1# Generated with generate_ssl_tests.pl 2 3num_tests = 95 4 5test-0 = 0-curve-prime256v1 6test-1 = 1-curve-secp384r1 7test-2 = 2-curve-secp521r1 8test-3 = 3-curve-X25519 9test-4 = 4-curve-X448 10test-5 = 5-curve-ffdhe2048 11test-6 = 6-curve-ffdhe3072 12test-7 = 7-curve-ffdhe4096 13test-8 = 8-curve-ffdhe6144 14test-9 = 9-curve-ffdhe8192 15test-10 = 10-curve-sect233k1 16test-11 = 11-curve-sect233r1 17test-12 = 12-curve-sect283k1 18test-13 = 13-curve-sect283r1 19test-14 = 14-curve-sect409k1 20test-15 = 15-curve-sect409r1 21test-16 = 16-curve-sect571k1 22test-17 = 17-curve-sect571r1 23test-18 = 18-curve-secp224r1 24test-19 = 19-curve-sect163k1 25test-20 = 20-curve-sect163r2 26test-21 = 21-curve-prime192v1 27test-22 = 22-curve-sect163r1 28test-23 = 23-curve-sect193r1 29test-24 = 24-curve-sect193r2 30test-25 = 25-curve-sect239k1 31test-26 = 26-curve-secp160k1 32test-27 = 27-curve-secp160r1 33test-28 = 28-curve-secp160r2 34test-29 = 29-curve-secp192k1 35test-30 = 30-curve-secp224k1 36test-31 = 31-curve-secp256k1 37test-32 = 32-curve-brainpoolP256r1 38test-33 = 33-curve-brainpoolP384r1 39test-34 = 34-curve-brainpoolP512r1 40test-35 = 35-curve-sect233k1-tls12-in-tls13 41test-36 = 36-curve-sect233r1-tls12-in-tls13 42test-37 = 37-curve-sect283k1-tls12-in-tls13 43test-38 = 38-curve-sect283r1-tls12-in-tls13 44test-39 = 39-curve-sect409k1-tls12-in-tls13 45test-40 = 40-curve-sect409r1-tls12-in-tls13 46test-41 = 41-curve-sect571k1-tls12-in-tls13 47test-42 = 42-curve-sect571r1-tls12-in-tls13 48test-43 = 43-curve-secp224r1-tls12-in-tls13 49test-44 = 44-curve-sect163k1-tls12-in-tls13 50test-45 = 45-curve-sect163r2-tls12-in-tls13 51test-46 = 46-curve-prime192v1-tls12-in-tls13 52test-47 = 47-curve-sect163r1-tls12-in-tls13 53test-48 = 48-curve-sect193r1-tls12-in-tls13 54test-49 = 49-curve-sect193r2-tls12-in-tls13 55test-50 = 50-curve-sect239k1-tls12-in-tls13 56test-51 = 51-curve-secp160k1-tls12-in-tls13 57test-52 = 52-curve-secp160r1-tls12-in-tls13 58test-53 = 53-curve-secp160r2-tls12-in-tls13 59test-54 = 54-curve-secp192k1-tls12-in-tls13 60test-55 = 55-curve-secp224k1-tls12-in-tls13 61test-56 = 56-curve-secp256k1-tls12-in-tls13 62test-57 = 57-curve-brainpoolP256r1-tls12-in-tls13 63test-58 = 58-curve-brainpoolP384r1-tls12-in-tls13 64test-59 = 59-curve-brainpoolP512r1-tls12-in-tls13 65test-60 = 60-curve-sect233k1-tls13 66test-61 = 61-curve-sect233r1-tls13 67test-62 = 62-curve-sect283k1-tls13 68test-63 = 63-curve-sect283r1-tls13 69test-64 = 64-curve-sect409k1-tls13 70test-65 = 65-curve-sect409r1-tls13 71test-66 = 66-curve-sect571k1-tls13 72test-67 = 67-curve-sect571r1-tls13 73test-68 = 68-curve-secp224r1-tls13 74test-69 = 69-curve-sect163k1-tls13 75test-70 = 70-curve-sect163r2-tls13 76test-71 = 71-curve-prime192v1-tls13 77test-72 = 72-curve-sect163r1-tls13 78test-73 = 73-curve-sect193r1-tls13 79test-74 = 74-curve-sect193r2-tls13 80test-75 = 75-curve-sect239k1-tls13 81test-76 = 76-curve-secp160k1-tls13 82test-77 = 77-curve-secp160r1-tls13 83test-78 = 78-curve-secp160r2-tls13 84test-79 = 79-curve-secp192k1-tls13 85test-80 = 80-curve-secp224k1-tls13 86test-81 = 81-curve-secp256k1-tls13 87test-82 = 82-curve-brainpoolP256r1-tls13 88test-83 = 83-curve-brainpoolP384r1-tls13 89test-84 = 84-curve-brainpoolP512r1-tls13 90test-85 = 85-curve-ffdhe2048-tls13-in-tls12 91test-86 = 86-curve-ffdhe2048-tls13-in-tls12-2 92test-87 = 87-curve-ffdhe3072-tls13-in-tls12 93test-88 = 88-curve-ffdhe3072-tls13-in-tls12-2 94test-89 = 89-curve-ffdhe4096-tls13-in-tls12 95test-90 = 90-curve-ffdhe4096-tls13-in-tls12-2 96test-91 = 91-curve-ffdhe6144-tls13-in-tls12 97test-92 = 92-curve-ffdhe6144-tls13-in-tls12-2 98test-93 = 93-curve-ffdhe8192-tls13-in-tls12 99test-94 = 94-curve-ffdhe8192-tls13-in-tls12-2 100# =========================================================== 101 102[0-curve-prime256v1] 103ssl_conf = 0-curve-prime256v1-ssl 104 105[0-curve-prime256v1-ssl] 106server = 0-curve-prime256v1-server 107client = 0-curve-prime256v1-client 108 109[0-curve-prime256v1-server] 110Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 111CipherString = DEFAULT 112Curves = prime256v1 113MaxProtocol = TLSv1.3 114PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 115 116[0-curve-prime256v1-client] 117CipherString = ECDHE 118Curves = prime256v1 119MaxProtocol = TLSv1.3 120VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 121VerifyMode = Peer 122 123[test-0] 124ExpectedProtocol = TLSv1.3 125ExpectedResult = Success 126ExpectedTmpKeyType = prime256v1 127 128 129# =========================================================== 130 131[1-curve-secp384r1] 132ssl_conf = 1-curve-secp384r1-ssl 133 134[1-curve-secp384r1-ssl] 135server = 1-curve-secp384r1-server 136client = 1-curve-secp384r1-client 137 138[1-curve-secp384r1-server] 139Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 140CipherString = DEFAULT 141Curves = secp384r1 142MaxProtocol = TLSv1.3 143PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 144 145[1-curve-secp384r1-client] 146CipherString = ECDHE 147Curves = secp384r1 148MaxProtocol = TLSv1.3 149VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 150VerifyMode = Peer 151 152[test-1] 153ExpectedProtocol = TLSv1.3 154ExpectedResult = Success 155ExpectedTmpKeyType = secp384r1 156 157 158# =========================================================== 159 160[2-curve-secp521r1] 161ssl_conf = 2-curve-secp521r1-ssl 162 163[2-curve-secp521r1-ssl] 164server = 2-curve-secp521r1-server 165client = 2-curve-secp521r1-client 166 167[2-curve-secp521r1-server] 168Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 169CipherString = DEFAULT 170Curves = secp521r1 171MaxProtocol = TLSv1.3 172PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 173 174[2-curve-secp521r1-client] 175CipherString = ECDHE 176Curves = secp521r1 177MaxProtocol = TLSv1.3 178VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 179VerifyMode = Peer 180 181[test-2] 182ExpectedProtocol = TLSv1.3 183ExpectedResult = Success 184ExpectedTmpKeyType = secp521r1 185 186 187# =========================================================== 188 189[3-curve-X25519] 190ssl_conf = 3-curve-X25519-ssl 191 192[3-curve-X25519-ssl] 193server = 3-curve-X25519-server 194client = 3-curve-X25519-client 195 196[3-curve-X25519-server] 197Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 198CipherString = DEFAULT 199Curves = X25519 200MaxProtocol = TLSv1.3 201PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 202 203[3-curve-X25519-client] 204CipherString = ECDHE 205Curves = X25519 206MaxProtocol = TLSv1.3 207VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 208VerifyMode = Peer 209 210[test-3] 211ExpectedProtocol = TLSv1.3 212ExpectedResult = Success 213ExpectedTmpKeyType = X25519 214 215 216# =========================================================== 217 218[4-curve-X448] 219ssl_conf = 4-curve-X448-ssl 220 221[4-curve-X448-ssl] 222server = 4-curve-X448-server 223client = 4-curve-X448-client 224 225[4-curve-X448-server] 226Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 227CipherString = DEFAULT 228Curves = X448 229MaxProtocol = TLSv1.3 230PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 231 232[4-curve-X448-client] 233CipherString = ECDHE 234Curves = X448 235MaxProtocol = TLSv1.3 236VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 237VerifyMode = Peer 238 239[test-4] 240ExpectedProtocol = TLSv1.3 241ExpectedResult = Success 242ExpectedTmpKeyType = X448 243 244 245# =========================================================== 246 247[5-curve-ffdhe2048] 248ssl_conf = 5-curve-ffdhe2048-ssl 249 250[5-curve-ffdhe2048-ssl] 251server = 5-curve-ffdhe2048-server 252client = 5-curve-ffdhe2048-client 253 254[5-curve-ffdhe2048-server] 255Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 256CipherString = DEFAULT 257Curves = ffdhe2048 258MaxProtocol = TLSv1.3 259PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 260 261[5-curve-ffdhe2048-client] 262CipherString = ECDHE 263Curves = ffdhe2048 264MaxProtocol = TLSv1.3 265VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 266VerifyMode = Peer 267 268[test-5] 269ExpectedProtocol = TLSv1.3 270ExpectedResult = Success 271ExpectedTmpKeyType = dhKeyAgreement 272 273 274# =========================================================== 275 276[6-curve-ffdhe3072] 277ssl_conf = 6-curve-ffdhe3072-ssl 278 279[6-curve-ffdhe3072-ssl] 280server = 6-curve-ffdhe3072-server 281client = 6-curve-ffdhe3072-client 282 283[6-curve-ffdhe3072-server] 284Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 285CipherString = DEFAULT 286Curves = ffdhe3072 287MaxProtocol = TLSv1.3 288PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 289 290[6-curve-ffdhe3072-client] 291CipherString = ECDHE 292Curves = ffdhe3072 293MaxProtocol = TLSv1.3 294VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 295VerifyMode = Peer 296 297[test-6] 298ExpectedProtocol = TLSv1.3 299ExpectedResult = Success 300ExpectedTmpKeyType = dhKeyAgreement 301 302 303# =========================================================== 304 305[7-curve-ffdhe4096] 306ssl_conf = 7-curve-ffdhe4096-ssl 307 308[7-curve-ffdhe4096-ssl] 309server = 7-curve-ffdhe4096-server 310client = 7-curve-ffdhe4096-client 311 312[7-curve-ffdhe4096-server] 313Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 314CipherString = DEFAULT 315Curves = ffdhe4096 316MaxProtocol = TLSv1.3 317PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 318 319[7-curve-ffdhe4096-client] 320CipherString = ECDHE 321Curves = ffdhe4096 322MaxProtocol = TLSv1.3 323VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 324VerifyMode = Peer 325 326[test-7] 327ExpectedProtocol = TLSv1.3 328ExpectedResult = Success 329ExpectedTmpKeyType = dhKeyAgreement 330 331 332# =========================================================== 333 334[8-curve-ffdhe6144] 335ssl_conf = 8-curve-ffdhe6144-ssl 336 337[8-curve-ffdhe6144-ssl] 338server = 8-curve-ffdhe6144-server 339client = 8-curve-ffdhe6144-client 340 341[8-curve-ffdhe6144-server] 342Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 343CipherString = DEFAULT 344Curves = ffdhe6144 345MaxProtocol = TLSv1.3 346PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 347 348[8-curve-ffdhe6144-client] 349CipherString = ECDHE 350Curves = ffdhe6144 351MaxProtocol = TLSv1.3 352VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 353VerifyMode = Peer 354 355[test-8] 356ExpectedProtocol = TLSv1.3 357ExpectedResult = Success 358ExpectedTmpKeyType = dhKeyAgreement 359 360 361# =========================================================== 362 363[9-curve-ffdhe8192] 364ssl_conf = 9-curve-ffdhe8192-ssl 365 366[9-curve-ffdhe8192-ssl] 367server = 9-curve-ffdhe8192-server 368client = 9-curve-ffdhe8192-client 369 370[9-curve-ffdhe8192-server] 371Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 372CipherString = DEFAULT 373Curves = ffdhe8192 374MaxProtocol = TLSv1.3 375PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 376 377[9-curve-ffdhe8192-client] 378CipherString = ECDHE 379Curves = ffdhe8192 380MaxProtocol = TLSv1.3 381VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 382VerifyMode = Peer 383 384[test-9] 385ExpectedProtocol = TLSv1.3 386ExpectedResult = Success 387ExpectedTmpKeyType = dhKeyAgreement 388 389 390# =========================================================== 391 392[10-curve-sect233k1] 393ssl_conf = 10-curve-sect233k1-ssl 394 395[10-curve-sect233k1-ssl] 396server = 10-curve-sect233k1-server 397client = 10-curve-sect233k1-client 398 399[10-curve-sect233k1-server] 400Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 401CipherString = DEFAULT 402Curves = sect233k1 403MaxProtocol = TLSv1.3 404PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 405 406[10-curve-sect233k1-client] 407CipherString = ECDHE 408Curves = sect233k1 409MaxProtocol = TLSv1.2 410VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 411VerifyMode = Peer 412 413[test-10] 414ExpectedProtocol = TLSv1.2 415ExpectedResult = Success 416ExpectedTmpKeyType = sect233k1 417 418 419# =========================================================== 420 421[11-curve-sect233r1] 422ssl_conf = 11-curve-sect233r1-ssl 423 424[11-curve-sect233r1-ssl] 425server = 11-curve-sect233r1-server 426client = 11-curve-sect233r1-client 427 428[11-curve-sect233r1-server] 429Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 430CipherString = DEFAULT 431Curves = sect233r1 432MaxProtocol = TLSv1.3 433PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 434 435[11-curve-sect233r1-client] 436CipherString = ECDHE 437Curves = sect233r1 438MaxProtocol = TLSv1.2 439VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 440VerifyMode = Peer 441 442[test-11] 443ExpectedProtocol = TLSv1.2 444ExpectedResult = Success 445ExpectedTmpKeyType = sect233r1 446 447 448# =========================================================== 449 450[12-curve-sect283k1] 451ssl_conf = 12-curve-sect283k1-ssl 452 453[12-curve-sect283k1-ssl] 454server = 12-curve-sect283k1-server 455client = 12-curve-sect283k1-client 456 457[12-curve-sect283k1-server] 458Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 459CipherString = DEFAULT 460Curves = sect283k1 461MaxProtocol = TLSv1.3 462PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 463 464[12-curve-sect283k1-client] 465CipherString = ECDHE 466Curves = sect283k1 467MaxProtocol = TLSv1.2 468VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 469VerifyMode = Peer 470 471[test-12] 472ExpectedProtocol = TLSv1.2 473ExpectedResult = Success 474ExpectedTmpKeyType = sect283k1 475 476 477# =========================================================== 478 479[13-curve-sect283r1] 480ssl_conf = 13-curve-sect283r1-ssl 481 482[13-curve-sect283r1-ssl] 483server = 13-curve-sect283r1-server 484client = 13-curve-sect283r1-client 485 486[13-curve-sect283r1-server] 487Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 488CipherString = DEFAULT 489Curves = sect283r1 490MaxProtocol = TLSv1.3 491PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 492 493[13-curve-sect283r1-client] 494CipherString = ECDHE 495Curves = sect283r1 496MaxProtocol = TLSv1.2 497VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 498VerifyMode = Peer 499 500[test-13] 501ExpectedProtocol = TLSv1.2 502ExpectedResult = Success 503ExpectedTmpKeyType = sect283r1 504 505 506# =========================================================== 507 508[14-curve-sect409k1] 509ssl_conf = 14-curve-sect409k1-ssl 510 511[14-curve-sect409k1-ssl] 512server = 14-curve-sect409k1-server 513client = 14-curve-sect409k1-client 514 515[14-curve-sect409k1-server] 516Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 517CipherString = DEFAULT 518Curves = sect409k1 519MaxProtocol = TLSv1.3 520PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 521 522[14-curve-sect409k1-client] 523CipherString = ECDHE 524Curves = sect409k1 525MaxProtocol = TLSv1.2 526VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 527VerifyMode = Peer 528 529[test-14] 530ExpectedProtocol = TLSv1.2 531ExpectedResult = Success 532ExpectedTmpKeyType = sect409k1 533 534 535# =========================================================== 536 537[15-curve-sect409r1] 538ssl_conf = 15-curve-sect409r1-ssl 539 540[15-curve-sect409r1-ssl] 541server = 15-curve-sect409r1-server 542client = 15-curve-sect409r1-client 543 544[15-curve-sect409r1-server] 545Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 546CipherString = DEFAULT 547Curves = sect409r1 548MaxProtocol = TLSv1.3 549PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 550 551[15-curve-sect409r1-client] 552CipherString = ECDHE 553Curves = sect409r1 554MaxProtocol = TLSv1.2 555VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 556VerifyMode = Peer 557 558[test-15] 559ExpectedProtocol = TLSv1.2 560ExpectedResult = Success 561ExpectedTmpKeyType = sect409r1 562 563 564# =========================================================== 565 566[16-curve-sect571k1] 567ssl_conf = 16-curve-sect571k1-ssl 568 569[16-curve-sect571k1-ssl] 570server = 16-curve-sect571k1-server 571client = 16-curve-sect571k1-client 572 573[16-curve-sect571k1-server] 574Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 575CipherString = DEFAULT 576Curves = sect571k1 577MaxProtocol = TLSv1.3 578PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 579 580[16-curve-sect571k1-client] 581CipherString = ECDHE 582Curves = sect571k1 583MaxProtocol = TLSv1.2 584VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 585VerifyMode = Peer 586 587[test-16] 588ExpectedProtocol = TLSv1.2 589ExpectedResult = Success 590ExpectedTmpKeyType = sect571k1 591 592 593# =========================================================== 594 595[17-curve-sect571r1] 596ssl_conf = 17-curve-sect571r1-ssl 597 598[17-curve-sect571r1-ssl] 599server = 17-curve-sect571r1-server 600client = 17-curve-sect571r1-client 601 602[17-curve-sect571r1-server] 603Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 604CipherString = DEFAULT 605Curves = sect571r1 606MaxProtocol = TLSv1.3 607PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 608 609[17-curve-sect571r1-client] 610CipherString = ECDHE 611Curves = sect571r1 612MaxProtocol = TLSv1.2 613VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 614VerifyMode = Peer 615 616[test-17] 617ExpectedProtocol = TLSv1.2 618ExpectedResult = Success 619ExpectedTmpKeyType = sect571r1 620 621 622# =========================================================== 623 624[18-curve-secp224r1] 625ssl_conf = 18-curve-secp224r1-ssl 626 627[18-curve-secp224r1-ssl] 628server = 18-curve-secp224r1-server 629client = 18-curve-secp224r1-client 630 631[18-curve-secp224r1-server] 632Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 633CipherString = DEFAULT 634Curves = secp224r1 635MaxProtocol = TLSv1.3 636PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 637 638[18-curve-secp224r1-client] 639CipherString = ECDHE 640Curves = secp224r1 641MaxProtocol = TLSv1.2 642VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 643VerifyMode = Peer 644 645[test-18] 646ExpectedProtocol = TLSv1.2 647ExpectedResult = Success 648ExpectedTmpKeyType = secp224r1 649 650 651# =========================================================== 652 653[19-curve-sect163k1] 654ssl_conf = 19-curve-sect163k1-ssl 655 656[19-curve-sect163k1-ssl] 657server = 19-curve-sect163k1-server 658client = 19-curve-sect163k1-client 659 660[19-curve-sect163k1-server] 661Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 662CipherString = DEFAULT 663Curves = sect163k1 664MaxProtocol = TLSv1.3 665PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 666 667[19-curve-sect163k1-client] 668CipherString = ECDHE 669Curves = sect163k1 670MaxProtocol = TLSv1.2 671VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 672VerifyMode = Peer 673 674[test-19] 675ExpectedProtocol = TLSv1.2 676ExpectedResult = Success 677ExpectedTmpKeyType = sect163k1 678 679 680# =========================================================== 681 682[20-curve-sect163r2] 683ssl_conf = 20-curve-sect163r2-ssl 684 685[20-curve-sect163r2-ssl] 686server = 20-curve-sect163r2-server 687client = 20-curve-sect163r2-client 688 689[20-curve-sect163r2-server] 690Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 691CipherString = DEFAULT 692Curves = sect163r2 693MaxProtocol = TLSv1.3 694PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 695 696[20-curve-sect163r2-client] 697CipherString = ECDHE 698Curves = sect163r2 699MaxProtocol = TLSv1.2 700VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 701VerifyMode = Peer 702 703[test-20] 704ExpectedProtocol = TLSv1.2 705ExpectedResult = Success 706ExpectedTmpKeyType = sect163r2 707 708 709# =========================================================== 710 711[21-curve-prime192v1] 712ssl_conf = 21-curve-prime192v1-ssl 713 714[21-curve-prime192v1-ssl] 715server = 21-curve-prime192v1-server 716client = 21-curve-prime192v1-client 717 718[21-curve-prime192v1-server] 719Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 720CipherString = DEFAULT 721Curves = prime192v1 722MaxProtocol = TLSv1.3 723PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 724 725[21-curve-prime192v1-client] 726CipherString = ECDHE 727Curves = prime192v1 728MaxProtocol = TLSv1.2 729VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 730VerifyMode = Peer 731 732[test-21] 733ExpectedProtocol = TLSv1.2 734ExpectedResult = Success 735ExpectedTmpKeyType = prime192v1 736 737 738# =========================================================== 739 740[22-curve-sect163r1] 741ssl_conf = 22-curve-sect163r1-ssl 742 743[22-curve-sect163r1-ssl] 744server = 22-curve-sect163r1-server 745client = 22-curve-sect163r1-client 746 747[22-curve-sect163r1-server] 748Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 749CipherString = DEFAULT 750Curves = sect163r1 751MaxProtocol = TLSv1.3 752PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 753 754[22-curve-sect163r1-client] 755CipherString = ECDHE 756Curves = sect163r1 757MaxProtocol = TLSv1.2 758VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 759VerifyMode = Peer 760 761[test-22] 762ExpectedProtocol = TLSv1.2 763ExpectedResult = Success 764ExpectedTmpKeyType = sect163r1 765 766 767# =========================================================== 768 769[23-curve-sect193r1] 770ssl_conf = 23-curve-sect193r1-ssl 771 772[23-curve-sect193r1-ssl] 773server = 23-curve-sect193r1-server 774client = 23-curve-sect193r1-client 775 776[23-curve-sect193r1-server] 777Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 778CipherString = DEFAULT 779Curves = sect193r1 780MaxProtocol = TLSv1.3 781PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 782 783[23-curve-sect193r1-client] 784CipherString = ECDHE 785Curves = sect193r1 786MaxProtocol = TLSv1.2 787VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 788VerifyMode = Peer 789 790[test-23] 791ExpectedProtocol = TLSv1.2 792ExpectedResult = Success 793ExpectedTmpKeyType = sect193r1 794 795 796# =========================================================== 797 798[24-curve-sect193r2] 799ssl_conf = 24-curve-sect193r2-ssl 800 801[24-curve-sect193r2-ssl] 802server = 24-curve-sect193r2-server 803client = 24-curve-sect193r2-client 804 805[24-curve-sect193r2-server] 806Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 807CipherString = DEFAULT 808Curves = sect193r2 809MaxProtocol = TLSv1.3 810PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 811 812[24-curve-sect193r2-client] 813CipherString = ECDHE 814Curves = sect193r2 815MaxProtocol = TLSv1.2 816VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 817VerifyMode = Peer 818 819[test-24] 820ExpectedProtocol = TLSv1.2 821ExpectedResult = Success 822ExpectedTmpKeyType = sect193r2 823 824 825# =========================================================== 826 827[25-curve-sect239k1] 828ssl_conf = 25-curve-sect239k1-ssl 829 830[25-curve-sect239k1-ssl] 831server = 25-curve-sect239k1-server 832client = 25-curve-sect239k1-client 833 834[25-curve-sect239k1-server] 835Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 836CipherString = DEFAULT 837Curves = sect239k1 838MaxProtocol = TLSv1.3 839PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 840 841[25-curve-sect239k1-client] 842CipherString = ECDHE 843Curves = sect239k1 844MaxProtocol = TLSv1.2 845VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 846VerifyMode = Peer 847 848[test-25] 849ExpectedProtocol = TLSv1.2 850ExpectedResult = Success 851ExpectedTmpKeyType = sect239k1 852 853 854# =========================================================== 855 856[26-curve-secp160k1] 857ssl_conf = 26-curve-secp160k1-ssl 858 859[26-curve-secp160k1-ssl] 860server = 26-curve-secp160k1-server 861client = 26-curve-secp160k1-client 862 863[26-curve-secp160k1-server] 864Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 865CipherString = DEFAULT 866Curves = secp160k1 867MaxProtocol = TLSv1.3 868PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 869 870[26-curve-secp160k1-client] 871CipherString = ECDHE 872Curves = secp160k1 873MaxProtocol = TLSv1.2 874VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 875VerifyMode = Peer 876 877[test-26] 878ExpectedProtocol = TLSv1.2 879ExpectedResult = Success 880ExpectedTmpKeyType = secp160k1 881 882 883# =========================================================== 884 885[27-curve-secp160r1] 886ssl_conf = 27-curve-secp160r1-ssl 887 888[27-curve-secp160r1-ssl] 889server = 27-curve-secp160r1-server 890client = 27-curve-secp160r1-client 891 892[27-curve-secp160r1-server] 893Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 894CipherString = DEFAULT 895Curves = secp160r1 896MaxProtocol = TLSv1.3 897PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 898 899[27-curve-secp160r1-client] 900CipherString = ECDHE 901Curves = secp160r1 902MaxProtocol = TLSv1.2 903VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 904VerifyMode = Peer 905 906[test-27] 907ExpectedProtocol = TLSv1.2 908ExpectedResult = Success 909ExpectedTmpKeyType = secp160r1 910 911 912# =========================================================== 913 914[28-curve-secp160r2] 915ssl_conf = 28-curve-secp160r2-ssl 916 917[28-curve-secp160r2-ssl] 918server = 28-curve-secp160r2-server 919client = 28-curve-secp160r2-client 920 921[28-curve-secp160r2-server] 922Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 923CipherString = DEFAULT 924Curves = secp160r2 925MaxProtocol = TLSv1.3 926PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 927 928[28-curve-secp160r2-client] 929CipherString = ECDHE 930Curves = secp160r2 931MaxProtocol = TLSv1.2 932VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 933VerifyMode = Peer 934 935[test-28] 936ExpectedProtocol = TLSv1.2 937ExpectedResult = Success 938ExpectedTmpKeyType = secp160r2 939 940 941# =========================================================== 942 943[29-curve-secp192k1] 944ssl_conf = 29-curve-secp192k1-ssl 945 946[29-curve-secp192k1-ssl] 947server = 29-curve-secp192k1-server 948client = 29-curve-secp192k1-client 949 950[29-curve-secp192k1-server] 951Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 952CipherString = DEFAULT 953Curves = secp192k1 954MaxProtocol = TLSv1.3 955PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 956 957[29-curve-secp192k1-client] 958CipherString = ECDHE 959Curves = secp192k1 960MaxProtocol = TLSv1.2 961VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 962VerifyMode = Peer 963 964[test-29] 965ExpectedProtocol = TLSv1.2 966ExpectedResult = Success 967ExpectedTmpKeyType = secp192k1 968 969 970# =========================================================== 971 972[30-curve-secp224k1] 973ssl_conf = 30-curve-secp224k1-ssl 974 975[30-curve-secp224k1-ssl] 976server = 30-curve-secp224k1-server 977client = 30-curve-secp224k1-client 978 979[30-curve-secp224k1-server] 980Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 981CipherString = DEFAULT 982Curves = secp224k1 983MaxProtocol = TLSv1.3 984PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 985 986[30-curve-secp224k1-client] 987CipherString = ECDHE 988Curves = secp224k1 989MaxProtocol = TLSv1.2 990VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 991VerifyMode = Peer 992 993[test-30] 994ExpectedProtocol = TLSv1.2 995ExpectedResult = Success 996ExpectedTmpKeyType = secp224k1 997 998 999# =========================================================== 1000 1001[31-curve-secp256k1] 1002ssl_conf = 31-curve-secp256k1-ssl 1003 1004[31-curve-secp256k1-ssl] 1005server = 31-curve-secp256k1-server 1006client = 31-curve-secp256k1-client 1007 1008[31-curve-secp256k1-server] 1009Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1010CipherString = DEFAULT 1011Curves = secp256k1 1012MaxProtocol = TLSv1.3 1013PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1014 1015[31-curve-secp256k1-client] 1016CipherString = ECDHE 1017Curves = secp256k1 1018MaxProtocol = TLSv1.2 1019VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1020VerifyMode = Peer 1021 1022[test-31] 1023ExpectedProtocol = TLSv1.2 1024ExpectedResult = Success 1025ExpectedTmpKeyType = secp256k1 1026 1027 1028# =========================================================== 1029 1030[32-curve-brainpoolP256r1] 1031ssl_conf = 32-curve-brainpoolP256r1-ssl 1032 1033[32-curve-brainpoolP256r1-ssl] 1034server = 32-curve-brainpoolP256r1-server 1035client = 32-curve-brainpoolP256r1-client 1036 1037[32-curve-brainpoolP256r1-server] 1038Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1039CipherString = DEFAULT 1040Curves = brainpoolP256r1 1041MaxProtocol = TLSv1.3 1042PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1043 1044[32-curve-brainpoolP256r1-client] 1045CipherString = ECDHE 1046Curves = brainpoolP256r1 1047MaxProtocol = TLSv1.2 1048VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1049VerifyMode = Peer 1050 1051[test-32] 1052ExpectedProtocol = TLSv1.2 1053ExpectedResult = Success 1054ExpectedTmpKeyType = brainpoolP256r1 1055 1056 1057# =========================================================== 1058 1059[33-curve-brainpoolP384r1] 1060ssl_conf = 33-curve-brainpoolP384r1-ssl 1061 1062[33-curve-brainpoolP384r1-ssl] 1063server = 33-curve-brainpoolP384r1-server 1064client = 33-curve-brainpoolP384r1-client 1065 1066[33-curve-brainpoolP384r1-server] 1067Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1068CipherString = DEFAULT 1069Curves = brainpoolP384r1 1070MaxProtocol = TLSv1.3 1071PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1072 1073[33-curve-brainpoolP384r1-client] 1074CipherString = ECDHE 1075Curves = brainpoolP384r1 1076MaxProtocol = TLSv1.2 1077VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1078VerifyMode = Peer 1079 1080[test-33] 1081ExpectedProtocol = TLSv1.2 1082ExpectedResult = Success 1083ExpectedTmpKeyType = brainpoolP384r1 1084 1085 1086# =========================================================== 1087 1088[34-curve-brainpoolP512r1] 1089ssl_conf = 34-curve-brainpoolP512r1-ssl 1090 1091[34-curve-brainpoolP512r1-ssl] 1092server = 34-curve-brainpoolP512r1-server 1093client = 34-curve-brainpoolP512r1-client 1094 1095[34-curve-brainpoolP512r1-server] 1096Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1097CipherString = DEFAULT 1098Curves = brainpoolP512r1 1099MaxProtocol = TLSv1.3 1100PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1101 1102[34-curve-brainpoolP512r1-client] 1103CipherString = ECDHE 1104Curves = brainpoolP512r1 1105MaxProtocol = TLSv1.2 1106VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1107VerifyMode = Peer 1108 1109[test-34] 1110ExpectedProtocol = TLSv1.2 1111ExpectedResult = Success 1112ExpectedTmpKeyType = brainpoolP512r1 1113 1114 1115# =========================================================== 1116 1117[35-curve-sect233k1-tls12-in-tls13] 1118ssl_conf = 35-curve-sect233k1-tls12-in-tls13-ssl 1119 1120[35-curve-sect233k1-tls12-in-tls13-ssl] 1121server = 35-curve-sect233k1-tls12-in-tls13-server 1122client = 35-curve-sect233k1-tls12-in-tls13-client 1123 1124[35-curve-sect233k1-tls12-in-tls13-server] 1125Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1126CipherString = DEFAULT@SECLEVEL=1 1127Curves = sect233k1:P-256 1128MaxProtocol = TLSv1.3 1129PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1130 1131[35-curve-sect233k1-tls12-in-tls13-client] 1132CipherString = ECDHE@SECLEVEL=1 1133Curves = sect233k1:P-256 1134MaxProtocol = TLSv1.3 1135MinProtocol = TLSv1.3 1136VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1137VerifyMode = Peer 1138 1139[test-35] 1140ExpectedProtocol = TLSv1.3 1141ExpectedResult = Success 1142ExpectedTmpKeyType = P-256 1143 1144 1145# =========================================================== 1146 1147[36-curve-sect233r1-tls12-in-tls13] 1148ssl_conf = 36-curve-sect233r1-tls12-in-tls13-ssl 1149 1150[36-curve-sect233r1-tls12-in-tls13-ssl] 1151server = 36-curve-sect233r1-tls12-in-tls13-server 1152client = 36-curve-sect233r1-tls12-in-tls13-client 1153 1154[36-curve-sect233r1-tls12-in-tls13-server] 1155Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1156CipherString = DEFAULT@SECLEVEL=1 1157Curves = sect233r1:P-256 1158MaxProtocol = TLSv1.3 1159PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1160 1161[36-curve-sect233r1-tls12-in-tls13-client] 1162CipherString = ECDHE@SECLEVEL=1 1163Curves = sect233r1:P-256 1164MaxProtocol = TLSv1.3 1165MinProtocol = TLSv1.3 1166VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1167VerifyMode = Peer 1168 1169[test-36] 1170ExpectedProtocol = TLSv1.3 1171ExpectedResult = Success 1172ExpectedTmpKeyType = P-256 1173 1174 1175# =========================================================== 1176 1177[37-curve-sect283k1-tls12-in-tls13] 1178ssl_conf = 37-curve-sect283k1-tls12-in-tls13-ssl 1179 1180[37-curve-sect283k1-tls12-in-tls13-ssl] 1181server = 37-curve-sect283k1-tls12-in-tls13-server 1182client = 37-curve-sect283k1-tls12-in-tls13-client 1183 1184[37-curve-sect283k1-tls12-in-tls13-server] 1185Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1186CipherString = DEFAULT@SECLEVEL=1 1187Curves = sect283k1:P-256 1188MaxProtocol = TLSv1.3 1189PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1190 1191[37-curve-sect283k1-tls12-in-tls13-client] 1192CipherString = ECDHE@SECLEVEL=1 1193Curves = sect283k1:P-256 1194MaxProtocol = TLSv1.3 1195MinProtocol = TLSv1.3 1196VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1197VerifyMode = Peer 1198 1199[test-37] 1200ExpectedProtocol = TLSv1.3 1201ExpectedResult = Success 1202ExpectedTmpKeyType = P-256 1203 1204 1205# =========================================================== 1206 1207[38-curve-sect283r1-tls12-in-tls13] 1208ssl_conf = 38-curve-sect283r1-tls12-in-tls13-ssl 1209 1210[38-curve-sect283r1-tls12-in-tls13-ssl] 1211server = 38-curve-sect283r1-tls12-in-tls13-server 1212client = 38-curve-sect283r1-tls12-in-tls13-client 1213 1214[38-curve-sect283r1-tls12-in-tls13-server] 1215Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1216CipherString = DEFAULT@SECLEVEL=1 1217Curves = sect283r1:P-256 1218MaxProtocol = TLSv1.3 1219PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1220 1221[38-curve-sect283r1-tls12-in-tls13-client] 1222CipherString = ECDHE@SECLEVEL=1 1223Curves = sect283r1:P-256 1224MaxProtocol = TLSv1.3 1225MinProtocol = TLSv1.3 1226VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1227VerifyMode = Peer 1228 1229[test-38] 1230ExpectedProtocol = TLSv1.3 1231ExpectedResult = Success 1232ExpectedTmpKeyType = P-256 1233 1234 1235# =========================================================== 1236 1237[39-curve-sect409k1-tls12-in-tls13] 1238ssl_conf = 39-curve-sect409k1-tls12-in-tls13-ssl 1239 1240[39-curve-sect409k1-tls12-in-tls13-ssl] 1241server = 39-curve-sect409k1-tls12-in-tls13-server 1242client = 39-curve-sect409k1-tls12-in-tls13-client 1243 1244[39-curve-sect409k1-tls12-in-tls13-server] 1245Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1246CipherString = DEFAULT@SECLEVEL=1 1247Curves = sect409k1:P-256 1248MaxProtocol = TLSv1.3 1249PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1250 1251[39-curve-sect409k1-tls12-in-tls13-client] 1252CipherString = ECDHE@SECLEVEL=1 1253Curves = sect409k1:P-256 1254MaxProtocol = TLSv1.3 1255MinProtocol = TLSv1.3 1256VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1257VerifyMode = Peer 1258 1259[test-39] 1260ExpectedProtocol = TLSv1.3 1261ExpectedResult = Success 1262ExpectedTmpKeyType = P-256 1263 1264 1265# =========================================================== 1266 1267[40-curve-sect409r1-tls12-in-tls13] 1268ssl_conf = 40-curve-sect409r1-tls12-in-tls13-ssl 1269 1270[40-curve-sect409r1-tls12-in-tls13-ssl] 1271server = 40-curve-sect409r1-tls12-in-tls13-server 1272client = 40-curve-sect409r1-tls12-in-tls13-client 1273 1274[40-curve-sect409r1-tls12-in-tls13-server] 1275Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1276CipherString = DEFAULT@SECLEVEL=1 1277Curves = sect409r1:P-256 1278MaxProtocol = TLSv1.3 1279PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1280 1281[40-curve-sect409r1-tls12-in-tls13-client] 1282CipherString = ECDHE@SECLEVEL=1 1283Curves = sect409r1:P-256 1284MaxProtocol = TLSv1.3 1285MinProtocol = TLSv1.3 1286VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1287VerifyMode = Peer 1288 1289[test-40] 1290ExpectedProtocol = TLSv1.3 1291ExpectedResult = Success 1292ExpectedTmpKeyType = P-256 1293 1294 1295# =========================================================== 1296 1297[41-curve-sect571k1-tls12-in-tls13] 1298ssl_conf = 41-curve-sect571k1-tls12-in-tls13-ssl 1299 1300[41-curve-sect571k1-tls12-in-tls13-ssl] 1301server = 41-curve-sect571k1-tls12-in-tls13-server 1302client = 41-curve-sect571k1-tls12-in-tls13-client 1303 1304[41-curve-sect571k1-tls12-in-tls13-server] 1305Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1306CipherString = DEFAULT@SECLEVEL=1 1307Curves = sect571k1:P-256 1308MaxProtocol = TLSv1.3 1309PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1310 1311[41-curve-sect571k1-tls12-in-tls13-client] 1312CipherString = ECDHE@SECLEVEL=1 1313Curves = sect571k1:P-256 1314MaxProtocol = TLSv1.3 1315MinProtocol = TLSv1.3 1316VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1317VerifyMode = Peer 1318 1319[test-41] 1320ExpectedProtocol = TLSv1.3 1321ExpectedResult = Success 1322ExpectedTmpKeyType = P-256 1323 1324 1325# =========================================================== 1326 1327[42-curve-sect571r1-tls12-in-tls13] 1328ssl_conf = 42-curve-sect571r1-tls12-in-tls13-ssl 1329 1330[42-curve-sect571r1-tls12-in-tls13-ssl] 1331server = 42-curve-sect571r1-tls12-in-tls13-server 1332client = 42-curve-sect571r1-tls12-in-tls13-client 1333 1334[42-curve-sect571r1-tls12-in-tls13-server] 1335Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1336CipherString = DEFAULT@SECLEVEL=1 1337Curves = sect571r1:P-256 1338MaxProtocol = TLSv1.3 1339PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1340 1341[42-curve-sect571r1-tls12-in-tls13-client] 1342CipherString = ECDHE@SECLEVEL=1 1343Curves = sect571r1:P-256 1344MaxProtocol = TLSv1.3 1345MinProtocol = TLSv1.3 1346VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1347VerifyMode = Peer 1348 1349[test-42] 1350ExpectedProtocol = TLSv1.3 1351ExpectedResult = Success 1352ExpectedTmpKeyType = P-256 1353 1354 1355# =========================================================== 1356 1357[43-curve-secp224r1-tls12-in-tls13] 1358ssl_conf = 43-curve-secp224r1-tls12-in-tls13-ssl 1359 1360[43-curve-secp224r1-tls12-in-tls13-ssl] 1361server = 43-curve-secp224r1-tls12-in-tls13-server 1362client = 43-curve-secp224r1-tls12-in-tls13-client 1363 1364[43-curve-secp224r1-tls12-in-tls13-server] 1365Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1366CipherString = DEFAULT@SECLEVEL=1 1367Curves = secp224r1:P-256 1368MaxProtocol = TLSv1.3 1369PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1370 1371[43-curve-secp224r1-tls12-in-tls13-client] 1372CipherString = ECDHE@SECLEVEL=1 1373Curves = secp224r1:P-256 1374MaxProtocol = TLSv1.3 1375MinProtocol = TLSv1.3 1376VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1377VerifyMode = Peer 1378 1379[test-43] 1380ExpectedProtocol = TLSv1.3 1381ExpectedResult = Success 1382ExpectedTmpKeyType = P-256 1383 1384 1385# =========================================================== 1386 1387[44-curve-sect163k1-tls12-in-tls13] 1388ssl_conf = 44-curve-sect163k1-tls12-in-tls13-ssl 1389 1390[44-curve-sect163k1-tls12-in-tls13-ssl] 1391server = 44-curve-sect163k1-tls12-in-tls13-server 1392client = 44-curve-sect163k1-tls12-in-tls13-client 1393 1394[44-curve-sect163k1-tls12-in-tls13-server] 1395Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1396CipherString = DEFAULT@SECLEVEL=1 1397Curves = sect163k1:P-256 1398MaxProtocol = TLSv1.3 1399PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1400 1401[44-curve-sect163k1-tls12-in-tls13-client] 1402CipherString = ECDHE@SECLEVEL=1 1403Curves = sect163k1:P-256 1404MaxProtocol = TLSv1.3 1405MinProtocol = TLSv1.3 1406VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1407VerifyMode = Peer 1408 1409[test-44] 1410ExpectedProtocol = TLSv1.3 1411ExpectedResult = Success 1412ExpectedTmpKeyType = P-256 1413 1414 1415# =========================================================== 1416 1417[45-curve-sect163r2-tls12-in-tls13] 1418ssl_conf = 45-curve-sect163r2-tls12-in-tls13-ssl 1419 1420[45-curve-sect163r2-tls12-in-tls13-ssl] 1421server = 45-curve-sect163r2-tls12-in-tls13-server 1422client = 45-curve-sect163r2-tls12-in-tls13-client 1423 1424[45-curve-sect163r2-tls12-in-tls13-server] 1425Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1426CipherString = DEFAULT@SECLEVEL=1 1427Curves = sect163r2:P-256 1428MaxProtocol = TLSv1.3 1429PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1430 1431[45-curve-sect163r2-tls12-in-tls13-client] 1432CipherString = ECDHE@SECLEVEL=1 1433Curves = sect163r2:P-256 1434MaxProtocol = TLSv1.3 1435MinProtocol = TLSv1.3 1436VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1437VerifyMode = Peer 1438 1439[test-45] 1440ExpectedProtocol = TLSv1.3 1441ExpectedResult = Success 1442ExpectedTmpKeyType = P-256 1443 1444 1445# =========================================================== 1446 1447[46-curve-prime192v1-tls12-in-tls13] 1448ssl_conf = 46-curve-prime192v1-tls12-in-tls13-ssl 1449 1450[46-curve-prime192v1-tls12-in-tls13-ssl] 1451server = 46-curve-prime192v1-tls12-in-tls13-server 1452client = 46-curve-prime192v1-tls12-in-tls13-client 1453 1454[46-curve-prime192v1-tls12-in-tls13-server] 1455Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1456CipherString = DEFAULT@SECLEVEL=1 1457Curves = prime192v1:P-256 1458MaxProtocol = TLSv1.3 1459PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1460 1461[46-curve-prime192v1-tls12-in-tls13-client] 1462CipherString = ECDHE@SECLEVEL=1 1463Curves = prime192v1:P-256 1464MaxProtocol = TLSv1.3 1465MinProtocol = TLSv1.3 1466VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1467VerifyMode = Peer 1468 1469[test-46] 1470ExpectedProtocol = TLSv1.3 1471ExpectedResult = Success 1472ExpectedTmpKeyType = P-256 1473 1474 1475# =========================================================== 1476 1477[47-curve-sect163r1-tls12-in-tls13] 1478ssl_conf = 47-curve-sect163r1-tls12-in-tls13-ssl 1479 1480[47-curve-sect163r1-tls12-in-tls13-ssl] 1481server = 47-curve-sect163r1-tls12-in-tls13-server 1482client = 47-curve-sect163r1-tls12-in-tls13-client 1483 1484[47-curve-sect163r1-tls12-in-tls13-server] 1485Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1486CipherString = DEFAULT@SECLEVEL=1 1487Curves = sect163r1:P-256 1488MaxProtocol = TLSv1.3 1489PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1490 1491[47-curve-sect163r1-tls12-in-tls13-client] 1492CipherString = ECDHE@SECLEVEL=1 1493Curves = sect163r1:P-256 1494MaxProtocol = TLSv1.3 1495MinProtocol = TLSv1.3 1496VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1497VerifyMode = Peer 1498 1499[test-47] 1500ExpectedProtocol = TLSv1.3 1501ExpectedResult = Success 1502ExpectedTmpKeyType = P-256 1503 1504 1505# =========================================================== 1506 1507[48-curve-sect193r1-tls12-in-tls13] 1508ssl_conf = 48-curve-sect193r1-tls12-in-tls13-ssl 1509 1510[48-curve-sect193r1-tls12-in-tls13-ssl] 1511server = 48-curve-sect193r1-tls12-in-tls13-server 1512client = 48-curve-sect193r1-tls12-in-tls13-client 1513 1514[48-curve-sect193r1-tls12-in-tls13-server] 1515Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1516CipherString = DEFAULT@SECLEVEL=1 1517Curves = sect193r1:P-256 1518MaxProtocol = TLSv1.3 1519PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1520 1521[48-curve-sect193r1-tls12-in-tls13-client] 1522CipherString = ECDHE@SECLEVEL=1 1523Curves = sect193r1:P-256 1524MaxProtocol = TLSv1.3 1525MinProtocol = TLSv1.3 1526VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1527VerifyMode = Peer 1528 1529[test-48] 1530ExpectedProtocol = TLSv1.3 1531ExpectedResult = Success 1532ExpectedTmpKeyType = P-256 1533 1534 1535# =========================================================== 1536 1537[49-curve-sect193r2-tls12-in-tls13] 1538ssl_conf = 49-curve-sect193r2-tls12-in-tls13-ssl 1539 1540[49-curve-sect193r2-tls12-in-tls13-ssl] 1541server = 49-curve-sect193r2-tls12-in-tls13-server 1542client = 49-curve-sect193r2-tls12-in-tls13-client 1543 1544[49-curve-sect193r2-tls12-in-tls13-server] 1545Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1546CipherString = DEFAULT@SECLEVEL=1 1547Curves = sect193r2:P-256 1548MaxProtocol = TLSv1.3 1549PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1550 1551[49-curve-sect193r2-tls12-in-tls13-client] 1552CipherString = ECDHE@SECLEVEL=1 1553Curves = sect193r2:P-256 1554MaxProtocol = TLSv1.3 1555MinProtocol = TLSv1.3 1556VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1557VerifyMode = Peer 1558 1559[test-49] 1560ExpectedProtocol = TLSv1.3 1561ExpectedResult = Success 1562ExpectedTmpKeyType = P-256 1563 1564 1565# =========================================================== 1566 1567[50-curve-sect239k1-tls12-in-tls13] 1568ssl_conf = 50-curve-sect239k1-tls12-in-tls13-ssl 1569 1570[50-curve-sect239k1-tls12-in-tls13-ssl] 1571server = 50-curve-sect239k1-tls12-in-tls13-server 1572client = 50-curve-sect239k1-tls12-in-tls13-client 1573 1574[50-curve-sect239k1-tls12-in-tls13-server] 1575Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1576CipherString = DEFAULT@SECLEVEL=1 1577Curves = sect239k1:P-256 1578MaxProtocol = TLSv1.3 1579PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1580 1581[50-curve-sect239k1-tls12-in-tls13-client] 1582CipherString = ECDHE@SECLEVEL=1 1583Curves = sect239k1:P-256 1584MaxProtocol = TLSv1.3 1585MinProtocol = TLSv1.3 1586VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1587VerifyMode = Peer 1588 1589[test-50] 1590ExpectedProtocol = TLSv1.3 1591ExpectedResult = Success 1592ExpectedTmpKeyType = P-256 1593 1594 1595# =========================================================== 1596 1597[51-curve-secp160k1-tls12-in-tls13] 1598ssl_conf = 51-curve-secp160k1-tls12-in-tls13-ssl 1599 1600[51-curve-secp160k1-tls12-in-tls13-ssl] 1601server = 51-curve-secp160k1-tls12-in-tls13-server 1602client = 51-curve-secp160k1-tls12-in-tls13-client 1603 1604[51-curve-secp160k1-tls12-in-tls13-server] 1605Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1606CipherString = DEFAULT@SECLEVEL=1 1607Curves = secp160k1:P-256 1608MaxProtocol = TLSv1.3 1609PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1610 1611[51-curve-secp160k1-tls12-in-tls13-client] 1612CipherString = ECDHE@SECLEVEL=1 1613Curves = secp160k1:P-256 1614MaxProtocol = TLSv1.3 1615MinProtocol = TLSv1.3 1616VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1617VerifyMode = Peer 1618 1619[test-51] 1620ExpectedProtocol = TLSv1.3 1621ExpectedResult = Success 1622ExpectedTmpKeyType = P-256 1623 1624 1625# =========================================================== 1626 1627[52-curve-secp160r1-tls12-in-tls13] 1628ssl_conf = 52-curve-secp160r1-tls12-in-tls13-ssl 1629 1630[52-curve-secp160r1-tls12-in-tls13-ssl] 1631server = 52-curve-secp160r1-tls12-in-tls13-server 1632client = 52-curve-secp160r1-tls12-in-tls13-client 1633 1634[52-curve-secp160r1-tls12-in-tls13-server] 1635Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1636CipherString = DEFAULT@SECLEVEL=1 1637Curves = secp160r1:P-256 1638MaxProtocol = TLSv1.3 1639PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1640 1641[52-curve-secp160r1-tls12-in-tls13-client] 1642CipherString = ECDHE@SECLEVEL=1 1643Curves = secp160r1:P-256 1644MaxProtocol = TLSv1.3 1645MinProtocol = TLSv1.3 1646VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1647VerifyMode = Peer 1648 1649[test-52] 1650ExpectedProtocol = TLSv1.3 1651ExpectedResult = Success 1652ExpectedTmpKeyType = P-256 1653 1654 1655# =========================================================== 1656 1657[53-curve-secp160r2-tls12-in-tls13] 1658ssl_conf = 53-curve-secp160r2-tls12-in-tls13-ssl 1659 1660[53-curve-secp160r2-tls12-in-tls13-ssl] 1661server = 53-curve-secp160r2-tls12-in-tls13-server 1662client = 53-curve-secp160r2-tls12-in-tls13-client 1663 1664[53-curve-secp160r2-tls12-in-tls13-server] 1665Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1666CipherString = DEFAULT@SECLEVEL=1 1667Curves = secp160r2:P-256 1668MaxProtocol = TLSv1.3 1669PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1670 1671[53-curve-secp160r2-tls12-in-tls13-client] 1672CipherString = ECDHE@SECLEVEL=1 1673Curves = secp160r2:P-256 1674MaxProtocol = TLSv1.3 1675MinProtocol = TLSv1.3 1676VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1677VerifyMode = Peer 1678 1679[test-53] 1680ExpectedProtocol = TLSv1.3 1681ExpectedResult = Success 1682ExpectedTmpKeyType = P-256 1683 1684 1685# =========================================================== 1686 1687[54-curve-secp192k1-tls12-in-tls13] 1688ssl_conf = 54-curve-secp192k1-tls12-in-tls13-ssl 1689 1690[54-curve-secp192k1-tls12-in-tls13-ssl] 1691server = 54-curve-secp192k1-tls12-in-tls13-server 1692client = 54-curve-secp192k1-tls12-in-tls13-client 1693 1694[54-curve-secp192k1-tls12-in-tls13-server] 1695Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1696CipherString = DEFAULT@SECLEVEL=1 1697Curves = secp192k1:P-256 1698MaxProtocol = TLSv1.3 1699PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1700 1701[54-curve-secp192k1-tls12-in-tls13-client] 1702CipherString = ECDHE@SECLEVEL=1 1703Curves = secp192k1:P-256 1704MaxProtocol = TLSv1.3 1705MinProtocol = TLSv1.3 1706VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1707VerifyMode = Peer 1708 1709[test-54] 1710ExpectedProtocol = TLSv1.3 1711ExpectedResult = Success 1712ExpectedTmpKeyType = P-256 1713 1714 1715# =========================================================== 1716 1717[55-curve-secp224k1-tls12-in-tls13] 1718ssl_conf = 55-curve-secp224k1-tls12-in-tls13-ssl 1719 1720[55-curve-secp224k1-tls12-in-tls13-ssl] 1721server = 55-curve-secp224k1-tls12-in-tls13-server 1722client = 55-curve-secp224k1-tls12-in-tls13-client 1723 1724[55-curve-secp224k1-tls12-in-tls13-server] 1725Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1726CipherString = DEFAULT@SECLEVEL=1 1727Curves = secp224k1:P-256 1728MaxProtocol = TLSv1.3 1729PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1730 1731[55-curve-secp224k1-tls12-in-tls13-client] 1732CipherString = ECDHE@SECLEVEL=1 1733Curves = secp224k1:P-256 1734MaxProtocol = TLSv1.3 1735MinProtocol = TLSv1.3 1736VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1737VerifyMode = Peer 1738 1739[test-55] 1740ExpectedProtocol = TLSv1.3 1741ExpectedResult = Success 1742ExpectedTmpKeyType = P-256 1743 1744 1745# =========================================================== 1746 1747[56-curve-secp256k1-tls12-in-tls13] 1748ssl_conf = 56-curve-secp256k1-tls12-in-tls13-ssl 1749 1750[56-curve-secp256k1-tls12-in-tls13-ssl] 1751server = 56-curve-secp256k1-tls12-in-tls13-server 1752client = 56-curve-secp256k1-tls12-in-tls13-client 1753 1754[56-curve-secp256k1-tls12-in-tls13-server] 1755Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1756CipherString = DEFAULT@SECLEVEL=1 1757Curves = secp256k1:P-256 1758MaxProtocol = TLSv1.3 1759PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1760 1761[56-curve-secp256k1-tls12-in-tls13-client] 1762CipherString = ECDHE@SECLEVEL=1 1763Curves = secp256k1:P-256 1764MaxProtocol = TLSv1.3 1765MinProtocol = TLSv1.3 1766VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1767VerifyMode = Peer 1768 1769[test-56] 1770ExpectedProtocol = TLSv1.3 1771ExpectedResult = Success 1772ExpectedTmpKeyType = P-256 1773 1774 1775# =========================================================== 1776 1777[57-curve-brainpoolP256r1-tls12-in-tls13] 1778ssl_conf = 57-curve-brainpoolP256r1-tls12-in-tls13-ssl 1779 1780[57-curve-brainpoolP256r1-tls12-in-tls13-ssl] 1781server = 57-curve-brainpoolP256r1-tls12-in-tls13-server 1782client = 57-curve-brainpoolP256r1-tls12-in-tls13-client 1783 1784[57-curve-brainpoolP256r1-tls12-in-tls13-server] 1785Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1786CipherString = DEFAULT@SECLEVEL=1 1787Curves = brainpoolP256r1:P-256 1788MaxProtocol = TLSv1.3 1789PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1790 1791[57-curve-brainpoolP256r1-tls12-in-tls13-client] 1792CipherString = ECDHE@SECLEVEL=1 1793Curves = brainpoolP256r1:P-256 1794MaxProtocol = TLSv1.3 1795MinProtocol = TLSv1.3 1796VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1797VerifyMode = Peer 1798 1799[test-57] 1800ExpectedProtocol = TLSv1.3 1801ExpectedResult = Success 1802ExpectedTmpKeyType = P-256 1803 1804 1805# =========================================================== 1806 1807[58-curve-brainpoolP384r1-tls12-in-tls13] 1808ssl_conf = 58-curve-brainpoolP384r1-tls12-in-tls13-ssl 1809 1810[58-curve-brainpoolP384r1-tls12-in-tls13-ssl] 1811server = 58-curve-brainpoolP384r1-tls12-in-tls13-server 1812client = 58-curve-brainpoolP384r1-tls12-in-tls13-client 1813 1814[58-curve-brainpoolP384r1-tls12-in-tls13-server] 1815Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1816CipherString = DEFAULT@SECLEVEL=1 1817Curves = brainpoolP384r1:P-256 1818MaxProtocol = TLSv1.3 1819PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1820 1821[58-curve-brainpoolP384r1-tls12-in-tls13-client] 1822CipherString = ECDHE@SECLEVEL=1 1823Curves = brainpoolP384r1:P-256 1824MaxProtocol = TLSv1.3 1825MinProtocol = TLSv1.3 1826VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1827VerifyMode = Peer 1828 1829[test-58] 1830ExpectedProtocol = TLSv1.3 1831ExpectedResult = Success 1832ExpectedTmpKeyType = P-256 1833 1834 1835# =========================================================== 1836 1837[59-curve-brainpoolP512r1-tls12-in-tls13] 1838ssl_conf = 59-curve-brainpoolP512r1-tls12-in-tls13-ssl 1839 1840[59-curve-brainpoolP512r1-tls12-in-tls13-ssl] 1841server = 59-curve-brainpoolP512r1-tls12-in-tls13-server 1842client = 59-curve-brainpoolP512r1-tls12-in-tls13-client 1843 1844[59-curve-brainpoolP512r1-tls12-in-tls13-server] 1845Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1846CipherString = DEFAULT@SECLEVEL=1 1847Curves = brainpoolP512r1:P-256 1848MaxProtocol = TLSv1.3 1849PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1850 1851[59-curve-brainpoolP512r1-tls12-in-tls13-client] 1852CipherString = ECDHE@SECLEVEL=1 1853Curves = brainpoolP512r1:P-256 1854MaxProtocol = TLSv1.3 1855MinProtocol = TLSv1.3 1856VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1857VerifyMode = Peer 1858 1859[test-59] 1860ExpectedProtocol = TLSv1.3 1861ExpectedResult = Success 1862ExpectedTmpKeyType = P-256 1863 1864 1865# =========================================================== 1866 1867[60-curve-sect233k1-tls13] 1868ssl_conf = 60-curve-sect233k1-tls13-ssl 1869 1870[60-curve-sect233k1-tls13-ssl] 1871server = 60-curve-sect233k1-tls13-server 1872client = 60-curve-sect233k1-tls13-client 1873 1874[60-curve-sect233k1-tls13-server] 1875Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1876CipherString = DEFAULT 1877Curves = sect233k1 1878MaxProtocol = TLSv1.3 1879PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1880 1881[60-curve-sect233k1-tls13-client] 1882CipherString = ECDHE 1883Curves = sect233k1 1884MinProtocol = TLSv1.3 1885VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1886VerifyMode = Peer 1887 1888[test-60] 1889ExpectedResult = ClientFail 1890 1891 1892# =========================================================== 1893 1894[61-curve-sect233r1-tls13] 1895ssl_conf = 61-curve-sect233r1-tls13-ssl 1896 1897[61-curve-sect233r1-tls13-ssl] 1898server = 61-curve-sect233r1-tls13-server 1899client = 61-curve-sect233r1-tls13-client 1900 1901[61-curve-sect233r1-tls13-server] 1902Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1903CipherString = DEFAULT 1904Curves = sect233r1 1905MaxProtocol = TLSv1.3 1906PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1907 1908[61-curve-sect233r1-tls13-client] 1909CipherString = ECDHE 1910Curves = sect233r1 1911MinProtocol = TLSv1.3 1912VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1913VerifyMode = Peer 1914 1915[test-61] 1916ExpectedResult = ClientFail 1917 1918 1919# =========================================================== 1920 1921[62-curve-sect283k1-tls13] 1922ssl_conf = 62-curve-sect283k1-tls13-ssl 1923 1924[62-curve-sect283k1-tls13-ssl] 1925server = 62-curve-sect283k1-tls13-server 1926client = 62-curve-sect283k1-tls13-client 1927 1928[62-curve-sect283k1-tls13-server] 1929Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1930CipherString = DEFAULT 1931Curves = sect283k1 1932MaxProtocol = TLSv1.3 1933PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1934 1935[62-curve-sect283k1-tls13-client] 1936CipherString = ECDHE 1937Curves = sect283k1 1938MinProtocol = TLSv1.3 1939VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1940VerifyMode = Peer 1941 1942[test-62] 1943ExpectedResult = ClientFail 1944 1945 1946# =========================================================== 1947 1948[63-curve-sect283r1-tls13] 1949ssl_conf = 63-curve-sect283r1-tls13-ssl 1950 1951[63-curve-sect283r1-tls13-ssl] 1952server = 63-curve-sect283r1-tls13-server 1953client = 63-curve-sect283r1-tls13-client 1954 1955[63-curve-sect283r1-tls13-server] 1956Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1957CipherString = DEFAULT 1958Curves = sect283r1 1959MaxProtocol = TLSv1.3 1960PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1961 1962[63-curve-sect283r1-tls13-client] 1963CipherString = ECDHE 1964Curves = sect283r1 1965MinProtocol = TLSv1.3 1966VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1967VerifyMode = Peer 1968 1969[test-63] 1970ExpectedResult = ClientFail 1971 1972 1973# =========================================================== 1974 1975[64-curve-sect409k1-tls13] 1976ssl_conf = 64-curve-sect409k1-tls13-ssl 1977 1978[64-curve-sect409k1-tls13-ssl] 1979server = 64-curve-sect409k1-tls13-server 1980client = 64-curve-sect409k1-tls13-client 1981 1982[64-curve-sect409k1-tls13-server] 1983Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 1984CipherString = DEFAULT 1985Curves = sect409k1 1986MaxProtocol = TLSv1.3 1987PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 1988 1989[64-curve-sect409k1-tls13-client] 1990CipherString = ECDHE 1991Curves = sect409k1 1992MinProtocol = TLSv1.3 1993VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 1994VerifyMode = Peer 1995 1996[test-64] 1997ExpectedResult = ClientFail 1998 1999 2000# =========================================================== 2001 2002[65-curve-sect409r1-tls13] 2003ssl_conf = 65-curve-sect409r1-tls13-ssl 2004 2005[65-curve-sect409r1-tls13-ssl] 2006server = 65-curve-sect409r1-tls13-server 2007client = 65-curve-sect409r1-tls13-client 2008 2009[65-curve-sect409r1-tls13-server] 2010Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2011CipherString = DEFAULT 2012Curves = sect409r1 2013MaxProtocol = TLSv1.3 2014PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2015 2016[65-curve-sect409r1-tls13-client] 2017CipherString = ECDHE 2018Curves = sect409r1 2019MinProtocol = TLSv1.3 2020VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2021VerifyMode = Peer 2022 2023[test-65] 2024ExpectedResult = ClientFail 2025 2026 2027# =========================================================== 2028 2029[66-curve-sect571k1-tls13] 2030ssl_conf = 66-curve-sect571k1-tls13-ssl 2031 2032[66-curve-sect571k1-tls13-ssl] 2033server = 66-curve-sect571k1-tls13-server 2034client = 66-curve-sect571k1-tls13-client 2035 2036[66-curve-sect571k1-tls13-server] 2037Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2038CipherString = DEFAULT 2039Curves = sect571k1 2040MaxProtocol = TLSv1.3 2041PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2042 2043[66-curve-sect571k1-tls13-client] 2044CipherString = ECDHE 2045Curves = sect571k1 2046MinProtocol = TLSv1.3 2047VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2048VerifyMode = Peer 2049 2050[test-66] 2051ExpectedResult = ClientFail 2052 2053 2054# =========================================================== 2055 2056[67-curve-sect571r1-tls13] 2057ssl_conf = 67-curve-sect571r1-tls13-ssl 2058 2059[67-curve-sect571r1-tls13-ssl] 2060server = 67-curve-sect571r1-tls13-server 2061client = 67-curve-sect571r1-tls13-client 2062 2063[67-curve-sect571r1-tls13-server] 2064Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2065CipherString = DEFAULT 2066Curves = sect571r1 2067MaxProtocol = TLSv1.3 2068PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2069 2070[67-curve-sect571r1-tls13-client] 2071CipherString = ECDHE 2072Curves = sect571r1 2073MinProtocol = TLSv1.3 2074VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2075VerifyMode = Peer 2076 2077[test-67] 2078ExpectedResult = ClientFail 2079 2080 2081# =========================================================== 2082 2083[68-curve-secp224r1-tls13] 2084ssl_conf = 68-curve-secp224r1-tls13-ssl 2085 2086[68-curve-secp224r1-tls13-ssl] 2087server = 68-curve-secp224r1-tls13-server 2088client = 68-curve-secp224r1-tls13-client 2089 2090[68-curve-secp224r1-tls13-server] 2091Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2092CipherString = DEFAULT 2093Curves = secp224r1 2094MaxProtocol = TLSv1.3 2095PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2096 2097[68-curve-secp224r1-tls13-client] 2098CipherString = ECDHE 2099Curves = secp224r1 2100MinProtocol = TLSv1.3 2101VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2102VerifyMode = Peer 2103 2104[test-68] 2105ExpectedResult = ClientFail 2106 2107 2108# =========================================================== 2109 2110[69-curve-sect163k1-tls13] 2111ssl_conf = 69-curve-sect163k1-tls13-ssl 2112 2113[69-curve-sect163k1-tls13-ssl] 2114server = 69-curve-sect163k1-tls13-server 2115client = 69-curve-sect163k1-tls13-client 2116 2117[69-curve-sect163k1-tls13-server] 2118Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2119CipherString = DEFAULT 2120Curves = sect163k1 2121MaxProtocol = TLSv1.3 2122PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2123 2124[69-curve-sect163k1-tls13-client] 2125CipherString = ECDHE 2126Curves = sect163k1 2127MinProtocol = TLSv1.3 2128VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2129VerifyMode = Peer 2130 2131[test-69] 2132ExpectedResult = ClientFail 2133 2134 2135# =========================================================== 2136 2137[70-curve-sect163r2-tls13] 2138ssl_conf = 70-curve-sect163r2-tls13-ssl 2139 2140[70-curve-sect163r2-tls13-ssl] 2141server = 70-curve-sect163r2-tls13-server 2142client = 70-curve-sect163r2-tls13-client 2143 2144[70-curve-sect163r2-tls13-server] 2145Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2146CipherString = DEFAULT 2147Curves = sect163r2 2148MaxProtocol = TLSv1.3 2149PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2150 2151[70-curve-sect163r2-tls13-client] 2152CipherString = ECDHE 2153Curves = sect163r2 2154MinProtocol = TLSv1.3 2155VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2156VerifyMode = Peer 2157 2158[test-70] 2159ExpectedResult = ClientFail 2160 2161 2162# =========================================================== 2163 2164[71-curve-prime192v1-tls13] 2165ssl_conf = 71-curve-prime192v1-tls13-ssl 2166 2167[71-curve-prime192v1-tls13-ssl] 2168server = 71-curve-prime192v1-tls13-server 2169client = 71-curve-prime192v1-tls13-client 2170 2171[71-curve-prime192v1-tls13-server] 2172Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2173CipherString = DEFAULT 2174Curves = prime192v1 2175MaxProtocol = TLSv1.3 2176PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2177 2178[71-curve-prime192v1-tls13-client] 2179CipherString = ECDHE 2180Curves = prime192v1 2181MinProtocol = TLSv1.3 2182VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2183VerifyMode = Peer 2184 2185[test-71] 2186ExpectedResult = ClientFail 2187 2188 2189# =========================================================== 2190 2191[72-curve-sect163r1-tls13] 2192ssl_conf = 72-curve-sect163r1-tls13-ssl 2193 2194[72-curve-sect163r1-tls13-ssl] 2195server = 72-curve-sect163r1-tls13-server 2196client = 72-curve-sect163r1-tls13-client 2197 2198[72-curve-sect163r1-tls13-server] 2199Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2200CipherString = DEFAULT 2201Curves = sect163r1 2202MaxProtocol = TLSv1.3 2203PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2204 2205[72-curve-sect163r1-tls13-client] 2206CipherString = ECDHE 2207Curves = sect163r1 2208MinProtocol = TLSv1.3 2209VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2210VerifyMode = Peer 2211 2212[test-72] 2213ExpectedResult = ClientFail 2214 2215 2216# =========================================================== 2217 2218[73-curve-sect193r1-tls13] 2219ssl_conf = 73-curve-sect193r1-tls13-ssl 2220 2221[73-curve-sect193r1-tls13-ssl] 2222server = 73-curve-sect193r1-tls13-server 2223client = 73-curve-sect193r1-tls13-client 2224 2225[73-curve-sect193r1-tls13-server] 2226Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2227CipherString = DEFAULT 2228Curves = sect193r1 2229MaxProtocol = TLSv1.3 2230PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2231 2232[73-curve-sect193r1-tls13-client] 2233CipherString = ECDHE 2234Curves = sect193r1 2235MinProtocol = TLSv1.3 2236VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2237VerifyMode = Peer 2238 2239[test-73] 2240ExpectedResult = ClientFail 2241 2242 2243# =========================================================== 2244 2245[74-curve-sect193r2-tls13] 2246ssl_conf = 74-curve-sect193r2-tls13-ssl 2247 2248[74-curve-sect193r2-tls13-ssl] 2249server = 74-curve-sect193r2-tls13-server 2250client = 74-curve-sect193r2-tls13-client 2251 2252[74-curve-sect193r2-tls13-server] 2253Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2254CipherString = DEFAULT 2255Curves = sect193r2 2256MaxProtocol = TLSv1.3 2257PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2258 2259[74-curve-sect193r2-tls13-client] 2260CipherString = ECDHE 2261Curves = sect193r2 2262MinProtocol = TLSv1.3 2263VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2264VerifyMode = Peer 2265 2266[test-74] 2267ExpectedResult = ClientFail 2268 2269 2270# =========================================================== 2271 2272[75-curve-sect239k1-tls13] 2273ssl_conf = 75-curve-sect239k1-tls13-ssl 2274 2275[75-curve-sect239k1-tls13-ssl] 2276server = 75-curve-sect239k1-tls13-server 2277client = 75-curve-sect239k1-tls13-client 2278 2279[75-curve-sect239k1-tls13-server] 2280Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2281CipherString = DEFAULT 2282Curves = sect239k1 2283MaxProtocol = TLSv1.3 2284PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2285 2286[75-curve-sect239k1-tls13-client] 2287CipherString = ECDHE 2288Curves = sect239k1 2289MinProtocol = TLSv1.3 2290VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2291VerifyMode = Peer 2292 2293[test-75] 2294ExpectedResult = ClientFail 2295 2296 2297# =========================================================== 2298 2299[76-curve-secp160k1-tls13] 2300ssl_conf = 76-curve-secp160k1-tls13-ssl 2301 2302[76-curve-secp160k1-tls13-ssl] 2303server = 76-curve-secp160k1-tls13-server 2304client = 76-curve-secp160k1-tls13-client 2305 2306[76-curve-secp160k1-tls13-server] 2307Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2308CipherString = DEFAULT 2309Curves = secp160k1 2310MaxProtocol = TLSv1.3 2311PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2312 2313[76-curve-secp160k1-tls13-client] 2314CipherString = ECDHE 2315Curves = secp160k1 2316MinProtocol = TLSv1.3 2317VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2318VerifyMode = Peer 2319 2320[test-76] 2321ExpectedResult = ClientFail 2322 2323 2324# =========================================================== 2325 2326[77-curve-secp160r1-tls13] 2327ssl_conf = 77-curve-secp160r1-tls13-ssl 2328 2329[77-curve-secp160r1-tls13-ssl] 2330server = 77-curve-secp160r1-tls13-server 2331client = 77-curve-secp160r1-tls13-client 2332 2333[77-curve-secp160r1-tls13-server] 2334Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2335CipherString = DEFAULT 2336Curves = secp160r1 2337MaxProtocol = TLSv1.3 2338PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2339 2340[77-curve-secp160r1-tls13-client] 2341CipherString = ECDHE 2342Curves = secp160r1 2343MinProtocol = TLSv1.3 2344VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2345VerifyMode = Peer 2346 2347[test-77] 2348ExpectedResult = ClientFail 2349 2350 2351# =========================================================== 2352 2353[78-curve-secp160r2-tls13] 2354ssl_conf = 78-curve-secp160r2-tls13-ssl 2355 2356[78-curve-secp160r2-tls13-ssl] 2357server = 78-curve-secp160r2-tls13-server 2358client = 78-curve-secp160r2-tls13-client 2359 2360[78-curve-secp160r2-tls13-server] 2361Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2362CipherString = DEFAULT 2363Curves = secp160r2 2364MaxProtocol = TLSv1.3 2365PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2366 2367[78-curve-secp160r2-tls13-client] 2368CipherString = ECDHE 2369Curves = secp160r2 2370MinProtocol = TLSv1.3 2371VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2372VerifyMode = Peer 2373 2374[test-78] 2375ExpectedResult = ClientFail 2376 2377 2378# =========================================================== 2379 2380[79-curve-secp192k1-tls13] 2381ssl_conf = 79-curve-secp192k1-tls13-ssl 2382 2383[79-curve-secp192k1-tls13-ssl] 2384server = 79-curve-secp192k1-tls13-server 2385client = 79-curve-secp192k1-tls13-client 2386 2387[79-curve-secp192k1-tls13-server] 2388Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2389CipherString = DEFAULT 2390Curves = secp192k1 2391MaxProtocol = TLSv1.3 2392PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2393 2394[79-curve-secp192k1-tls13-client] 2395CipherString = ECDHE 2396Curves = secp192k1 2397MinProtocol = TLSv1.3 2398VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2399VerifyMode = Peer 2400 2401[test-79] 2402ExpectedResult = ClientFail 2403 2404 2405# =========================================================== 2406 2407[80-curve-secp224k1-tls13] 2408ssl_conf = 80-curve-secp224k1-tls13-ssl 2409 2410[80-curve-secp224k1-tls13-ssl] 2411server = 80-curve-secp224k1-tls13-server 2412client = 80-curve-secp224k1-tls13-client 2413 2414[80-curve-secp224k1-tls13-server] 2415Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2416CipherString = DEFAULT 2417Curves = secp224k1 2418MaxProtocol = TLSv1.3 2419PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2420 2421[80-curve-secp224k1-tls13-client] 2422CipherString = ECDHE 2423Curves = secp224k1 2424MinProtocol = TLSv1.3 2425VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2426VerifyMode = Peer 2427 2428[test-80] 2429ExpectedResult = ClientFail 2430 2431 2432# =========================================================== 2433 2434[81-curve-secp256k1-tls13] 2435ssl_conf = 81-curve-secp256k1-tls13-ssl 2436 2437[81-curve-secp256k1-tls13-ssl] 2438server = 81-curve-secp256k1-tls13-server 2439client = 81-curve-secp256k1-tls13-client 2440 2441[81-curve-secp256k1-tls13-server] 2442Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2443CipherString = DEFAULT 2444Curves = secp256k1 2445MaxProtocol = TLSv1.3 2446PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2447 2448[81-curve-secp256k1-tls13-client] 2449CipherString = ECDHE 2450Curves = secp256k1 2451MinProtocol = TLSv1.3 2452VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2453VerifyMode = Peer 2454 2455[test-81] 2456ExpectedResult = ClientFail 2457 2458 2459# =========================================================== 2460 2461[82-curve-brainpoolP256r1-tls13] 2462ssl_conf = 82-curve-brainpoolP256r1-tls13-ssl 2463 2464[82-curve-brainpoolP256r1-tls13-ssl] 2465server = 82-curve-brainpoolP256r1-tls13-server 2466client = 82-curve-brainpoolP256r1-tls13-client 2467 2468[82-curve-brainpoolP256r1-tls13-server] 2469Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2470CipherString = DEFAULT 2471Curves = brainpoolP256r1 2472MaxProtocol = TLSv1.3 2473PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2474 2475[82-curve-brainpoolP256r1-tls13-client] 2476CipherString = ECDHE 2477Curves = brainpoolP256r1 2478MinProtocol = TLSv1.3 2479VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2480VerifyMode = Peer 2481 2482[test-82] 2483ExpectedResult = ClientFail 2484 2485 2486# =========================================================== 2487 2488[83-curve-brainpoolP384r1-tls13] 2489ssl_conf = 83-curve-brainpoolP384r1-tls13-ssl 2490 2491[83-curve-brainpoolP384r1-tls13-ssl] 2492server = 83-curve-brainpoolP384r1-tls13-server 2493client = 83-curve-brainpoolP384r1-tls13-client 2494 2495[83-curve-brainpoolP384r1-tls13-server] 2496Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2497CipherString = DEFAULT 2498Curves = brainpoolP384r1 2499MaxProtocol = TLSv1.3 2500PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2501 2502[83-curve-brainpoolP384r1-tls13-client] 2503CipherString = ECDHE 2504Curves = brainpoolP384r1 2505MinProtocol = TLSv1.3 2506VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2507VerifyMode = Peer 2508 2509[test-83] 2510ExpectedResult = ClientFail 2511 2512 2513# =========================================================== 2514 2515[84-curve-brainpoolP512r1-tls13] 2516ssl_conf = 84-curve-brainpoolP512r1-tls13-ssl 2517 2518[84-curve-brainpoolP512r1-tls13-ssl] 2519server = 84-curve-brainpoolP512r1-tls13-server 2520client = 84-curve-brainpoolP512r1-tls13-client 2521 2522[84-curve-brainpoolP512r1-tls13-server] 2523Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2524CipherString = DEFAULT 2525Curves = brainpoolP512r1 2526MaxProtocol = TLSv1.3 2527PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2528 2529[84-curve-brainpoolP512r1-tls13-client] 2530CipherString = ECDHE 2531Curves = brainpoolP512r1 2532MinProtocol = TLSv1.3 2533VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2534VerifyMode = Peer 2535 2536[test-84] 2537ExpectedResult = ClientFail 2538 2539 2540# =========================================================== 2541 2542[85-curve-ffdhe2048-tls13-in-tls12] 2543ssl_conf = 85-curve-ffdhe2048-tls13-in-tls12-ssl 2544 2545[85-curve-ffdhe2048-tls13-in-tls12-ssl] 2546server = 85-curve-ffdhe2048-tls13-in-tls12-server 2547client = 85-curve-ffdhe2048-tls13-in-tls12-client 2548 2549[85-curve-ffdhe2048-tls13-in-tls12-server] 2550Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2551CipherString = DEFAULT@SECLEVEL=1 2552Curves = ffdhe2048 2553MaxProtocol = TLSv1.3 2554PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2555 2556[85-curve-ffdhe2048-tls13-in-tls12-client] 2557CipherString = ECDHE@SECLEVEL=1 2558Curves = ffdhe2048 2559MaxProtocol = TLSv1.2 2560VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2561VerifyMode = Peer 2562 2563[test-85] 2564ExpectedResult = ServerFail 2565 2566 2567# =========================================================== 2568 2569[86-curve-ffdhe2048-tls13-in-tls12-2] 2570ssl_conf = 86-curve-ffdhe2048-tls13-in-tls12-2-ssl 2571 2572[86-curve-ffdhe2048-tls13-in-tls12-2-ssl] 2573server = 86-curve-ffdhe2048-tls13-in-tls12-2-server 2574client = 86-curve-ffdhe2048-tls13-in-tls12-2-client 2575 2576[86-curve-ffdhe2048-tls13-in-tls12-2-server] 2577Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2578CipherString = DEFAULT@SECLEVEL=1 2579Curves = ffdhe2048 2580MaxProtocol = TLSv1.2 2581PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2582 2583[86-curve-ffdhe2048-tls13-in-tls12-2-client] 2584CipherString = DEFAULT@SECLEVEL=1 2585Curves = ffdhe2048 2586MaxProtocol = TLSv1.3 2587VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2588VerifyMode = Peer 2589 2590[test-86] 2591ExpectedResult = Success 2592 2593 2594# =========================================================== 2595 2596[87-curve-ffdhe3072-tls13-in-tls12] 2597ssl_conf = 87-curve-ffdhe3072-tls13-in-tls12-ssl 2598 2599[87-curve-ffdhe3072-tls13-in-tls12-ssl] 2600server = 87-curve-ffdhe3072-tls13-in-tls12-server 2601client = 87-curve-ffdhe3072-tls13-in-tls12-client 2602 2603[87-curve-ffdhe3072-tls13-in-tls12-server] 2604Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2605CipherString = DEFAULT@SECLEVEL=1 2606Curves = ffdhe3072 2607MaxProtocol = TLSv1.3 2608PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2609 2610[87-curve-ffdhe3072-tls13-in-tls12-client] 2611CipherString = ECDHE@SECLEVEL=1 2612Curves = ffdhe3072 2613MaxProtocol = TLSv1.2 2614VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2615VerifyMode = Peer 2616 2617[test-87] 2618ExpectedResult = ServerFail 2619 2620 2621# =========================================================== 2622 2623[88-curve-ffdhe3072-tls13-in-tls12-2] 2624ssl_conf = 88-curve-ffdhe3072-tls13-in-tls12-2-ssl 2625 2626[88-curve-ffdhe3072-tls13-in-tls12-2-ssl] 2627server = 88-curve-ffdhe3072-tls13-in-tls12-2-server 2628client = 88-curve-ffdhe3072-tls13-in-tls12-2-client 2629 2630[88-curve-ffdhe3072-tls13-in-tls12-2-server] 2631Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2632CipherString = DEFAULT@SECLEVEL=1 2633Curves = ffdhe3072 2634MaxProtocol = TLSv1.2 2635PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2636 2637[88-curve-ffdhe3072-tls13-in-tls12-2-client] 2638CipherString = DEFAULT@SECLEVEL=1 2639Curves = ffdhe3072 2640MaxProtocol = TLSv1.3 2641VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2642VerifyMode = Peer 2643 2644[test-88] 2645ExpectedResult = Success 2646 2647 2648# =========================================================== 2649 2650[89-curve-ffdhe4096-tls13-in-tls12] 2651ssl_conf = 89-curve-ffdhe4096-tls13-in-tls12-ssl 2652 2653[89-curve-ffdhe4096-tls13-in-tls12-ssl] 2654server = 89-curve-ffdhe4096-tls13-in-tls12-server 2655client = 89-curve-ffdhe4096-tls13-in-tls12-client 2656 2657[89-curve-ffdhe4096-tls13-in-tls12-server] 2658Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2659CipherString = DEFAULT@SECLEVEL=1 2660Curves = ffdhe4096 2661MaxProtocol = TLSv1.3 2662PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2663 2664[89-curve-ffdhe4096-tls13-in-tls12-client] 2665CipherString = ECDHE@SECLEVEL=1 2666Curves = ffdhe4096 2667MaxProtocol = TLSv1.2 2668VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2669VerifyMode = Peer 2670 2671[test-89] 2672ExpectedResult = ServerFail 2673 2674 2675# =========================================================== 2676 2677[90-curve-ffdhe4096-tls13-in-tls12-2] 2678ssl_conf = 90-curve-ffdhe4096-tls13-in-tls12-2-ssl 2679 2680[90-curve-ffdhe4096-tls13-in-tls12-2-ssl] 2681server = 90-curve-ffdhe4096-tls13-in-tls12-2-server 2682client = 90-curve-ffdhe4096-tls13-in-tls12-2-client 2683 2684[90-curve-ffdhe4096-tls13-in-tls12-2-server] 2685Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2686CipherString = DEFAULT@SECLEVEL=1 2687Curves = ffdhe4096 2688MaxProtocol = TLSv1.2 2689PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2690 2691[90-curve-ffdhe4096-tls13-in-tls12-2-client] 2692CipherString = DEFAULT@SECLEVEL=1 2693Curves = ffdhe4096 2694MaxProtocol = TLSv1.3 2695VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2696VerifyMode = Peer 2697 2698[test-90] 2699ExpectedResult = Success 2700 2701 2702# =========================================================== 2703 2704[91-curve-ffdhe6144-tls13-in-tls12] 2705ssl_conf = 91-curve-ffdhe6144-tls13-in-tls12-ssl 2706 2707[91-curve-ffdhe6144-tls13-in-tls12-ssl] 2708server = 91-curve-ffdhe6144-tls13-in-tls12-server 2709client = 91-curve-ffdhe6144-tls13-in-tls12-client 2710 2711[91-curve-ffdhe6144-tls13-in-tls12-server] 2712Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2713CipherString = DEFAULT@SECLEVEL=1 2714Curves = ffdhe6144 2715MaxProtocol = TLSv1.3 2716PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2717 2718[91-curve-ffdhe6144-tls13-in-tls12-client] 2719CipherString = ECDHE@SECLEVEL=1 2720Curves = ffdhe6144 2721MaxProtocol = TLSv1.2 2722VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2723VerifyMode = Peer 2724 2725[test-91] 2726ExpectedResult = ServerFail 2727 2728 2729# =========================================================== 2730 2731[92-curve-ffdhe6144-tls13-in-tls12-2] 2732ssl_conf = 92-curve-ffdhe6144-tls13-in-tls12-2-ssl 2733 2734[92-curve-ffdhe6144-tls13-in-tls12-2-ssl] 2735server = 92-curve-ffdhe6144-tls13-in-tls12-2-server 2736client = 92-curve-ffdhe6144-tls13-in-tls12-2-client 2737 2738[92-curve-ffdhe6144-tls13-in-tls12-2-server] 2739Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2740CipherString = DEFAULT@SECLEVEL=1 2741Curves = ffdhe6144 2742MaxProtocol = TLSv1.2 2743PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2744 2745[92-curve-ffdhe6144-tls13-in-tls12-2-client] 2746CipherString = DEFAULT@SECLEVEL=1 2747Curves = ffdhe6144 2748MaxProtocol = TLSv1.3 2749VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2750VerifyMode = Peer 2751 2752[test-92] 2753ExpectedResult = Success 2754 2755 2756# =========================================================== 2757 2758[93-curve-ffdhe8192-tls13-in-tls12] 2759ssl_conf = 93-curve-ffdhe8192-tls13-in-tls12-ssl 2760 2761[93-curve-ffdhe8192-tls13-in-tls12-ssl] 2762server = 93-curve-ffdhe8192-tls13-in-tls12-server 2763client = 93-curve-ffdhe8192-tls13-in-tls12-client 2764 2765[93-curve-ffdhe8192-tls13-in-tls12-server] 2766Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2767CipherString = DEFAULT@SECLEVEL=1 2768Curves = ffdhe8192 2769MaxProtocol = TLSv1.3 2770PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2771 2772[93-curve-ffdhe8192-tls13-in-tls12-client] 2773CipherString = ECDHE@SECLEVEL=1 2774Curves = ffdhe8192 2775MaxProtocol = TLSv1.2 2776VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2777VerifyMode = Peer 2778 2779[test-93] 2780ExpectedResult = ServerFail 2781 2782 2783# =========================================================== 2784 2785[94-curve-ffdhe8192-tls13-in-tls12-2] 2786ssl_conf = 94-curve-ffdhe8192-tls13-in-tls12-2-ssl 2787 2788[94-curve-ffdhe8192-tls13-in-tls12-2-ssl] 2789server = 94-curve-ffdhe8192-tls13-in-tls12-2-server 2790client = 94-curve-ffdhe8192-tls13-in-tls12-2-client 2791 2792[94-curve-ffdhe8192-tls13-in-tls12-2-server] 2793Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 2794CipherString = DEFAULT@SECLEVEL=1 2795Curves = ffdhe8192 2796MaxProtocol = TLSv1.2 2797PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 2798 2799[94-curve-ffdhe8192-tls13-in-tls12-2-client] 2800CipherString = DEFAULT@SECLEVEL=1 2801Curves = ffdhe8192 2802MaxProtocol = TLSv1.3 2803VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 2804VerifyMode = Peer 2805 2806[test-94] 2807ExpectedResult = Success 2808 2809 2810