xref: /freebsd/crypto/openssl/test/ssl-tests/08-npn.cnf (revision a7148ab39c03abd4d1a84997c70bf96f15dd2a09)
1e0c4386eSCy Schubert# Generated with generate_ssl_tests.pl
2e0c4386eSCy Schubert
3*a7148ab3SEnji Coopernum_tests = 22
4e0c4386eSCy Schubert
5e0c4386eSCy Schuberttest-0 = 0-npn-simple
6e0c4386eSCy Schuberttest-1 = 1-npn-client-finds-match
7e0c4386eSCy Schuberttest-2 = 2-npn-client-honours-server-pref
8e0c4386eSCy Schuberttest-3 = 3-npn-client-first-pref-on-mismatch
9e0c4386eSCy Schuberttest-4 = 4-npn-no-server-support
10e0c4386eSCy Schuberttest-5 = 5-npn-no-client-support
11*a7148ab3SEnji Coopertest-6 = 6-npn-empty-client-list
12*a7148ab3SEnji Coopertest-7 = 7-npn-empty-server-list
13*a7148ab3SEnji Coopertest-8 = 8-npn-with-sni-no-context-switch
14*a7148ab3SEnji Coopertest-9 = 9-npn-with-sni-context-switch
15*a7148ab3SEnji Coopertest-10 = 10-npn-selected-sni-server-supports-npn
16*a7148ab3SEnji Coopertest-11 = 11-npn-selected-sni-server-does-not-support-npn
17*a7148ab3SEnji Coopertest-12 = 12-alpn-preferred-over-npn
18*a7148ab3SEnji Coopertest-13 = 13-sni-npn-preferred-over-alpn
19*a7148ab3SEnji Coopertest-14 = 14-npn-simple-resumption
20*a7148ab3SEnji Coopertest-15 = 15-npn-server-switch-resumption
21*a7148ab3SEnji Coopertest-16 = 16-npn-client-switch-resumption
22*a7148ab3SEnji Coopertest-17 = 17-npn-client-first-pref-on-mismatch-resumption
23*a7148ab3SEnji Coopertest-18 = 18-npn-no-server-support-resumption
24*a7148ab3SEnji Coopertest-19 = 19-npn-no-client-support-resumption
25*a7148ab3SEnji Coopertest-20 = 20-alpn-preferred-over-npn-resumption
26*a7148ab3SEnji Coopertest-21 = 21-npn-used-if-alpn-not-supported-resumption
27e0c4386eSCy Schubert# ===========================================================
28e0c4386eSCy Schubert
29e0c4386eSCy Schubert[0-npn-simple]
30e0c4386eSCy Schubertssl_conf = 0-npn-simple-ssl
31e0c4386eSCy Schubert
32e0c4386eSCy Schubert[0-npn-simple-ssl]
33e0c4386eSCy Schubertserver = 0-npn-simple-server
34e0c4386eSCy Schubertclient = 0-npn-simple-client
35e0c4386eSCy Schubert
36e0c4386eSCy Schubert[0-npn-simple-server]
37e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
38e0c4386eSCy SchubertCipherString = DEFAULT
39e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
40e0c4386eSCy Schubert
41e0c4386eSCy Schubert[0-npn-simple-client]
42e0c4386eSCy SchubertCipherString = DEFAULT
43e0c4386eSCy SchubertMaxProtocol = TLSv1.2
44e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
45e0c4386eSCy SchubertVerifyMode = Peer
46e0c4386eSCy Schubert
47e0c4386eSCy Schubert[test-0]
48e0c4386eSCy SchubertExpectedNPNProtocol = foo
49e0c4386eSCy Schubertserver = 0-npn-simple-server-extra
50e0c4386eSCy Schubertclient = 0-npn-simple-client-extra
51e0c4386eSCy Schubert
52e0c4386eSCy Schubert[0-npn-simple-server-extra]
53e0c4386eSCy SchubertNPNProtocols = foo
54e0c4386eSCy Schubert
55e0c4386eSCy Schubert[0-npn-simple-client-extra]
56e0c4386eSCy SchubertNPNProtocols = foo
57e0c4386eSCy Schubert
58e0c4386eSCy Schubert
59e0c4386eSCy Schubert# ===========================================================
60e0c4386eSCy Schubert
61e0c4386eSCy Schubert[1-npn-client-finds-match]
62e0c4386eSCy Schubertssl_conf = 1-npn-client-finds-match-ssl
63e0c4386eSCy Schubert
64e0c4386eSCy Schubert[1-npn-client-finds-match-ssl]
65e0c4386eSCy Schubertserver = 1-npn-client-finds-match-server
66e0c4386eSCy Schubertclient = 1-npn-client-finds-match-client
67e0c4386eSCy Schubert
68e0c4386eSCy Schubert[1-npn-client-finds-match-server]
69e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
70e0c4386eSCy SchubertCipherString = DEFAULT
71e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
72e0c4386eSCy Schubert
73e0c4386eSCy Schubert[1-npn-client-finds-match-client]
74e0c4386eSCy SchubertCipherString = DEFAULT
75e0c4386eSCy SchubertMaxProtocol = TLSv1.2
76e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
77e0c4386eSCy SchubertVerifyMode = Peer
78e0c4386eSCy Schubert
79e0c4386eSCy Schubert[test-1]
80e0c4386eSCy SchubertExpectedNPNProtocol = bar
81e0c4386eSCy Schubertserver = 1-npn-client-finds-match-server-extra
82e0c4386eSCy Schubertclient = 1-npn-client-finds-match-client-extra
83e0c4386eSCy Schubert
84e0c4386eSCy Schubert[1-npn-client-finds-match-server-extra]
85e0c4386eSCy SchubertNPNProtocols = baz,bar
86e0c4386eSCy Schubert
87e0c4386eSCy Schubert[1-npn-client-finds-match-client-extra]
88e0c4386eSCy SchubertNPNProtocols = foo,bar
89e0c4386eSCy Schubert
90e0c4386eSCy Schubert
91e0c4386eSCy Schubert# ===========================================================
92e0c4386eSCy Schubert
93e0c4386eSCy Schubert[2-npn-client-honours-server-pref]
94e0c4386eSCy Schubertssl_conf = 2-npn-client-honours-server-pref-ssl
95e0c4386eSCy Schubert
96e0c4386eSCy Schubert[2-npn-client-honours-server-pref-ssl]
97e0c4386eSCy Schubertserver = 2-npn-client-honours-server-pref-server
98e0c4386eSCy Schubertclient = 2-npn-client-honours-server-pref-client
99e0c4386eSCy Schubert
100e0c4386eSCy Schubert[2-npn-client-honours-server-pref-server]
101e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
102e0c4386eSCy SchubertCipherString = DEFAULT
103e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
104e0c4386eSCy Schubert
105e0c4386eSCy Schubert[2-npn-client-honours-server-pref-client]
106e0c4386eSCy SchubertCipherString = DEFAULT
107e0c4386eSCy SchubertMaxProtocol = TLSv1.2
108e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
109e0c4386eSCy SchubertVerifyMode = Peer
110e0c4386eSCy Schubert
111e0c4386eSCy Schubert[test-2]
112e0c4386eSCy SchubertExpectedNPNProtocol = bar
113e0c4386eSCy Schubertserver = 2-npn-client-honours-server-pref-server-extra
114e0c4386eSCy Schubertclient = 2-npn-client-honours-server-pref-client-extra
115e0c4386eSCy Schubert
116e0c4386eSCy Schubert[2-npn-client-honours-server-pref-server-extra]
117e0c4386eSCy SchubertNPNProtocols = bar,foo
118e0c4386eSCy Schubert
119e0c4386eSCy Schubert[2-npn-client-honours-server-pref-client-extra]
120e0c4386eSCy SchubertNPNProtocols = foo,bar
121e0c4386eSCy Schubert
122e0c4386eSCy Schubert
123e0c4386eSCy Schubert# ===========================================================
124e0c4386eSCy Schubert
125e0c4386eSCy Schubert[3-npn-client-first-pref-on-mismatch]
126e0c4386eSCy Schubertssl_conf = 3-npn-client-first-pref-on-mismatch-ssl
127e0c4386eSCy Schubert
128e0c4386eSCy Schubert[3-npn-client-first-pref-on-mismatch-ssl]
129e0c4386eSCy Schubertserver = 3-npn-client-first-pref-on-mismatch-server
130e0c4386eSCy Schubertclient = 3-npn-client-first-pref-on-mismatch-client
131e0c4386eSCy Schubert
132e0c4386eSCy Schubert[3-npn-client-first-pref-on-mismatch-server]
133e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
134e0c4386eSCy SchubertCipherString = DEFAULT
135e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
136e0c4386eSCy Schubert
137e0c4386eSCy Schubert[3-npn-client-first-pref-on-mismatch-client]
138e0c4386eSCy SchubertCipherString = DEFAULT
139e0c4386eSCy SchubertMaxProtocol = TLSv1.2
140e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
141e0c4386eSCy SchubertVerifyMode = Peer
142e0c4386eSCy Schubert
143e0c4386eSCy Schubert[test-3]
144e0c4386eSCy SchubertExpectedNPNProtocol = foo
145e0c4386eSCy Schubertserver = 3-npn-client-first-pref-on-mismatch-server-extra
146e0c4386eSCy Schubertclient = 3-npn-client-first-pref-on-mismatch-client-extra
147e0c4386eSCy Schubert
148e0c4386eSCy Schubert[3-npn-client-first-pref-on-mismatch-server-extra]
149e0c4386eSCy SchubertNPNProtocols = baz
150e0c4386eSCy Schubert
151e0c4386eSCy Schubert[3-npn-client-first-pref-on-mismatch-client-extra]
152e0c4386eSCy SchubertNPNProtocols = foo,bar
153e0c4386eSCy Schubert
154e0c4386eSCy Schubert
155e0c4386eSCy Schubert# ===========================================================
156e0c4386eSCy Schubert
157e0c4386eSCy Schubert[4-npn-no-server-support]
158e0c4386eSCy Schubertssl_conf = 4-npn-no-server-support-ssl
159e0c4386eSCy Schubert
160e0c4386eSCy Schubert[4-npn-no-server-support-ssl]
161e0c4386eSCy Schubertserver = 4-npn-no-server-support-server
162e0c4386eSCy Schubertclient = 4-npn-no-server-support-client
163e0c4386eSCy Schubert
164e0c4386eSCy Schubert[4-npn-no-server-support-server]
165e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
166e0c4386eSCy SchubertCipherString = DEFAULT
167e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
168e0c4386eSCy Schubert
169e0c4386eSCy Schubert[4-npn-no-server-support-client]
170e0c4386eSCy SchubertCipherString = DEFAULT
171e0c4386eSCy SchubertMaxProtocol = TLSv1.2
172e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
173e0c4386eSCy SchubertVerifyMode = Peer
174e0c4386eSCy Schubert
175e0c4386eSCy Schubert[test-4]
176e0c4386eSCy Schubertclient = 4-npn-no-server-support-client-extra
177e0c4386eSCy Schubert
178e0c4386eSCy Schubert[4-npn-no-server-support-client-extra]
179e0c4386eSCy SchubertNPNProtocols = foo
180e0c4386eSCy Schubert
181e0c4386eSCy Schubert
182e0c4386eSCy Schubert# ===========================================================
183e0c4386eSCy Schubert
184e0c4386eSCy Schubert[5-npn-no-client-support]
185e0c4386eSCy Schubertssl_conf = 5-npn-no-client-support-ssl
186e0c4386eSCy Schubert
187e0c4386eSCy Schubert[5-npn-no-client-support-ssl]
188e0c4386eSCy Schubertserver = 5-npn-no-client-support-server
189e0c4386eSCy Schubertclient = 5-npn-no-client-support-client
190e0c4386eSCy Schubert
191e0c4386eSCy Schubert[5-npn-no-client-support-server]
192e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
193e0c4386eSCy SchubertCipherString = DEFAULT
194e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
195e0c4386eSCy Schubert
196e0c4386eSCy Schubert[5-npn-no-client-support-client]
197e0c4386eSCy SchubertCipherString = DEFAULT
198e0c4386eSCy SchubertMaxProtocol = TLSv1.2
199e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
200e0c4386eSCy SchubertVerifyMode = Peer
201e0c4386eSCy Schubert
202e0c4386eSCy Schubert[test-5]
203e0c4386eSCy Schubertserver = 5-npn-no-client-support-server-extra
204e0c4386eSCy Schubert
205e0c4386eSCy Schubert[5-npn-no-client-support-server-extra]
206e0c4386eSCy SchubertNPNProtocols = foo
207e0c4386eSCy Schubert
208e0c4386eSCy Schubert
209e0c4386eSCy Schubert# ===========================================================
210e0c4386eSCy Schubert
211*a7148ab3SEnji Cooper[6-npn-empty-client-list]
212*a7148ab3SEnji Cooperssl_conf = 6-npn-empty-client-list-ssl
213e0c4386eSCy Schubert
214*a7148ab3SEnji Cooper[6-npn-empty-client-list-ssl]
215*a7148ab3SEnji Cooperserver = 6-npn-empty-client-list-server
216*a7148ab3SEnji Cooperclient = 6-npn-empty-client-list-client
217e0c4386eSCy Schubert
218*a7148ab3SEnji Cooper[6-npn-empty-client-list-server]
219e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
220e0c4386eSCy SchubertCipherString = DEFAULT
221e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
222e0c4386eSCy Schubert
223*a7148ab3SEnji Cooper[6-npn-empty-client-list-client]
224e0c4386eSCy SchubertCipherString = DEFAULT
225e0c4386eSCy SchubertMaxProtocol = TLSv1.2
226e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
227e0c4386eSCy SchubertVerifyMode = Peer
228e0c4386eSCy Schubert
229e0c4386eSCy Schubert[test-6]
230*a7148ab3SEnji CooperExpectedClientAlert = HandshakeFailure
231*a7148ab3SEnji CooperExpectedResult = ClientFail
232*a7148ab3SEnji Cooperserver = 6-npn-empty-client-list-server-extra
233*a7148ab3SEnji Cooperclient = 6-npn-empty-client-list-client-extra
234e0c4386eSCy Schubert
235*a7148ab3SEnji Cooper[6-npn-empty-client-list-server-extra]
236e0c4386eSCy SchubertNPNProtocols = foo
237e0c4386eSCy Schubert
238*a7148ab3SEnji Cooper[6-npn-empty-client-list-client-extra]
239*a7148ab3SEnji CooperNPNProtocols =
240e0c4386eSCy Schubert
241e0c4386eSCy Schubert
242e0c4386eSCy Schubert# ===========================================================
243e0c4386eSCy Schubert
244*a7148ab3SEnji Cooper[7-npn-empty-server-list]
245*a7148ab3SEnji Cooperssl_conf = 7-npn-empty-server-list-ssl
246e0c4386eSCy Schubert
247*a7148ab3SEnji Cooper[7-npn-empty-server-list-ssl]
248*a7148ab3SEnji Cooperserver = 7-npn-empty-server-list-server
249*a7148ab3SEnji Cooperclient = 7-npn-empty-server-list-client
250e0c4386eSCy Schubert
251*a7148ab3SEnji Cooper[7-npn-empty-server-list-server]
252e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
253e0c4386eSCy SchubertCipherString = DEFAULT
254e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
255e0c4386eSCy Schubert
256*a7148ab3SEnji Cooper[7-npn-empty-server-list-client]
257e0c4386eSCy SchubertCipherString = DEFAULT
258e0c4386eSCy SchubertMaxProtocol = TLSv1.2
259e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
260e0c4386eSCy SchubertVerifyMode = Peer
261e0c4386eSCy Schubert
262e0c4386eSCy Schubert[test-7]
263*a7148ab3SEnji CooperExpectedNPNProtocol = foo
264*a7148ab3SEnji Cooperserver = 7-npn-empty-server-list-server-extra
265*a7148ab3SEnji Cooperclient = 7-npn-empty-server-list-client-extra
266e0c4386eSCy Schubert
267*a7148ab3SEnji Cooper[7-npn-empty-server-list-server-extra]
268*a7148ab3SEnji CooperNPNProtocols =
269*a7148ab3SEnji Cooper
270*a7148ab3SEnji Cooper[7-npn-empty-server-list-client-extra]
271e0c4386eSCy SchubertNPNProtocols = foo
272e0c4386eSCy Schubert
273e0c4386eSCy Schubert
274e0c4386eSCy Schubert# ===========================================================
275e0c4386eSCy Schubert
276*a7148ab3SEnji Cooper[8-npn-with-sni-no-context-switch]
277*a7148ab3SEnji Cooperssl_conf = 8-npn-with-sni-no-context-switch-ssl
278e0c4386eSCy Schubert
279*a7148ab3SEnji Cooper[8-npn-with-sni-no-context-switch-ssl]
280*a7148ab3SEnji Cooperserver = 8-npn-with-sni-no-context-switch-server
281*a7148ab3SEnji Cooperclient = 8-npn-with-sni-no-context-switch-client
282*a7148ab3SEnji Cooperserver2 = 8-npn-with-sni-no-context-switch-server2
283e0c4386eSCy Schubert
284*a7148ab3SEnji Cooper[8-npn-with-sni-no-context-switch-server]
285e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
286e0c4386eSCy SchubertCipherString = DEFAULT
287e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
288e0c4386eSCy Schubert
289*a7148ab3SEnji Cooper[8-npn-with-sni-no-context-switch-server2]
290e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
291e0c4386eSCy SchubertCipherString = DEFAULT
292e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
293e0c4386eSCy Schubert
294*a7148ab3SEnji Cooper[8-npn-with-sni-no-context-switch-client]
295e0c4386eSCy SchubertCipherString = DEFAULT
296e0c4386eSCy SchubertMaxProtocol = TLSv1.2
297e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
298e0c4386eSCy SchubertVerifyMode = Peer
299e0c4386eSCy Schubert
300e0c4386eSCy Schubert[test-8]
301*a7148ab3SEnji CooperExpectedNPNProtocol = foo
302*a7148ab3SEnji CooperExpectedServerName = server1
303*a7148ab3SEnji Cooperserver = 8-npn-with-sni-no-context-switch-server-extra
304*a7148ab3SEnji Cooperserver2 = 8-npn-with-sni-no-context-switch-server2-extra
305*a7148ab3SEnji Cooperclient = 8-npn-with-sni-no-context-switch-client-extra
306e0c4386eSCy Schubert
307*a7148ab3SEnji Cooper[8-npn-with-sni-no-context-switch-server-extra]
308*a7148ab3SEnji CooperNPNProtocols = foo
309e0c4386eSCy SchubertServerNameCallback = IgnoreMismatch
310e0c4386eSCy Schubert
311*a7148ab3SEnji Cooper[8-npn-with-sni-no-context-switch-server2-extra]
312e0c4386eSCy SchubertNPNProtocols = bar
313e0c4386eSCy Schubert
314*a7148ab3SEnji Cooper[8-npn-with-sni-no-context-switch-client-extra]
315e0c4386eSCy SchubertNPNProtocols = foo,bar
316*a7148ab3SEnji CooperServerName = server1
317e0c4386eSCy Schubert
318e0c4386eSCy Schubert
319e0c4386eSCy Schubert# ===========================================================
320e0c4386eSCy Schubert
321*a7148ab3SEnji Cooper[9-npn-with-sni-context-switch]
322*a7148ab3SEnji Cooperssl_conf = 9-npn-with-sni-context-switch-ssl
323e0c4386eSCy Schubert
324*a7148ab3SEnji Cooper[9-npn-with-sni-context-switch-ssl]
325*a7148ab3SEnji Cooperserver = 9-npn-with-sni-context-switch-server
326*a7148ab3SEnji Cooperclient = 9-npn-with-sni-context-switch-client
327*a7148ab3SEnji Cooperserver2 = 9-npn-with-sni-context-switch-server2
328e0c4386eSCy Schubert
329*a7148ab3SEnji Cooper[9-npn-with-sni-context-switch-server]
330e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
331e0c4386eSCy SchubertCipherString = DEFAULT
332e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
333e0c4386eSCy Schubert
334*a7148ab3SEnji Cooper[9-npn-with-sni-context-switch-server2]
335e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
336e0c4386eSCy SchubertCipherString = DEFAULT
337e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
338e0c4386eSCy Schubert
339*a7148ab3SEnji Cooper[9-npn-with-sni-context-switch-client]
340e0c4386eSCy SchubertCipherString = DEFAULT
341e0c4386eSCy SchubertMaxProtocol = TLSv1.2
342e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
343e0c4386eSCy SchubertVerifyMode = Peer
344e0c4386eSCy Schubert
345e0c4386eSCy Schubert[test-9]
346*a7148ab3SEnji CooperExpectedNPNProtocol = bar
347e0c4386eSCy SchubertExpectedServerName = server2
348*a7148ab3SEnji Cooperserver = 9-npn-with-sni-context-switch-server-extra
349*a7148ab3SEnji Cooperserver2 = 9-npn-with-sni-context-switch-server2-extra
350*a7148ab3SEnji Cooperclient = 9-npn-with-sni-context-switch-client-extra
351e0c4386eSCy Schubert
352*a7148ab3SEnji Cooper[9-npn-with-sni-context-switch-server-extra]
353*a7148ab3SEnji CooperNPNProtocols = foo
354e0c4386eSCy SchubertServerNameCallback = IgnoreMismatch
355e0c4386eSCy Schubert
356*a7148ab3SEnji Cooper[9-npn-with-sni-context-switch-server2-extra]
357*a7148ab3SEnji CooperNPNProtocols = bar
358*a7148ab3SEnji Cooper
359*a7148ab3SEnji Cooper[9-npn-with-sni-context-switch-client-extra]
360e0c4386eSCy SchubertNPNProtocols = foo,bar
361e0c4386eSCy SchubertServerName = server2
362e0c4386eSCy Schubert
363e0c4386eSCy Schubert
364e0c4386eSCy Schubert# ===========================================================
365e0c4386eSCy Schubert
366*a7148ab3SEnji Cooper[10-npn-selected-sni-server-supports-npn]
367*a7148ab3SEnji Cooperssl_conf = 10-npn-selected-sni-server-supports-npn-ssl
368e0c4386eSCy Schubert
369*a7148ab3SEnji Cooper[10-npn-selected-sni-server-supports-npn-ssl]
370*a7148ab3SEnji Cooperserver = 10-npn-selected-sni-server-supports-npn-server
371*a7148ab3SEnji Cooperclient = 10-npn-selected-sni-server-supports-npn-client
372*a7148ab3SEnji Cooperserver2 = 10-npn-selected-sni-server-supports-npn-server2
373e0c4386eSCy Schubert
374*a7148ab3SEnji Cooper[10-npn-selected-sni-server-supports-npn-server]
375e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
376e0c4386eSCy SchubertCipherString = DEFAULT
377e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
378e0c4386eSCy Schubert
379*a7148ab3SEnji Cooper[10-npn-selected-sni-server-supports-npn-server2]
380*a7148ab3SEnji CooperCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
381*a7148ab3SEnji CooperCipherString = DEFAULT
382*a7148ab3SEnji CooperPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
383*a7148ab3SEnji Cooper
384*a7148ab3SEnji Cooper[10-npn-selected-sni-server-supports-npn-client]
385e0c4386eSCy SchubertCipherString = DEFAULT
386e0c4386eSCy SchubertMaxProtocol = TLSv1.2
387e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
388e0c4386eSCy SchubertVerifyMode = Peer
389e0c4386eSCy Schubert
390e0c4386eSCy Schubert[test-10]
391*a7148ab3SEnji CooperExpectedNPNProtocol = bar
392*a7148ab3SEnji CooperExpectedServerName = server2
393*a7148ab3SEnji Cooperserver = 10-npn-selected-sni-server-supports-npn-server-extra
394*a7148ab3SEnji Cooperserver2 = 10-npn-selected-sni-server-supports-npn-server2-extra
395*a7148ab3SEnji Cooperclient = 10-npn-selected-sni-server-supports-npn-client-extra
396e0c4386eSCy Schubert
397*a7148ab3SEnji Cooper[10-npn-selected-sni-server-supports-npn-server-extra]
398*a7148ab3SEnji CooperServerNameCallback = IgnoreMismatch
399*a7148ab3SEnji Cooper
400*a7148ab3SEnji Cooper[10-npn-selected-sni-server-supports-npn-server2-extra]
401e0c4386eSCy SchubertNPNProtocols = bar
402e0c4386eSCy Schubert
403*a7148ab3SEnji Cooper[10-npn-selected-sni-server-supports-npn-client-extra]
404*a7148ab3SEnji CooperNPNProtocols = foo,bar
405*a7148ab3SEnji CooperServerName = server2
406e0c4386eSCy Schubert
407e0c4386eSCy Schubert
408e0c4386eSCy Schubert# ===========================================================
409e0c4386eSCy Schubert
410*a7148ab3SEnji Cooper[11-npn-selected-sni-server-does-not-support-npn]
411*a7148ab3SEnji Cooperssl_conf = 11-npn-selected-sni-server-does-not-support-npn-ssl
412e0c4386eSCy Schubert
413*a7148ab3SEnji Cooper[11-npn-selected-sni-server-does-not-support-npn-ssl]
414*a7148ab3SEnji Cooperserver = 11-npn-selected-sni-server-does-not-support-npn-server
415*a7148ab3SEnji Cooperclient = 11-npn-selected-sni-server-does-not-support-npn-client
416*a7148ab3SEnji Cooperserver2 = 11-npn-selected-sni-server-does-not-support-npn-server2
417e0c4386eSCy Schubert
418*a7148ab3SEnji Cooper[11-npn-selected-sni-server-does-not-support-npn-server]
419e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
420e0c4386eSCy SchubertCipherString = DEFAULT
421e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
422e0c4386eSCy Schubert
423*a7148ab3SEnji Cooper[11-npn-selected-sni-server-does-not-support-npn-server2]
424e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
425e0c4386eSCy SchubertCipherString = DEFAULT
426e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
427e0c4386eSCy Schubert
428*a7148ab3SEnji Cooper[11-npn-selected-sni-server-does-not-support-npn-client]
429e0c4386eSCy SchubertCipherString = DEFAULT
430e0c4386eSCy SchubertMaxProtocol = TLSv1.2
431e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
432e0c4386eSCy SchubertVerifyMode = Peer
433e0c4386eSCy Schubert
434e0c4386eSCy Schubert[test-11]
435*a7148ab3SEnji CooperExpectedServerName = server2
436*a7148ab3SEnji Cooperserver = 11-npn-selected-sni-server-does-not-support-npn-server-extra
437*a7148ab3SEnji Cooperclient = 11-npn-selected-sni-server-does-not-support-npn-client-extra
438*a7148ab3SEnji Cooper
439*a7148ab3SEnji Cooper[11-npn-selected-sni-server-does-not-support-npn-server-extra]
440*a7148ab3SEnji CooperNPNProtocols = bar
441*a7148ab3SEnji CooperServerNameCallback = IgnoreMismatch
442*a7148ab3SEnji Cooper
443*a7148ab3SEnji Cooper[11-npn-selected-sni-server-does-not-support-npn-client-extra]
444*a7148ab3SEnji CooperNPNProtocols = foo,bar
445*a7148ab3SEnji CooperServerName = server2
446*a7148ab3SEnji Cooper
447*a7148ab3SEnji Cooper
448*a7148ab3SEnji Cooper# ===========================================================
449*a7148ab3SEnji Cooper
450*a7148ab3SEnji Cooper[12-alpn-preferred-over-npn]
451*a7148ab3SEnji Cooperssl_conf = 12-alpn-preferred-over-npn-ssl
452*a7148ab3SEnji Cooper
453*a7148ab3SEnji Cooper[12-alpn-preferred-over-npn-ssl]
454*a7148ab3SEnji Cooperserver = 12-alpn-preferred-over-npn-server
455*a7148ab3SEnji Cooperclient = 12-alpn-preferred-over-npn-client
456*a7148ab3SEnji Cooper
457*a7148ab3SEnji Cooper[12-alpn-preferred-over-npn-server]
458*a7148ab3SEnji CooperCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
459*a7148ab3SEnji CooperCipherString = DEFAULT
460*a7148ab3SEnji CooperPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
461*a7148ab3SEnji Cooper
462*a7148ab3SEnji Cooper[12-alpn-preferred-over-npn-client]
463*a7148ab3SEnji CooperCipherString = DEFAULT
464*a7148ab3SEnji CooperMaxProtocol = TLSv1.2
465*a7148ab3SEnji CooperVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
466*a7148ab3SEnji CooperVerifyMode = Peer
467*a7148ab3SEnji Cooper
468*a7148ab3SEnji Cooper[test-12]
469*a7148ab3SEnji CooperExpectedALPNProtocol = foo
470*a7148ab3SEnji Cooperserver = 12-alpn-preferred-over-npn-server-extra
471*a7148ab3SEnji Cooperclient = 12-alpn-preferred-over-npn-client-extra
472*a7148ab3SEnji Cooper
473*a7148ab3SEnji Cooper[12-alpn-preferred-over-npn-server-extra]
474*a7148ab3SEnji CooperALPNProtocols = foo
475*a7148ab3SEnji CooperNPNProtocols = bar
476*a7148ab3SEnji Cooper
477*a7148ab3SEnji Cooper[12-alpn-preferred-over-npn-client-extra]
478*a7148ab3SEnji CooperALPNProtocols = foo
479*a7148ab3SEnji CooperNPNProtocols = bar
480*a7148ab3SEnji Cooper
481*a7148ab3SEnji Cooper
482*a7148ab3SEnji Cooper# ===========================================================
483*a7148ab3SEnji Cooper
484*a7148ab3SEnji Cooper[13-sni-npn-preferred-over-alpn]
485*a7148ab3SEnji Cooperssl_conf = 13-sni-npn-preferred-over-alpn-ssl
486*a7148ab3SEnji Cooper
487*a7148ab3SEnji Cooper[13-sni-npn-preferred-over-alpn-ssl]
488*a7148ab3SEnji Cooperserver = 13-sni-npn-preferred-over-alpn-server
489*a7148ab3SEnji Cooperclient = 13-sni-npn-preferred-over-alpn-client
490*a7148ab3SEnji Cooperserver2 = 13-sni-npn-preferred-over-alpn-server2
491*a7148ab3SEnji Cooper
492*a7148ab3SEnji Cooper[13-sni-npn-preferred-over-alpn-server]
493*a7148ab3SEnji CooperCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
494*a7148ab3SEnji CooperCipherString = DEFAULT
495*a7148ab3SEnji CooperPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
496*a7148ab3SEnji Cooper
497*a7148ab3SEnji Cooper[13-sni-npn-preferred-over-alpn-server2]
498*a7148ab3SEnji CooperCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
499*a7148ab3SEnji CooperCipherString = DEFAULT
500*a7148ab3SEnji CooperPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
501*a7148ab3SEnji Cooper
502*a7148ab3SEnji Cooper[13-sni-npn-preferred-over-alpn-client]
503*a7148ab3SEnji CooperCipherString = DEFAULT
504*a7148ab3SEnji CooperMaxProtocol = TLSv1.2
505*a7148ab3SEnji CooperVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
506*a7148ab3SEnji CooperVerifyMode = Peer
507*a7148ab3SEnji Cooper
508*a7148ab3SEnji Cooper[test-13]
509e0c4386eSCy SchubertExpectedNPNProtocol = bar
510e0c4386eSCy SchubertExpectedServerName = server2
511*a7148ab3SEnji Cooperserver = 13-sni-npn-preferred-over-alpn-server-extra
512*a7148ab3SEnji Cooperserver2 = 13-sni-npn-preferred-over-alpn-server2-extra
513*a7148ab3SEnji Cooperclient = 13-sni-npn-preferred-over-alpn-client-extra
514e0c4386eSCy Schubert
515*a7148ab3SEnji Cooper[13-sni-npn-preferred-over-alpn-server-extra]
516e0c4386eSCy SchubertALPNProtocols = foo
517e0c4386eSCy SchubertServerNameCallback = IgnoreMismatch
518e0c4386eSCy Schubert
519*a7148ab3SEnji Cooper[13-sni-npn-preferred-over-alpn-server2-extra]
520e0c4386eSCy SchubertNPNProtocols = bar
521e0c4386eSCy Schubert
522*a7148ab3SEnji Cooper[13-sni-npn-preferred-over-alpn-client-extra]
523e0c4386eSCy SchubertALPNProtocols = foo
524e0c4386eSCy SchubertNPNProtocols = bar
525e0c4386eSCy SchubertServerName = server2
526e0c4386eSCy Schubert
527e0c4386eSCy Schubert
528e0c4386eSCy Schubert# ===========================================================
529e0c4386eSCy Schubert
530*a7148ab3SEnji Cooper[14-npn-simple-resumption]
531*a7148ab3SEnji Cooperssl_conf = 14-npn-simple-resumption-ssl
532e0c4386eSCy Schubert
533*a7148ab3SEnji Cooper[14-npn-simple-resumption-ssl]
534*a7148ab3SEnji Cooperserver = 14-npn-simple-resumption-server
535*a7148ab3SEnji Cooperclient = 14-npn-simple-resumption-client
536*a7148ab3SEnji Cooperresume-server = 14-npn-simple-resumption-server
537*a7148ab3SEnji Cooperresume-client = 14-npn-simple-resumption-client
538e0c4386eSCy Schubert
539*a7148ab3SEnji Cooper[14-npn-simple-resumption-server]
540e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
541e0c4386eSCy SchubertCipherString = DEFAULT
542e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
543e0c4386eSCy Schubert
544*a7148ab3SEnji Cooper[14-npn-simple-resumption-client]
545e0c4386eSCy SchubertCipherString = DEFAULT
546e0c4386eSCy SchubertMaxProtocol = TLSv1.2
547e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
548e0c4386eSCy SchubertVerifyMode = Peer
549e0c4386eSCy Schubert
550e0c4386eSCy Schubert[test-14]
551*a7148ab3SEnji CooperExpectedNPNProtocol = foo
552e0c4386eSCy SchubertHandshakeMode = Resume
553e0c4386eSCy SchubertResumptionExpected = Yes
554*a7148ab3SEnji Cooperserver = 14-npn-simple-resumption-server-extra
555*a7148ab3SEnji Cooperresume-server = 14-npn-simple-resumption-server-extra
556*a7148ab3SEnji Cooperclient = 14-npn-simple-resumption-client-extra
557*a7148ab3SEnji Cooperresume-client = 14-npn-simple-resumption-client-extra
558e0c4386eSCy Schubert
559*a7148ab3SEnji Cooper[14-npn-simple-resumption-server-extra]
560*a7148ab3SEnji CooperNPNProtocols = foo
561e0c4386eSCy Schubert
562*a7148ab3SEnji Cooper[14-npn-simple-resumption-client-extra]
563*a7148ab3SEnji CooperNPNProtocols = foo
564e0c4386eSCy Schubert
565e0c4386eSCy Schubert
566e0c4386eSCy Schubert# ===========================================================
567e0c4386eSCy Schubert
568*a7148ab3SEnji Cooper[15-npn-server-switch-resumption]
569*a7148ab3SEnji Cooperssl_conf = 15-npn-server-switch-resumption-ssl
570e0c4386eSCy Schubert
571*a7148ab3SEnji Cooper[15-npn-server-switch-resumption-ssl]
572*a7148ab3SEnji Cooperserver = 15-npn-server-switch-resumption-server
573*a7148ab3SEnji Cooperclient = 15-npn-server-switch-resumption-client
574*a7148ab3SEnji Cooperresume-server = 15-npn-server-switch-resumption-resume-server
575*a7148ab3SEnji Cooperresume-client = 15-npn-server-switch-resumption-client
576e0c4386eSCy Schubert
577*a7148ab3SEnji Cooper[15-npn-server-switch-resumption-server]
578e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
579e0c4386eSCy SchubertCipherString = DEFAULT
580e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
581e0c4386eSCy Schubert
582*a7148ab3SEnji Cooper[15-npn-server-switch-resumption-resume-server]
583e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
584e0c4386eSCy SchubertCipherString = DEFAULT
585e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
586e0c4386eSCy Schubert
587*a7148ab3SEnji Cooper[15-npn-server-switch-resumption-client]
588e0c4386eSCy SchubertCipherString = DEFAULT
589e0c4386eSCy SchubertMaxProtocol = TLSv1.2
590e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
591e0c4386eSCy SchubertVerifyMode = Peer
592e0c4386eSCy Schubert
593e0c4386eSCy Schubert[test-15]
594*a7148ab3SEnji CooperExpectedNPNProtocol = baz
595e0c4386eSCy SchubertHandshakeMode = Resume
596e0c4386eSCy SchubertResumptionExpected = Yes
597*a7148ab3SEnji Cooperserver = 15-npn-server-switch-resumption-server-extra
598*a7148ab3SEnji Cooperresume-server = 15-npn-server-switch-resumption-resume-server-extra
599*a7148ab3SEnji Cooperclient = 15-npn-server-switch-resumption-client-extra
600*a7148ab3SEnji Cooperresume-client = 15-npn-server-switch-resumption-client-extra
601e0c4386eSCy Schubert
602*a7148ab3SEnji Cooper[15-npn-server-switch-resumption-server-extra]
603*a7148ab3SEnji CooperNPNProtocols = bar,foo
604e0c4386eSCy Schubert
605*a7148ab3SEnji Cooper[15-npn-server-switch-resumption-resume-server-extra]
606*a7148ab3SEnji CooperNPNProtocols = baz,foo
607e0c4386eSCy Schubert
608*a7148ab3SEnji Cooper[15-npn-server-switch-resumption-client-extra]
609*a7148ab3SEnji CooperNPNProtocols = foo,bar,baz
610e0c4386eSCy Schubert
611e0c4386eSCy Schubert
612e0c4386eSCy Schubert# ===========================================================
613e0c4386eSCy Schubert
614*a7148ab3SEnji Cooper[16-npn-client-switch-resumption]
615*a7148ab3SEnji Cooperssl_conf = 16-npn-client-switch-resumption-ssl
616e0c4386eSCy Schubert
617*a7148ab3SEnji Cooper[16-npn-client-switch-resumption-ssl]
618*a7148ab3SEnji Cooperserver = 16-npn-client-switch-resumption-server
619*a7148ab3SEnji Cooperclient = 16-npn-client-switch-resumption-client
620*a7148ab3SEnji Cooperresume-server = 16-npn-client-switch-resumption-server
621*a7148ab3SEnji Cooperresume-client = 16-npn-client-switch-resumption-resume-client
622e0c4386eSCy Schubert
623*a7148ab3SEnji Cooper[16-npn-client-switch-resumption-server]
624e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
625e0c4386eSCy SchubertCipherString = DEFAULT
626e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
627e0c4386eSCy Schubert
628*a7148ab3SEnji Cooper[16-npn-client-switch-resumption-client]
629e0c4386eSCy SchubertCipherString = DEFAULT
630*a7148ab3SEnji CooperMaxProtocol = TLSv1.2
631*a7148ab3SEnji CooperVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
632*a7148ab3SEnji CooperVerifyMode = Peer
633e0c4386eSCy Schubert
634*a7148ab3SEnji Cooper[16-npn-client-switch-resumption-resume-client]
635e0c4386eSCy SchubertCipherString = DEFAULT
636e0c4386eSCy SchubertMaxProtocol = TLSv1.2
637e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
638e0c4386eSCy SchubertVerifyMode = Peer
639e0c4386eSCy Schubert
640e0c4386eSCy Schubert[test-16]
641*a7148ab3SEnji CooperExpectedNPNProtocol = bar
642e0c4386eSCy SchubertHandshakeMode = Resume
643e0c4386eSCy SchubertResumptionExpected = Yes
644*a7148ab3SEnji Cooperserver = 16-npn-client-switch-resumption-server-extra
645*a7148ab3SEnji Cooperresume-server = 16-npn-client-switch-resumption-server-extra
646*a7148ab3SEnji Cooperclient = 16-npn-client-switch-resumption-client-extra
647*a7148ab3SEnji Cooperresume-client = 16-npn-client-switch-resumption-resume-client-extra
648e0c4386eSCy Schubert
649*a7148ab3SEnji Cooper[16-npn-client-switch-resumption-server-extra]
650*a7148ab3SEnji CooperNPNProtocols = foo,bar,baz
651e0c4386eSCy Schubert
652*a7148ab3SEnji Cooper[16-npn-client-switch-resumption-client-extra]
653*a7148ab3SEnji CooperNPNProtocols = foo,baz
654*a7148ab3SEnji Cooper
655*a7148ab3SEnji Cooper[16-npn-client-switch-resumption-resume-client-extra]
656*a7148ab3SEnji CooperNPNProtocols = bar,baz
657e0c4386eSCy Schubert
658e0c4386eSCy Schubert
659e0c4386eSCy Schubert# ===========================================================
660e0c4386eSCy Schubert
661*a7148ab3SEnji Cooper[17-npn-client-first-pref-on-mismatch-resumption]
662*a7148ab3SEnji Cooperssl_conf = 17-npn-client-first-pref-on-mismatch-resumption-ssl
663e0c4386eSCy Schubert
664*a7148ab3SEnji Cooper[17-npn-client-first-pref-on-mismatch-resumption-ssl]
665*a7148ab3SEnji Cooperserver = 17-npn-client-first-pref-on-mismatch-resumption-server
666*a7148ab3SEnji Cooperclient = 17-npn-client-first-pref-on-mismatch-resumption-client
667*a7148ab3SEnji Cooperresume-server = 17-npn-client-first-pref-on-mismatch-resumption-resume-server
668*a7148ab3SEnji Cooperresume-client = 17-npn-client-first-pref-on-mismatch-resumption-client
669e0c4386eSCy Schubert
670*a7148ab3SEnji Cooper[17-npn-client-first-pref-on-mismatch-resumption-server]
671e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
672e0c4386eSCy SchubertCipherString = DEFAULT
673e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
674e0c4386eSCy Schubert
675*a7148ab3SEnji Cooper[17-npn-client-first-pref-on-mismatch-resumption-resume-server]
676*a7148ab3SEnji CooperCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
677e0c4386eSCy SchubertCipherString = DEFAULT
678*a7148ab3SEnji CooperPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
679e0c4386eSCy Schubert
680*a7148ab3SEnji Cooper[17-npn-client-first-pref-on-mismatch-resumption-client]
681e0c4386eSCy SchubertCipherString = DEFAULT
682e0c4386eSCy SchubertMaxProtocol = TLSv1.2
683e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
684e0c4386eSCy SchubertVerifyMode = Peer
685e0c4386eSCy Schubert
686e0c4386eSCy Schubert[test-17]
687*a7148ab3SEnji CooperExpectedNPNProtocol = foo
688e0c4386eSCy SchubertHandshakeMode = Resume
689e0c4386eSCy SchubertResumptionExpected = Yes
690*a7148ab3SEnji Cooperserver = 17-npn-client-first-pref-on-mismatch-resumption-server-extra
691*a7148ab3SEnji Cooperresume-server = 17-npn-client-first-pref-on-mismatch-resumption-resume-server-extra
692*a7148ab3SEnji Cooperclient = 17-npn-client-first-pref-on-mismatch-resumption-client-extra
693*a7148ab3SEnji Cooperresume-client = 17-npn-client-first-pref-on-mismatch-resumption-client-extra
694e0c4386eSCy Schubert
695*a7148ab3SEnji Cooper[17-npn-client-first-pref-on-mismatch-resumption-server-extra]
696*a7148ab3SEnji CooperNPNProtocols = bar
697e0c4386eSCy Schubert
698*a7148ab3SEnji Cooper[17-npn-client-first-pref-on-mismatch-resumption-resume-server-extra]
699*a7148ab3SEnji CooperNPNProtocols = baz
700*a7148ab3SEnji Cooper
701*a7148ab3SEnji Cooper[17-npn-client-first-pref-on-mismatch-resumption-client-extra]
702*a7148ab3SEnji CooperNPNProtocols = foo,bar
703e0c4386eSCy Schubert
704e0c4386eSCy Schubert
705e0c4386eSCy Schubert# ===========================================================
706e0c4386eSCy Schubert
707*a7148ab3SEnji Cooper[18-npn-no-server-support-resumption]
708*a7148ab3SEnji Cooperssl_conf = 18-npn-no-server-support-resumption-ssl
709e0c4386eSCy Schubert
710*a7148ab3SEnji Cooper[18-npn-no-server-support-resumption-ssl]
711*a7148ab3SEnji Cooperserver = 18-npn-no-server-support-resumption-server
712*a7148ab3SEnji Cooperclient = 18-npn-no-server-support-resumption-client
713*a7148ab3SEnji Cooperresume-server = 18-npn-no-server-support-resumption-resume-server
714*a7148ab3SEnji Cooperresume-client = 18-npn-no-server-support-resumption-client
715e0c4386eSCy Schubert
716*a7148ab3SEnji Cooper[18-npn-no-server-support-resumption-server]
717e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
718e0c4386eSCy SchubertCipherString = DEFAULT
719e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
720e0c4386eSCy Schubert
721*a7148ab3SEnji Cooper[18-npn-no-server-support-resumption-resume-server]
722e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
723e0c4386eSCy SchubertCipherString = DEFAULT
724e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
725e0c4386eSCy Schubert
726*a7148ab3SEnji Cooper[18-npn-no-server-support-resumption-client]
727e0c4386eSCy SchubertCipherString = DEFAULT
728e0c4386eSCy SchubertMaxProtocol = TLSv1.2
729e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
730e0c4386eSCy SchubertVerifyMode = Peer
731e0c4386eSCy Schubert
732e0c4386eSCy Schubert[test-18]
733e0c4386eSCy SchubertHandshakeMode = Resume
734e0c4386eSCy SchubertResumptionExpected = Yes
735*a7148ab3SEnji Cooperserver = 18-npn-no-server-support-resumption-server-extra
736*a7148ab3SEnji Cooperclient = 18-npn-no-server-support-resumption-client-extra
737*a7148ab3SEnji Cooperresume-client = 18-npn-no-server-support-resumption-client-extra
738e0c4386eSCy Schubert
739*a7148ab3SEnji Cooper[18-npn-no-server-support-resumption-server-extra]
740*a7148ab3SEnji CooperNPNProtocols = foo
741e0c4386eSCy Schubert
742*a7148ab3SEnji Cooper[18-npn-no-server-support-resumption-client-extra]
743*a7148ab3SEnji CooperNPNProtocols = foo
744e0c4386eSCy Schubert
745e0c4386eSCy Schubert
746e0c4386eSCy Schubert# ===========================================================
747e0c4386eSCy Schubert
748*a7148ab3SEnji Cooper[19-npn-no-client-support-resumption]
749*a7148ab3SEnji Cooperssl_conf = 19-npn-no-client-support-resumption-ssl
750e0c4386eSCy Schubert
751*a7148ab3SEnji Cooper[19-npn-no-client-support-resumption-ssl]
752*a7148ab3SEnji Cooperserver = 19-npn-no-client-support-resumption-server
753*a7148ab3SEnji Cooperclient = 19-npn-no-client-support-resumption-client
754*a7148ab3SEnji Cooperresume-server = 19-npn-no-client-support-resumption-server
755*a7148ab3SEnji Cooperresume-client = 19-npn-no-client-support-resumption-resume-client
756e0c4386eSCy Schubert
757*a7148ab3SEnji Cooper[19-npn-no-client-support-resumption-server]
758e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
759e0c4386eSCy SchubertCipherString = DEFAULT
760e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
761e0c4386eSCy Schubert
762*a7148ab3SEnji Cooper[19-npn-no-client-support-resumption-client]
763e0c4386eSCy SchubertCipherString = DEFAULT
764*a7148ab3SEnji CooperMaxProtocol = TLSv1.2
765*a7148ab3SEnji CooperVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
766*a7148ab3SEnji CooperVerifyMode = Peer
767e0c4386eSCy Schubert
768*a7148ab3SEnji Cooper[19-npn-no-client-support-resumption-resume-client]
769e0c4386eSCy SchubertCipherString = DEFAULT
770e0c4386eSCy SchubertMaxProtocol = TLSv1.2
771e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
772e0c4386eSCy SchubertVerifyMode = Peer
773e0c4386eSCy Schubert
774e0c4386eSCy Schubert[test-19]
775*a7148ab3SEnji CooperHandshakeMode = Resume
776*a7148ab3SEnji CooperResumptionExpected = Yes
777*a7148ab3SEnji Cooperserver = 19-npn-no-client-support-resumption-server-extra
778*a7148ab3SEnji Cooperresume-server = 19-npn-no-client-support-resumption-server-extra
779*a7148ab3SEnji Cooperclient = 19-npn-no-client-support-resumption-client-extra
780*a7148ab3SEnji Cooper
781*a7148ab3SEnji Cooper[19-npn-no-client-support-resumption-server-extra]
782*a7148ab3SEnji CooperNPNProtocols = foo
783*a7148ab3SEnji Cooper
784*a7148ab3SEnji Cooper[19-npn-no-client-support-resumption-client-extra]
785*a7148ab3SEnji CooperNPNProtocols = foo
786*a7148ab3SEnji Cooper
787*a7148ab3SEnji Cooper
788*a7148ab3SEnji Cooper# ===========================================================
789*a7148ab3SEnji Cooper
790*a7148ab3SEnji Cooper[20-alpn-preferred-over-npn-resumption]
791*a7148ab3SEnji Cooperssl_conf = 20-alpn-preferred-over-npn-resumption-ssl
792*a7148ab3SEnji Cooper
793*a7148ab3SEnji Cooper[20-alpn-preferred-over-npn-resumption-ssl]
794*a7148ab3SEnji Cooperserver = 20-alpn-preferred-over-npn-resumption-server
795*a7148ab3SEnji Cooperclient = 20-alpn-preferred-over-npn-resumption-client
796*a7148ab3SEnji Cooperresume-server = 20-alpn-preferred-over-npn-resumption-resume-server
797*a7148ab3SEnji Cooperresume-client = 20-alpn-preferred-over-npn-resumption-client
798*a7148ab3SEnji Cooper
799*a7148ab3SEnji Cooper[20-alpn-preferred-over-npn-resumption-server]
800*a7148ab3SEnji CooperCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
801*a7148ab3SEnji CooperCipherString = DEFAULT
802*a7148ab3SEnji CooperPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
803*a7148ab3SEnji Cooper
804*a7148ab3SEnji Cooper[20-alpn-preferred-over-npn-resumption-resume-server]
805*a7148ab3SEnji CooperCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
806*a7148ab3SEnji CooperCipherString = DEFAULT
807*a7148ab3SEnji CooperPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
808*a7148ab3SEnji Cooper
809*a7148ab3SEnji Cooper[20-alpn-preferred-over-npn-resumption-client]
810*a7148ab3SEnji CooperCipherString = DEFAULT
811*a7148ab3SEnji CooperMaxProtocol = TLSv1.2
812*a7148ab3SEnji CooperVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
813*a7148ab3SEnji CooperVerifyMode = Peer
814*a7148ab3SEnji Cooper
815*a7148ab3SEnji Cooper[test-20]
816*a7148ab3SEnji CooperExpectedALPNProtocol = foo
817*a7148ab3SEnji CooperHandshakeMode = Resume
818*a7148ab3SEnji CooperResumptionExpected = Yes
819*a7148ab3SEnji Cooperserver = 20-alpn-preferred-over-npn-resumption-server-extra
820*a7148ab3SEnji Cooperresume-server = 20-alpn-preferred-over-npn-resumption-resume-server-extra
821*a7148ab3SEnji Cooperclient = 20-alpn-preferred-over-npn-resumption-client-extra
822*a7148ab3SEnji Cooperresume-client = 20-alpn-preferred-over-npn-resumption-client-extra
823*a7148ab3SEnji Cooper
824*a7148ab3SEnji Cooper[20-alpn-preferred-over-npn-resumption-server-extra]
825*a7148ab3SEnji CooperNPNProtocols = bar
826*a7148ab3SEnji Cooper
827*a7148ab3SEnji Cooper[20-alpn-preferred-over-npn-resumption-resume-server-extra]
828*a7148ab3SEnji CooperALPNProtocols = foo
829*a7148ab3SEnji CooperNPNProtocols = baz
830*a7148ab3SEnji Cooper
831*a7148ab3SEnji Cooper[20-alpn-preferred-over-npn-resumption-client-extra]
832*a7148ab3SEnji CooperALPNProtocols = foo
833*a7148ab3SEnji CooperNPNProtocols = bar,baz
834*a7148ab3SEnji Cooper
835*a7148ab3SEnji Cooper
836*a7148ab3SEnji Cooper# ===========================================================
837*a7148ab3SEnji Cooper
838*a7148ab3SEnji Cooper[21-npn-used-if-alpn-not-supported-resumption]
839*a7148ab3SEnji Cooperssl_conf = 21-npn-used-if-alpn-not-supported-resumption-ssl
840*a7148ab3SEnji Cooper
841*a7148ab3SEnji Cooper[21-npn-used-if-alpn-not-supported-resumption-ssl]
842*a7148ab3SEnji Cooperserver = 21-npn-used-if-alpn-not-supported-resumption-server
843*a7148ab3SEnji Cooperclient = 21-npn-used-if-alpn-not-supported-resumption-client
844*a7148ab3SEnji Cooperresume-server = 21-npn-used-if-alpn-not-supported-resumption-resume-server
845*a7148ab3SEnji Cooperresume-client = 21-npn-used-if-alpn-not-supported-resumption-client
846*a7148ab3SEnji Cooper
847*a7148ab3SEnji Cooper[21-npn-used-if-alpn-not-supported-resumption-server]
848*a7148ab3SEnji CooperCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
849*a7148ab3SEnji CooperCipherString = DEFAULT
850*a7148ab3SEnji CooperPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
851*a7148ab3SEnji Cooper
852*a7148ab3SEnji Cooper[21-npn-used-if-alpn-not-supported-resumption-resume-server]
853*a7148ab3SEnji CooperCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
854*a7148ab3SEnji CooperCipherString = DEFAULT
855*a7148ab3SEnji CooperPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
856*a7148ab3SEnji Cooper
857*a7148ab3SEnji Cooper[21-npn-used-if-alpn-not-supported-resumption-client]
858*a7148ab3SEnji CooperCipherString = DEFAULT
859*a7148ab3SEnji CooperMaxProtocol = TLSv1.2
860*a7148ab3SEnji CooperVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
861*a7148ab3SEnji CooperVerifyMode = Peer
862*a7148ab3SEnji Cooper
863*a7148ab3SEnji Cooper[test-21]
864e0c4386eSCy SchubertExpectedNPNProtocol = baz
865e0c4386eSCy SchubertHandshakeMode = Resume
866e0c4386eSCy SchubertResumptionExpected = Yes
867*a7148ab3SEnji Cooperserver = 21-npn-used-if-alpn-not-supported-resumption-server-extra
868*a7148ab3SEnji Cooperresume-server = 21-npn-used-if-alpn-not-supported-resumption-resume-server-extra
869*a7148ab3SEnji Cooperclient = 21-npn-used-if-alpn-not-supported-resumption-client-extra
870*a7148ab3SEnji Cooperresume-client = 21-npn-used-if-alpn-not-supported-resumption-client-extra
871e0c4386eSCy Schubert
872*a7148ab3SEnji Cooper[21-npn-used-if-alpn-not-supported-resumption-server-extra]
873e0c4386eSCy SchubertALPNProtocols = foo
874e0c4386eSCy SchubertNPNProtocols = bar
875e0c4386eSCy Schubert
876*a7148ab3SEnji Cooper[21-npn-used-if-alpn-not-supported-resumption-resume-server-extra]
877e0c4386eSCy SchubertNPNProtocols = baz
878e0c4386eSCy Schubert
879*a7148ab3SEnji Cooper[21-npn-used-if-alpn-not-supported-resumption-client-extra]
880e0c4386eSCy SchubertALPNProtocols = foo
881e0c4386eSCy SchubertNPNProtocols = bar,baz
882e0c4386eSCy Schubert
883e0c4386eSCy Schubert
884