1 | # Generated with generate_ssl_tests.pl
|
---|
2 |
|
---|
3 | num_tests = 6
|
---|
4 |
|
---|
5 | test-0 = 0-ct-permissive-without-scts
|
---|
6 | test-1 = 1-ct-permissive-with-scts
|
---|
7 | test-2 = 2-ct-strict-without-scts
|
---|
8 | test-3 = 3-ct-strict-with-scts
|
---|
9 | test-4 = 4-ct-permissive-resumption
|
---|
10 | test-5 = 5-ct-strict-resumption
|
---|
11 | # ===========================================================
|
---|
12 |
|
---|
13 | [0-ct-permissive-without-scts]
|
---|
14 | ssl_conf = 0-ct-permissive-without-scts-ssl
|
---|
15 |
|
---|
16 | [0-ct-permissive-without-scts-ssl]
|
---|
17 | server = 0-ct-permissive-without-scts-server
|
---|
18 | client = 0-ct-permissive-without-scts-client
|
---|
19 |
|
---|
20 | [0-ct-permissive-without-scts-server]
|
---|
21 | Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
|
---|
22 | CipherString = DEFAULT
|
---|
23 | PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
|
---|
24 |
|
---|
25 | [0-ct-permissive-without-scts-client]
|
---|
26 | CipherString = DEFAULT
|
---|
27 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
|
---|
28 | VerifyMode = Peer
|
---|
29 |
|
---|
30 | [test-0]
|
---|
31 | ExpectedResult = Success
|
---|
32 | client = 0-ct-permissive-without-scts-client-extra
|
---|
33 |
|
---|
34 | [0-ct-permissive-without-scts-client-extra]
|
---|
35 | CTValidation = Permissive
|
---|
36 |
|
---|
37 |
|
---|
38 | # ===========================================================
|
---|
39 |
|
---|
40 | [1-ct-permissive-with-scts]
|
---|
41 | ssl_conf = 1-ct-permissive-with-scts-ssl
|
---|
42 |
|
---|
43 | [1-ct-permissive-with-scts-ssl]
|
---|
44 | server = 1-ct-permissive-with-scts-server
|
---|
45 | client = 1-ct-permissive-with-scts-client
|
---|
46 |
|
---|
47 | [1-ct-permissive-with-scts-server]
|
---|
48 | Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
|
---|
49 | CipherString = DEFAULT
|
---|
50 | PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
|
---|
51 |
|
---|
52 | [1-ct-permissive-with-scts-client]
|
---|
53 | CipherString = DEFAULT
|
---|
54 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
|
---|
55 | VerifyMode = Peer
|
---|
56 |
|
---|
57 | [test-1]
|
---|
58 | ExpectedResult = Success
|
---|
59 | client = 1-ct-permissive-with-scts-client-extra
|
---|
60 |
|
---|
61 | [1-ct-permissive-with-scts-client-extra]
|
---|
62 | CTValidation = Permissive
|
---|
63 |
|
---|
64 |
|
---|
65 | # ===========================================================
|
---|
66 |
|
---|
67 | [2-ct-strict-without-scts]
|
---|
68 | ssl_conf = 2-ct-strict-without-scts-ssl
|
---|
69 |
|
---|
70 | [2-ct-strict-without-scts-ssl]
|
---|
71 | server = 2-ct-strict-without-scts-server
|
---|
72 | client = 2-ct-strict-without-scts-client
|
---|
73 |
|
---|
74 | [2-ct-strict-without-scts-server]
|
---|
75 | Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
|
---|
76 | CipherString = DEFAULT
|
---|
77 | PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
|
---|
78 |
|
---|
79 | [2-ct-strict-without-scts-client]
|
---|
80 | CipherString = DEFAULT
|
---|
81 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
|
---|
82 | VerifyMode = Peer
|
---|
83 |
|
---|
84 | [test-2]
|
---|
85 | ExpectedClientAlert = HandshakeFailure
|
---|
86 | ExpectedResult = ClientFail
|
---|
87 | client = 2-ct-strict-without-scts-client-extra
|
---|
88 |
|
---|
89 | [2-ct-strict-without-scts-client-extra]
|
---|
90 | CTValidation = Strict
|
---|
91 |
|
---|
92 |
|
---|
93 | # ===========================================================
|
---|
94 |
|
---|
95 | [3-ct-strict-with-scts]
|
---|
96 | ssl_conf = 3-ct-strict-with-scts-ssl
|
---|
97 |
|
---|
98 | [3-ct-strict-with-scts-ssl]
|
---|
99 | server = 3-ct-strict-with-scts-server
|
---|
100 | client = 3-ct-strict-with-scts-client
|
---|
101 |
|
---|
102 | [3-ct-strict-with-scts-server]
|
---|
103 | Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
|
---|
104 | CipherString = DEFAULT
|
---|
105 | PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
|
---|
106 |
|
---|
107 | [3-ct-strict-with-scts-client]
|
---|
108 | CipherString = DEFAULT
|
---|
109 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
|
---|
110 | VerifyMode = Peer
|
---|
111 |
|
---|
112 | [test-3]
|
---|
113 | ExpectedResult = Success
|
---|
114 | client = 3-ct-strict-with-scts-client-extra
|
---|
115 |
|
---|
116 | [3-ct-strict-with-scts-client-extra]
|
---|
117 | CTValidation = Strict
|
---|
118 |
|
---|
119 |
|
---|
120 | # ===========================================================
|
---|
121 |
|
---|
122 | [4-ct-permissive-resumption]
|
---|
123 | ssl_conf = 4-ct-permissive-resumption-ssl
|
---|
124 |
|
---|
125 | [4-ct-permissive-resumption-ssl]
|
---|
126 | server = 4-ct-permissive-resumption-server
|
---|
127 | client = 4-ct-permissive-resumption-client
|
---|
128 | resume-server = 4-ct-permissive-resumption-server
|
---|
129 | resume-client = 4-ct-permissive-resumption-client
|
---|
130 |
|
---|
131 | [4-ct-permissive-resumption-server]
|
---|
132 | Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
|
---|
133 | CipherString = DEFAULT
|
---|
134 | PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
|
---|
135 |
|
---|
136 | [4-ct-permissive-resumption-client]
|
---|
137 | CipherString = DEFAULT
|
---|
138 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
|
---|
139 | VerifyMode = Peer
|
---|
140 |
|
---|
141 | [test-4]
|
---|
142 | ExpectedResult = Success
|
---|
143 | HandshakeMode = Resume
|
---|
144 | ResumptionExpected = Yes
|
---|
145 | client = 4-ct-permissive-resumption-client-extra
|
---|
146 | resume-client = 4-ct-permissive-resumption-client-extra
|
---|
147 |
|
---|
148 | [4-ct-permissive-resumption-client-extra]
|
---|
149 | CTValidation = Permissive
|
---|
150 |
|
---|
151 |
|
---|
152 | # ===========================================================
|
---|
153 |
|
---|
154 | [5-ct-strict-resumption]
|
---|
155 | ssl_conf = 5-ct-strict-resumption-ssl
|
---|
156 |
|
---|
157 | [5-ct-strict-resumption-ssl]
|
---|
158 | server = 5-ct-strict-resumption-server
|
---|
159 | client = 5-ct-strict-resumption-client
|
---|
160 | resume-server = 5-ct-strict-resumption-server
|
---|
161 | resume-client = 5-ct-strict-resumption-resume-client
|
---|
162 |
|
---|
163 | [5-ct-strict-resumption-server]
|
---|
164 | Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
|
---|
165 | CipherString = DEFAULT
|
---|
166 | PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
|
---|
167 |
|
---|
168 | [5-ct-strict-resumption-client]
|
---|
169 | CipherString = DEFAULT
|
---|
170 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
|
---|
171 | VerifyMode = Peer
|
---|
172 |
|
---|
173 | [5-ct-strict-resumption-resume-client]
|
---|
174 | CipherString = DEFAULT
|
---|
175 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
|
---|
176 | VerifyMode = Peer
|
---|
177 |
|
---|
178 | [test-5]
|
---|
179 | ExpectedResult = Success
|
---|
180 | HandshakeMode = Resume
|
---|
181 | ResumptionExpected = Yes
|
---|
182 | client = 5-ct-strict-resumption-client-extra
|
---|
183 | resume-client = 5-ct-strict-resumption-resume-client-extra
|
---|
184 |
|
---|
185 | [5-ct-strict-resumption-client-extra]
|
---|
186 | CTValidation = Strict
|
---|
187 |
|
---|
188 | [5-ct-strict-resumption-resume-client-extra]
|
---|
189 | CTValidation = Strict
|
---|
190 |
|
---|
191 |
|
---|