xref: /freebsd/crypto/openssl/test/ssl-tests/01-simple.cnf (revision 59c8e88e72633afbc47a4ace0d2170d00d51f7dc)
1# Generated with generate_ssl_tests.pl
2
3num_tests = 4
4
5test-0 = 0-default
6test-1 = 1-Server signature algorithms bug
7test-2 = 2-verify-cert
8test-3 = 3-name-constraints-no-san-in-ee
9# ===========================================================
10
11[0-default]
12ssl_conf = 0-default-ssl
13
14[0-default-ssl]
15server = 0-default-server
16client = 0-default-client
17
18[0-default-server]
19Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
20CipherString = DEFAULT
21PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
22
23[0-default-client]
24CipherString = DEFAULT
25VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
26VerifyMode = Peer
27
28[test-0]
29ExpectedResult = Success
30
31
32# ===========================================================
33
34[1-Server signature algorithms bug]
35ssl_conf = 1-Server signature algorithms bug-ssl
36
37[1-Server signature algorithms bug-ssl]
38server = 1-Server signature algorithms bug-server
39client = 1-Server signature algorithms bug-client
40
41[1-Server signature algorithms bug-server]
42Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
43CipherString = DEFAULT
44ClientSignatureAlgorithms = PSS+SHA512:RSA+SHA512
45PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
46
47[1-Server signature algorithms bug-client]
48CipherString = DEFAULT
49SignatureAlgorithms = PSS+SHA256:RSA+SHA256
50VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
51VerifyMode = Peer
52
53[test-1]
54ExpectedResult = Success
55
56
57# ===========================================================
58
59[2-verify-cert]
60ssl_conf = 2-verify-cert-ssl
61
62[2-verify-cert-ssl]
63server = 2-verify-cert-server
64client = 2-verify-cert-client
65
66[2-verify-cert-server]
67Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
68CipherString = DEFAULT
69PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
70
71[2-verify-cert-client]
72CipherString = DEFAULT
73VerifyMode = Peer
74
75[test-2]
76ExpectedClientAlert = UnknownCA
77ExpectedResult = ClientFail
78
79
80# ===========================================================
81
82[3-name-constraints-no-san-in-ee]
83ssl_conf = 3-name-constraints-no-san-in-ee-ssl
84
85[3-name-constraints-no-san-in-ee-ssl]
86server = 3-name-constraints-no-san-in-ee-server
87client = 3-name-constraints-no-san-in-ee-client
88
89[3-name-constraints-no-san-in-ee-server]
90Certificate = ${ENV::TEST_CERTS_DIR}/goodcn2-chain.pem
91CipherString = DEFAULT
92PrivateKey = ${ENV::TEST_CERTS_DIR}/goodcn2-key.pem
93
94[3-name-constraints-no-san-in-ee-client]
95CipherString = DEFAULT
96VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
97VerifyMode = Peer
98
99[test-3]
100ExpectedResult = Success
101
102
103