| 1 | # Generated with generate_ssl_tests.pl
|
|---|
| 2 |
|
|---|
| 3 | num_tests = 4
|
|---|
| 4 |
|
|---|
| 5 | test-0 = 0-default
|
|---|
| 6 | test-1 = 1-Server signature algorithms bug
|
|---|
| 7 | test-2 = 2-verify-cert
|
|---|
| 8 | test-3 = 3-name-constraints-no-san-in-ee
|
|---|
| 9 | # ===========================================================
|
|---|
| 10 |
|
|---|
| 11 | [0-default]
|
|---|
| 12 | ssl_conf = 0-default-ssl
|
|---|
| 13 |
|
|---|
| 14 | [0-default-ssl]
|
|---|
| 15 | server = 0-default-server
|
|---|
| 16 | client = 0-default-client
|
|---|
| 17 |
|
|---|
| 18 | [0-default-server]
|
|---|
| 19 | Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
|
|---|
| 20 | CipherString = DEFAULT
|
|---|
| 21 | PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
|
|---|
| 22 |
|
|---|
| 23 | [0-default-client]
|
|---|
| 24 | CipherString = DEFAULT
|
|---|
| 25 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
|
|---|
| 26 | VerifyMode = Peer
|
|---|
| 27 |
|
|---|
| 28 | [test-0]
|
|---|
| 29 | ExpectedResult = Success
|
|---|
| 30 |
|
|---|
| 31 |
|
|---|
| 32 | # ===========================================================
|
|---|
| 33 |
|
|---|
| 34 | [1-Server signature algorithms bug]
|
|---|
| 35 | ssl_conf = 1-Server signature algorithms bug-ssl
|
|---|
| 36 |
|
|---|
| 37 | [1-Server signature algorithms bug-ssl]
|
|---|
| 38 | server = 1-Server signature algorithms bug-server
|
|---|
| 39 | client = 1-Server signature algorithms bug-client
|
|---|
| 40 |
|
|---|
| 41 | [1-Server signature algorithms bug-server]
|
|---|
| 42 | Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
|
|---|
| 43 | CipherString = DEFAULT
|
|---|
| 44 | ClientSignatureAlgorithms = PSS+SHA512:RSA+SHA512
|
|---|
| 45 | PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
|
|---|
| 46 |
|
|---|
| 47 | [1-Server signature algorithms bug-client]
|
|---|
| 48 | CipherString = DEFAULT
|
|---|
| 49 | SignatureAlgorithms = PSS+SHA256:RSA+SHA256
|
|---|
| 50 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
|
|---|
| 51 | VerifyMode = Peer
|
|---|
| 52 |
|
|---|
| 53 | [test-1]
|
|---|
| 54 | ExpectedResult = Success
|
|---|
| 55 |
|
|---|
| 56 |
|
|---|
| 57 | # ===========================================================
|
|---|
| 58 |
|
|---|
| 59 | [2-verify-cert]
|
|---|
| 60 | ssl_conf = 2-verify-cert-ssl
|
|---|
| 61 |
|
|---|
| 62 | [2-verify-cert-ssl]
|
|---|
| 63 | server = 2-verify-cert-server
|
|---|
| 64 | client = 2-verify-cert-client
|
|---|
| 65 |
|
|---|
| 66 | [2-verify-cert-server]
|
|---|
| 67 | Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
|
|---|
| 68 | CipherString = DEFAULT
|
|---|
| 69 | PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
|
|---|
| 70 |
|
|---|
| 71 | [2-verify-cert-client]
|
|---|
| 72 | CipherString = DEFAULT
|
|---|
| 73 | VerifyMode = Peer
|
|---|
| 74 |
|
|---|
| 75 | [test-2]
|
|---|
| 76 | ExpectedClientAlert = UnknownCA
|
|---|
| 77 | ExpectedResult = ClientFail
|
|---|
| 78 |
|
|---|
| 79 |
|
|---|
| 80 | # ===========================================================
|
|---|
| 81 |
|
|---|
| 82 | [3-name-constraints-no-san-in-ee]
|
|---|
| 83 | ssl_conf = 3-name-constraints-no-san-in-ee-ssl
|
|---|
| 84 |
|
|---|
| 85 | [3-name-constraints-no-san-in-ee-ssl]
|
|---|
| 86 | server = 3-name-constraints-no-san-in-ee-server
|
|---|
| 87 | client = 3-name-constraints-no-san-in-ee-client
|
|---|
| 88 |
|
|---|
| 89 | [3-name-constraints-no-san-in-ee-server]
|
|---|
| 90 | Certificate = ${ENV::TEST_CERTS_DIR}/goodcn2-chain.pem
|
|---|
| 91 | CipherString = DEFAULT
|
|---|
| 92 | PrivateKey = ${ENV::TEST_CERTS_DIR}/goodcn2-key.pem
|
|---|
| 93 |
|
|---|
| 94 | [3-name-constraints-no-san-in-ee-client]
|
|---|
| 95 | CipherString = DEFAULT
|
|---|
| 96 | VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
|
|---|
| 97 | VerifyMode = Peer
|
|---|
| 98 |
|
|---|
| 99 | [test-3]
|
|---|
| 100 | ExpectedResult = Success
|
|---|
| 101 |
|
|---|
| 102 |
|
|---|
