1# Generated with generate_ssl_tests.pl 2 3num_tests = 9 4 5test-0 = 0-disable-encrypt-then-mac-server-sha 6test-1 = 1-disable-encrypt-then-mac-client-sha 7test-2 = 2-disable-encrypt-then-mac-both-sha 8test-3 = 3-disable-encrypt-then-mac-server-sha2 9test-4 = 4-disable-encrypt-then-mac-client-sha2 10test-5 = 5-disable-encrypt-then-mac-both-sha2 11test-6 = 6-disable-encrypt-then-mac-server-sha-tls1 12test-7 = 7-disable-encrypt-then-mac-client-sha-tls1 13test-8 = 8-disable-encrypt-then-mac-both-sha-tls1 14# =========================================================== 15 16[0-disable-encrypt-then-mac-server-sha] 17ssl_conf = 0-disable-encrypt-then-mac-server-sha-ssl 18 19[0-disable-encrypt-then-mac-server-sha-ssl] 20server = 0-disable-encrypt-then-mac-server-sha-server 21client = 0-disable-encrypt-then-mac-server-sha-client 22 23[0-disable-encrypt-then-mac-server-sha-server] 24Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 25CipherString = DEFAULT 26Options = -EncryptThenMac 27PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 28 29[0-disable-encrypt-then-mac-server-sha-client] 30CipherString = AES128-SHA 31MaxProtocol = TLSv1.2 32VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 33VerifyMode = Peer 34 35[test-0] 36ExpectedResult = Success 37 38 39# =========================================================== 40 41[1-disable-encrypt-then-mac-client-sha] 42ssl_conf = 1-disable-encrypt-then-mac-client-sha-ssl 43 44[1-disable-encrypt-then-mac-client-sha-ssl] 45server = 1-disable-encrypt-then-mac-client-sha-server 46client = 1-disable-encrypt-then-mac-client-sha-client 47 48[1-disable-encrypt-then-mac-client-sha-server] 49Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 50CipherString = DEFAULT 51PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 52 53[1-disable-encrypt-then-mac-client-sha-client] 54CipherString = AES128-SHA 55MaxProtocol = TLSv1.2 56Options = -EncryptThenMac 57VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 58VerifyMode = Peer 59 60[test-1] 61ExpectedResult = Success 62 63 64# =========================================================== 65 66[2-disable-encrypt-then-mac-both-sha] 67ssl_conf = 2-disable-encrypt-then-mac-both-sha-ssl 68 69[2-disable-encrypt-then-mac-both-sha-ssl] 70server = 2-disable-encrypt-then-mac-both-sha-server 71client = 2-disable-encrypt-then-mac-both-sha-client 72 73[2-disable-encrypt-then-mac-both-sha-server] 74Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 75CipherString = DEFAULT 76Options = -EncryptThenMac 77PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 78 79[2-disable-encrypt-then-mac-both-sha-client] 80CipherString = AES128-SHA 81MaxProtocol = TLSv1.2 82Options = -EncryptThenMac 83VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 84VerifyMode = Peer 85 86[test-2] 87ExpectedResult = Success 88 89 90# =========================================================== 91 92[3-disable-encrypt-then-mac-server-sha2] 93ssl_conf = 3-disable-encrypt-then-mac-server-sha2-ssl 94 95[3-disable-encrypt-then-mac-server-sha2-ssl] 96server = 3-disable-encrypt-then-mac-server-sha2-server 97client = 3-disable-encrypt-then-mac-server-sha2-client 98 99[3-disable-encrypt-then-mac-server-sha2-server] 100Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 101CipherString = DEFAULT 102Options = -EncryptThenMac 103PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 104 105[3-disable-encrypt-then-mac-server-sha2-client] 106CipherString = AES128-SHA256 107MaxProtocol = TLSv1.2 108VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 109VerifyMode = Peer 110 111[test-3] 112ExpectedResult = Success 113 114 115# =========================================================== 116 117[4-disable-encrypt-then-mac-client-sha2] 118ssl_conf = 4-disable-encrypt-then-mac-client-sha2-ssl 119 120[4-disable-encrypt-then-mac-client-sha2-ssl] 121server = 4-disable-encrypt-then-mac-client-sha2-server 122client = 4-disable-encrypt-then-mac-client-sha2-client 123 124[4-disable-encrypt-then-mac-client-sha2-server] 125Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 126CipherString = DEFAULT 127PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 128 129[4-disable-encrypt-then-mac-client-sha2-client] 130CipherString = AES128-SHA256 131MaxProtocol = TLSv1.2 132Options = -EncryptThenMac 133VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 134VerifyMode = Peer 135 136[test-4] 137ExpectedResult = Success 138 139 140# =========================================================== 141 142[5-disable-encrypt-then-mac-both-sha2] 143ssl_conf = 5-disable-encrypt-then-mac-both-sha2-ssl 144 145[5-disable-encrypt-then-mac-both-sha2-ssl] 146server = 5-disable-encrypt-then-mac-both-sha2-server 147client = 5-disable-encrypt-then-mac-both-sha2-client 148 149[5-disable-encrypt-then-mac-both-sha2-server] 150Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 151CipherString = DEFAULT 152Options = -EncryptThenMac 153PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 154 155[5-disable-encrypt-then-mac-both-sha2-client] 156CipherString = AES128-SHA256 157MaxProtocol = TLSv1.2 158Options = -EncryptThenMac 159VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 160VerifyMode = Peer 161 162[test-5] 163ExpectedResult = Success 164 165 166# =========================================================== 167 168[6-disable-encrypt-then-mac-server-sha-tls1] 169ssl_conf = 6-disable-encrypt-then-mac-server-sha-tls1-ssl 170 171[6-disable-encrypt-then-mac-server-sha-tls1-ssl] 172server = 6-disable-encrypt-then-mac-server-sha-tls1-server 173client = 6-disable-encrypt-then-mac-server-sha-tls1-client 174 175[6-disable-encrypt-then-mac-server-sha-tls1-server] 176Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 177CipherString = DEFAULT:@SECLEVEL=0 178Options = -EncryptThenMac 179PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 180 181[6-disable-encrypt-then-mac-server-sha-tls1-client] 182CipherString = AES128-SHA@SECLEVEL=0 183MaxProtocol = TLSv1 184MinProtocol = TLSv1 185VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 186VerifyMode = Peer 187 188[test-6] 189ExpectedResult = Success 190 191 192# =========================================================== 193 194[7-disable-encrypt-then-mac-client-sha-tls1] 195ssl_conf = 7-disable-encrypt-then-mac-client-sha-tls1-ssl 196 197[7-disable-encrypt-then-mac-client-sha-tls1-ssl] 198server = 7-disable-encrypt-then-mac-client-sha-tls1-server 199client = 7-disable-encrypt-then-mac-client-sha-tls1-client 200 201[7-disable-encrypt-then-mac-client-sha-tls1-server] 202Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 203CipherString = DEFAULT:@SECLEVEL=0 204PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 205 206[7-disable-encrypt-then-mac-client-sha-tls1-client] 207CipherString = AES128-SHA@SECLEVEL=0 208MaxProtocol = TLSv1 209MinProtocol = TLSv1 210Options = -EncryptThenMac 211VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 212VerifyMode = Peer 213 214[test-7] 215ExpectedResult = Success 216 217 218# =========================================================== 219 220[8-disable-encrypt-then-mac-both-sha-tls1] 221ssl_conf = 8-disable-encrypt-then-mac-both-sha-tls1-ssl 222 223[8-disable-encrypt-then-mac-both-sha-tls1-ssl] 224server = 8-disable-encrypt-then-mac-both-sha-tls1-server 225client = 8-disable-encrypt-then-mac-both-sha-tls1-client 226 227[8-disable-encrypt-then-mac-both-sha-tls1-server] 228Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 229CipherString = DEFAULT:@SECLEVEL=0 230Options = -EncryptThenMac 231PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 232 233[8-disable-encrypt-then-mac-both-sha-tls1-client] 234CipherString = AES128-SHA@SECLEVEL=0 235MaxProtocol = TLSv1 236MinProtocol = TLSv1 237Options = -EncryptThenMac 238VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 239VerifyMode = Peer 240 241[test-8] 242ExpectedResult = Success 243 244 245