Gitiles
Code Review Sign In
192.168.1.100 / T106_DC / db4f43f0150836941f56a4d2e2923f7182328607 / . / ap / lib / libssl / openssl-1.1.1o / test / ssl-tests / 12-ct.conf
blob: 2e6e9dea6757359a2282b2c44cf4c3179c9b8a41 [file] [log] [blame]
lh9ed821d2023-04-07 01:36:19 -0700[diff] [blame]1# Generated with generate_ssl_tests.pl
2
3num_tests = 6
4
5test-0 = 0-ct-permissive-without-scts
6test-1 = 1-ct-permissive-with-scts
7test-2 = 2-ct-strict-without-scts
8test-3 = 3-ct-strict-with-scts
9test-4 = 4-ct-permissive-resumption
10test-5 = 5-ct-strict-resumption
11# ===========================================================
12
13[0-ct-permissive-without-scts]
14ssl_conf = 0-ct-permissive-without-scts-ssl
15
16[0-ct-permissive-without-scts-ssl]
17server = 0-ct-permissive-without-scts-server
18client = 0-ct-permissive-without-scts-client
19
20[0-ct-permissive-without-scts-server]
21Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
22CipherString = DEFAULT
23PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
24
25[0-ct-permissive-without-scts-client]
26CipherString = DEFAULT
27VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
28VerifyMode = Peer
29
30[test-0]
31ExpectedResult = Success
32client = 0-ct-permissive-without-scts-client-extra
33
34[0-ct-permissive-without-scts-client-extra]
35CTValidation = Permissive
36
37
38# ===========================================================
39
40[1-ct-permissive-with-scts]
41ssl_conf = 1-ct-permissive-with-scts-ssl
42
43[1-ct-permissive-with-scts-ssl]
44server = 1-ct-permissive-with-scts-server
45client = 1-ct-permissive-with-scts-client
46
47[1-ct-permissive-with-scts-server]
48Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
49CipherString = DEFAULT
50PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
51
52[1-ct-permissive-with-scts-client]
53CipherString = DEFAULT
54VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
55VerifyMode = Peer
56
57[test-1]
58ExpectedResult = Success
59client = 1-ct-permissive-with-scts-client-extra
60
61[1-ct-permissive-with-scts-client-extra]
62CTValidation = Permissive
63
64
65# ===========================================================
66
67[2-ct-strict-without-scts]
68ssl_conf = 2-ct-strict-without-scts-ssl
69
70[2-ct-strict-without-scts-ssl]
71server = 2-ct-strict-without-scts-server
72client = 2-ct-strict-without-scts-client
73
74[2-ct-strict-without-scts-server]
75Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
76CipherString = DEFAULT
77PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
78
79[2-ct-strict-without-scts-client]
80CipherString = DEFAULT
81VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
82VerifyMode = Peer
83
84[test-2]
85ExpectedClientAlert = HandshakeFailure
86ExpectedResult = ClientFail
87client = 2-ct-strict-without-scts-client-extra
88
89[2-ct-strict-without-scts-client-extra]
90CTValidation = Strict
91
92
93# ===========================================================
94
95[3-ct-strict-with-scts]
96ssl_conf = 3-ct-strict-with-scts-ssl
97
98[3-ct-strict-with-scts-ssl]
99server = 3-ct-strict-with-scts-server
100client = 3-ct-strict-with-scts-client
101
102[3-ct-strict-with-scts-server]
103Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
104CipherString = DEFAULT
105PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
106
107[3-ct-strict-with-scts-client]
108CipherString = DEFAULT
109VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
110VerifyMode = Peer
111
112[test-3]
113ExpectedResult = Success
114client = 3-ct-strict-with-scts-client-extra
115
116[3-ct-strict-with-scts-client-extra]
117CTValidation = Strict
118
119
120# ===========================================================
121
122[4-ct-permissive-resumption]
123ssl_conf = 4-ct-permissive-resumption-ssl
124
125[4-ct-permissive-resumption-ssl]
126server = 4-ct-permissive-resumption-server
127client = 4-ct-permissive-resumption-client
128resume-server = 4-ct-permissive-resumption-server
129resume-client = 4-ct-permissive-resumption-client
130
131[4-ct-permissive-resumption-server]
132Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
133CipherString = DEFAULT
134PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
135
136[4-ct-permissive-resumption-client]
137CipherString = DEFAULT
138VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
139VerifyMode = Peer
140
141[test-4]
142ExpectedResult = Success
143HandshakeMode = Resume
144ResumptionExpected = Yes
145client = 4-ct-permissive-resumption-client-extra
146resume-client = 4-ct-permissive-resumption-client-extra
147
148[4-ct-permissive-resumption-client-extra]
149CTValidation = Permissive
150
151
152# ===========================================================
153
154[5-ct-strict-resumption]
155ssl_conf = 5-ct-strict-resumption-ssl
156
157[5-ct-strict-resumption-ssl]
158server = 5-ct-strict-resumption-server
159client = 5-ct-strict-resumption-client
160resume-server = 5-ct-strict-resumption-server
161resume-client = 5-ct-strict-resumption-resume-client
162
163[5-ct-strict-resumption-server]
164Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
165CipherString = DEFAULT
166PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
167
168[5-ct-strict-resumption-client]
169CipherString = DEFAULT
170VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
171VerifyMode = Peer
172
173[5-ct-strict-resumption-resume-client]
174CipherString = DEFAULT
175VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
176VerifyMode = Peer
177
178[test-5]
179ExpectedResult = Success
180HandshakeMode = Resume
181ResumptionExpected = Yes
182client = 5-ct-strict-resumption-client-extra
183resume-client = 5-ct-strict-resumption-resume-client-extra
184
185[5-ct-strict-resumption-client-extra]
186CTValidation = Strict
187
188[5-ct-strict-resumption-resume-client-extra]
189CTValidation = Strict
190
191