xref: /freebsd/crypto/openssl/test/ssl-tests/32-compressed-certificate.cnf.in (revision e7be843b4a162e68651d3911f0357ed464915629)
1*e7be843bSPierre Pronchery# -*- mode: perl; -*-
2*e7be843bSPierre Pronchery# Copyright 2016-2016 The OpenSSL Project Authors. All Rights Reserved.
3*e7be843bSPierre Pronchery#
4*e7be843bSPierre Pronchery# Licensed under the OpenSSL license (the "License").  You may not use
5*e7be843bSPierre Pronchery# this file except in compliance with the License.  You can obtain a copy
6*e7be843bSPierre Pronchery# in the file LICENSE in the source distribution or at
7*e7be843bSPierre Pronchery# https://www.openssl.org/source/license.html
8*e7be843bSPierre Pronchery
9*e7be843bSPierre Pronchery
10*e7be843bSPierre Pronchery## SSL test configurations
11*e7be843bSPierre Pronchery
12*e7be843bSPierre Proncherypackage ssltests;
13*e7be843bSPierre Pronchery
14*e7be843bSPierre Proncheryuse OpenSSL::Test::Utils;
15*e7be843bSPierre Pronchery
16*e7be843bSPierre Proncheryour @tests = ();
17*e7be843bSPierre Pronchery
18*e7be843bSPierre Proncheryour @tests = (
19*e7be843bSPierre Pronchery    {
20*e7be843bSPierre Pronchery        name => "no-compressed-certificates",
21*e7be843bSPierre Pronchery        server => {
22*e7be843bSPierre Pronchery            "Options" => "-TxCertificateCompression,-RxCertificateCompression",
23*e7be843bSPierre Pronchery        },
24*e7be843bSPierre Pronchery        client => {
25*e7be843bSPierre Pronchery            "Options" => "-TxCertificateCompression,-RxCertificateCompression",
26*e7be843bSPierre Pronchery                "MinProtocol" => "TLSv1.3",
27*e7be843bSPierre Pronchery        },
28*e7be843bSPierre Pronchery        test   => {
29*e7be843bSPierre Pronchery            "ExpectedResult" => "Success",
30*e7be843bSPierre Pronchery            "CompressCertificates" => "Yes",
31*e7be843bSPierre Pronchery        },
32*e7be843bSPierre Pronchery    },
33*e7be843bSPierre Pronchery    {
34*e7be843bSPierre Pronchery        name => "server-compressed-certificates",
35*e7be843bSPierre Pronchery        server => {
36*e7be843bSPierre Pronchery            "Options" => "TxCertificateCompression,RxCertificateCompression",
37*e7be843bSPierre Pronchery        },
38*e7be843bSPierre Pronchery        client => {
39*e7be843bSPierre Pronchery            "Options" => "-TxCertificateCompression,-RxCertificateCompression",
40*e7be843bSPierre Pronchery            "MinProtocol" => "TLSv1.3",
41*e7be843bSPierre Pronchery        },
42*e7be843bSPierre Pronchery        test   => {
43*e7be843bSPierre Pronchery            "ExpectedResult" => "Success",
44*e7be843bSPierre Pronchery            "CompressCertificates" => "Yes",
45*e7be843bSPierre Pronchery        },
46*e7be843bSPierre Pronchery    },
47*e7be843bSPierre Pronchery    {
48*e7be843bSPierre Pronchery        name => "client-compressed-certificates",
49*e7be843bSPierre Pronchery        server => {
50*e7be843bSPierre Pronchery            "Options" => "-TxCertificateCompression,-RxCertificateCompression",
51*e7be843bSPierre Pronchery        },
52*e7be843bSPierre Pronchery        client => {
53*e7be843bSPierre Pronchery            "Options" => "TxCertificateCompression,RxCertificateCompression",
54*e7be843bSPierre Pronchery            "MinProtocol" => "TLSv1.3",
55*e7be843bSPierre Pronchery        },
56*e7be843bSPierre Pronchery        test   => {
57*e7be843bSPierre Pronchery            "ExpectedResult" => "Success",
58*e7be843bSPierre Pronchery            "CompressCertificates" => "Yes",
59*e7be843bSPierre Pronchery        },
60*e7be843bSPierre Pronchery    },
61*e7be843bSPierre Pronchery    {
62*e7be843bSPierre Pronchery        name => "both-compressed-certificates",
63*e7be843bSPierre Pronchery        server => {
64*e7be843bSPierre Pronchery            "Options" => "TxCertificateCompression,RxCertificateCompression",
65*e7be843bSPierre Pronchery        },
66*e7be843bSPierre Pronchery        client => {
67*e7be843bSPierre Pronchery            "Options" => "TxCertificateCompression,RxCertificateCompression",
68*e7be843bSPierre Pronchery            "MinProtocol" => "TLSv1.3",
69*e7be843bSPierre Pronchery        },
70*e7be843bSPierre Pronchery        test   => {
71*e7be843bSPierre Pronchery            "ExpectedResult" => "Success",
72*e7be843bSPierre Pronchery            "CompressCertificates" => "Yes",
73*e7be843bSPierre Pronchery        },
74*e7be843bSPierre Pronchery    },
75*e7be843bSPierre Pronchery    {
76*e7be843bSPierre Pronchery        name => "no-compressed-certificates-mtls",
77*e7be843bSPierre Pronchery        server => {
78*e7be843bSPierre Pronchery            "Options" => "-TxCertificateCompression,-RxCertificateCompression",
79*e7be843bSPierre Pronchery            "VerifyCAFile" => test_pem("root-cert.pem"),
80*e7be843bSPierre Pronchery            "VerifyMode" => "Request",
81*e7be843bSPierre Pronchery        },
82*e7be843bSPierre Pronchery        client => {
83*e7be843bSPierre Pronchery            "Options" => "-TxCertificateCompression,-RxCertificateCompression",
84*e7be843bSPierre Pronchery            "MinProtocol" => "TLSv1.3",
85*e7be843bSPierre Pronchery            "Certificate" => test_pem("ee-client-chain.pem"),
86*e7be843bSPierre Pronchery            "PrivateKey"  => test_pem("ee-key.pem"),
87*e7be843bSPierre Pronchery        },
88*e7be843bSPierre Pronchery        test   => {
89*e7be843bSPierre Pronchery            "ExpectedResult" => "Success",
90*e7be843bSPierre Pronchery            "CompressCertificates" => "Yes",
91*e7be843bSPierre Pronchery        },
92*e7be843bSPierre Pronchery    },
93*e7be843bSPierre Pronchery    {
94*e7be843bSPierre Pronchery        name => "server-compressed-certificates-mtls",
95*e7be843bSPierre Pronchery        server => {
96*e7be843bSPierre Pronchery            "Options" => "TxCertificateCompression,RxCertificateCompression",
97*e7be843bSPierre Pronchery            "VerifyCAFile" => test_pem("root-cert.pem"),
98*e7be843bSPierre Pronchery            "VerifyMode" => "Request",
99*e7be843bSPierre Pronchery        },
100*e7be843bSPierre Pronchery        client => {
101*e7be843bSPierre Pronchery            "Options" => "-TxCertificateCompression,-RxCertificateCompression",
102*e7be843bSPierre Pronchery            "MinProtocol" => "TLSv1.3",
103*e7be843bSPierre Pronchery            "Certificate" => test_pem("ee-client-chain.pem"),
104*e7be843bSPierre Pronchery            "PrivateKey"  => test_pem("ee-key.pem"),
105*e7be843bSPierre Pronchery        },
106*e7be843bSPierre Pronchery        test   => {
107*e7be843bSPierre Pronchery            "ExpectedResult" => "Success",
108*e7be843bSPierre Pronchery            "CompressCertificates" => "Yes",
109*e7be843bSPierre Pronchery        },
110*e7be843bSPierre Pronchery    },
111*e7be843bSPierre Pronchery    {
112*e7be843bSPierre Pronchery        name => "client-compressed-certificates-mtls",
113*e7be843bSPierre Pronchery        server => {
114*e7be843bSPierre Pronchery            "Options" => "-TxCertificateCompression,-RxCertificateCompression",
115*e7be843bSPierre Pronchery            "VerifyCAFile" => test_pem("root-cert.pem"),
116*e7be843bSPierre Pronchery            "VerifyMode" => "Request",
117*e7be843bSPierre Pronchery        },
118*e7be843bSPierre Pronchery        client => {
119*e7be843bSPierre Pronchery            "Options" => "TxCertificateCompression,RxCertificateCompression",
120*e7be843bSPierre Pronchery            "MinProtocol" => "TLSv1.3",
121*e7be843bSPierre Pronchery            "Certificate" => test_pem("ee-client-chain.pem"),
122*e7be843bSPierre Pronchery            "PrivateKey"  => test_pem("ee-key.pem"),
123*e7be843bSPierre Pronchery        },
124*e7be843bSPierre Pronchery        test   => {
125*e7be843bSPierre Pronchery            "ExpectedResult" => "Success",
126*e7be843bSPierre Pronchery            "CompressCertificates" => "Yes",
127*e7be843bSPierre Pronchery        },
128*e7be843bSPierre Pronchery    },
129*e7be843bSPierre Pronchery    {
130*e7be843bSPierre Pronchery        name => "both-compressed-certificates-mtls",
131*e7be843bSPierre Pronchery        server => {
132*e7be843bSPierre Pronchery            "Options" => "TxCertificateCompression,RxCertificateCompression",
133*e7be843bSPierre Pronchery            "VerifyCAFile" => test_pem("root-cert.pem"),
134*e7be843bSPierre Pronchery            "VerifyMode" => "Request",
135*e7be843bSPierre Pronchery        },
136*e7be843bSPierre Pronchery        client => {
137*e7be843bSPierre Pronchery            "Options" => "TxCertificateCompression,RxCertificateCompression",
138*e7be843bSPierre Pronchery            "MinProtocol" => "TLSv1.3",
139*e7be843bSPierre Pronchery            "Certificate" => test_pem("ee-client-chain.pem"),
140*e7be843bSPierre Pronchery            "PrivateKey"  => test_pem("ee-key.pem"),
141*e7be843bSPierre Pronchery        },
142*e7be843bSPierre Pronchery        test   => {
143*e7be843bSPierre Pronchery            "ExpectedResult" => "Success",
144*e7be843bSPierre Pronchery            "CompressCertificates" => "Yes",
145*e7be843bSPierre Pronchery        },
146*e7be843bSPierre Pronchery    },
147*e7be843bSPierre Pronchery);
148