suite B P-384 Hash Algorithm Selection 37 1.1 christos test-32 = 32-TLS 1.2 Ed25519 Client Auth 38 1.1 christos test-33 = 33-TLS 1.2 Ed448 Client Auth 39 1.1 christos test-34 = 34-Only RSA-PSS Certificate, TLS v1.1 40 1.1 christos test-35 = 35-TLS 1.3 ECDSA Signature Algorithm Selection 41 1.1 christos test-36 = 36-TLS 1.3 ECDSA Signature Algorithm Selection compressed point 42 1.1 christos test-37 = 37-TLS 1.3 ECDSA Signature Algorithm Selection SHA1 43 1.1 christos test-38 = 38-TLS 1.3 ECDSA Signature Algorithm Selection with PSS 44 1.1 christos test-39 = 39-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS 45 1.1 christos test-40 = 40-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate 46 1.1 christos test-41 = 41-TLS 1.3 RSA Signature Algorithm Selection, no PSS 47 1.1 christos test-42 = 42-TLS 1.3 RSA-PSS Signature Algorithm Selection 48 1.1 christos test-43 = 43-TLS 1.3 Ed25519 Signature Algorithm Selection 49 1.1 christos test-44 = 44-TLS 1.3 Ed448 Signature Algorithm Selection 50 1.1 christos test-45 = 45-TLS 1.3 Ed25519 CipherString and Groups Selection 51 1.1 christos test-46 = 46-TLS 1.3 Ed448 CipherString and Groups Selection 52 1.1 christos test-47 = 47-TLS 1.3 RSA Client Auth Signature Algorithm Selection 53 1.1 christos test-48 = 48-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names 54 1.1 christos test-49 = 49-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection 55 1.1 christos test-50 = 50-TLS 1.3 Ed25519 Client Auth 56 1.1 christos test-51 = 51-TLS 1.3 Ed448 Client Auth 57 1.1 christos test-52 = 52-TLS 1.3 ECDSA with brainpool 58 1.1 christos test-53 = 53-TLS 1.2 DSA Certificate Test 59 1.1 christos test-54 = 54-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms 60 1.1 christos test-55 = 55-TLS 1.3 DSA Certificate Test 61 1.1 christos # =========================================================== 62 1.1 christos 63 1.1 christos [0-ECDSA CipherString Selection] 64 1.1 christos ssl_conf = 0-ECDSA CipherString Selection-ssl 65 1.1 christos 66 1.1 christos [0-ECDSA CipherString Selection-ssl] 67 1.1 christos server = 0-ECDSA CipherString Selection-server 68 1.1 christos client = 0-ECDSA CipherString Selection-client 69 1.1 christos 70 1.1 christos [0-ECDSA CipherString Selection-server] 71 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 72 1.1 christos CipherString = DEFAULT 73 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 74 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 75 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 76 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 77 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 78 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 79 1.1 christos MaxProtocol = TLSv1.2 80 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 81 1.1 christos 82 1.1 christos [0-ECDSA CipherString Selection-client] 83 1.1 christos CipherString = aECDSA 84 1.1 christos MaxProtocol = TLSv1.2 85 1.1 christos RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 86 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 87 1.1 christos VerifyMode = Peer 88 1.1 christos 89 1.1 christos [test-0] 90 1.1 christos ExpectedResult = Success 91 1.1 christos ExpectedServerCANames = empty 92 1.1 christos ExpectedServerCertType = P-256 93 1.1 christos ExpectedServerSignType = EC 94 1.1 christos 95 1.1 christos 96 1.1 christos # =========================================================== 97 1.1 christos 98 1.1 christos [1-ECDSA CipherString Selection] 99 1.1 christos ssl_conf = 1-ECDSA CipherString Selection-ssl 100 1.1 christos 101 1.1 christos [1-ECDSA CipherString Selection-ssl] 102 1.1 christos server = 1-ECDSA CipherString Selection-server 103 1.1 christos client = 1-ECDSA CipherString Selection-client 104 1.1 christos 105 1.1 christos [1-ECDSA CipherString Selection-server] 106 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 107 1.1 christos CipherString = DEFAULT 108 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 109 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 110 1.1 christos Groups = P-384 111 1.1 christos MaxProtocol = TLSv1.2 112 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 113 1.1 christos 114 1.1 christos [1-ECDSA CipherString Selection-client] 115 1.1 christos CipherString = aECDSA 116 1.1 christos Groups = P-256:P-384 117 1.1 christos MaxProtocol = TLSv1.2 118 1.1 christos RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 119 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 120 1.1 christos VerifyMode = Peer 121 1.1 christos 122 1.1 christos [test-1] 123 1.1 christos ExpectedResult = Success 124 1.1 christos ExpectedServerCANames = empty 125 1.1 christos ExpectedServerCertType = P-256 126 1.1 christos ExpectedServerSignType = EC 127 1.1 christos 128 1.1 christos 129 1.1 christos # =========================================================== 130 1.1 christos 131 1.1 christos [2-ECDSA CipherString Selection] 132 1.1 christos ssl_conf = 2-ECDSA CipherString Selection-ssl 133 1.1 christos 134 1.1 christos [2-ECDSA CipherString Selection-ssl] 135 1.1 christos server = 2-ECDSA CipherString Selection-server 136 1.1 christos client = 2-ECDSA CipherString Selection-client 137 1.1 christos 138 1.1 christos [2-ECDSA CipherString Selection-server] 139 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 140 1.1 christos CipherString = DEFAULT 141 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 142 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 143 1.1 christos Groups = P-256:P-384 144 1.1 christos MaxProtocol = TLSv1.2 145 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 146 1.1 christos 147 1.1 christos [2-ECDSA CipherString Selection-client] 148 1.1 christos CipherString = aECDSA 149 1.1 christos Groups = P-384 150 1.1 christos MaxProtocol = TLSv1.2 151 1.1 christos RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 152 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 153 1.1 christos VerifyMode = Peer 154 1.1 christos 155 1.1 christos [test-2] 156 1.1 christos ExpectedResult = ServerFail 157 1.1 christos 158 1.1 christos 159 1.1 christos # =========================================================== 160 1.1 christos 161 1.1 christos [3-Ed25519 CipherString and Signature Algorithm Selection] 162 1.1 christos ssl_conf = 3-Ed25519 CipherString and Signature Algorithm Selection-ssl 163 1.1 christos 164 1.1 christos [3-Ed25519 CipherString and Signature Algorithm Selection-ssl] 165 1.1 christos server = 3-Ed25519 CipherString and Signature Algorithm Selection-server 166 1.1 christos client = 3-Ed25519 CipherString and Signature Algorithm Selection-client 167 1.1 christos 168 1.1 christos [3-Ed25519 CipherString and Signature Algorithm Selection-server] 169 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 170 1.1 christos CipherString = DEFAULT 171 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 172 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 173 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 174 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 175 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 176 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 177 1.1 christos MaxProtocol = TLSv1.2 178 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 179 1.1 christos 180 1.1 christos [3-Ed25519 CipherString and Signature Algorithm Selection-client] 181 1.1 christos CipherString = aECDSA 182 1.1 christos MaxProtocol = TLSv1.2 183 1.1 christos RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 184 1.1 christos SignatureAlgorithms = ed25519:ECDSA+SHA256 185 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 186 1.1 christos VerifyMode = Peer 187 1.1 christos 188 1.1 christos [test-3] 189 1.1 christos ExpectedResult = Success 190 1.1 christos ExpectedServerCANames = empty 191 1.1 christos ExpectedServerCertType = Ed25519 192 1.1 christos ExpectedServerSignType = Ed25519 193 1.1 christos 194 1.1 christos 195 1.1 christos # =========================================================== 196 1.1 christos 197 1.1 christos [4-Ed448 CipherString and Signature Algorithm Selection] 198 1.1 christos ssl_conf = 4-Ed448 CipherString and Signature Algorithm Selection-ssl 199 1.1 christos 200 1.1 christos [4-Ed448 CipherString and Signature Algorithm Selection-ssl] 201 1.1 christos server = 4-Ed448 CipherString and Signature Algorithm Selection-server 202 1.1 christos client = 4-Ed448 CipherString and Signature Algorithm Selection-client 203 1.1 christos 204 1.1 christos [4-Ed448 CipherString and Signature Algorithm Selection-server] 205 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 206 1.1 christos CipherString = DEFAULT 207 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 208 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 209 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 210 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 211 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 212 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 213 1.1 christos MaxProtocol = TLSv1.2 214 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 215 1.1 christos 216 1.1 christos [4-Ed448 CipherString and Signature Algorithm Selection-client] 217 1.1 christos CipherString = aECDSA 218 1.1 christos MaxProtocol = TLSv1.2 219 1.1 christos RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 220 1.1 christos SignatureAlgorithms = ed448:ECDSA+SHA256 221 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 222 1.1 christos VerifyMode = Peer 223 1.1 christos 224 1.1 christos [test-4] 225 1.1 christos ExpectedResult = Success 226 1.1 christos ExpectedServerCANames = empty 227 1.1 christos ExpectedServerCertType = Ed448 228 1.1 christos ExpectedServerSignType = Ed448 229 1.1 christos 230 1.1 christos 231 1.1 christos # =========================================================== 232 1.1 christos 233 1.1 christos [5-ECDSA with brainpool] 234 1.1 christos ssl_conf = 5-ECDSA with brainpool-ssl 235 1.1 christos 236 1.1 christos [5-ECDSA with brainpool-ssl] 237 1.1 christos server = 5-ECDSA with brainpool-server 238 1.1 christos client = 5-ECDSA with brainpool-client 239 1.1 christos 240 1.1 christos [5-ECDSA with brainpool-server] 241 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-brainpoolP256r1-cert.pem 242 1.1 christos CipherString = DEFAULT 243 1.1 christos Groups = brainpoolP256r1 244 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-brainpoolP256r1-key.pem 245 1.1 christos 246 1.1 christos [5-ECDSA with brainpool-client] 247 1.1 christos CipherString = aECDSA 248 1.1 christos Groups = brainpoolP256r1 249 1.1 christos RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 250 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 251 1.1 christos VerifyMode = Peer 252 1.1 christos 253 1.1 christos [test-5] 254 1.1 christos ExpectedResult = Success 255 1.1 christos ExpectedServerCANames = empty 256 1.1 christos ExpectedServerCertType = brainpoolP256r1 257 1.1 christos ExpectedServerSignType = EC 258 1.1 christos 259 1.1 christos 260 1.1 christos # =========================================================== 261 1.1 christos 262 1.1 christos [6-RSA CipherString Selection] 263 1.1 christos ssl_conf = 6-RSA CipherString Selection-ssl 264 1.1 christos 265 1.1 christos [6-RSA CipherString Selection-ssl] 266 1.1 christos server = 6-RSA CipherString Selection-server 267 1.1 christos client = 6-RSA CipherString Selection-client 268 1.1 christos 269 1.1 christos [6-RSA CipherString Selection-server] 270 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 271 1.1 christos CipherString = DEFAULT 272 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 273 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 274 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 275 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 276 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 277 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 278 1.1 christos MaxProtocol = TLSv1.2 279 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 280 1.1 christos 281 1.1 christos [6-RSA CipherString Selection-client] 282 1.1 christos CipherString = aRSA 283 1.1 christos MaxProtocol = TLSv1.2 284 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 285 1.1 christos VerifyMode = Peer 286 1.1 christos 287 1.1 christos [test-6] 288 1.1 christos ExpectedResult = Success 289 1.1 christos ExpectedServerCertType = RSA 290 1.1 christos ExpectedServerSignType = RSA-PSS 291 1.1 christos 292 1.1 christos 293 1.1 christos # =========================================================== 294 1.1 christos 295 1.1 christos [7-RSA-PSS Certificate CipherString Selection] 296 1.1 christos ssl_conf = 7-RSA-PSS Certificate CipherString Selection-ssl 297 1.1 christos 298 1.1 christos [7-RSA-PSS Certificate CipherString Selection-ssl] 299 1.1 christos server = 7-RSA-PSS Certificate CipherString Selection-server 300 1.1 christos client = 7-RSA-PSS Certificate CipherString Selection-client 301 1.1 christos 302 1.1 christos [7-RSA-PSS Certificate CipherString Selection-server] 303 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 304 1.1 christos CipherString = DEFAULT 305 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 306 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 307 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 308 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 309 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 310 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 311 1.1 christos MaxProtocol = TLSv1.2 312 1.1 christos PSS.Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-cert.pem 313 1.1 christos PSS.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-key.pem 314 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 315 1.1 christos 316 1.1 christos [7-RSA-PSS Certificate CipherString Selection-client] 317 1.1 christos CipherString = aRSA 318 1.1 christos MaxProtocol = TLSv1.2 319 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 320 1.1 christos VerifyMode = Peer 321 1.1 christos 322 1.1 christos [test-7] 323 1.1 christos ExpectedResult = Success 324 1.1 christos ExpectedServerCertType = RSA-PSS 325 1.1 christos ExpectedServerSignType = RSA-PSS 326 1.1 christos 327 1.1 christos 328 1.1 christos # =========================================================== 329 1.1 christos 330 1.1 christos [8-P-256 CipherString and Signature Algorithm Selection] 331 1.1 christos ssl_conf = 8-P-256 CipherString and Signature Algorithm Selection-ssl 332 1.1 christos 333 1.1 christos [8-P-256 CipherString and Signature Algorithm Selection-ssl] 334 1.1 christos server = 8-P-256 CipherString and Signature Algorithm Selection-server 335 1.1 christos client = 8-P-256 CipherString and Signature Algorithm Selection-client 336 1.1 christos 337 1.1 christos [8-P-256 CipherString and Signature Algorithm Selection-server] 338 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 339 1.1 christos CipherString = DEFAULT 340 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 341 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 342 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 343 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 344 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 345 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 346 1.1 christos MaxProtocol = TLSv1.2 347 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 348 1.1 christos 349 1.1 christos [8-P-256 CipherString and Signature Algorithm Selection-client] 350 1.1 christos CipherString = aECDSA 351 1.1 christos MaxProtocol = TLSv1.2 352 1.1 christos SignatureAlgorithms = ECDSA+SHA256:ed25519 353 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 354 1.1 christos VerifyMode = Peer 355 1.1 christos 356 1.1 christos [test-8] 357 1.1 christos ExpectedResult = Success 358 1.1 christos ExpectedServerCertType = P-256 359 1.1 christos ExpectedServerSignHash = SHA256 360 1.1 christos ExpectedServerSignType = EC 361 1.1 christos 362 1.1 christos 363 1.1 christos # =========================================================== 364 1.1 christos 365 1.1 christos [9-Ed25519 CipherString and Curves Selection] 366 1.1 christos ssl_conf = 9-Ed25519 CipherString and Curves Selection-ssl 367 1.1 christos 368 1.1 christos [9-Ed25519 CipherString and Curves Selection-ssl] 369 1.1 christos server = 9-Ed25519 CipherString and Curves Selection-server 370 1.1 christos client = 9-Ed25519 CipherString and Curves Selection-client 371 1.1 christos 372 1.1 christos [9-Ed25519 CipherString and Curves Selection-server] 373 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 374 1.1 christos CipherString = DEFAULT 375 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 376 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 377 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 378 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 379 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 380 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 381 1.1 christos MaxProtocol = TLSv1.2 382 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 383 1.1 christos 384 1.1 christos [9-Ed25519 CipherString and Curves Selection-client] 385 1.1 christos CipherString = aECDSA 386 1.1 christos Curves = X25519 387 1.1 christos MaxProtocol = TLSv1.2 388 1.1 christos SignatureAlgorithms = ECDSA+SHA256:ed25519 389 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 390 1.1 christos VerifyMode = Peer 391 1.1 christos 392 1.1 christos [test-9] 393 1.1 christos ExpectedResult = Success 394 1.1 christos ExpectedServerCertType = Ed25519 395 1.1 christos ExpectedServerSignType = Ed25519 396 1.1 christos 397 1.1 christos 398 1.1 christos # =========================================================== 399 1.1 christos 400 1.1 christos [10-Ed448 CipherString and Curves Selection] 401 1.1 christos ssl_conf = 10-Ed448 CipherString and Curves Selection-ssl 402 1.1 christos 403 1.1 christos [10-Ed448 CipherString and Curves Selection-ssl] 404 1.1 christos server = 10-Ed448 CipherString and Curves Selection-server 405 1.1 christos client = 10-Ed448 CipherString and Curves Selection-client 406 1.1 christos 407 1.1 christos [10-Ed448 CipherString and Curves Selection-server] 408 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 409 1.1 christos CipherString = DEFAULT 410 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 411 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 412 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 413 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 414 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 415 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 416 1.1 christos MaxProtocol = TLSv1.2 417 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 418 1.1 christos 419 1.1 christos [10-Ed448 CipherString and Curves Selection-client] 420 1.1 christos CipherString = aECDSA 421 1.1 christos Curves = X448 422 1.1 christos MaxProtocol = TLSv1.2 423 1.1 christos SignatureAlgorithms = ECDSA+SHA256:ed448 424 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 425 1.1 christos VerifyMode = Peer 426 1.1 christos 427 1.1 christos [test-10] 428 1.1 christos ExpectedResult = Success 429 1.1 christos ExpectedServerCertType = Ed448 430 1.1 christos ExpectedServerSignType = Ed448 431 1.1 christos 432 1.1 christos 433 1.1 christos # =========================================================== 434 1.1 christos 435 1.1 christos [11-ECDSA CipherString Selection, no ECDSA certificate] 436 1.1 christos ssl_conf = 11-ECDSA CipherString Selection, no ECDSA certificate-ssl 437 1.1 christos 438 1.1 christos [11-ECDSA CipherString Selection, no ECDSA certificate-ssl] 439 1.1 christos server = 11-ECDSA CipherString Selection, no ECDSA certificate-server 440 1.1 christos client = 11-ECDSA CipherString Selection, no ECDSA certificate-client 441 1.1 christos 442 1.1 christos [11-ECDSA CipherString Selection, no ECDSA certificate-server] 443 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 444 1.1 christos CipherString = DEFAULT 445 1.1 christos MaxProtocol = TLSv1.2 446 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 447 1.1 christos 448 1.1 christos [11-ECDSA CipherString Selection, no ECDSA certificate-client] 449 1.1 christos CipherString = aECDSA 450 1.1 christos MaxProtocol = TLSv1.2 451 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 452 1.1 christos VerifyMode = Peer 453 1.1 christos 454 1.1 christos [test-11] 455 1.1 christos ExpectedResult = ServerFail 456 1.1 christos 457 1.1 christos 458 1.1 christos # =========================================================== 459 1.1 christos 460 1.1 christos [12-ECDSA Signature Algorithm Selection] 461 1.1 christos ssl_conf = 12-ECDSA Signature Algorithm Selection-ssl 462 1.1 christos 463 1.1 christos [12-ECDSA Signature Algorithm Selection-ssl] 464 1.1 christos server = 12-ECDSA Signature Algorithm Selection-server 465 1.1 christos client = 12-ECDSA Signature Algorithm Selection-client 466 1.1 christos 467 1.1 christos [12-ECDSA Signature Algorithm Selection-server] 468 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 469 1.1 christos CipherString = DEFAULT 470 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 471 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 472 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 473 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 474 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 475 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 476 1.1 christos MaxProtocol = TLSv1.2 477 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 478 1.1 christos 479 1.1 christos [12-ECDSA Signature Algorithm Selection-client] 480 1.1 christos CipherString = DEFAULT 481 1.1 christos SignatureAlgorithms = ECDSA+SHA256 482 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 483 1.1 christos VerifyMode = Peer 484 1.1 christos 485 1.1 christos [test-12] 486 1.1 christos ExpectedResult = Success 487 1.1 christos ExpectedServerCertType = P-256 488 1.1 christos ExpectedServerSignHash = SHA256 489 1.1 christos ExpectedServerSignType = EC 490 1.1 christos 491 1.1 christos 492 1.1 christos # =========================================================== 493 1.1 christos 494 1.1 christos [13-ECDSA Signature Algorithm Selection SHA384] 495 1.1 christos ssl_conf = 13-ECDSA Signature Algorithm Selection SHA384-ssl 496 1.1 christos 497 1.1 christos [13-ECDSA Signature Algorithm Selection SHA384-ssl] 498 1.1 christos server = 13-ECDSA Signature Algorithm Selection SHA384-server 499 1.1 christos client = 13-ECDSA Signature Algorithm Selection SHA384-client 500 1.1 christos 501 1.1 christos [13-ECDSA Signature Algorithm Selection SHA384-server] 502 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 503 1.1 christos CipherString = DEFAULT 504 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 505 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 506 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 507 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 508 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 509 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 510 1.1 christos MaxProtocol = TLSv1.2 511 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 512 1.1 christos 513 1.1 christos [13-ECDSA Signature Algorithm Selection SHA384-client] 514 1.1 christos CipherString = DEFAULT 515 1.1 christos SignatureAlgorithms = ECDSA+SHA384 516 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 517 1.1 christos VerifyMode = Peer 518 1.1 christos 519 1.1 christos [test-13] 520 1.1 christos ExpectedResult = Success 521 1.1 christos ExpectedServerCertType = P-256 522 1.1 christos ExpectedServerSignHash = SHA384 523 1.1 christos ExpectedServerSignType = EC 524 1.1 christos 525 1.1 christos 526 1.1 christos # =========================================================== 527 1.1 christos 528 1.1 christos [14-ECDSA Signature Algorithm Selection SHA1] 529 1.1 christos ssl_conf = 14-ECDSA Signature Algorithm Selection SHA1-ssl 530 1.1 christos 531 1.1 christos [14-ECDSA Signature Algorithm Selection SHA1-ssl] 532 1.1 christos server = 14-ECDSA Signature Algorithm Selection SHA1-server 533 1.1 christos client = 14-ECDSA Signature Algorithm Selection SHA1-client 534 1.1 christos 535 1.1 christos [14-ECDSA Signature Algorithm Selection SHA1-server] 536 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 537 1.1 christos CipherString = DEFAULT 538 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 539 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 540 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 541 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 542 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 543 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 544 1.1 christos MaxProtocol = TLSv1.2 545 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 546 1.1 christos 547 1.1 christos [14-ECDSA Signature Algorithm Selection SHA1-client] 548 1.1 christos CipherString = DEFAULT 549 1.1 christos SignatureAlgorithms = ECDSA+SHA1 550 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 551 1.1 christos VerifyMode = Peer 552 1.1 christos 553 1.1 christos [test-14] 554 1.1 christos ExpectedResult = Success 555 1.1 christos ExpectedServerCertType = P-256 556 1.1 christos ExpectedServerSignHash = SHA1 557 1.1 christos ExpectedServerSignType = EC 558 1.1 christos 559 1.1 christos 560 1.1 christos # =========================================================== 561 1.1 christos 562 1.1 christos [15-ECDSA Signature Algorithm Selection compressed point] 563 1.1 christos ssl_conf = 15-ECDSA Signature Algorithm Selection compressed point-ssl 564 1.1 christos 565 1.1 christos [15-ECDSA Signature Algorithm Selection compressed point-ssl] 566 1.1 christos server = 15-ECDSA Signature Algorithm Selection compressed point-server 567 1.1 christos client = 15-ECDSA Signature Algorithm Selection compressed point-client 568 1.1 christos 569 1.1 christos [15-ECDSA Signature Algorithm Selection compressed point-server] 570 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 571 1.1 christos CipherString = DEFAULT 572 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-cecdsa-cert.pem 573 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-cecdsa-key.pem 574 1.1 christos MaxProtocol = TLSv1.2 575 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 576 1.1 christos 577 1.1 christos [15-ECDSA Signature Algorithm Selection compressed point-client] 578 1.1 christos CipherString = DEFAULT 579 1.1 christos SignatureAlgorithms = ECDSA+SHA256 580 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 581 1.1 christos VerifyMode = Peer 582 1.1 christos 583 1.1 christos [test-15] 584 1.1 christos ExpectedResult = Success 585 1.1 christos ExpectedServerCertType = P-256 586 1.1 christos ExpectedServerSignHash = SHA256 587 1.1 christos ExpectedServerSignType = EC 588 1.1 christos 589 1.1 christos 590 1.1 christos # =========================================================== 591 1.1 christos 592 1.1 christos [16-ECDSA Signature Algorithm Selection, no ECDSA certificate] 593 1.1 christos ssl_conf = 16-ECDSA Signature Algorithm Selection, no ECDSA certificate-ssl 594 1.1 christos 595 1.1 christos [16-ECDSA Signature Algorithm Selection, no ECDSA certificate-ssl] 596 1.1 christos server = 16-ECDSA Signature Algorithm Selection, no ECDSA certificate-server 597 1.1 christos client = 16-ECDSA Signature Algorithm Selection, no ECDSA certificate-client 598 1.1 christos 599 1.1 christos [16-ECDSA Signature Algorithm Selection, no ECDSA certificate-server] 600 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 601 1.1 christos CipherString = DEFAULT 602 1.1 christos MaxProtocol = TLSv1.2 603 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 604 1.1 christos 605 1.1 christos [16-ECDSA Signature Algorithm Selection, no ECDSA certificate-client] 606 1.1 christos CipherString = DEFAULT 607 1.1 christos SignatureAlgorithms = ECDSA+SHA256 608 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 609 1.1 christos VerifyMode = Peer 610 1.1 christos 611 1.1 christos [test-16] 612 1.1 christos ExpectedResult = ServerFail 613 1.1 christos 614 1.1 christos 615 1.1 christos # =========================================================== 616 1.1 christos 617 1.1 christos [17-RSA Signature Algorithm Selection] 618 1.1 christos ssl_conf = 17-RSA Signature Algorithm Selection-ssl 619 1.1 christos 620 1.1 christos [17-RSA Signature Algorithm Selection-ssl] 621 1.1 christos server = 17-RSA Signature Algorithm Selection-server 622 1.1 christos client = 17-RSA Signature Algorithm Selection-client 623 1.1 christos 624 1.1 christos [17-RSA Signature Algorithm Selection-server] 625 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 626 1.1 christos CipherString = DEFAULT 627 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 628 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 629 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 630 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 631 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 632 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 633 1.1 christos MaxProtocol = TLSv1.2 634 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 635 1.1 christos 636 1.1 christos [17-RSA Signature Algorithm Selection-client] 637 1.1 christos CipherString = DEFAULT 638 1.1 christos SignatureAlgorithms = RSA+SHA256 639 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 640 1.1 christos VerifyMode = Peer 641 1.1 christos 642 1.1 christos [test-17] 643 1.1 christos ExpectedResult = Success 644 1.1 christos ExpectedServerCertType = RSA 645 1.1 christos ExpectedServerSignHash = SHA256 646 1.1 christos ExpectedServerSignType = RSA 647 1.1 christos 648 1.1 christos 649 1.1 christos # =========================================================== 650 1.1 christos 651 1.1 christos [18-RSA-PSS Signature Algorithm Selection] 652 1.1 christos ssl_conf = 18-RSA-PSS Signature Algorithm Selection-ssl 653 1.1 christos 654 1.1 christos [18-RSA-PSS Signature Algorithm Selection-ssl] 655 1.1 christos server = 18-RSA-PSS Signature Algorithm Selection-server 656 1.1 christos client = 18-RSA-PSS Signature Algorithm Selection-client 657 1.1 christos 658 1.1 christos [18-RSA-PSS Signature Algorithm Selection-server] 659 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 660 1.1 christos CipherString = DEFAULT 661 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 662 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 663 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 664 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 665 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 666 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 667 1.1 christos MaxProtocol = TLSv1.2 668 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 669 1.1 christos 670 1.1 christos [18-RSA-PSS Signature Algorithm Selection-client] 671 1.1 christos CipherString = DEFAULT 672 1.1 christos SignatureAlgorithms = RSA-PSS+SHA256 673 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 674 1.1 christos VerifyMode = Peer 675 1.1 christos 676 1.1 christos [test-18] 677 1.1 christos ExpectedResult = Success 678 1.1 christos ExpectedServerCertType = RSA 679 1.1 christos ExpectedServerSignHash = SHA256 680 1.1 christos ExpectedServerSignType = RSA-PSS 681 1.1 christos 682 1.1 christos 683 1.1 christos # =========================================================== 684 1.1 christos 685 1.1 christos [19-RSA-PSS Certificate Legacy Signature Algorithm Selection] 686 1.1 christos ssl_conf = 19-RSA-PSS Certificate Legacy Signature Algorithm Selection-ssl 687 1.1 christos 688 1.1 christos [19-RSA-PSS Certificate Legacy Signature Algorithm Selection-ssl] 689 1.1 christos server = 19-RSA-PSS Certificate Legacy Signature Algorithm Selection-server 690 1.1 christos client = 19-RSA-PSS Certificate Legacy Signature Algorithm Selection-client 691 1.1 christos 692 1.1 christos [19-RSA-PSS Certificate Legacy Signature Algorithm Selection-server] 693 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 694 1.1 christos CipherString = DEFAULT 695 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 696 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 697 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 698 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 699 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 700 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 701 1.1 christos MaxProtocol = TLSv1.2 702 1.1 christos PSS.Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-cert.pem 703 1.1 christos PSS.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-key.pem 704 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 705 1.1 christos 706 1.1 christos [19-RSA-PSS Certificate Legacy Signature Algorithm Selection-client] 707 1.1 christos CipherString = DEFAULT 708 1.1 christos SignatureAlgorithms = RSA-PSS+SHA256 709 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 710 1.1 christos VerifyMode = Peer 711 1.1 christos 712 1.1 christos [test-19] 713 1.1 christos ExpectedResult = Success 714 1.1 christos ExpectedServerCertType = RSA 715 1.1 christos ExpectedServerSignHash = SHA256 716 1.1 christos ExpectedServerSignType = RSA-PSS 717 1.1 christos 718 1.1 christos 719 1.1 christos # =========================================================== 720 1.1 christos 721 1.1 christos [20-RSA-PSS Certificate Unified Signature Algorithm Selection] 722 1.1 christos ssl_conf = 20-RSA-PSS Certificate Unified Signature Algorithm Selection-ssl 723 1.1 christos 724 1.1 christos [20-RSA-PSS Certificate Unified Signature Algorithm Selection-ssl] 725 1.1 christos server = 20-RSA-PSS Certificate Unified Signature Algorithm Selection-server 726 1.1 christos client = 20-RSA-PSS Certificate Unified Signature Algorithm Selection-client 727 1.1 christos 728 1.1 christos [20-RSA-PSS Certificate Unified Signature Algorithm Selection-server] 729 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 730 1.1 christos CipherString = DEFAULT 731 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 732 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 733 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 734 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 735 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 736 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 737 1.1 christos MaxProtocol = TLSv1.2 738 1.1 christos PSS.Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-cert.pem 739 1.1 christos PSS.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-key.pem 740 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 741 1.1 christos 742 1.1 christos [20-RSA-PSS Certificate Unified Signature Algorithm Selection-client] 743 1.1 christos CipherString = DEFAULT 744 1.1 christos SignatureAlgorithms = rsa_pss_pss_sha256 745 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 746 1.1 christos VerifyMode = Peer 747 1.1 christos 748 1.1 christos [test-20] 749 1.1 christos ExpectedResult = Success 750 1.1 christos ExpectedServerCertType = RSA-PSS 751 1.1 christos ExpectedServerSignHash = SHA256 752 1.1 christos ExpectedServerSignType = RSA-PSS 753 1.1 christos 754 1.1 christos 755 1.1 christos # =========================================================== 756 1.1 christos 757 1.1 christos [21-Only RSA-PSS Certificate] 758 1.1 christos ssl_conf = 21-Only RSA-PSS Certificate-ssl 759 1.1 christos 760 1.1 christos [21-Only RSA-PSS Certificate-ssl] 761 1.1 christos server = 21-Only RSA-PSS Certificate-server 762 1.1 christos client = 21-Only RSA-PSS Certificate-client 763 1.1 christos 764 1.1 christos [21-Only RSA-PSS Certificate-server] 765 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-cert.pem 766 1.1 christos CipherString = DEFAULT 767 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-key.pem 768 1.1 christos 769 1.1 christos [21-Only RSA-PSS Certificate-client] 770 1.1 christos CipherString = DEFAULT 771 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 772 1.1 christos VerifyMode = Peer 773 1.1 christos 774 1.1 christos [test-21] 775 1.1 christos ExpectedResult = Success 776 1.1 christos ExpectedServerCertType = RSA-PSS 777 1.1 christos ExpectedServerSignHash = SHA256 778 1.1 christos ExpectedServerSignType = RSA-PSS 779 1.1 christos 780 1.1 christos 781 1.1 christos # =========================================================== 782 1.1 christos 783 1.1 christos [22-Only RSA-PSS Certificate Valid Signature Algorithms] 784 1.1 christos ssl_conf = 22-Only RSA-PSS Certificate Valid Signature Algorithms-ssl 785 1.1 christos 786 1.1 christos [22-Only RSA-PSS Certificate Valid Signature Algorithms-ssl] 787 1.1 christos server = 22-Only RSA-PSS Certificate Valid Signature Algorithms-server 788 1.1 christos client = 22-Only RSA-PSS Certificate Valid Signature Algorithms-client 789 1.1 christos 790 1.1 christos [22-Only RSA-PSS Certificate Valid Signature Algorithms-server] 791 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-cert.pem 792 1.1 christos CipherString = DEFAULT 793 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-key.pem 794 1.1 christos 795 1.1 christos [22-Only RSA-PSS Certificate Valid Signature Algorithms-client] 796 1.1 christos CipherString = DEFAULT 797 1.1 christos SignatureAlgorithms = rsa_pss_pss_sha512 798 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 799 1.1 christos VerifyMode = Peer 800 1.1 christos 801 1.1 christos [test-22] 802 1.1 christos ExpectedResult = Success 803 1.1 christos ExpectedServerCertType = RSA-PSS 804 1.1 christos ExpectedServerSignHash = SHA512 805 1.1 christos ExpectedServerSignType = RSA-PSS 806 1.1 christos 807 1.1 christos 808 1.1 christos # =========================================================== 809 1.1 christos 810 1.1 christos [23-RSA-PSS Certificate, no PSS signature algorithms] 811 1.1 christos ssl_conf = 23-RSA-PSS Certificate, no PSS signature algorithms-ssl 812 1.1 christos 813 1.1 christos [23-RSA-PSS Certificate, no PSS signature algorithms-ssl] 814 1.1 christos server = 23-RSA-PSS Certificate, no PSS signature algorithms-server 815 1.1 christos client = 23-RSA-PSS Certificate, no PSS signature algorithms-client 816 1.1 christos 817 1.1 christos [23-RSA-PSS Certificate, no PSS signature algorithms-server] 818 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-cert.pem 819 1.1 christos CipherString = DEFAULT 820 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-key.pem 821 1.1 christos 822 1.1 christos [23-RSA-PSS Certificate, no PSS signature algorithms-client] 823 1.1 christos CipherString = DEFAULT 824 1.1 christos SignatureAlgorithms = RSA+SHA256 825 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 826 1.1 christos VerifyMode = Peer 827 1.1 christos 828 1.1 christos [test-23] 829 1.1 christos ExpectedResult = ServerFail 830 1.1 christos 831 1.1 christos 832 1.1 christos # =========================================================== 833 1.1 christos 834 1.1 christos [24-Only RSA-PSS Restricted Certificate] 835 1.1 christos ssl_conf = 24-Only RSA-PSS Restricted Certificate-ssl 836 1.1 christos 837 1.1 christos [24-Only RSA-PSS Restricted Certificate-ssl] 838 1.1 christos server = 24-Only RSA-PSS Restricted Certificate-server 839 1.1 christos client = 24-Only RSA-PSS Restricted Certificate-client 840 1.1 christos 841 1.1 christos [24-Only RSA-PSS Restricted Certificate-server] 842 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-restrict-cert.pem 843 1.1 christos CipherString = DEFAULT 844 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-restrict-key.pem 845 1.1 christos 846 1.1 christos [24-Only RSA-PSS Restricted Certificate-client] 847 1.1 christos CipherString = DEFAULT 848 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 849 1.1 christos VerifyMode = Peer 850 1.1 christos 851 1.1 christos [test-24] 852 1.1 christos ExpectedResult = Success 853 1.1 christos ExpectedServerCertType = RSA-PSS 854 1.1 christos ExpectedServerSignHash = SHA256 855 1.1 christos ExpectedServerSignType = RSA-PSS 856 1.1 christos 857 1.1 christos 858 1.1 christos # =========================================================== 859 1.1 christos 860 1.1 christos [25-RSA-PSS Restricted Certificate Valid Signature Algorithms] 861 1.1 christos ssl_conf = 25-RSA-PSS Restricted Certificate Valid Signature Algorithms-ssl 862 1.1 christos 863 1.1 christos [25-RSA-PSS Restricted Certificate Valid Signature Algorithms-ssl] 864 1.1 christos server = 25-RSA-PSS Restricted Certificate Valid Signature Algorithms-server 865 1.1 christos client = 25-RSA-PSS Restricted Certificate Valid Signature Algorithms-client 866 1.1 christos 867 1.1 christos [25-RSA-PSS Restricted Certificate Valid Signature Algorithms-server] 868 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-restrict-cert.pem 869 1.1 christos CipherString = DEFAULT 870 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-restrict-key.pem 871 1.1 christos 872 1.1 christos [25-RSA-PSS Restricted Certificate Valid Signature Algorithms-client] 873 1.1 christos CipherString = DEFAULT 874 1.1 christos SignatureAlgorithms = rsa_pss_pss_sha256:rsa_pss_pss_sha512 875 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 876 1.1 christos VerifyMode = Peer 877 1.1 christos 878 1.1 christos [test-25] 879 1.1 christos ExpectedResult = Success 880 1.1 christos ExpectedServerCertType = RSA-PSS 881 1.1 christos ExpectedServerSignHash = SHA256 882 1.1 christos ExpectedServerSignType = RSA-PSS 883 1.1 christos 884 1.1 christos 885 1.1 christos # =========================================================== 886 1.1 christos 887 1.1 christos [26-RSA-PSS Restricted Cert client prefers invalid Signature Algorithm] 888 1.1 christos ssl_conf = 26-RSA-PSS Restricted Cert client prefers invalid Signature Algorithm-ssl 889 1.1 christos 890 1.1 christos [26-RSA-PSS Restricted Cert client prefers invalid Signature Algorithm-ssl] 891 1.1 christos server = 26-RSA-PSS Restricted Cert client prefers invalid Signature Algorithm-server 892 1.1 christos client = 26-RSA-PSS Restricted Cert client prefers invalid Signature Algorithm-client 893 1.1 christos 894 1.1 christos [26-RSA-PSS Restricted Cert client prefers invalid Signature Algorithm-server] 895 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-restrict-cert.pem 896 1.1 christos CipherString = DEFAULT 897 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-restrict-key.pem 898 1.1 christos 899 1.1 christos [26-RSA-PSS Restricted Cert client prefers invalid Signature Algorithm-client] 900 1.1 christos CipherString = DEFAULT 901 1.1 christos SignatureAlgorithms = rsa_pss_pss_sha512:rsa_pss_pss_sha256 902 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 903 1.1 christos VerifyMode = Peer 904 1.1 christos 905 1.1 christos [test-26] 906 1.1 christos ExpectedResult = Success 907 1.1 christos ExpectedServerCertType = RSA-PSS 908 1.1 christos ExpectedServerSignHash = SHA256 909 1.1 christos ExpectedServerSignType = RSA-PSS 910 1.1 christos 911 1.1 christos 912 1.1 christos # =========================================================== 913 1.1 christos 914 1.1 christos [27-RSA-PSS Restricted Certificate Invalid Signature Algorithms] 915 1.1 christos ssl_conf = 27-RSA-PSS Restricted Certificate Invalid Signature Algorithms-ssl 916 1.1 christos 917 1.1 christos [27-RSA-PSS Restricted Certificate Invalid Signature Algorithms-ssl] 918 1.1 christos server = 27-RSA-PSS Restricted Certificate Invalid Signature Algorithms-server 919 1.1 christos client = 27-RSA-PSS Restricted Certificate Invalid Signature Algorithms-client 920 1.1 christos 921 1.1 christos [27-RSA-PSS Restricted Certificate Invalid Signature Algorithms-server] 922 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-restrict-cert.pem 923 1.1 christos CipherString = DEFAULT 924 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-restrict-key.pem 925 1.1 christos 926 1.1 christos [27-RSA-PSS Restricted Certificate Invalid Signature Algorithms-client] 927 1.1 christos CipherString = DEFAULT 928 1.1 christos SignatureAlgorithms = rsa_pss_pss_sha512 929 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 930 1.1 christos VerifyMode = Peer 931 1.1 christos 932 1.1 christos [test-27] 933 1.1 christos ExpectedResult = ServerFail 934 1.1 christos 935 1.1 christos 936 1.1 christos # =========================================================== 937 1.1 christos 938 1.1 christos [28-RSA key exchange with all RSA certificate types] 939 1.1 christos ssl_conf = 28-RSA key exchange with all RSA certificate types-ssl 940 1.1 christos 941 1.1 christos [28-RSA key exchange with all RSA certificate types-ssl] 942 1.1 christos server = 28-RSA key exchange with all RSA certificate types-server 943 1.1 christos client = 28-RSA key exchange with all RSA certificate types-client 944 1.1 christos 945 1.1 christos [28-RSA key exchange with all RSA certificate types-server] 946 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 947 1.1 christos CipherString = DEFAULT 948 1.1 christos PSS.Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-cert.pem 949 1.1 christos PSS.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-key.pem 950 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 951 1.1 christos 952 1.1 christos [28-RSA key exchange with all RSA certificate types-client] 953 1.1 christos CipherString = kRSA 954 1.1 christos MaxProtocol = TLSv1.2 955 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 956 1.1 christos VerifyMode = Peer 957 1.1 christos 958 1.1 christos [test-28] 959 1.1 christos ExpectedResult = Success 960 1.1 christos ExpectedServerCertType = RSA 961 1.1 christos 962 1.1 christos 963 1.1 christos # =========================================================== 964 1.1 christos 965 1.1 christos [29-RSA key exchange with only RSA-PSS certificate] 966 1.1 christos ssl_conf = 29-RSA key exchange with only RSA-PSS certificate-ssl 967 1.1 christos 968 1.1 christos [29-RSA key exchange with only RSA-PSS certificate-ssl] 969 1.1 christos server = 29-RSA key exchange with only RSA-PSS certificate-server 970 1.1 christos client = 29-RSA key exchange with only RSA-PSS certificate-client 971 1.1 christos 972 1.1 christos [29-RSA key exchange with only RSA-PSS certificate-server] 973 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-cert.pem 974 1.1 christos CipherString = DEFAULT 975 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-key.pem 976 1.1 christos 977 1.1 christos [29-RSA key exchange with only RSA-PSS certificate-client] 978 1.1 christos CipherString = kRSA 979 1.1 christos MaxProtocol = TLSv1.2 980 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 981 1.1 christos VerifyMode = Peer 982 1.1 christos 983 1.1 christos [test-29] 984 1.1 christos ExpectedResult = ServerFail 985 1.1 christos 986 1.1 christos 987 1.1 christos # =========================================================== 988 1.1 christos 989 1.1 christos [30-Suite B P-256 Hash Algorithm Selection] 990 1.1 christos ssl_conf = 30-Suite B P-256 Hash Algorithm Selection-ssl 991 1.1 christos 992 1.1 christos [30-Suite B P-256 Hash Algorithm Selection-ssl] 993 1.1 christos server = 30-Suite B P-256 Hash Algorithm Selection-server 994 1.1 christos client = 30-Suite B P-256 Hash Algorithm Selection-client 995 1.1 christos 996 1.1 christos [30-Suite B P-256 Hash Algorithm Selection-server] 997 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 998 1.1 christos CipherString = SUITEB128 999 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/p256-server-cert.pem 1000 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/p256-server-key.pem 1001 1.1 christos MaxProtocol = TLSv1.2 1002 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1003 1.1 christos 1004 1.1 christos [30-Suite B P-256 Hash Algorithm Selection-client] 1005 1.1 christos CipherString = DEFAULT 1006 1.1 christos SignatureAlgorithms = ECDSA+SHA384:ECDSA+SHA256 1007 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/p384-root.pem 1008 1.1 christos VerifyMode = Peer 1009 1.1 christos 1010 1.1 christos [test-30] 1011 1.1 christos ExpectedResult = Success 1012 1.1 christos ExpectedServerCertType = P-256 1013 1.1 christos ExpectedServerSignHash = SHA256 1014 1.1 christos ExpectedServerSignType = EC 1015 1.1 christos 1016 1.1 christos 1017 1.1 christos # =========================================================== 1018 1.1 christos 1019 1.1 christos [31-Suite B P-384 Hash Algorithm Selection] 1020 1.1 christos ssl_conf = 31-Suite B P-384 Hash Algorithm Selection-ssl 1021 1.1 christos 1022 1.1 christos [31-Suite B P-384 Hash Algorithm Selection-ssl] 1023 1.1 christos server = 31-Suite B P-384 Hash Algorithm Selection-server 1024 1.1 christos client = 31-Suite B P-384 Hash Algorithm Selection-client 1025 1.1 christos 1026 1.1 christos [31-Suite B P-384 Hash Algorithm Selection-server] 1027 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1028 1.1 christos CipherString = SUITEB128 1029 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/p384-server-cert.pem 1030 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/p384-server-key.pem 1031 1.1 christos MaxProtocol = TLSv1.2 1032 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1033 1.1 christos 1034 1.1 christos [31-Suite B P-384 Hash Algorithm Selection-client] 1035 1.1 christos CipherString = DEFAULT 1036 1.1 christos SignatureAlgorithms = ECDSA+SHA256:ECDSA+SHA384 1037 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/p384-root.pem 1038 1.1 christos VerifyMode = Peer 1039 1.1 christos 1040 1.1 christos [test-31] 1041 1.1 christos ExpectedResult = Success 1042 1.1 christos ExpectedServerCertType = P-384 1043 1.1 christos ExpectedServerSignHash = SHA384 1044 1.1 christos ExpectedServerSignType = EC 1045 1.1 christos 1046 1.1 christos 1047 1.1 christos # =========================================================== 1048 1.1 christos 1049 1.1 christos [32-TLS 1.2 Ed25519 Client Auth] 1050 1.1 christos ssl_conf = 32-TLS 1.2 Ed25519 Client Auth-ssl 1051 1.1 christos 1052 1.1 christos [32-TLS 1.2 Ed25519 Client Auth-ssl] 1053 1.1 christos server = 32-TLS 1.2 Ed25519 Client Auth-server 1054 1.1 christos client = 32-TLS 1.2 Ed25519 Client Auth-client 1055 1.1 christos 1056 1.1 christos [32-TLS 1.2 Ed25519 Client Auth-server] 1057 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1058 1.1 christos CipherString = DEFAULT 1059 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1060 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1061 1.1 christos VerifyMode = Require 1062 1.1 christos 1063 1.1 christos [32-TLS 1.2 Ed25519 Client Auth-client] 1064 1.1 christos CipherString = DEFAULT 1065 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/client-ed25519-cert.pem 1066 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/client-ed25519-key.pem 1067 1.1 christos MaxProtocol = TLSv1.2 1068 1.1 christos MinProtocol = TLSv1.2 1069 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1070 1.1 christos VerifyMode = Peer 1071 1.1 christos 1072 1.1 christos [test-32] 1073 1.1 christos ExpectedClientCertType = Ed25519 1074 1.1 christos ExpectedClientSignType = Ed25519 1075 1.1 christos ExpectedResult = Success 1076 1.1 christos 1077 1.1 christos 1078 1.1 christos # =========================================================== 1079 1.1 christos 1080 1.1 christos [33-TLS 1.2 Ed448 Client Auth] 1081 1.1 christos ssl_conf = 33-TLS 1.2 Ed448 Client Auth-ssl 1082 1.1 christos 1083 1.1 christos [33-TLS 1.2 Ed448 Client Auth-ssl] 1084 1.1 christos server = 33-TLS 1.2 Ed448 Client Auth-server 1085 1.1 christos client = 33-TLS 1.2 Ed448 Client Auth-client 1086 1.1 christos 1087 1.1 christos [33-TLS 1.2 Ed448 Client Auth-server] 1088 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1089 1.1 christos CipherString = DEFAULT 1090 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1091 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1092 1.1 christos VerifyMode = Require 1093 1.1 christos 1094 1.1 christos [33-TLS 1.2 Ed448 Client Auth-client] 1095 1.1 christos CipherString = DEFAULT 1096 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/client-ed448-cert.pem 1097 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/client-ed448-key.pem 1098 1.1 christos MaxProtocol = TLSv1.2 1099 1.1 christos MinProtocol = TLSv1.2 1100 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1101 1.1 christos VerifyMode = Peer 1102 1.1 christos 1103 1.1 christos [test-33] 1104 1.1 christos ExpectedClientCertType = Ed448 1105 1.1 christos ExpectedClientSignType = Ed448 1106 1.1 christos ExpectedResult = Success 1107 1.1 christos 1108 1.1 christos 1109 1.1 christos # =========================================================== 1110 1.1 christos 1111 1.1 christos [34-Only RSA-PSS Certificate, TLS v1.1] 1112 1.1 christos ssl_conf = 34-Only RSA-PSS Certificate, TLS v1.1-ssl 1113 1.1 christos 1114 1.1 christos [34-Only RSA-PSS Certificate, TLS v1.1-ssl] 1115 1.1 christos server = 34-Only RSA-PSS Certificate, TLS v1.1-server 1116 1.1 christos client = 34-Only RSA-PSS Certificate, TLS v1.1-client 1117 1.1 christos 1118 1.1 christos [34-Only RSA-PSS Certificate, TLS v1.1-server] 1119 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-pss-cert.pem 1120 1.1 christos CipherString = DEFAULT 1121 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-pss-key.pem 1122 1.1 christos 1123 1.1 christos [34-Only RSA-PSS Certificate, TLS v1.1-client] 1124 1.1 christos CipherString = DEFAULT 1125 1.1 christos MaxProtocol = TLSv1.1 1126 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1127 1.1 christos VerifyMode = Peer 1128 1.1 christos 1129 1.1 christos [test-34] 1130 1.1 christos ExpectedResult = ServerFail 1131 1.1 christos 1132 1.1 christos 1133 1.1 christos # =========================================================== 1134 1.1 christos 1135 1.1 christos [35-TLS 1.3 ECDSA Signature Algorithm Selection] 1136 1.1 christos ssl_conf = 35-TLS 1.3 ECDSA Signature Algorithm Selection-ssl 1137 1.1 christos 1138 1.1 christos [35-TLS 1.3 ECDSA Signature Algorithm Selection-ssl] 1139 1.1 christos server = 35-TLS 1.3 ECDSA Signature Algorithm Selection-server 1140 1.1 christos client = 35-TLS 1.3 ECDSA Signature Algorithm Selection-client 1141 1.1 christos 1142 1.1 christos [35-TLS 1.3 ECDSA Signature Algorithm Selection-server] 1143 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1144 1.1 christos CipherString = DEFAULT 1145 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1146 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1147 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1148 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1149 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1150 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1151 1.1 christos MaxProtocol = TLSv1.3 1152 1.1 christos MinProtocol = TLSv1.3 1153 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1154 1.1 christos 1155 1.1 christos [35-TLS 1.3 ECDSA Signature Algorithm Selection-client] 1156 1.1 christos CipherString = DEFAULT 1157 1.1 christos SignatureAlgorithms = ECDSA+SHA256 1158 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1159 1.1 christos VerifyMode = Peer 1160 1.1 christos 1161 1.1 christos [test-35] 1162 1.1 christos ExpectedResult = Success 1163 1.1 christos ExpectedServerCANames = empty 1164 1.1 christos ExpectedServerCertType = P-256 1165 1.1 christos ExpectedServerSignHash = SHA256 1166 1.1 christos ExpectedServerSignType = EC 1167 1.1 christos 1168 1.1 christos 1169 1.1 christos # =========================================================== 1170 1.1 christos 1171 1.1 christos [36-TLS 1.3 ECDSA Signature Algorithm Selection compressed point] 1172 1.1 christos ssl_conf = 36-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-ssl 1173 1.1 christos 1174 1.1 christos [36-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-ssl] 1175 1.1 christos server = 36-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-server 1176 1.1 christos client = 36-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-client 1177 1.1 christos 1178 1.1 christos [36-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-server] 1179 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1180 1.1 christos CipherString = DEFAULT 1181 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-cecdsa-cert.pem 1182 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-cecdsa-key.pem 1183 1.1 christos MaxProtocol = TLSv1.3 1184 1.1 christos MinProtocol = TLSv1.3 1185 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1186 1.1 christos 1187 1.1 christos [36-TLS 1.3 ECDSA Signature Algorithm Selection compressed point-client] 1188 1.1 christos CipherString = DEFAULT 1189 1.1 christos SignatureAlgorithms = ECDSA+SHA256 1190 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1191 1.1 christos VerifyMode = Peer 1192 1.1 christos 1193 1.1 christos [test-36] 1194 1.1 christos ExpectedResult = Success 1195 1.1 christos ExpectedServerCANames = empty 1196 1.1 christos ExpectedServerCertType = P-256 1197 1.1 christos ExpectedServerSignHash = SHA256 1198 1.1 christos ExpectedServerSignType = EC 1199 1.1 christos 1200 1.1 christos 1201 1.1 christos # =========================================================== 1202 1.1 christos 1203 1.1 christos [37-TLS 1.3 ECDSA Signature Algorithm Selection SHA1] 1204 1.1 christos ssl_conf = 37-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-ssl 1205 1.1 christos 1206 1.1 christos [37-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-ssl] 1207 1.1 christos server = 37-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-server 1208 1.1 christos client = 37-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-client 1209 1.1 christos 1210 1.1 christos [37-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-server] 1211 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1212 1.1 christos CipherString = DEFAULT 1213 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1214 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1215 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1216 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1217 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1218 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1219 1.1 christos MaxProtocol = TLSv1.3 1220 1.1 christos MinProtocol = TLSv1.3 1221 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1222 1.1 christos 1223 1.1 christos [37-TLS 1.3 ECDSA Signature Algorithm Selection SHA1-client] 1224 1.1 christos CipherString = DEFAULT 1225 1.1 christos SignatureAlgorithms = ECDSA+SHA1 1226 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1227 1.1 christos VerifyMode = Peer 1228 1.1 christos 1229 1.1 christos [test-37] 1230 1.1 christos ExpectedResult = ServerFail 1231 1.1 christos 1232 1.1 christos 1233 1.1 christos # =========================================================== 1234 1.1 christos 1235 1.1 christos [38-TLS 1.3 ECDSA Signature Algorithm Selection with PSS] 1236 1.1 christos ssl_conf = 38-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-ssl 1237 1.1 christos 1238 1.1 christos [38-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-ssl] 1239 1.1 christos server = 38-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-server 1240 1.1 christos client = 38-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-client 1241 1.1 christos 1242 1.1 christos [38-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-server] 1243 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1244 1.1 christos CipherString = DEFAULT 1245 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1246 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1247 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1248 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1249 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1250 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1251 1.1 christos MaxProtocol = TLSv1.3 1252 1.1 christos MinProtocol = TLSv1.3 1253 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1254 1.1 christos 1255 1.1 christos [38-TLS 1.3 ECDSA Signature Algorithm Selection with PSS-client] 1256 1.1 christos CipherString = DEFAULT 1257 1.1 christos RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1258 1.1 christos SignatureAlgorithms = ECDSA+SHA256:RSA-PSS+SHA256 1259 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1260 1.1 christos VerifyMode = Peer 1261 1.1 christos 1262 1.1 christos [test-38] 1263 1.1 christos ExpectedResult = Success 1264 1.1 christos ExpectedServerCANames = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1265 1.1 christos ExpectedServerCertType = P-256 1266 1.1 christos ExpectedServerSignHash = SHA256 1267 1.1 christos ExpectedServerSignType = EC 1268 1.1 christos 1269 1.1 christos 1270 1.1 christos # =========================================================== 1271 1.1 christos 1272 1.1 christos [39-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS] 1273 1.1 christos ssl_conf = 39-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-ssl 1274 1.1 christos 1275 1.1 christos [39-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-ssl] 1276 1.1 christos server = 39-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-server 1277 1.1 christos client = 39-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-client 1278 1.1 christos 1279 1.1 christos [39-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-server] 1280 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1281 1.1 christos CipherString = DEFAULT 1282 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1283 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1284 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1285 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1286 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1287 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1288 1.1 christos MaxProtocol = TLSv1.3 1289 1.1 christos MinProtocol = TLSv1.3 1290 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1291 1.1 christos 1292 1.1 christos [39-TLS 1.3 RSA Signature Algorithm Selection SHA384 with PSS-client] 1293 1.1 christos CipherString = DEFAULT 1294 1.1 christos SignatureAlgorithms = ECDSA+SHA384:RSA-PSS+SHA384 1295 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1296 1.1 christos VerifyMode = Peer 1297 1.1 christos 1298 1.1 christos [test-39] 1299 1.1 christos ExpectedResult = Success 1300 1.1 christos ExpectedServerCertType = RSA 1301 1.1 christos ExpectedServerSignHash = SHA384 1302 1.1 christos ExpectedServerSignType = RSA-PSS 1303 1.1 christos 1304 1.1 christos 1305 1.1 christos # =========================================================== 1306 1.1 christos 1307 1.1 christos [40-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate] 1308 1.1 christos ssl_conf = 40-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-ssl 1309 1.1 christos 1310 1.1 christos [40-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-ssl] 1311 1.1 christos server = 40-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-server 1312 1.1 christos client = 40-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-client 1313 1.1 christos 1314 1.1 christos [40-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-server] 1315 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1316 1.1 christos CipherString = DEFAULT 1317 1.1 christos MaxProtocol = TLSv1.3 1318 1.1 christos MinProtocol = TLSv1.3 1319 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1320 1.1 christos 1321 1.1 christos [40-TLS 1.3 ECDSA Signature Algorithm Selection, no ECDSA certificate-client] 1322 1.1 christos CipherString = DEFAULT 1323 1.1 christos SignatureAlgorithms = ECDSA+SHA256 1324 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1325 1.1 christos VerifyMode = Peer 1326 1.1 christos 1327 1.1 christos [test-40] 1328 1.1 christos ExpectedResult = ServerFail 1329 1.1 christos 1330 1.1 christos 1331 1.1 christos # =========================================================== 1332 1.1 christos 1333 1.1 christos [41-TLS 1.3 RSA Signature Algorithm Selection, no PSS] 1334 1.1 christos ssl_conf = 41-TLS 1.3 RSA Signature Algorithm Selection, no PSS-ssl 1335 1.1 christos 1336 1.1 christos [41-TLS 1.3 RSA Signature Algorithm Selection, no PSS-ssl] 1337 1.1 christos server = 41-TLS 1.3 RSA Signature Algorithm Selection, no PSS-server 1338 1.1 christos client = 41-TLS 1.3 RSA Signature Algorithm Selection, no PSS-client 1339 1.1 christos 1340 1.1 christos [41-TLS 1.3 RSA Signature Algorithm Selection, no PSS-server] 1341 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1342 1.1 christos CipherString = DEFAULT 1343 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1344 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1345 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1346 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1347 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1348 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1349 1.1 christos MaxProtocol = TLSv1.3 1350 1.1 christos MinProtocol = TLSv1.3 1351 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1352 1.1 christos 1353 1.1 christos [41-TLS 1.3 RSA Signature Algorithm Selection, no PSS-client] 1354 1.1 christos CipherString = DEFAULT 1355 1.1 christos SignatureAlgorithms = RSA+SHA256 1356 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1357 1.1 christos VerifyMode = Peer 1358 1.1 christos 1359 1.1 christos [test-41] 1360 1.1 christos ExpectedResult = ServerFail 1361 1.1 christos 1362 1.1 christos 1363 1.1 christos # =========================================================== 1364 1.1 christos 1365 1.1 christos [42-TLS 1.3 RSA-PSS Signature Algorithm Selection] 1366 1.1 christos ssl_conf = 42-TLS 1.3 RSA-PSS Signature Algorithm Selection-ssl 1367 1.1 christos 1368 1.1 christos [42-TLS 1.3 RSA-PSS Signature Algorithm Selection-ssl] 1369 1.1 christos server = 42-TLS 1.3 RSA-PSS Signature Algorithm Selection-server 1370 1.1 christos client = 42-TLS 1.3 RSA-PSS Signature Algorithm Selection-client 1371 1.1 christos 1372 1.1 christos [42-TLS 1.3 RSA-PSS Signature Algorithm Selection-server] 1373 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1374 1.1 christos CipherString = DEFAULT 1375 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1376 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1377 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1378 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1379 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1380 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1381 1.1 christos MaxProtocol = TLSv1.3 1382 1.1 christos MinProtocol = TLSv1.3 1383 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1384 1.1 christos 1385 1.1 christos [42-TLS 1.3 RSA-PSS Signature Algorithm Selection-client] 1386 1.1 christos CipherString = DEFAULT 1387 1.1 christos SignatureAlgorithms = RSA-PSS+SHA256 1388 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1389 1.1 christos VerifyMode = Peer 1390 1.1 christos 1391 1.1 christos [test-42] 1392 1.1 christos ExpectedResult = Success 1393 1.1 christos ExpectedServerCertType = RSA 1394 1.1 christos ExpectedServerSignHash = SHA256 1395 1.1 christos ExpectedServerSignType = RSA-PSS 1396 1.1 christos 1397 1.1 christos 1398 1.1 christos # =========================================================== 1399 1.1 christos 1400 1.1 christos [43-TLS 1.3 Ed25519 Signature Algorithm Selection] 1401 1.1 christos ssl_conf = 43-TLS 1.3 Ed25519 Signature Algorithm Selection-ssl 1402 1.1 christos 1403 1.1 christos [43-TLS 1.3 Ed25519 Signature Algorithm Selection-ssl] 1404 1.1 christos server = 43-TLS 1.3 Ed25519 Signature Algorithm Selection-server 1405 1.1 christos client = 43-TLS 1.3 Ed25519 Signature Algorithm Selection-client 1406 1.1 christos 1407 1.1 christos [43-TLS 1.3 Ed25519 Signature Algorithm Selection-server] 1408 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1409 1.1 christos CipherString = DEFAULT 1410 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1411 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1412 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1413 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1414 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1415 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1416 1.1 christos MaxProtocol = TLSv1.3 1417 1.1 christos MinProtocol = TLSv1.3 1418 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1419 1.1 christos 1420 1.1 christos [43-TLS 1.3 Ed25519 Signature Algorithm Selection-client] 1421 1.1 christos CipherString = DEFAULT 1422 1.1 christos SignatureAlgorithms = ed25519 1423 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1424 1.1 christos VerifyMode = Peer 1425 1.1 christos 1426 1.1 christos [test-43] 1427 1.1 christos ExpectedResult = Success 1428 1.1 christos ExpectedServerCertType = Ed25519 1429 1.1 christos ExpectedServerSignType = Ed25519 1430 1.1 christos 1431 1.1 christos 1432 1.1 christos # =========================================================== 1433 1.1 christos 1434 1.1 christos [44-TLS 1.3 Ed448 Signature Algorithm Selection] 1435 1.1 christos ssl_conf = 44-TLS 1.3 Ed448 Signature Algorithm Selection-ssl 1436 1.1 christos 1437 1.1 christos [44-TLS 1.3 Ed448 Signature Algorithm Selection-ssl] 1438 1.1 christos server = 44-TLS 1.3 Ed448 Signature Algorithm Selection-server 1439 1.1 christos client = 44-TLS 1.3 Ed448 Signature Algorithm Selection-client 1440 1.1 christos 1441 1.1 christos [44-TLS 1.3 Ed448 Signature Algorithm Selection-server] 1442 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1443 1.1 christos CipherString = DEFAULT 1444 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1445 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1446 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1447 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1448 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1449 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1450 1.1 christos MaxProtocol = TLSv1.3 1451 1.1 christos MinProtocol = TLSv1.3 1452 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1453 1.1 christos 1454 1.1 christos [44-TLS 1.3 Ed448 Signature Algorithm Selection-client] 1455 1.1 christos CipherString = DEFAULT 1456 1.1 christos SignatureAlgorithms = ed448 1457 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 1458 1.1 christos VerifyMode = Peer 1459 1.1 christos 1460 1.1 christos [test-44] 1461 1.1 christos ExpectedResult = Success 1462 1.1 christos ExpectedServerCertType = Ed448 1463 1.1 christos ExpectedServerSignType = Ed448 1464 1.1 christos 1465 1.1 christos 1466 1.1 christos # =========================================================== 1467 1.1 christos 1468 1.1 christos [45-TLS 1.3 Ed25519 CipherString and Groups Selection] 1469 1.1 christos ssl_conf = 45-TLS 1.3 Ed25519 CipherString and Groups Selection-ssl 1470 1.1 christos 1471 1.1 christos [45-TLS 1.3 Ed25519 CipherString and Groups Selection-ssl] 1472 1.1 christos server = 45-TLS 1.3 Ed25519 CipherString and Groups Selection-server 1473 1.1 christos client = 45-TLS 1.3 Ed25519 CipherString and Groups Selection-client 1474 1.1 christos 1475 1.1 christos [45-TLS 1.3 Ed25519 CipherString and Groups Selection-server] 1476 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1477 1.1 christos CipherString = DEFAULT 1478 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1479 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1480 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1481 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1482 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1483 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1484 1.1 christos MaxProtocol = TLSv1.3 1485 1.1 christos MinProtocol = TLSv1.3 1486 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1487 1.1 christos 1488 1.1 christos [45-TLS 1.3 Ed25519 CipherString and Groups Selection-client] 1489 1.1 christos CipherString = DEFAULT 1490 1.1 christos Groups = X25519 1491 1.1 christos SignatureAlgorithms = ECDSA+SHA256:ed25519 1492 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1493 1.1 christos VerifyMode = Peer 1494 1.1 christos 1495 1.1 christos [test-45] 1496 1.1 christos ExpectedResult = Success 1497 1.1 christos ExpectedServerCertType = P-256 1498 1.1 christos ExpectedServerSignType = EC 1499 1.1 christos 1500 1.1 christos 1501 1.1 christos # =========================================================== 1502 1.1 christos 1503 1.1 christos [46-TLS 1.3 Ed448 CipherString and Groups Selection] 1504 1.1 christos ssl_conf = 46-TLS 1.3 Ed448 CipherString and Groups Selection-ssl 1505 1.1 christos 1506 1.1 christos [46-TLS 1.3 Ed448 CipherString and Groups Selection-ssl] 1507 1.1 christos server = 46-TLS 1.3 Ed448 CipherString and Groups Selection-server 1508 1.1 christos client = 46-TLS 1.3 Ed448 CipherString and Groups Selection-client 1509 1.1 christos 1510 1.1 christos [46-TLS 1.3 Ed448 CipherString and Groups Selection-server] 1511 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1512 1.1 christos CipherString = DEFAULT 1513 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem 1514 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem 1515 1.1 christos Ed25519.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed25519-cert.pem 1516 1.1 christos Ed25519.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed25519-key.pem 1517 1.1 christos Ed448.Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 1518 1.1 christos Ed448.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 1519 1.1 christos MaxProtocol = TLSv1.3 1520 1.1 christos MinProtocol = TLSv1.3 1521 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1522 1.1 christos 1523 1.1 christos [46-TLS 1.3 Ed448 CipherString and Groups Selection-client] 1524 1.1 christos CipherString = DEFAULT 1525 1.1 christos Groups = X448 1526 1.1 christos SignatureAlgorithms = ECDSA+SHA256:ed448 1527 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1528 1.1 christos VerifyMode = Peer 1529 1.1 christos 1530 1.1 christos [test-46] 1531 1.1 christos ExpectedResult = Success 1532 1.1 christos ExpectedServerCertType = P-256 1533 1.1 christos ExpectedServerSignType = EC 1534 1.1 christos 1535 1.1 christos 1536 1.1 christos # =========================================================== 1537 1.1 christos 1538 1.1 christos [47-TLS 1.3 RSA Client Auth Signature Algorithm Selection] 1539 1.1 christos ssl_conf = 47-TLS 1.3 RSA Client Auth Signature Algorithm Selection-ssl 1540 1.1 christos 1541 1.1 christos [47-TLS 1.3 RSA Client Auth Signature Algorithm Selection-ssl] 1542 1.1 christos server = 47-TLS 1.3 RSA Client Auth Signature Algorithm Selection-server 1543 1.1 christos client = 47-TLS 1.3 RSA Client Auth Signature Algorithm Selection-client 1544 1.1 christos 1545 1.1 christos [47-TLS 1.3 RSA Client Auth Signature Algorithm Selection-server] 1546 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1547 1.1 christos CipherString = DEFAULT 1548 1.1 christos ClientSignatureAlgorithms = PSS+SHA256 1549 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1550 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1551 1.1 christos VerifyMode = Require 1552 1.1 christos 1553 1.1 christos [47-TLS 1.3 RSA Client Auth Signature Algorithm Selection-client] 1554 1.1 christos CipherString = DEFAULT 1555 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-client-chain.pem 1556 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-key.pem 1557 1.1 christos MaxProtocol = TLSv1.3 1558 1.1 christos MinProtocol = TLSv1.3 1559 1.1 christos RSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem 1560 1.1 christos RSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem 1561 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1562 1.1 christos VerifyMode = Peer 1563 1.1 christos 1564 1.1 christos [test-47] 1565 1.1 christos ExpectedClientCANames = empty 1566 1.1 christos ExpectedClientCertType = RSA 1567 1.1 christos ExpectedClientSignHash = SHA256 1568 1.1 christos ExpectedClientSignType = RSA-PSS 1569 1.1 christos ExpectedResult = Success 1570 1.1 christos 1571 1.1 christos 1572 1.1 christos # =========================================================== 1573 1.1 christos 1574 1.1 christos [48-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names] 1575 1.1 christos ssl_conf = 48-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-ssl 1576 1.1 christos 1577 1.1 christos [48-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-ssl] 1578 1.1 christos server = 48-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-server 1579 1.1 christos client = 48-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-client 1580 1.1 christos 1581 1.1 christos [48-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-server] 1582 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1583 1.1 christos CipherString = DEFAULT 1584 1.1 christos ClientSignatureAlgorithms = PSS+SHA256 1585 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1586 1.1 christos RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1587 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1588 1.1 christos VerifyMode = Require 1589 1.1 christos 1590 1.1 christos [48-TLS 1.3 RSA Client Auth Signature Algorithm Selection non-empty CA Names-client] 1591 1.1 christos CipherString = DEFAULT 1592 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-client-chain.pem 1593 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-key.pem 1594 1.1 christos MaxProtocol = TLSv1.3 1595 1.1 christos MinProtocol = TLSv1.3 1596 1.1 christos RSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem 1597 1.1 christos RSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem 1598 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1599 1.1 christos VerifyMode = Peer 1600 1.1 christos 1601 1.1 christos [test-48] 1602 1.1 christos ExpectedClientCANames = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1603 1.1 christos ExpectedClientCertType = RSA 1604 1.1 christos ExpectedClientSignHash = SHA256 1605 1.1 christos ExpectedClientSignType = RSA-PSS 1606 1.1 christos ExpectedResult = Success 1607 1.1 christos 1608 1.1 christos 1609 1.1 christos # =========================================================== 1610 1.1 christos 1611 1.1 christos [49-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection] 1612 1.1 christos ssl_conf = 49-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-ssl 1613 1.1 christos 1614 1.1 christos [49-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-ssl] 1615 1.1 christos server = 49-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-server 1616 1.1 christos client = 49-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-client 1617 1.1 christos 1618 1.1 christos [49-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-server] 1619 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1620 1.1 christos CipherString = DEFAULT 1621 1.1 christos ClientSignatureAlgorithms = ECDSA+SHA256 1622 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1623 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1624 1.1 christos VerifyMode = Require 1625 1.1 christos 1626 1.1 christos [49-TLS 1.3 ECDSA Client Auth Signature Algorithm Selection-client] 1627 1.1 christos CipherString = DEFAULT 1628 1.1 christos ECDSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-client-chain.pem 1629 1.1 christos ECDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-ecdsa-key.pem 1630 1.1 christos MaxProtocol = TLSv1.3 1631 1.1 christos MinProtocol = TLSv1.3 1632 1.1 christos RSA.Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem 1633 1.1 christos RSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem 1634 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1635 1.1 christos VerifyMode = Peer 1636 1.1 christos 1637 1.1 christos [test-49] 1638 1.1 christos ExpectedClientCertType = P-256 1639 1.1 christos ExpectedClientSignHash = SHA256 1640 1.1 christos ExpectedClientSignType = EC 1641 1.1 christos ExpectedResult = Success 1642 1.1 christos 1643 1.1 christos 1644 1.1 christos # =========================================================== 1645 1.1 christos 1646 1.1 christos [50-TLS 1.3 Ed25519 Client Auth] 1647 1.1 christos ssl_conf = 50-TLS 1.3 Ed25519 Client Auth-ssl 1648 1.1 christos 1649 1.1 christos [50-TLS 1.3 Ed25519 Client Auth-ssl] 1650 1.1 christos server = 50-TLS 1.3 Ed25519 Client Auth-server 1651 1.1 christos client = 50-TLS 1.3 Ed25519 Client Auth-client 1652 1.1 christos 1653 1.1 christos [50-TLS 1.3 Ed25519 Client Auth-server] 1654 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1655 1.1 christos CipherString = DEFAULT 1656 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1657 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1658 1.1 christos VerifyMode = Require 1659 1.1 christos 1660 1.1 christos [50-TLS 1.3 Ed25519 Client Auth-client] 1661 1.1 christos CipherString = DEFAULT 1662 1.1 christos EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/client-ed25519-cert.pem 1663 1.1 christos EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/client-ed25519-key.pem 1664 1.1 christos MaxProtocol = TLSv1.3 1665 1.1 christos MinProtocol = TLSv1.3 1666 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1667 1.1 christos VerifyMode = Peer 1668 1.1 christos 1669 1.1 christos [test-50] 1670 1.1 christos ExpectedClientCertType = Ed25519 1671 1.1 christos ExpectedClientSignType = Ed25519 1672 1.1 christos ExpectedResult = Success 1673 1.1 christos 1674 1.1 christos 1675 1.1 christos # =========================================================== 1676 1.1 christos 1677 1.1 christos [51-TLS 1.3 Ed448 Client Auth] 1678 1.1 christos ssl_conf = 51-TLS 1.3 Ed448 Client Auth-ssl 1679 1.1 christos 1680 1.1 christos [51-TLS 1.3 Ed448 Client Auth-ssl] 1681 1.1 christos server = 51-TLS 1.3 Ed448 Client Auth-server 1682 1.1 christos client = 51-TLS 1.3 Ed448 Client Auth-client 1683 1.1 christos 1684 1.1 christos [51-TLS 1.3 Ed448 Client Auth-server] 1685 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1686 1.1 christos CipherString = DEFAULT 1687 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1688 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1689 1.1 christos VerifyMode = Require 1690 1.1 christos 1691 1.1 christos [51-TLS 1.3 Ed448 Client Auth-client] 1692 1.1 christos CipherString = DEFAULT 1693 1.1 christos EdDSA.Certificate = ${ENV::TEST_CERTS_DIR}/client-ed448-cert.pem 1694 1.1 christos EdDSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/client-ed448-key.pem 1695 1.1 christos MaxProtocol = TLSv1.3 1696 1.1 christos MinProtocol = TLSv1.3 1697 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1698 1.1 christos VerifyMode = Peer 1699 1.1 christos 1700 1.1 christos [test-51] 1701 1.1 christos ExpectedClientCertType = Ed448 1702 1.1 christos ExpectedClientSignType = Ed448 1703 1.1 christos ExpectedResult = Success 1704 1.1 christos 1705 1.1 christos 1706 1.1 christos # =========================================================== 1707 1.1 christos 1708 1.1 christos [52-TLS 1.3 ECDSA with brainpool] 1709 1.1 christos ssl_conf = 52-TLS 1.3 ECDSA with brainpool-ssl 1710 1.1 christos 1711 1.1 christos [52-TLS 1.3 ECDSA with brainpool-ssl] 1712 1.1 christos server = 52-TLS 1.3 ECDSA with brainpool-server 1713 1.1 christos client = 52-TLS 1.3 ECDSA with brainpool-client 1714 1.1 christos 1715 1.1 christos [52-TLS 1.3 ECDSA with brainpool-server] 1716 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-brainpoolP256r1-cert.pem 1717 1.1 christos CipherString = DEFAULT 1718 1.1 christos Groups = brainpoolP256r1 1719 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-brainpoolP256r1-key.pem 1720 1.1 christos 1721 1.1 christos [52-TLS 1.3 ECDSA with brainpool-client] 1722 1.1 christos CipherString = DEFAULT 1723 1.1 christos Groups = brainpoolP256r1 1724 1.1 christos MaxProtocol = TLSv1.3 1725 1.1 christos MinProtocol = TLSv1.3 1726 1.1 christos RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1727 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1728 1.1 christos VerifyMode = Peer 1729 1.1 christos 1730 1.1 christos [test-52] 1731 1.1 christos ExpectedResult = ServerFail 1732 1.1 christos 1733 1.1 christos 1734 1.1 christos # =========================================================== 1735 1.1 christos 1736 1.1 christos [53-TLS 1.2 DSA Certificate Test] 1737 1.1 christos ssl_conf = 53-TLS 1.2 DSA Certificate Test-ssl 1738 1.1 christos 1739 1.1 christos [53-TLS 1.2 DSA Certificate Test-ssl] 1740 1.1 christos server = 53-TLS 1.2 DSA Certificate Test-server 1741 1.1 christos client = 53-TLS 1.2 DSA Certificate Test-client 1742 1.1 christos 1743 1.1 christos [53-TLS 1.2 DSA Certificate Test-server] 1744 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1745 1.1 christos CipherString = ALL 1746 1.1 christos DHParameters = ${ENV::TEST_CERTS_DIR}/dhp2048.pem 1747 1.1 christos DSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-dsa-cert.pem 1748 1.1 christos DSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-dsa-key.pem 1749 1.1 christos MaxProtocol = TLSv1.2 1750 1.1 christos MinProtocol = TLSv1.2 1751 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1752 1.1 christos 1753 1.1 christos [53-TLS 1.2 DSA Certificate Test-client] 1754 1.1 christos CipherString = ALL 1755 1.1 christos SignatureAlgorithms = DSA+SHA256:DSA+SHA1 1756 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1757 1.1 christos VerifyMode = Peer 1758 1.1 christos 1759 1.1 christos [test-53] 1760 1.1 christos ExpectedResult = Success 1761 1.1 christos 1762 1.1 christos 1763 1.1 christos # =========================================================== 1764 1.1 christos 1765 1.1 christos [54-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms] 1766 1.1 christos ssl_conf = 54-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-ssl 1767 1.1 christos 1768 1.1 christos [54-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-ssl] 1769 1.1 christos server = 54-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-server 1770 1.1 christos client = 54-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-client 1771 1.1 christos 1772 1.1 christos [54-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-server] 1773 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1774 1.1 christos CipherString = DEFAULT 1775 1.1 christos ClientSignatureAlgorithms = ECDSA+SHA1:DSA+SHA256:RSA+SHA256 1776 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1777 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 1778 1.1 christos VerifyMode = Request 1779 1.1 christos 1780 1.1 christos [54-TLS 1.3 Client Auth No TLS 1.3 Signature Algorithms-client] 1781 1.1 christos CipherString = DEFAULT 1782 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1783 1.1 christos VerifyMode = Peer 1784 1.1 christos 1785 1.1 christos [test-54] 1786 1.1 christos ExpectedResult = ServerFail 1787 1.1 christos 1788 1.1 christos 1789 1.1 christos # =========================================================== 1790 1.1 christos 1791 1.1 christos [55-TLS 1.3 DSA Certificate Test] 1792 1.1 christos ssl_conf = 55-TLS 1.3 DSA Certificate Test-ssl 1793 1.1 christos 1794 1.1 christos [55-TLS 1.3 DSA Certificate Test-ssl] 1795 1.1 christos server = 55-TLS 1.3 DSA Certificate Test-server 1796 1.1 christos client = 55-TLS 1.3 DSA Certificate Test-client 1797 1.1 christos 1798 1.1 christos [55-TLS 1.3 DSA Certificate Test-server] 1799 1.1 christos Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1800 1.1 christos CipherString = ALL 1801 1.1 christos DSA.Certificate = ${ENV::TEST_CERTS_DIR}/server-dsa-cert.pem 1802 1.1 christos DSA.PrivateKey = ${ENV::TEST_CERTS_DIR}/server-dsa-key.pem 1803 1.1 christos MaxProtocol = TLSv1.3 1804 1.1 christos MinProtocol = TLSv1.3 1805 1.1 christos PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1806 1.1 christos 1807 1.1 christos [55-TLS 1.3 DSA Certificate Test-client] 1808 1.1 christos CipherString = ALL 1809 1.1 christos SignatureAlgorithms = DSA+SHA1:DSA+SHA256:ECDSA+SHA256 1810 1.1 christos VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1811 1.1 christos VerifyMode = Peer 1812 1.1 christos 1813 1.1 christos [test-55] 1814 1.1 christos ExpectedResult = ServerFail 1815 1.1 christos 1816 1.1 christos 1817
Indexes created Sat Feb 28 05:31:39 UTC 2026