1 # Generated with generate_ssl_tests.pl 2 3 num_tests = 6 4 5 test-0 = 0-SECLEVEL 3 with default key 6 test-1 = 1-SECLEVEL 4 with ED448 key 7 test-2 = 2-SECLEVEL 5 server with ED448 key 8 test-3 = 3-SECLEVEL 5 client with ED448 key 9 test-4 = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE 10 test-5 = 5-SECLEVEL 3 with ED448 key, TLSv1.2 11 # =========================================================== 12 13 [0-SECLEVEL 3 with default key] 14 ssl_conf = 0-SECLEVEL 3 with default key-ssl 15 16 [0-SECLEVEL 3 with default key-ssl] 17 server = 0-SECLEVEL 3 with default key-server 18 client = 0-SECLEVEL 3 with default key-client 19 20 [0-SECLEVEL 3 with default key-server] 21 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 22 CipherString = DEFAULT:@SECLEVEL=3 23 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 24 25 [0-SECLEVEL 3 with default key-client] 26 CipherString = DEFAULT 27 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 28 VerifyMode = Peer 29 30 [test-0] 31 ExpectedResult = ServerFail 32 33 34 # =========================================================== 35 36 [1-SECLEVEL 4 with ED448 key] 37 ssl_conf = 1-SECLEVEL 4 with ED448 key-ssl 38 39 [1-SECLEVEL 4 with ED448 key-ssl] 40 server = 1-SECLEVEL 4 with ED448 key-server 41 client = 1-SECLEVEL 4 with ED448 key-client 42 43 [1-SECLEVEL 4 with ED448 key-server] 44 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 45 CipherString = DEFAULT:@SECLEVEL=4 46 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 47 48 [1-SECLEVEL 4 with ED448 key-client] 49 CipherString = DEFAULT:@SECLEVEL=4 50 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 51 VerifyMode = Peer 52 53 [test-1] 54 ExpectedResult = Success 55 56 57 # =========================================================== 58 59 [2-SECLEVEL 5 server with ED448 key] 60 ssl_conf = 2-SECLEVEL 5 server with ED448 key-ssl 61 62 [2-SECLEVEL 5 server with ED448 key-ssl] 63 server = 2-SECLEVEL 5 server with ED448 key-server 64 client = 2-SECLEVEL 5 server with ED448 key-client 65 66 [2-SECLEVEL 5 server with ED448 key-server] 67 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 68 CipherString = DEFAULT:@SECLEVEL=5 69 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 70 71 [2-SECLEVEL 5 server with ED448 key-client] 72 CipherString = DEFAULT:@SECLEVEL=4 73 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 74 VerifyMode = Peer 75 76 [test-2] 77 ExpectedResult = ServerFail 78 79 80 # =========================================================== 81 82 [3-SECLEVEL 5 client with ED448 key] 83 ssl_conf = 3-SECLEVEL 5 client with ED448 key-ssl 84 85 [3-SECLEVEL 5 client with ED448 key-ssl] 86 server = 3-SECLEVEL 5 client with ED448 key-server 87 client = 3-SECLEVEL 5 client with ED448 key-client 88 89 [3-SECLEVEL 5 client with ED448 key-server] 90 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 91 CipherString = DEFAULT:@SECLEVEL=4 92 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 93 94 [3-SECLEVEL 5 client with ED448 key-client] 95 CipherString = DEFAULT:@SECLEVEL=5 96 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 97 VerifyMode = Peer 98 99 [test-3] 100 ExpectedResult = ServerFail 101 102 103 # =========================================================== 104 105 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE] 106 ssl_conf = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl 107 108 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl] 109 server = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server 110 client = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client 111 112 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server] 113 Certificate = ${ENV::TEST_CERTS_DIR}/p384-server-cert.pem 114 CipherString = DEFAULT:@SECLEVEL=3 115 Groups = X25519 116 PrivateKey = ${ENV::TEST_CERTS_DIR}/p384-server-key.pem 117 118 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client] 119 CipherString = ECDHE:@SECLEVEL=3 120 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/p384-root.pem 121 VerifyMode = Peer 122 123 [test-4] 124 ExpectedResult = Success 125 126 127 # =========================================================== 128 129 [5-SECLEVEL 3 with ED448 key, TLSv1.2] 130 ssl_conf = 5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl 131 132 [5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl] 133 server = 5-SECLEVEL 3 with ED448 key, TLSv1.2-server 134 client = 5-SECLEVEL 3 with ED448 key, TLSv1.2-client 135 136 [5-SECLEVEL 3 with ED448 key, TLSv1.2-server] 137 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem 138 CipherString = DEFAULT:@SECLEVEL=3 139 MaxProtocol = TLSv1.2 140 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem 141 142 [5-SECLEVEL 3 with ED448 key, TLSv1.2-client] 143 CipherString = DEFAULT 144 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem 145 VerifyMode = Peer 146 147 [test-5] 148 ExpectedResult = Success 149 150 151