xref: /freebsd/crypto/openssl/test/ssl-tests/28-seclevel.cnf (revision e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6)
1*e0c4386eSCy Schubert# Generated with generate_ssl_tests.pl
2*e0c4386eSCy Schubert
3*e0c4386eSCy Schubertnum_tests = 6
4*e0c4386eSCy Schubert
5*e0c4386eSCy Schuberttest-0 = 0-SECLEVEL 3 with default key
6*e0c4386eSCy Schuberttest-1 = 1-SECLEVEL 4 with ED448 key
7*e0c4386eSCy Schuberttest-2 = 2-SECLEVEL 5 server with ED448 key
8*e0c4386eSCy Schuberttest-3 = 3-SECLEVEL 5 client with ED448 key
9*e0c4386eSCy Schuberttest-4 = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE
10*e0c4386eSCy Schuberttest-5 = 5-SECLEVEL 3 with ED448 key, TLSv1.2
11*e0c4386eSCy Schubert# ===========================================================
12*e0c4386eSCy Schubert
13*e0c4386eSCy Schubert[0-SECLEVEL 3 with default key]
14*e0c4386eSCy Schubertssl_conf = 0-SECLEVEL 3 with default key-ssl
15*e0c4386eSCy Schubert
16*e0c4386eSCy Schubert[0-SECLEVEL 3 with default key-ssl]
17*e0c4386eSCy Schubertserver = 0-SECLEVEL 3 with default key-server
18*e0c4386eSCy Schubertclient = 0-SECLEVEL 3 with default key-client
19*e0c4386eSCy Schubert
20*e0c4386eSCy Schubert[0-SECLEVEL 3 with default key-server]
21*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
22*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=3
23*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
24*e0c4386eSCy Schubert
25*e0c4386eSCy Schubert[0-SECLEVEL 3 with default key-client]
26*e0c4386eSCy SchubertCipherString = DEFAULT
27*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
28*e0c4386eSCy SchubertVerifyMode = Peer
29*e0c4386eSCy Schubert
30*e0c4386eSCy Schubert[test-0]
31*e0c4386eSCy SchubertExpectedResult = ServerFail
32*e0c4386eSCy Schubert
33*e0c4386eSCy Schubert
34*e0c4386eSCy Schubert# ===========================================================
35*e0c4386eSCy Schubert
36*e0c4386eSCy Schubert[1-SECLEVEL 4 with ED448 key]
37*e0c4386eSCy Schubertssl_conf = 1-SECLEVEL 4 with ED448 key-ssl
38*e0c4386eSCy Schubert
39*e0c4386eSCy Schubert[1-SECLEVEL 4 with ED448 key-ssl]
40*e0c4386eSCy Schubertserver = 1-SECLEVEL 4 with ED448 key-server
41*e0c4386eSCy Schubertclient = 1-SECLEVEL 4 with ED448 key-client
42*e0c4386eSCy Schubert
43*e0c4386eSCy Schubert[1-SECLEVEL 4 with ED448 key-server]
44*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
45*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=4
46*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
47*e0c4386eSCy Schubert
48*e0c4386eSCy Schubert[1-SECLEVEL 4 with ED448 key-client]
49*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=4
50*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
51*e0c4386eSCy SchubertVerifyMode = Peer
52*e0c4386eSCy Schubert
53*e0c4386eSCy Schubert[test-1]
54*e0c4386eSCy SchubertExpectedResult = Success
55*e0c4386eSCy Schubert
56*e0c4386eSCy Schubert
57*e0c4386eSCy Schubert# ===========================================================
58*e0c4386eSCy Schubert
59*e0c4386eSCy Schubert[2-SECLEVEL 5 server with ED448 key]
60*e0c4386eSCy Schubertssl_conf = 2-SECLEVEL 5 server with ED448 key-ssl
61*e0c4386eSCy Schubert
62*e0c4386eSCy Schubert[2-SECLEVEL 5 server with ED448 key-ssl]
63*e0c4386eSCy Schubertserver = 2-SECLEVEL 5 server with ED448 key-server
64*e0c4386eSCy Schubertclient = 2-SECLEVEL 5 server with ED448 key-client
65*e0c4386eSCy Schubert
66*e0c4386eSCy Schubert[2-SECLEVEL 5 server with ED448 key-server]
67*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
68*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=5
69*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
70*e0c4386eSCy Schubert
71*e0c4386eSCy Schubert[2-SECLEVEL 5 server with ED448 key-client]
72*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=4
73*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
74*e0c4386eSCy SchubertVerifyMode = Peer
75*e0c4386eSCy Schubert
76*e0c4386eSCy Schubert[test-2]
77*e0c4386eSCy SchubertExpectedResult = ServerFail
78*e0c4386eSCy Schubert
79*e0c4386eSCy Schubert
80*e0c4386eSCy Schubert# ===========================================================
81*e0c4386eSCy Schubert
82*e0c4386eSCy Schubert[3-SECLEVEL 5 client with ED448 key]
83*e0c4386eSCy Schubertssl_conf = 3-SECLEVEL 5 client with ED448 key-ssl
84*e0c4386eSCy Schubert
85*e0c4386eSCy Schubert[3-SECLEVEL 5 client with ED448 key-ssl]
86*e0c4386eSCy Schubertserver = 3-SECLEVEL 5 client with ED448 key-server
87*e0c4386eSCy Schubertclient = 3-SECLEVEL 5 client with ED448 key-client
88*e0c4386eSCy Schubert
89*e0c4386eSCy Schubert[3-SECLEVEL 5 client with ED448 key-server]
90*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
91*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=4
92*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
93*e0c4386eSCy Schubert
94*e0c4386eSCy Schubert[3-SECLEVEL 5 client with ED448 key-client]
95*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=5
96*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
97*e0c4386eSCy SchubertVerifyMode = Peer
98*e0c4386eSCy Schubert
99*e0c4386eSCy Schubert[test-3]
100*e0c4386eSCy SchubertExpectedResult = ServerFail
101*e0c4386eSCy Schubert
102*e0c4386eSCy Schubert
103*e0c4386eSCy Schubert# ===========================================================
104*e0c4386eSCy Schubert
105*e0c4386eSCy Schubert[4-SECLEVEL 3 with P-384 key, X25519 ECDHE]
106*e0c4386eSCy Schubertssl_conf = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl
107*e0c4386eSCy Schubert
108*e0c4386eSCy Schubert[4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl]
109*e0c4386eSCy Schubertserver = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server
110*e0c4386eSCy Schubertclient = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client
111*e0c4386eSCy Schubert
112*e0c4386eSCy Schubert[4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server]
113*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/p384-server-cert.pem
114*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=3
115*e0c4386eSCy SchubertGroups = X25519
116*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/p384-server-key.pem
117*e0c4386eSCy Schubert
118*e0c4386eSCy Schubert[4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client]
119*e0c4386eSCy SchubertCipherString = ECDHE:@SECLEVEL=3
120*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/p384-root.pem
121*e0c4386eSCy SchubertVerifyMode = Peer
122*e0c4386eSCy Schubert
123*e0c4386eSCy Schubert[test-4]
124*e0c4386eSCy SchubertExpectedResult = Success
125*e0c4386eSCy Schubert
126*e0c4386eSCy Schubert
127*e0c4386eSCy Schubert# ===========================================================
128*e0c4386eSCy Schubert
129*e0c4386eSCy Schubert[5-SECLEVEL 3 with ED448 key, TLSv1.2]
130*e0c4386eSCy Schubertssl_conf = 5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl
131*e0c4386eSCy Schubert
132*e0c4386eSCy Schubert[5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl]
133*e0c4386eSCy Schubertserver = 5-SECLEVEL 3 with ED448 key, TLSv1.2-server
134*e0c4386eSCy Schubertclient = 5-SECLEVEL 3 with ED448 key, TLSv1.2-client
135*e0c4386eSCy Schubert
136*e0c4386eSCy Schubert[5-SECLEVEL 3 with ED448 key, TLSv1.2-server]
137*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
138*e0c4386eSCy SchubertCipherString = DEFAULT:@SECLEVEL=3
139*e0c4386eSCy SchubertMaxProtocol = TLSv1.2
140*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
141*e0c4386eSCy Schubert
142*e0c4386eSCy Schubert[5-SECLEVEL 3 with ED448 key, TLSv1.2-client]
143*e0c4386eSCy SchubertCipherString = DEFAULT
144*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
145*e0c4386eSCy SchubertVerifyMode = Peer
146*e0c4386eSCy Schubert
147*e0c4386eSCy Schubert[test-5]
148*e0c4386eSCy SchubertExpectedResult = Success
149*e0c4386eSCy Schubert
150*e0c4386eSCy Schubert
151