1*e0c4386eSCy Schubert# Generated with generate_ssl_tests.pl 2*e0c4386eSCy Schubert 3*e0c4386eSCy Schubertnum_tests = 9 4*e0c4386eSCy Schubert 5*e0c4386eSCy Schuberttest-0 = 0-renegotiate-client-no-resume 6*e0c4386eSCy Schuberttest-1 = 1-renegotiate-client-resume 7*e0c4386eSCy Schuberttest-2 = 2-renegotiate-server-resume 8*e0c4386eSCy Schuberttest-3 = 3-renegotiate-client-auth-require 9*e0c4386eSCy Schuberttest-4 = 4-renegotiate-client-auth-once 10*e0c4386eSCy Schuberttest-5 = 5-renegotiate-aead-to-non-aead 11*e0c4386eSCy Schuberttest-6 = 6-renegotiate-non-aead-to-aead 12*e0c4386eSCy Schuberttest-7 = 7-renegotiate-non-aead-to-non-aead 13*e0c4386eSCy Schuberttest-8 = 8-renegotiate-aead-to-aead 14*e0c4386eSCy Schubert# =========================================================== 15*e0c4386eSCy Schubert 16*e0c4386eSCy Schubert[0-renegotiate-client-no-resume] 17*e0c4386eSCy Schubertssl_conf = 0-renegotiate-client-no-resume-ssl 18*e0c4386eSCy Schubert 19*e0c4386eSCy Schubert[0-renegotiate-client-no-resume-ssl] 20*e0c4386eSCy Schubertserver = 0-renegotiate-client-no-resume-server 21*e0c4386eSCy Schubertclient = 0-renegotiate-client-no-resume-client 22*e0c4386eSCy Schubert 23*e0c4386eSCy Schubert[0-renegotiate-client-no-resume-server] 24*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 25*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 26*e0c4386eSCy SchubertOptions = NoResumptionOnRenegotiation 27*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 28*e0c4386eSCy Schubert 29*e0c4386eSCy Schubert[0-renegotiate-client-no-resume-client] 30*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 31*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 32*e0c4386eSCy SchubertVerifyMode = Peer 33*e0c4386eSCy Schubert 34*e0c4386eSCy Schubert[test-0] 35*e0c4386eSCy SchubertExpectedResult = Success 36*e0c4386eSCy SchubertHandshakeMode = RenegotiateClient 37*e0c4386eSCy SchubertMethod = DTLS 38*e0c4386eSCy SchubertResumptionExpected = No 39*e0c4386eSCy SchubertUseSCTP = No 40*e0c4386eSCy Schubert 41*e0c4386eSCy Schubert 42*e0c4386eSCy Schubert# =========================================================== 43*e0c4386eSCy Schubert 44*e0c4386eSCy Schubert[1-renegotiate-client-resume] 45*e0c4386eSCy Schubertssl_conf = 1-renegotiate-client-resume-ssl 46*e0c4386eSCy Schubert 47*e0c4386eSCy Schubert[1-renegotiate-client-resume-ssl] 48*e0c4386eSCy Schubertserver = 1-renegotiate-client-resume-server 49*e0c4386eSCy Schubertclient = 1-renegotiate-client-resume-client 50*e0c4386eSCy Schubert 51*e0c4386eSCy Schubert[1-renegotiate-client-resume-server] 52*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 53*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 54*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 55*e0c4386eSCy Schubert 56*e0c4386eSCy Schubert[1-renegotiate-client-resume-client] 57*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 58*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 59*e0c4386eSCy SchubertVerifyMode = Peer 60*e0c4386eSCy Schubert 61*e0c4386eSCy Schubert[test-1] 62*e0c4386eSCy SchubertExpectedResult = Success 63*e0c4386eSCy SchubertHandshakeMode = RenegotiateClient 64*e0c4386eSCy SchubertMethod = DTLS 65*e0c4386eSCy SchubertResumptionExpected = Yes 66*e0c4386eSCy SchubertUseSCTP = No 67*e0c4386eSCy Schubert 68*e0c4386eSCy Schubert 69*e0c4386eSCy Schubert# =========================================================== 70*e0c4386eSCy Schubert 71*e0c4386eSCy Schubert[2-renegotiate-server-resume] 72*e0c4386eSCy Schubertssl_conf = 2-renegotiate-server-resume-ssl 73*e0c4386eSCy Schubert 74*e0c4386eSCy Schubert[2-renegotiate-server-resume-ssl] 75*e0c4386eSCy Schubertserver = 2-renegotiate-server-resume-server 76*e0c4386eSCy Schubertclient = 2-renegotiate-server-resume-client 77*e0c4386eSCy Schubert 78*e0c4386eSCy Schubert[2-renegotiate-server-resume-server] 79*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 80*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 81*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 82*e0c4386eSCy Schubert 83*e0c4386eSCy Schubert[2-renegotiate-server-resume-client] 84*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 85*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 86*e0c4386eSCy SchubertVerifyMode = Peer 87*e0c4386eSCy Schubert 88*e0c4386eSCy Schubert[test-2] 89*e0c4386eSCy SchubertExpectedResult = Success 90*e0c4386eSCy SchubertHandshakeMode = RenegotiateServer 91*e0c4386eSCy SchubertMethod = DTLS 92*e0c4386eSCy SchubertResumptionExpected = No 93*e0c4386eSCy SchubertUseSCTP = No 94*e0c4386eSCy Schubert 95*e0c4386eSCy Schubert 96*e0c4386eSCy Schubert# =========================================================== 97*e0c4386eSCy Schubert 98*e0c4386eSCy Schubert[3-renegotiate-client-auth-require] 99*e0c4386eSCy Schubertssl_conf = 3-renegotiate-client-auth-require-ssl 100*e0c4386eSCy Schubert 101*e0c4386eSCy Schubert[3-renegotiate-client-auth-require-ssl] 102*e0c4386eSCy Schubertserver = 3-renegotiate-client-auth-require-server 103*e0c4386eSCy Schubertclient = 3-renegotiate-client-auth-require-client 104*e0c4386eSCy Schubert 105*e0c4386eSCy Schubert[3-renegotiate-client-auth-require-server] 106*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 107*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 108*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 109*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 110*e0c4386eSCy SchubertVerifyMode = Require 111*e0c4386eSCy Schubert 112*e0c4386eSCy Schubert[3-renegotiate-client-auth-require-client] 113*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem 114*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 115*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem 116*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 117*e0c4386eSCy SchubertVerifyMode = Peer 118*e0c4386eSCy Schubert 119*e0c4386eSCy Schubert[test-3] 120*e0c4386eSCy SchubertExpectedResult = Success 121*e0c4386eSCy SchubertHandshakeMode = RenegotiateServer 122*e0c4386eSCy SchubertMethod = DTLS 123*e0c4386eSCy SchubertResumptionExpected = No 124*e0c4386eSCy SchubertUseSCTP = No 125*e0c4386eSCy Schubert 126*e0c4386eSCy Schubert 127*e0c4386eSCy Schubert# =========================================================== 128*e0c4386eSCy Schubert 129*e0c4386eSCy Schubert[4-renegotiate-client-auth-once] 130*e0c4386eSCy Schubertssl_conf = 4-renegotiate-client-auth-once-ssl 131*e0c4386eSCy Schubert 132*e0c4386eSCy Schubert[4-renegotiate-client-auth-once-ssl] 133*e0c4386eSCy Schubertserver = 4-renegotiate-client-auth-once-server 134*e0c4386eSCy Schubertclient = 4-renegotiate-client-auth-once-client 135*e0c4386eSCy Schubert 136*e0c4386eSCy Schubert[4-renegotiate-client-auth-once-server] 137*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 138*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 139*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 140*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 141*e0c4386eSCy SchubertVerifyMode = Once 142*e0c4386eSCy Schubert 143*e0c4386eSCy Schubert[4-renegotiate-client-auth-once-client] 144*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem 145*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=0 146*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem 147*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 148*e0c4386eSCy SchubertVerifyMode = Peer 149*e0c4386eSCy Schubert 150*e0c4386eSCy Schubert[test-4] 151*e0c4386eSCy SchubertExpectedResult = Success 152*e0c4386eSCy SchubertHandshakeMode = RenegotiateServer 153*e0c4386eSCy SchubertMethod = DTLS 154*e0c4386eSCy SchubertResumptionExpected = No 155*e0c4386eSCy SchubertUseSCTP = No 156*e0c4386eSCy Schubert 157*e0c4386eSCy Schubert 158*e0c4386eSCy Schubert# =========================================================== 159*e0c4386eSCy Schubert 160*e0c4386eSCy Schubert[5-renegotiate-aead-to-non-aead] 161*e0c4386eSCy Schubertssl_conf = 5-renegotiate-aead-to-non-aead-ssl 162*e0c4386eSCy Schubert 163*e0c4386eSCy Schubert[5-renegotiate-aead-to-non-aead-ssl] 164*e0c4386eSCy Schubertserver = 5-renegotiate-aead-to-non-aead-server 165*e0c4386eSCy Schubertclient = 5-renegotiate-aead-to-non-aead-client 166*e0c4386eSCy Schubert 167*e0c4386eSCy Schubert[5-renegotiate-aead-to-non-aead-server] 168*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 169*e0c4386eSCy SchubertCipherString = DEFAULT 170*e0c4386eSCy SchubertOptions = NoResumptionOnRenegotiation 171*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 172*e0c4386eSCy Schubert 173*e0c4386eSCy Schubert[5-renegotiate-aead-to-non-aead-client] 174*e0c4386eSCy SchubertCipherString = AES128-GCM-SHA256 175*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 176*e0c4386eSCy SchubertVerifyMode = Peer 177*e0c4386eSCy Schubert 178*e0c4386eSCy Schubert[test-5] 179*e0c4386eSCy SchubertExpectedResult = Success 180*e0c4386eSCy SchubertHandshakeMode = RenegotiateClient 181*e0c4386eSCy SchubertMethod = DTLS 182*e0c4386eSCy SchubertResumptionExpected = No 183*e0c4386eSCy SchubertUseSCTP = No 184*e0c4386eSCy Schubertclient = 5-renegotiate-aead-to-non-aead-client-extra 185*e0c4386eSCy Schubert 186*e0c4386eSCy Schubert[5-renegotiate-aead-to-non-aead-client-extra] 187*e0c4386eSCy SchubertRenegotiateCiphers = AES128-SHA 188*e0c4386eSCy Schubert 189*e0c4386eSCy Schubert 190*e0c4386eSCy Schubert# =========================================================== 191*e0c4386eSCy Schubert 192*e0c4386eSCy Schubert[6-renegotiate-non-aead-to-aead] 193*e0c4386eSCy Schubertssl_conf = 6-renegotiate-non-aead-to-aead-ssl 194*e0c4386eSCy Schubert 195*e0c4386eSCy Schubert[6-renegotiate-non-aead-to-aead-ssl] 196*e0c4386eSCy Schubertserver = 6-renegotiate-non-aead-to-aead-server 197*e0c4386eSCy Schubertclient = 6-renegotiate-non-aead-to-aead-client 198*e0c4386eSCy Schubert 199*e0c4386eSCy Schubert[6-renegotiate-non-aead-to-aead-server] 200*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 201*e0c4386eSCy SchubertCipherString = DEFAULT 202*e0c4386eSCy SchubertOptions = NoResumptionOnRenegotiation 203*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 204*e0c4386eSCy Schubert 205*e0c4386eSCy Schubert[6-renegotiate-non-aead-to-aead-client] 206*e0c4386eSCy SchubertCipherString = AES128-SHA 207*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 208*e0c4386eSCy SchubertVerifyMode = Peer 209*e0c4386eSCy Schubert 210*e0c4386eSCy Schubert[test-6] 211*e0c4386eSCy SchubertExpectedResult = Success 212*e0c4386eSCy SchubertHandshakeMode = RenegotiateClient 213*e0c4386eSCy SchubertMethod = DTLS 214*e0c4386eSCy SchubertResumptionExpected = No 215*e0c4386eSCy SchubertUseSCTP = No 216*e0c4386eSCy Schubertclient = 6-renegotiate-non-aead-to-aead-client-extra 217*e0c4386eSCy Schubert 218*e0c4386eSCy Schubert[6-renegotiate-non-aead-to-aead-client-extra] 219*e0c4386eSCy SchubertRenegotiateCiphers = AES128-GCM-SHA256 220*e0c4386eSCy Schubert 221*e0c4386eSCy Schubert 222*e0c4386eSCy Schubert# =========================================================== 223*e0c4386eSCy Schubert 224*e0c4386eSCy Schubert[7-renegotiate-non-aead-to-non-aead] 225*e0c4386eSCy Schubertssl_conf = 7-renegotiate-non-aead-to-non-aead-ssl 226*e0c4386eSCy Schubert 227*e0c4386eSCy Schubert[7-renegotiate-non-aead-to-non-aead-ssl] 228*e0c4386eSCy Schubertserver = 7-renegotiate-non-aead-to-non-aead-server 229*e0c4386eSCy Schubertclient = 7-renegotiate-non-aead-to-non-aead-client 230*e0c4386eSCy Schubert 231*e0c4386eSCy Schubert[7-renegotiate-non-aead-to-non-aead-server] 232*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 233*e0c4386eSCy SchubertCipherString = DEFAULT 234*e0c4386eSCy SchubertOptions = NoResumptionOnRenegotiation 235*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 236*e0c4386eSCy Schubert 237*e0c4386eSCy Schubert[7-renegotiate-non-aead-to-non-aead-client] 238*e0c4386eSCy SchubertCipherString = AES128-SHA 239*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 240*e0c4386eSCy SchubertVerifyMode = Peer 241*e0c4386eSCy Schubert 242*e0c4386eSCy Schubert[test-7] 243*e0c4386eSCy SchubertExpectedResult = Success 244*e0c4386eSCy SchubertHandshakeMode = RenegotiateClient 245*e0c4386eSCy SchubertMethod = DTLS 246*e0c4386eSCy SchubertResumptionExpected = No 247*e0c4386eSCy SchubertUseSCTP = No 248*e0c4386eSCy Schubertclient = 7-renegotiate-non-aead-to-non-aead-client-extra 249*e0c4386eSCy Schubert 250*e0c4386eSCy Schubert[7-renegotiate-non-aead-to-non-aead-client-extra] 251*e0c4386eSCy SchubertRenegotiateCiphers = AES256-SHA 252*e0c4386eSCy Schubert 253*e0c4386eSCy Schubert 254*e0c4386eSCy Schubert# =========================================================== 255*e0c4386eSCy Schubert 256*e0c4386eSCy Schubert[8-renegotiate-aead-to-aead] 257*e0c4386eSCy Schubertssl_conf = 8-renegotiate-aead-to-aead-ssl 258*e0c4386eSCy Schubert 259*e0c4386eSCy Schubert[8-renegotiate-aead-to-aead-ssl] 260*e0c4386eSCy Schubertserver = 8-renegotiate-aead-to-aead-server 261*e0c4386eSCy Schubertclient = 8-renegotiate-aead-to-aead-client 262*e0c4386eSCy Schubert 263*e0c4386eSCy Schubert[8-renegotiate-aead-to-aead-server] 264*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 265*e0c4386eSCy SchubertCipherString = DEFAULT 266*e0c4386eSCy SchubertOptions = NoResumptionOnRenegotiation 267*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 268*e0c4386eSCy Schubert 269*e0c4386eSCy Schubert[8-renegotiate-aead-to-aead-client] 270*e0c4386eSCy SchubertCipherString = AES128-GCM-SHA256 271*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 272*e0c4386eSCy SchubertVerifyMode = Peer 273*e0c4386eSCy Schubert 274*e0c4386eSCy Schubert[test-8] 275*e0c4386eSCy SchubertExpectedResult = Success 276*e0c4386eSCy SchubertHandshakeMode = RenegotiateClient 277*e0c4386eSCy SchubertMethod = DTLS 278*e0c4386eSCy SchubertResumptionExpected = No 279*e0c4386eSCy SchubertUseSCTP = No 280*e0c4386eSCy Schubertclient = 8-renegotiate-aead-to-aead-client-extra 281*e0c4386eSCy Schubert 282*e0c4386eSCy Schubert[8-renegotiate-aead-to-aead-client-extra] 283*e0c4386eSCy SchubertRenegotiateCiphers = AES256-GCM-SHA384 284*e0c4386eSCy Schubert 285*e0c4386eSCy Schubert 286