xref: /freebsd/crypto/openssl/test/ssl-tests/12-ct.cnf (revision e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6)
1*e0c4386eSCy Schubert# Generated with generate_ssl_tests.pl
2*e0c4386eSCy Schubert
3*e0c4386eSCy Schubertnum_tests = 6
4*e0c4386eSCy Schubert
5*e0c4386eSCy Schuberttest-0 = 0-ct-permissive-without-scts
6*e0c4386eSCy Schuberttest-1 = 1-ct-permissive-with-scts
7*e0c4386eSCy Schuberttest-2 = 2-ct-strict-without-scts
8*e0c4386eSCy Schuberttest-3 = 3-ct-strict-with-scts
9*e0c4386eSCy Schuberttest-4 = 4-ct-permissive-resumption
10*e0c4386eSCy Schuberttest-5 = 5-ct-strict-resumption
11*e0c4386eSCy Schubert# ===========================================================
12*e0c4386eSCy Schubert
13*e0c4386eSCy Schubert[0-ct-permissive-without-scts]
14*e0c4386eSCy Schubertssl_conf = 0-ct-permissive-without-scts-ssl
15*e0c4386eSCy Schubert
16*e0c4386eSCy Schubert[0-ct-permissive-without-scts-ssl]
17*e0c4386eSCy Schubertserver = 0-ct-permissive-without-scts-server
18*e0c4386eSCy Schubertclient = 0-ct-permissive-without-scts-client
19*e0c4386eSCy Schubert
20*e0c4386eSCy Schubert[0-ct-permissive-without-scts-server]
21*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
22*e0c4386eSCy SchubertCipherString = DEFAULT
23*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
24*e0c4386eSCy Schubert
25*e0c4386eSCy Schubert[0-ct-permissive-without-scts-client]
26*e0c4386eSCy SchubertCipherString = DEFAULT
27*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
28*e0c4386eSCy SchubertVerifyMode = Peer
29*e0c4386eSCy Schubert
30*e0c4386eSCy Schubert[test-0]
31*e0c4386eSCy SchubertExpectedResult = Success
32*e0c4386eSCy Schubertclient = 0-ct-permissive-without-scts-client-extra
33*e0c4386eSCy Schubert
34*e0c4386eSCy Schubert[0-ct-permissive-without-scts-client-extra]
35*e0c4386eSCy SchubertCTValidation = Permissive
36*e0c4386eSCy Schubert
37*e0c4386eSCy Schubert
38*e0c4386eSCy Schubert# ===========================================================
39*e0c4386eSCy Schubert
40*e0c4386eSCy Schubert[1-ct-permissive-with-scts]
41*e0c4386eSCy Schubertssl_conf = 1-ct-permissive-with-scts-ssl
42*e0c4386eSCy Schubert
43*e0c4386eSCy Schubert[1-ct-permissive-with-scts-ssl]
44*e0c4386eSCy Schubertserver = 1-ct-permissive-with-scts-server
45*e0c4386eSCy Schubertclient = 1-ct-permissive-with-scts-client
46*e0c4386eSCy Schubert
47*e0c4386eSCy Schubert[1-ct-permissive-with-scts-server]
48*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
49*e0c4386eSCy SchubertCipherString = DEFAULT
50*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
51*e0c4386eSCy Schubert
52*e0c4386eSCy Schubert[1-ct-permissive-with-scts-client]
53*e0c4386eSCy SchubertCipherString = DEFAULT
54*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
55*e0c4386eSCy SchubertVerifyMode = Peer
56*e0c4386eSCy Schubert
57*e0c4386eSCy Schubert[test-1]
58*e0c4386eSCy SchubertExpectedResult = Success
59*e0c4386eSCy Schubertclient = 1-ct-permissive-with-scts-client-extra
60*e0c4386eSCy Schubert
61*e0c4386eSCy Schubert[1-ct-permissive-with-scts-client-extra]
62*e0c4386eSCy SchubertCTValidation = Permissive
63*e0c4386eSCy Schubert
64*e0c4386eSCy Schubert
65*e0c4386eSCy Schubert# ===========================================================
66*e0c4386eSCy Schubert
67*e0c4386eSCy Schubert[2-ct-strict-without-scts]
68*e0c4386eSCy Schubertssl_conf = 2-ct-strict-without-scts-ssl
69*e0c4386eSCy Schubert
70*e0c4386eSCy Schubert[2-ct-strict-without-scts-ssl]
71*e0c4386eSCy Schubertserver = 2-ct-strict-without-scts-server
72*e0c4386eSCy Schubertclient = 2-ct-strict-without-scts-client
73*e0c4386eSCy Schubert
74*e0c4386eSCy Schubert[2-ct-strict-without-scts-server]
75*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
76*e0c4386eSCy SchubertCipherString = DEFAULT
77*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
78*e0c4386eSCy Schubert
79*e0c4386eSCy Schubert[2-ct-strict-without-scts-client]
80*e0c4386eSCy SchubertCipherString = DEFAULT
81*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
82*e0c4386eSCy SchubertVerifyMode = Peer
83*e0c4386eSCy Schubert
84*e0c4386eSCy Schubert[test-2]
85*e0c4386eSCy SchubertExpectedClientAlert = HandshakeFailure
86*e0c4386eSCy SchubertExpectedResult = ClientFail
87*e0c4386eSCy Schubertclient = 2-ct-strict-without-scts-client-extra
88*e0c4386eSCy Schubert
89*e0c4386eSCy Schubert[2-ct-strict-without-scts-client-extra]
90*e0c4386eSCy SchubertCTValidation = Strict
91*e0c4386eSCy Schubert
92*e0c4386eSCy Schubert
93*e0c4386eSCy Schubert# ===========================================================
94*e0c4386eSCy Schubert
95*e0c4386eSCy Schubert[3-ct-strict-with-scts]
96*e0c4386eSCy Schubertssl_conf = 3-ct-strict-with-scts-ssl
97*e0c4386eSCy Schubert
98*e0c4386eSCy Schubert[3-ct-strict-with-scts-ssl]
99*e0c4386eSCy Schubertserver = 3-ct-strict-with-scts-server
100*e0c4386eSCy Schubertclient = 3-ct-strict-with-scts-client
101*e0c4386eSCy Schubert
102*e0c4386eSCy Schubert[3-ct-strict-with-scts-server]
103*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
104*e0c4386eSCy SchubertCipherString = DEFAULT
105*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
106*e0c4386eSCy Schubert
107*e0c4386eSCy Schubert[3-ct-strict-with-scts-client]
108*e0c4386eSCy SchubertCipherString = DEFAULT
109*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
110*e0c4386eSCy SchubertVerifyMode = Peer
111*e0c4386eSCy Schubert
112*e0c4386eSCy Schubert[test-3]
113*e0c4386eSCy SchubertExpectedResult = Success
114*e0c4386eSCy Schubertclient = 3-ct-strict-with-scts-client-extra
115*e0c4386eSCy Schubert
116*e0c4386eSCy Schubert[3-ct-strict-with-scts-client-extra]
117*e0c4386eSCy SchubertCTValidation = Strict
118*e0c4386eSCy Schubert
119*e0c4386eSCy Schubert
120*e0c4386eSCy Schubert# ===========================================================
121*e0c4386eSCy Schubert
122*e0c4386eSCy Schubert[4-ct-permissive-resumption]
123*e0c4386eSCy Schubertssl_conf = 4-ct-permissive-resumption-ssl
124*e0c4386eSCy Schubert
125*e0c4386eSCy Schubert[4-ct-permissive-resumption-ssl]
126*e0c4386eSCy Schubertserver = 4-ct-permissive-resumption-server
127*e0c4386eSCy Schubertclient = 4-ct-permissive-resumption-client
128*e0c4386eSCy Schubertresume-server = 4-ct-permissive-resumption-server
129*e0c4386eSCy Schubertresume-client = 4-ct-permissive-resumption-client
130*e0c4386eSCy Schubert
131*e0c4386eSCy Schubert[4-ct-permissive-resumption-server]
132*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
133*e0c4386eSCy SchubertCipherString = DEFAULT
134*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
135*e0c4386eSCy Schubert
136*e0c4386eSCy Schubert[4-ct-permissive-resumption-client]
137*e0c4386eSCy SchubertCipherString = DEFAULT
138*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
139*e0c4386eSCy SchubertVerifyMode = Peer
140*e0c4386eSCy Schubert
141*e0c4386eSCy Schubert[test-4]
142*e0c4386eSCy SchubertExpectedResult = Success
143*e0c4386eSCy SchubertHandshakeMode = Resume
144*e0c4386eSCy SchubertResumptionExpected = Yes
145*e0c4386eSCy Schubertclient = 4-ct-permissive-resumption-client-extra
146*e0c4386eSCy Schubertresume-client = 4-ct-permissive-resumption-client-extra
147*e0c4386eSCy Schubert
148*e0c4386eSCy Schubert[4-ct-permissive-resumption-client-extra]
149*e0c4386eSCy SchubertCTValidation = Permissive
150*e0c4386eSCy Schubert
151*e0c4386eSCy Schubert
152*e0c4386eSCy Schubert# ===========================================================
153*e0c4386eSCy Schubert
154*e0c4386eSCy Schubert[5-ct-strict-resumption]
155*e0c4386eSCy Schubertssl_conf = 5-ct-strict-resumption-ssl
156*e0c4386eSCy Schubert
157*e0c4386eSCy Schubert[5-ct-strict-resumption-ssl]
158*e0c4386eSCy Schubertserver = 5-ct-strict-resumption-server
159*e0c4386eSCy Schubertclient = 5-ct-strict-resumption-client
160*e0c4386eSCy Schubertresume-server = 5-ct-strict-resumption-server
161*e0c4386eSCy Schubertresume-client = 5-ct-strict-resumption-resume-client
162*e0c4386eSCy Schubert
163*e0c4386eSCy Schubert[5-ct-strict-resumption-server]
164*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
165*e0c4386eSCy SchubertCipherString = DEFAULT
166*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
167*e0c4386eSCy Schubert
168*e0c4386eSCy Schubert[5-ct-strict-resumption-client]
169*e0c4386eSCy SchubertCipherString = DEFAULT
170*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
171*e0c4386eSCy SchubertVerifyMode = Peer
172*e0c4386eSCy Schubert
173*e0c4386eSCy Schubert[5-ct-strict-resumption-resume-client]
174*e0c4386eSCy SchubertCipherString = DEFAULT
175*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
176*e0c4386eSCy SchubertVerifyMode = Peer
177*e0c4386eSCy Schubert
178*e0c4386eSCy Schubert[test-5]
179*e0c4386eSCy SchubertExpectedResult = Success
180*e0c4386eSCy SchubertHandshakeMode = Resume
181*e0c4386eSCy SchubertResumptionExpected = Yes
182*e0c4386eSCy Schubertclient = 5-ct-strict-resumption-client-extra
183*e0c4386eSCy Schubertresume-client = 5-ct-strict-resumption-resume-client-extra
184*e0c4386eSCy Schubert
185*e0c4386eSCy Schubert[5-ct-strict-resumption-client-extra]
186*e0c4386eSCy SchubertCTValidation = Strict
187*e0c4386eSCy Schubert
188*e0c4386eSCy Schubert[5-ct-strict-resumption-resume-client-extra]
189*e0c4386eSCy SchubertCTValidation = Strict
190*e0c4386eSCy Schubert
191*e0c4386eSCy Schubert
192