xref: /freebsd/crypto/openssl/test/ssl-tests/25-cipher.cnf (revision 1edb7116f450c1a1793f2fd25f6bdc16735ef888)
1# Generated with generate_ssl_tests.pl
2
3num_tests = 9
4
5test-0 = 0-cipher-server-1
6test-1 = 1-cipher-server-2
7test-2 = 2-cipher-server-client-list
8test-3 = 3-cipher-server-pref-1
9test-4 = 4-cipher-server-pref-2
10test-5 = 5-cipher-server-pref-client-list
11test-6 = 6-cipher-server-pref-not-mobile
12test-7 = 7-cipher-server-pref-mobile
13test-8 = 8-cipher-server-pref-mobile2
14# ===========================================================
15
16[0-cipher-server-1]
17ssl_conf = 0-cipher-server-1-ssl
18
19[0-cipher-server-1-ssl]
20server = 0-cipher-server-1-server
21client = 0-cipher-server-1-client
22
23[0-cipher-server-1-server]
24Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
25CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
26MaxProtocol = TLSv1.2
27PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
28
29[0-cipher-server-1-client]
30CipherString = ECDHE-RSA-AES256-SHA384
31MaxProtocol = TLSv1.2
32VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
33VerifyMode = Peer
34
35[test-0]
36ExpectedCipher = ECDHE-RSA-AES256-SHA384
37
38
39# ===========================================================
40
41[1-cipher-server-2]
42ssl_conf = 1-cipher-server-2-ssl
43
44[1-cipher-server-2-ssl]
45server = 1-cipher-server-2-server
46client = 1-cipher-server-2-client
47
48[1-cipher-server-2-server]
49Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
50CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
51MaxProtocol = TLSv1.2
52PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
53
54[1-cipher-server-2-client]
55CipherString = ECDHE-RSA-AES128-SHA256
56MaxProtocol = TLSv1.2
57VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
58VerifyMode = Peer
59
60[test-1]
61ExpectedCipher = ECDHE-RSA-AES128-SHA256
62
63
64# ===========================================================
65
66[2-cipher-server-client-list]
67ssl_conf = 2-cipher-server-client-list-ssl
68
69[2-cipher-server-client-list-ssl]
70server = 2-cipher-server-client-list-server
71client = 2-cipher-server-client-list-client
72
73[2-cipher-server-client-list-server]
74Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
75CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
76MaxProtocol = TLSv1.2
77PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
78
79[2-cipher-server-client-list-client]
80CipherString = ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384
81MaxProtocol = TLSv1.2
82VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
83VerifyMode = Peer
84
85[test-2]
86ExpectedCipher = ECDHE-RSA-AES128-SHA256
87
88
89# ===========================================================
90
91[3-cipher-server-pref-1]
92ssl_conf = 3-cipher-server-pref-1-ssl
93
94[3-cipher-server-pref-1-ssl]
95server = 3-cipher-server-pref-1-server
96client = 3-cipher-server-pref-1-client
97
98[3-cipher-server-pref-1-server]
99Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
100CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
101MaxProtocol = TLSv1.2
102Options = ServerPreference
103PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
104
105[3-cipher-server-pref-1-client]
106CipherString = ECDHE-RSA-AES256-SHA384
107MaxProtocol = TLSv1.2
108VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
109VerifyMode = Peer
110
111[test-3]
112ExpectedCipher = ECDHE-RSA-AES256-SHA384
113
114
115# ===========================================================
116
117[4-cipher-server-pref-2]
118ssl_conf = 4-cipher-server-pref-2-ssl
119
120[4-cipher-server-pref-2-ssl]
121server = 4-cipher-server-pref-2-server
122client = 4-cipher-server-pref-2-client
123
124[4-cipher-server-pref-2-server]
125Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
126CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
127MaxProtocol = TLSv1.2
128Options = ServerPreference
129PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
130
131[4-cipher-server-pref-2-client]
132CipherString = ECDHE-RSA-AES128-SHA256
133MaxProtocol = TLSv1.2
134VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
135VerifyMode = Peer
136
137[test-4]
138ExpectedCipher = ECDHE-RSA-AES128-SHA256
139
140
141# ===========================================================
142
143[5-cipher-server-pref-client-list]
144ssl_conf = 5-cipher-server-pref-client-list-ssl
145
146[5-cipher-server-pref-client-list-ssl]
147server = 5-cipher-server-pref-client-list-server
148client = 5-cipher-server-pref-client-list-client
149
150[5-cipher-server-pref-client-list-server]
151Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
152CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
153MaxProtocol = TLSv1.2
154Options = ServerPreference
155PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
156
157[5-cipher-server-pref-client-list-client]
158CipherString = ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384
159MaxProtocol = TLSv1.2
160VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
161VerifyMode = Peer
162
163[test-5]
164ExpectedCipher = ECDHE-RSA-AES256-SHA384
165
166
167# ===========================================================
168
169[6-cipher-server-pref-not-mobile]
170ssl_conf = 6-cipher-server-pref-not-mobile-ssl
171
172[6-cipher-server-pref-not-mobile-ssl]
173server = 6-cipher-server-pref-not-mobile-server
174client = 6-cipher-server-pref-not-mobile-client
175
176[6-cipher-server-pref-not-mobile-server]
177Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
178CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-CHACHA20-POLY1305
179MaxProtocol = TLSv1.2
180Options = ServerPreference
181PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
182
183[6-cipher-server-pref-not-mobile-client]
184CipherString = ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384
185MaxProtocol = TLSv1.2
186VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
187VerifyMode = Peer
188
189[test-6]
190ExpectedCipher = ECDHE-RSA-AES256-SHA384
191
192
193# ===========================================================
194
195[7-cipher-server-pref-mobile]
196ssl_conf = 7-cipher-server-pref-mobile-ssl
197
198[7-cipher-server-pref-mobile-ssl]
199server = 7-cipher-server-pref-mobile-server
200client = 7-cipher-server-pref-mobile-client
201
202[7-cipher-server-pref-mobile-server]
203Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
204CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-CHACHA20-POLY1305
205MaxProtocol = TLSv1.2
206Options = ServerPreference,PrioritizeChaCha
207PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
208
209[7-cipher-server-pref-mobile-client]
210CipherString = ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-CHACHA20-POLY1305
211MaxProtocol = TLSv1.2
212VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
213VerifyMode = Peer
214
215[test-7]
216ExpectedCipher = ECDHE-RSA-AES256-SHA384
217
218
219# ===========================================================
220
221[8-cipher-server-pref-mobile2]
222ssl_conf = 8-cipher-server-pref-mobile2-ssl
223
224[8-cipher-server-pref-mobile2-ssl]
225server = 8-cipher-server-pref-mobile2-server
226client = 8-cipher-server-pref-mobile2-client
227
228[8-cipher-server-pref-mobile2-server]
229Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
230CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-CHACHA20-POLY1305
231MaxProtocol = TLSv1.2
232Options = ServerPreference,PrioritizeChaCha
233PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
234
235[8-cipher-server-pref-mobile2-client]
236CipherString = ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384
237MaxProtocol = TLSv1.2
238VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
239VerifyMode = Peer
240
241[test-8]
242ExpectedCipher = ECDHE-RSA-CHACHA20-POLY1305
243
244
245