xref: /freebsd/crypto/openssl/test/ssl-tests/32-compressed-certificate.cnf (revision e7be843b4a162e68651d3911f0357ed464915629)
1*e7be843bSPierre Pronchery# Generated with generate_ssl_tests.pl
2*e7be843bSPierre Pronchery
3*e7be843bSPierre Proncherynum_tests = 8
4*e7be843bSPierre Pronchery
5*e7be843bSPierre Proncherytest-0 = 0-no-compressed-certificates
6*e7be843bSPierre Proncherytest-1 = 1-server-compressed-certificates
7*e7be843bSPierre Proncherytest-2 = 2-client-compressed-certificates
8*e7be843bSPierre Proncherytest-3 = 3-both-compressed-certificates
9*e7be843bSPierre Proncherytest-4 = 4-no-compressed-certificates-mtls
10*e7be843bSPierre Proncherytest-5 = 5-server-compressed-certificates-mtls
11*e7be843bSPierre Proncherytest-6 = 6-client-compressed-certificates-mtls
12*e7be843bSPierre Proncherytest-7 = 7-both-compressed-certificates-mtls
13*e7be843bSPierre Pronchery# ===========================================================
14*e7be843bSPierre Pronchery
15*e7be843bSPierre Pronchery[0-no-compressed-certificates]
16*e7be843bSPierre Proncheryssl_conf = 0-no-compressed-certificates-ssl
17*e7be843bSPierre Pronchery
18*e7be843bSPierre Pronchery[0-no-compressed-certificates-ssl]
19*e7be843bSPierre Proncheryserver = 0-no-compressed-certificates-server
20*e7be843bSPierre Proncheryclient = 0-no-compressed-certificates-client
21*e7be843bSPierre Pronchery
22*e7be843bSPierre Pronchery[0-no-compressed-certificates-server]
23*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
24*e7be843bSPierre ProncheryCipherString = DEFAULT
25*e7be843bSPierre ProncheryOptions = -TxCertificateCompression,-RxCertificateCompression
26*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
27*e7be843bSPierre Pronchery
28*e7be843bSPierre Pronchery[0-no-compressed-certificates-client]
29*e7be843bSPierre ProncheryCipherString = DEFAULT
30*e7be843bSPierre ProncheryMinProtocol = TLSv1.3
31*e7be843bSPierre ProncheryOptions = -TxCertificateCompression,-RxCertificateCompression
32*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
33*e7be843bSPierre ProncheryVerifyMode = Peer
34*e7be843bSPierre Pronchery
35*e7be843bSPierre Pronchery[test-0]
36*e7be843bSPierre ProncheryCompressCertificates = Yes
37*e7be843bSPierre ProncheryExpectedResult = Success
38*e7be843bSPierre Pronchery
39*e7be843bSPierre Pronchery
40*e7be843bSPierre Pronchery# ===========================================================
41*e7be843bSPierre Pronchery
42*e7be843bSPierre Pronchery[1-server-compressed-certificates]
43*e7be843bSPierre Proncheryssl_conf = 1-server-compressed-certificates-ssl
44*e7be843bSPierre Pronchery
45*e7be843bSPierre Pronchery[1-server-compressed-certificates-ssl]
46*e7be843bSPierre Proncheryserver = 1-server-compressed-certificates-server
47*e7be843bSPierre Proncheryclient = 1-server-compressed-certificates-client
48*e7be843bSPierre Pronchery
49*e7be843bSPierre Pronchery[1-server-compressed-certificates-server]
50*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
51*e7be843bSPierre ProncheryCipherString = DEFAULT
52*e7be843bSPierre ProncheryOptions = TxCertificateCompression,RxCertificateCompression
53*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
54*e7be843bSPierre Pronchery
55*e7be843bSPierre Pronchery[1-server-compressed-certificates-client]
56*e7be843bSPierre ProncheryCipherString = DEFAULT
57*e7be843bSPierre ProncheryMinProtocol = TLSv1.3
58*e7be843bSPierre ProncheryOptions = -TxCertificateCompression,-RxCertificateCompression
59*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
60*e7be843bSPierre ProncheryVerifyMode = Peer
61*e7be843bSPierre Pronchery
62*e7be843bSPierre Pronchery[test-1]
63*e7be843bSPierre ProncheryCompressCertificates = Yes
64*e7be843bSPierre ProncheryExpectedResult = Success
65*e7be843bSPierre Pronchery
66*e7be843bSPierre Pronchery
67*e7be843bSPierre Pronchery# ===========================================================
68*e7be843bSPierre Pronchery
69*e7be843bSPierre Pronchery[2-client-compressed-certificates]
70*e7be843bSPierre Proncheryssl_conf = 2-client-compressed-certificates-ssl
71*e7be843bSPierre Pronchery
72*e7be843bSPierre Pronchery[2-client-compressed-certificates-ssl]
73*e7be843bSPierre Proncheryserver = 2-client-compressed-certificates-server
74*e7be843bSPierre Proncheryclient = 2-client-compressed-certificates-client
75*e7be843bSPierre Pronchery
76*e7be843bSPierre Pronchery[2-client-compressed-certificates-server]
77*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
78*e7be843bSPierre ProncheryCipherString = DEFAULT
79*e7be843bSPierre ProncheryOptions = -TxCertificateCompression,-RxCertificateCompression
80*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
81*e7be843bSPierre Pronchery
82*e7be843bSPierre Pronchery[2-client-compressed-certificates-client]
83*e7be843bSPierre ProncheryCipherString = DEFAULT
84*e7be843bSPierre ProncheryMinProtocol = TLSv1.3
85*e7be843bSPierre ProncheryOptions = TxCertificateCompression,RxCertificateCompression
86*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
87*e7be843bSPierre ProncheryVerifyMode = Peer
88*e7be843bSPierre Pronchery
89*e7be843bSPierre Pronchery[test-2]
90*e7be843bSPierre ProncheryCompressCertificates = Yes
91*e7be843bSPierre ProncheryExpectedResult = Success
92*e7be843bSPierre Pronchery
93*e7be843bSPierre Pronchery
94*e7be843bSPierre Pronchery# ===========================================================
95*e7be843bSPierre Pronchery
96*e7be843bSPierre Pronchery[3-both-compressed-certificates]
97*e7be843bSPierre Proncheryssl_conf = 3-both-compressed-certificates-ssl
98*e7be843bSPierre Pronchery
99*e7be843bSPierre Pronchery[3-both-compressed-certificates-ssl]
100*e7be843bSPierre Proncheryserver = 3-both-compressed-certificates-server
101*e7be843bSPierre Proncheryclient = 3-both-compressed-certificates-client
102*e7be843bSPierre Pronchery
103*e7be843bSPierre Pronchery[3-both-compressed-certificates-server]
104*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
105*e7be843bSPierre ProncheryCipherString = DEFAULT
106*e7be843bSPierre ProncheryOptions = TxCertificateCompression,RxCertificateCompression
107*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
108*e7be843bSPierre Pronchery
109*e7be843bSPierre Pronchery[3-both-compressed-certificates-client]
110*e7be843bSPierre ProncheryCipherString = DEFAULT
111*e7be843bSPierre ProncheryMinProtocol = TLSv1.3
112*e7be843bSPierre ProncheryOptions = TxCertificateCompression,RxCertificateCompression
113*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
114*e7be843bSPierre ProncheryVerifyMode = Peer
115*e7be843bSPierre Pronchery
116*e7be843bSPierre Pronchery[test-3]
117*e7be843bSPierre ProncheryCompressCertificates = Yes
118*e7be843bSPierre ProncheryExpectedResult = Success
119*e7be843bSPierre Pronchery
120*e7be843bSPierre Pronchery
121*e7be843bSPierre Pronchery# ===========================================================
122*e7be843bSPierre Pronchery
123*e7be843bSPierre Pronchery[4-no-compressed-certificates-mtls]
124*e7be843bSPierre Proncheryssl_conf = 4-no-compressed-certificates-mtls-ssl
125*e7be843bSPierre Pronchery
126*e7be843bSPierre Pronchery[4-no-compressed-certificates-mtls-ssl]
127*e7be843bSPierre Proncheryserver = 4-no-compressed-certificates-mtls-server
128*e7be843bSPierre Proncheryclient = 4-no-compressed-certificates-mtls-client
129*e7be843bSPierre Pronchery
130*e7be843bSPierre Pronchery[4-no-compressed-certificates-mtls-server]
131*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
132*e7be843bSPierre ProncheryCipherString = DEFAULT
133*e7be843bSPierre ProncheryOptions = -TxCertificateCompression,-RxCertificateCompression
134*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
135*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
136*e7be843bSPierre ProncheryVerifyMode = Request
137*e7be843bSPierre Pronchery
138*e7be843bSPierre Pronchery[4-no-compressed-certificates-mtls-client]
139*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
140*e7be843bSPierre ProncheryCipherString = DEFAULT
141*e7be843bSPierre ProncheryMinProtocol = TLSv1.3
142*e7be843bSPierre ProncheryOptions = -TxCertificateCompression,-RxCertificateCompression
143*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
144*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
145*e7be843bSPierre ProncheryVerifyMode = Peer
146*e7be843bSPierre Pronchery
147*e7be843bSPierre Pronchery[test-4]
148*e7be843bSPierre ProncheryCompressCertificates = Yes
149*e7be843bSPierre ProncheryExpectedResult = Success
150*e7be843bSPierre Pronchery
151*e7be843bSPierre Pronchery
152*e7be843bSPierre Pronchery# ===========================================================
153*e7be843bSPierre Pronchery
154*e7be843bSPierre Pronchery[5-server-compressed-certificates-mtls]
155*e7be843bSPierre Proncheryssl_conf = 5-server-compressed-certificates-mtls-ssl
156*e7be843bSPierre Pronchery
157*e7be843bSPierre Pronchery[5-server-compressed-certificates-mtls-ssl]
158*e7be843bSPierre Proncheryserver = 5-server-compressed-certificates-mtls-server
159*e7be843bSPierre Proncheryclient = 5-server-compressed-certificates-mtls-client
160*e7be843bSPierre Pronchery
161*e7be843bSPierre Pronchery[5-server-compressed-certificates-mtls-server]
162*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
163*e7be843bSPierre ProncheryCipherString = DEFAULT
164*e7be843bSPierre ProncheryOptions = TxCertificateCompression,RxCertificateCompression
165*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
166*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
167*e7be843bSPierre ProncheryVerifyMode = Request
168*e7be843bSPierre Pronchery
169*e7be843bSPierre Pronchery[5-server-compressed-certificates-mtls-client]
170*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
171*e7be843bSPierre ProncheryCipherString = DEFAULT
172*e7be843bSPierre ProncheryMinProtocol = TLSv1.3
173*e7be843bSPierre ProncheryOptions = -TxCertificateCompression,-RxCertificateCompression
174*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
175*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
176*e7be843bSPierre ProncheryVerifyMode = Peer
177*e7be843bSPierre Pronchery
178*e7be843bSPierre Pronchery[test-5]
179*e7be843bSPierre ProncheryCompressCertificates = Yes
180*e7be843bSPierre ProncheryExpectedResult = Success
181*e7be843bSPierre Pronchery
182*e7be843bSPierre Pronchery
183*e7be843bSPierre Pronchery# ===========================================================
184*e7be843bSPierre Pronchery
185*e7be843bSPierre Pronchery[6-client-compressed-certificates-mtls]
186*e7be843bSPierre Proncheryssl_conf = 6-client-compressed-certificates-mtls-ssl
187*e7be843bSPierre Pronchery
188*e7be843bSPierre Pronchery[6-client-compressed-certificates-mtls-ssl]
189*e7be843bSPierre Proncheryserver = 6-client-compressed-certificates-mtls-server
190*e7be843bSPierre Proncheryclient = 6-client-compressed-certificates-mtls-client
191*e7be843bSPierre Pronchery
192*e7be843bSPierre Pronchery[6-client-compressed-certificates-mtls-server]
193*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
194*e7be843bSPierre ProncheryCipherString = DEFAULT
195*e7be843bSPierre ProncheryOptions = -TxCertificateCompression,-RxCertificateCompression
196*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
197*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
198*e7be843bSPierre ProncheryVerifyMode = Request
199*e7be843bSPierre Pronchery
200*e7be843bSPierre Pronchery[6-client-compressed-certificates-mtls-client]
201*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
202*e7be843bSPierre ProncheryCipherString = DEFAULT
203*e7be843bSPierre ProncheryMinProtocol = TLSv1.3
204*e7be843bSPierre ProncheryOptions = TxCertificateCompression,RxCertificateCompression
205*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
206*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
207*e7be843bSPierre ProncheryVerifyMode = Peer
208*e7be843bSPierre Pronchery
209*e7be843bSPierre Pronchery[test-6]
210*e7be843bSPierre ProncheryCompressCertificates = Yes
211*e7be843bSPierre ProncheryExpectedResult = Success
212*e7be843bSPierre Pronchery
213*e7be843bSPierre Pronchery
214*e7be843bSPierre Pronchery# ===========================================================
215*e7be843bSPierre Pronchery
216*e7be843bSPierre Pronchery[7-both-compressed-certificates-mtls]
217*e7be843bSPierre Proncheryssl_conf = 7-both-compressed-certificates-mtls-ssl
218*e7be843bSPierre Pronchery
219*e7be843bSPierre Pronchery[7-both-compressed-certificates-mtls-ssl]
220*e7be843bSPierre Proncheryserver = 7-both-compressed-certificates-mtls-server
221*e7be843bSPierre Proncheryclient = 7-both-compressed-certificates-mtls-client
222*e7be843bSPierre Pronchery
223*e7be843bSPierre Pronchery[7-both-compressed-certificates-mtls-server]
224*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
225*e7be843bSPierre ProncheryCipherString = DEFAULT
226*e7be843bSPierre ProncheryOptions = TxCertificateCompression,RxCertificateCompression
227*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
228*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
229*e7be843bSPierre ProncheryVerifyMode = Request
230*e7be843bSPierre Pronchery
231*e7be843bSPierre Pronchery[7-both-compressed-certificates-mtls-client]
232*e7be843bSPierre ProncheryCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
233*e7be843bSPierre ProncheryCipherString = DEFAULT
234*e7be843bSPierre ProncheryMinProtocol = TLSv1.3
235*e7be843bSPierre ProncheryOptions = TxCertificateCompression,RxCertificateCompression
236*e7be843bSPierre ProncheryPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
237*e7be843bSPierre ProncheryVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
238*e7be843bSPierre ProncheryVerifyMode = Peer
239*e7be843bSPierre Pronchery
240*e7be843bSPierre Pronchery[test-7]
241*e7be843bSPierre ProncheryCompressCertificates = Yes
242*e7be843bSPierre ProncheryExpectedResult = Success
243*e7be843bSPierre Pronchery
244*e7be843bSPierre Pronchery
245