]> WPIA git - cassiopeia.git/blob - lib/openssl/test/ssl-tests/08-npn.conf
upd: openssl to 1.1.0
[cassiopeia.git] / lib / openssl / test / ssl-tests / 08-npn.conf
1 # Generated with generate_ssl_tests.pl
2
3 num_tests = 20
4
5 test-0 = 0-npn-simple
6 test-1 = 1-npn-client-finds-match
7 test-2 = 2-npn-client-honours-server-pref
8 test-3 = 3-npn-client-first-pref-on-mismatch
9 test-4 = 4-npn-no-server-support
10 test-5 = 5-npn-no-client-support
11 test-6 = 6-npn-with-sni-no-context-switch
12 test-7 = 7-npn-with-sni-context-switch
13 test-8 = 8-npn-selected-sni-server-supports-npn
14 test-9 = 9-npn-selected-sni-server-does-not-support-npn
15 test-10 = 10-alpn-preferred-over-npn
16 test-11 = 11-sni-npn-preferred-over-alpn
17 test-12 = 12-npn-simple-resumption
18 test-13 = 13-npn-server-switch-resumption
19 test-14 = 14-npn-client-switch-resumption
20 test-15 = 15-npn-client-first-pref-on-mismatch-resumption
21 test-16 = 16-npn-no-server-support-resumption
22 test-17 = 17-npn-no-client-support-resumption
23 test-18 = 18-alpn-preferred-over-npn-resumption
24 test-19 = 19-npn-used-if-alpn-not-supported-resumption
25 # ===========================================================
26
27 [0-npn-simple]
28 ssl_conf = 0-npn-simple-ssl
29
30 [0-npn-simple-ssl]
31 server = 0-npn-simple-server
32 client = 0-npn-simple-client
33
34 [0-npn-simple-server]
35 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
36 CipherString = DEFAULT
37 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
38
39 [0-npn-simple-client]
40 CipherString = DEFAULT
41 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
42 VerifyMode = Peer
43
44 [test-0]
45 ExpectedNPNProtocol = foo
46 server = 0-npn-simple-server-extra
47 client = 0-npn-simple-client-extra
48
49 [0-npn-simple-server-extra]
50 NPNProtocols = foo
51
52 [0-npn-simple-client-extra]
53 NPNProtocols = foo
54
55
56 # ===========================================================
57
58 [1-npn-client-finds-match]
59 ssl_conf = 1-npn-client-finds-match-ssl
60
61 [1-npn-client-finds-match-ssl]
62 server = 1-npn-client-finds-match-server
63 client = 1-npn-client-finds-match-client
64
65 [1-npn-client-finds-match-server]
66 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
67 CipherString = DEFAULT
68 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
69
70 [1-npn-client-finds-match-client]
71 CipherString = DEFAULT
72 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
73 VerifyMode = Peer
74
75 [test-1]
76 ExpectedNPNProtocol = bar
77 server = 1-npn-client-finds-match-server-extra
78 client = 1-npn-client-finds-match-client-extra
79
80 [1-npn-client-finds-match-server-extra]
81 NPNProtocols = baz,bar
82
83 [1-npn-client-finds-match-client-extra]
84 NPNProtocols = foo,bar
85
86
87 # ===========================================================
88
89 [2-npn-client-honours-server-pref]
90 ssl_conf = 2-npn-client-honours-server-pref-ssl
91
92 [2-npn-client-honours-server-pref-ssl]
93 server = 2-npn-client-honours-server-pref-server
94 client = 2-npn-client-honours-server-pref-client
95
96 [2-npn-client-honours-server-pref-server]
97 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
98 CipherString = DEFAULT
99 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
100
101 [2-npn-client-honours-server-pref-client]
102 CipherString = DEFAULT
103 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
104 VerifyMode = Peer
105
106 [test-2]
107 ExpectedNPNProtocol = bar
108 server = 2-npn-client-honours-server-pref-server-extra
109 client = 2-npn-client-honours-server-pref-client-extra
110
111 [2-npn-client-honours-server-pref-server-extra]
112 NPNProtocols = bar,foo
113
114 [2-npn-client-honours-server-pref-client-extra]
115 NPNProtocols = foo,bar
116
117
118 # ===========================================================
119
120 [3-npn-client-first-pref-on-mismatch]
121 ssl_conf = 3-npn-client-first-pref-on-mismatch-ssl
122
123 [3-npn-client-first-pref-on-mismatch-ssl]
124 server = 3-npn-client-first-pref-on-mismatch-server
125 client = 3-npn-client-first-pref-on-mismatch-client
126
127 [3-npn-client-first-pref-on-mismatch-server]
128 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
129 CipherString = DEFAULT
130 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
131
132 [3-npn-client-first-pref-on-mismatch-client]
133 CipherString = DEFAULT
134 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
135 VerifyMode = Peer
136
137 [test-3]
138 ExpectedNPNProtocol = foo
139 server = 3-npn-client-first-pref-on-mismatch-server-extra
140 client = 3-npn-client-first-pref-on-mismatch-client-extra
141
142 [3-npn-client-first-pref-on-mismatch-server-extra]
143 NPNProtocols = baz
144
145 [3-npn-client-first-pref-on-mismatch-client-extra]
146 NPNProtocols = foo,bar
147
148
149 # ===========================================================
150
151 [4-npn-no-server-support]
152 ssl_conf = 4-npn-no-server-support-ssl
153
154 [4-npn-no-server-support-ssl]
155 server = 4-npn-no-server-support-server
156 client = 4-npn-no-server-support-client
157
158 [4-npn-no-server-support-server]
159 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
160 CipherString = DEFAULT
161 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
162
163 [4-npn-no-server-support-client]
164 CipherString = DEFAULT
165 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
166 VerifyMode = Peer
167
168 [test-4]
169 client = 4-npn-no-server-support-client-extra
170
171 [4-npn-no-server-support-client-extra]
172 NPNProtocols = foo
173
174
175 # ===========================================================
176
177 [5-npn-no-client-support]
178 ssl_conf = 5-npn-no-client-support-ssl
179
180 [5-npn-no-client-support-ssl]
181 server = 5-npn-no-client-support-server
182 client = 5-npn-no-client-support-client
183
184 [5-npn-no-client-support-server]
185 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
186 CipherString = DEFAULT
187 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
188
189 [5-npn-no-client-support-client]
190 CipherString = DEFAULT
191 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
192 VerifyMode = Peer
193
194 [test-5]
195 server = 5-npn-no-client-support-server-extra
196
197 [5-npn-no-client-support-server-extra]
198 NPNProtocols = foo
199
200
201 # ===========================================================
202
203 [6-npn-with-sni-no-context-switch]
204 ssl_conf = 6-npn-with-sni-no-context-switch-ssl
205
206 [6-npn-with-sni-no-context-switch-ssl]
207 server = 6-npn-with-sni-no-context-switch-server
208 client = 6-npn-with-sni-no-context-switch-client
209 server2 = 6-npn-with-sni-no-context-switch-server2
210
211 [6-npn-with-sni-no-context-switch-server]
212 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
213 CipherString = DEFAULT
214 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
215
216 [6-npn-with-sni-no-context-switch-server2]
217 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
218 CipherString = DEFAULT
219 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
220
221 [6-npn-with-sni-no-context-switch-client]
222 CipherString = DEFAULT
223 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
224 VerifyMode = Peer
225
226 [test-6]
227 ExpectedNPNProtocol = foo
228 ExpectedServerName = server1
229 server = 6-npn-with-sni-no-context-switch-server-extra
230 server2 = 6-npn-with-sni-no-context-switch-server2-extra
231 client = 6-npn-with-sni-no-context-switch-client-extra
232
233 [6-npn-with-sni-no-context-switch-server-extra]
234 NPNProtocols = foo
235 ServerNameCallback = IgnoreMismatch
236
237 [6-npn-with-sni-no-context-switch-server2-extra]
238 NPNProtocols = bar
239
240 [6-npn-with-sni-no-context-switch-client-extra]
241 NPNProtocols = foo,bar
242 ServerName = server1
243
244
245 # ===========================================================
246
247 [7-npn-with-sni-context-switch]
248 ssl_conf = 7-npn-with-sni-context-switch-ssl
249
250 [7-npn-with-sni-context-switch-ssl]
251 server = 7-npn-with-sni-context-switch-server
252 client = 7-npn-with-sni-context-switch-client
253 server2 = 7-npn-with-sni-context-switch-server2
254
255 [7-npn-with-sni-context-switch-server]
256 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
257 CipherString = DEFAULT
258 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
259
260 [7-npn-with-sni-context-switch-server2]
261 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
262 CipherString = DEFAULT
263 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
264
265 [7-npn-with-sni-context-switch-client]
266 CipherString = DEFAULT
267 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
268 VerifyMode = Peer
269
270 [test-7]
271 ExpectedNPNProtocol = bar
272 ExpectedServerName = server2
273 server = 7-npn-with-sni-context-switch-server-extra
274 server2 = 7-npn-with-sni-context-switch-server2-extra
275 client = 7-npn-with-sni-context-switch-client-extra
276
277 [7-npn-with-sni-context-switch-server-extra]
278 NPNProtocols = foo
279 ServerNameCallback = IgnoreMismatch
280
281 [7-npn-with-sni-context-switch-server2-extra]
282 NPNProtocols = bar
283
284 [7-npn-with-sni-context-switch-client-extra]
285 NPNProtocols = foo,bar
286 ServerName = server2
287
288
289 # ===========================================================
290
291 [8-npn-selected-sni-server-supports-npn]
292 ssl_conf = 8-npn-selected-sni-server-supports-npn-ssl
293
294 [8-npn-selected-sni-server-supports-npn-ssl]
295 server = 8-npn-selected-sni-server-supports-npn-server
296 client = 8-npn-selected-sni-server-supports-npn-client
297 server2 = 8-npn-selected-sni-server-supports-npn-server2
298
299 [8-npn-selected-sni-server-supports-npn-server]
300 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
301 CipherString = DEFAULT
302 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
303
304 [8-npn-selected-sni-server-supports-npn-server2]
305 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
306 CipherString = DEFAULT
307 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
308
309 [8-npn-selected-sni-server-supports-npn-client]
310 CipherString = DEFAULT
311 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
312 VerifyMode = Peer
313
314 [test-8]
315 ExpectedNPNProtocol = bar
316 ExpectedServerName = server2
317 server = 8-npn-selected-sni-server-supports-npn-server-extra
318 server2 = 8-npn-selected-sni-server-supports-npn-server2-extra
319 client = 8-npn-selected-sni-server-supports-npn-client-extra
320
321 [8-npn-selected-sni-server-supports-npn-server-extra]
322 ServerNameCallback = IgnoreMismatch
323
324 [8-npn-selected-sni-server-supports-npn-server2-extra]
325 NPNProtocols = bar
326
327 [8-npn-selected-sni-server-supports-npn-client-extra]
328 NPNProtocols = foo,bar
329 ServerName = server2
330
331
332 # ===========================================================
333
334 [9-npn-selected-sni-server-does-not-support-npn]
335 ssl_conf = 9-npn-selected-sni-server-does-not-support-npn-ssl
336
337 [9-npn-selected-sni-server-does-not-support-npn-ssl]
338 server = 9-npn-selected-sni-server-does-not-support-npn-server
339 client = 9-npn-selected-sni-server-does-not-support-npn-client
340 server2 = 9-npn-selected-sni-server-does-not-support-npn-server2
341
342 [9-npn-selected-sni-server-does-not-support-npn-server]
343 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
344 CipherString = DEFAULT
345 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
346
347 [9-npn-selected-sni-server-does-not-support-npn-server2]
348 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
349 CipherString = DEFAULT
350 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
351
352 [9-npn-selected-sni-server-does-not-support-npn-client]
353 CipherString = DEFAULT
354 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
355 VerifyMode = Peer
356
357 [test-9]
358 ExpectedServerName = server2
359 server = 9-npn-selected-sni-server-does-not-support-npn-server-extra
360 client = 9-npn-selected-sni-server-does-not-support-npn-client-extra
361
362 [9-npn-selected-sni-server-does-not-support-npn-server-extra]
363 NPNProtocols = bar
364 ServerNameCallback = IgnoreMismatch
365
366 [9-npn-selected-sni-server-does-not-support-npn-client-extra]
367 NPNProtocols = foo,bar
368 ServerName = server2
369
370
371 # ===========================================================
372
373 [10-alpn-preferred-over-npn]
374 ssl_conf = 10-alpn-preferred-over-npn-ssl
375
376 [10-alpn-preferred-over-npn-ssl]
377 server = 10-alpn-preferred-over-npn-server
378 client = 10-alpn-preferred-over-npn-client
379
380 [10-alpn-preferred-over-npn-server]
381 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
382 CipherString = DEFAULT
383 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
384
385 [10-alpn-preferred-over-npn-client]
386 CipherString = DEFAULT
387 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
388 VerifyMode = Peer
389
390 [test-10]
391 ExpectedALPNProtocol = foo
392 server = 10-alpn-preferred-over-npn-server-extra
393 client = 10-alpn-preferred-over-npn-client-extra
394
395 [10-alpn-preferred-over-npn-server-extra]
396 ALPNProtocols = foo
397 NPNProtocols = bar
398
399 [10-alpn-preferred-over-npn-client-extra]
400 ALPNProtocols = foo
401 NPNProtocols = bar
402
403
404 # ===========================================================
405
406 [11-sni-npn-preferred-over-alpn]
407 ssl_conf = 11-sni-npn-preferred-over-alpn-ssl
408
409 [11-sni-npn-preferred-over-alpn-ssl]
410 server = 11-sni-npn-preferred-over-alpn-server
411 client = 11-sni-npn-preferred-over-alpn-client
412 server2 = 11-sni-npn-preferred-over-alpn-server2
413
414 [11-sni-npn-preferred-over-alpn-server]
415 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
416 CipherString = DEFAULT
417 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
418
419 [11-sni-npn-preferred-over-alpn-server2]
420 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
421 CipherString = DEFAULT
422 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
423
424 [11-sni-npn-preferred-over-alpn-client]
425 CipherString = DEFAULT
426 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
427 VerifyMode = Peer
428
429 [test-11]
430 ExpectedNPNProtocol = bar
431 ExpectedServerName = server2
432 server = 11-sni-npn-preferred-over-alpn-server-extra
433 server2 = 11-sni-npn-preferred-over-alpn-server2-extra
434 client = 11-sni-npn-preferred-over-alpn-client-extra
435
436 [11-sni-npn-preferred-over-alpn-server-extra]
437 ALPNProtocols = foo
438 ServerNameCallback = IgnoreMismatch
439
440 [11-sni-npn-preferred-over-alpn-server2-extra]
441 NPNProtocols = bar
442
443 [11-sni-npn-preferred-over-alpn-client-extra]
444 ALPNProtocols = foo
445 NPNProtocols = bar
446 ServerName = server2
447
448
449 # ===========================================================
450
451 [12-npn-simple-resumption]
452 ssl_conf = 12-npn-simple-resumption-ssl
453
454 [12-npn-simple-resumption-ssl]
455 server = 12-npn-simple-resumption-server
456 client = 12-npn-simple-resumption-client
457 resume-server = 12-npn-simple-resumption-server
458 resume-client = 12-npn-simple-resumption-client
459
460 [12-npn-simple-resumption-server]
461 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
462 CipherString = DEFAULT
463 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
464
465 [12-npn-simple-resumption-client]
466 CipherString = DEFAULT
467 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
468 VerifyMode = Peer
469
470 [test-12]
471 ExpectedNPNProtocol = foo
472 HandshakeMode = Resume
473 ResumptionExpected = Yes
474 server = 12-npn-simple-resumption-server-extra
475 resume-server = 12-npn-simple-resumption-server-extra
476 client = 12-npn-simple-resumption-client-extra
477 resume-client = 12-npn-simple-resumption-client-extra
478
479 [12-npn-simple-resumption-server-extra]
480 NPNProtocols = foo
481
482 [12-npn-simple-resumption-client-extra]
483 NPNProtocols = foo
484
485
486 # ===========================================================
487
488 [13-npn-server-switch-resumption]
489 ssl_conf = 13-npn-server-switch-resumption-ssl
490
491 [13-npn-server-switch-resumption-ssl]
492 server = 13-npn-server-switch-resumption-server
493 client = 13-npn-server-switch-resumption-client
494 resume-server = 13-npn-server-switch-resumption-resume-server
495 resume-client = 13-npn-server-switch-resumption-client
496
497 [13-npn-server-switch-resumption-server]
498 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
499 CipherString = DEFAULT
500 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
501
502 [13-npn-server-switch-resumption-resume-server]
503 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
504 CipherString = DEFAULT
505 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
506
507 [13-npn-server-switch-resumption-client]
508 CipherString = DEFAULT
509 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
510 VerifyMode = Peer
511
512 [test-13]
513 ExpectedNPNProtocol = baz
514 HandshakeMode = Resume
515 ResumptionExpected = Yes
516 server = 13-npn-server-switch-resumption-server-extra
517 resume-server = 13-npn-server-switch-resumption-resume-server-extra
518 client = 13-npn-server-switch-resumption-client-extra
519 resume-client = 13-npn-server-switch-resumption-client-extra
520
521 [13-npn-server-switch-resumption-server-extra]
522 NPNProtocols = bar,foo
523
524 [13-npn-server-switch-resumption-resume-server-extra]
525 NPNProtocols = baz,foo
526
527 [13-npn-server-switch-resumption-client-extra]
528 NPNProtocols = foo,bar,baz
529
530
531 # ===========================================================
532
533 [14-npn-client-switch-resumption]
534 ssl_conf = 14-npn-client-switch-resumption-ssl
535
536 [14-npn-client-switch-resumption-ssl]
537 server = 14-npn-client-switch-resumption-server
538 client = 14-npn-client-switch-resumption-client
539 resume-server = 14-npn-client-switch-resumption-server
540 resume-client = 14-npn-client-switch-resumption-resume-client
541
542 [14-npn-client-switch-resumption-server]
543 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
544 CipherString = DEFAULT
545 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
546
547 [14-npn-client-switch-resumption-client]
548 CipherString = DEFAULT
549 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
550 VerifyMode = Peer
551
552 [14-npn-client-switch-resumption-resume-client]
553 CipherString = DEFAULT
554 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
555 VerifyMode = Peer
556
557 [test-14]
558 ExpectedNPNProtocol = bar
559 HandshakeMode = Resume
560 ResumptionExpected = Yes
561 server = 14-npn-client-switch-resumption-server-extra
562 resume-server = 14-npn-client-switch-resumption-server-extra
563 client = 14-npn-client-switch-resumption-client-extra
564 resume-client = 14-npn-client-switch-resumption-resume-client-extra
565
566 [14-npn-client-switch-resumption-server-extra]
567 NPNProtocols = foo,bar,baz
568
569 [14-npn-client-switch-resumption-client-extra]
570 NPNProtocols = foo,baz
571
572 [14-npn-client-switch-resumption-resume-client-extra]
573 NPNProtocols = bar,baz
574
575
576 # ===========================================================
577
578 [15-npn-client-first-pref-on-mismatch-resumption]
579 ssl_conf = 15-npn-client-first-pref-on-mismatch-resumption-ssl
580
581 [15-npn-client-first-pref-on-mismatch-resumption-ssl]
582 server = 15-npn-client-first-pref-on-mismatch-resumption-server
583 client = 15-npn-client-first-pref-on-mismatch-resumption-client
584 resume-server = 15-npn-client-first-pref-on-mismatch-resumption-resume-server
585 resume-client = 15-npn-client-first-pref-on-mismatch-resumption-client
586
587 [15-npn-client-first-pref-on-mismatch-resumption-server]
588 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
589 CipherString = DEFAULT
590 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
591
592 [15-npn-client-first-pref-on-mismatch-resumption-resume-server]
593 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
594 CipherString = DEFAULT
595 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
596
597 [15-npn-client-first-pref-on-mismatch-resumption-client]
598 CipherString = DEFAULT
599 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
600 VerifyMode = Peer
601
602 [test-15]
603 ExpectedNPNProtocol = foo
604 HandshakeMode = Resume
605 ResumptionExpected = Yes
606 server = 15-npn-client-first-pref-on-mismatch-resumption-server-extra
607 resume-server = 15-npn-client-first-pref-on-mismatch-resumption-resume-server-extra
608 client = 15-npn-client-first-pref-on-mismatch-resumption-client-extra
609 resume-client = 15-npn-client-first-pref-on-mismatch-resumption-client-extra
610
611 [15-npn-client-first-pref-on-mismatch-resumption-server-extra]
612 NPNProtocols = bar
613
614 [15-npn-client-first-pref-on-mismatch-resumption-resume-server-extra]
615 NPNProtocols = baz
616
617 [15-npn-client-first-pref-on-mismatch-resumption-client-extra]
618 NPNProtocols = foo,bar
619
620
621 # ===========================================================
622
623 [16-npn-no-server-support-resumption]
624 ssl_conf = 16-npn-no-server-support-resumption-ssl
625
626 [16-npn-no-server-support-resumption-ssl]
627 server = 16-npn-no-server-support-resumption-server
628 client = 16-npn-no-server-support-resumption-client
629 resume-server = 16-npn-no-server-support-resumption-resume-server
630 resume-client = 16-npn-no-server-support-resumption-client
631
632 [16-npn-no-server-support-resumption-server]
633 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
634 CipherString = DEFAULT
635 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
636
637 [16-npn-no-server-support-resumption-resume-server]
638 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
639 CipherString = DEFAULT
640 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
641
642 [16-npn-no-server-support-resumption-client]
643 CipherString = DEFAULT
644 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
645 VerifyMode = Peer
646
647 [test-16]
648 HandshakeMode = Resume
649 ResumptionExpected = Yes
650 server = 16-npn-no-server-support-resumption-server-extra
651 client = 16-npn-no-server-support-resumption-client-extra
652 resume-client = 16-npn-no-server-support-resumption-client-extra
653
654 [16-npn-no-server-support-resumption-server-extra]
655 NPNProtocols = foo
656
657 [16-npn-no-server-support-resumption-client-extra]
658 NPNProtocols = foo
659
660
661 # ===========================================================
662
663 [17-npn-no-client-support-resumption]
664 ssl_conf = 17-npn-no-client-support-resumption-ssl
665
666 [17-npn-no-client-support-resumption-ssl]
667 server = 17-npn-no-client-support-resumption-server
668 client = 17-npn-no-client-support-resumption-client
669 resume-server = 17-npn-no-client-support-resumption-server
670 resume-client = 17-npn-no-client-support-resumption-resume-client
671
672 [17-npn-no-client-support-resumption-server]
673 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
674 CipherString = DEFAULT
675 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
676
677 [17-npn-no-client-support-resumption-client]
678 CipherString = DEFAULT
679 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
680 VerifyMode = Peer
681
682 [17-npn-no-client-support-resumption-resume-client]
683 CipherString = DEFAULT
684 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
685 VerifyMode = Peer
686
687 [test-17]
688 HandshakeMode = Resume
689 ResumptionExpected = Yes
690 server = 17-npn-no-client-support-resumption-server-extra
691 resume-server = 17-npn-no-client-support-resumption-server-extra
692 client = 17-npn-no-client-support-resumption-client-extra
693
694 [17-npn-no-client-support-resumption-server-extra]
695 NPNProtocols = foo
696
697 [17-npn-no-client-support-resumption-client-extra]
698 NPNProtocols = foo
699
700
701 # ===========================================================
702
703 [18-alpn-preferred-over-npn-resumption]
704 ssl_conf = 18-alpn-preferred-over-npn-resumption-ssl
705
706 [18-alpn-preferred-over-npn-resumption-ssl]
707 server = 18-alpn-preferred-over-npn-resumption-server
708 client = 18-alpn-preferred-over-npn-resumption-client
709 resume-server = 18-alpn-preferred-over-npn-resumption-resume-server
710 resume-client = 18-alpn-preferred-over-npn-resumption-client
711
712 [18-alpn-preferred-over-npn-resumption-server]
713 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
714 CipherString = DEFAULT
715 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
716
717 [18-alpn-preferred-over-npn-resumption-resume-server]
718 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
719 CipherString = DEFAULT
720 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
721
722 [18-alpn-preferred-over-npn-resumption-client]
723 CipherString = DEFAULT
724 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
725 VerifyMode = Peer
726
727 [test-18]
728 ExpectedALPNProtocol = foo
729 HandshakeMode = Resume
730 ResumptionExpected = Yes
731 server = 18-alpn-preferred-over-npn-resumption-server-extra
732 resume-server = 18-alpn-preferred-over-npn-resumption-resume-server-extra
733 client = 18-alpn-preferred-over-npn-resumption-client-extra
734 resume-client = 18-alpn-preferred-over-npn-resumption-client-extra
735
736 [18-alpn-preferred-over-npn-resumption-server-extra]
737 NPNProtocols = bar
738
739 [18-alpn-preferred-over-npn-resumption-resume-server-extra]
740 ALPNProtocols = foo
741 NPNProtocols = baz
742
743 [18-alpn-preferred-over-npn-resumption-client-extra]
744 ALPNProtocols = foo
745 NPNProtocols = bar,baz
746
747
748 # ===========================================================
749
750 [19-npn-used-if-alpn-not-supported-resumption]
751 ssl_conf = 19-npn-used-if-alpn-not-supported-resumption-ssl
752
753 [19-npn-used-if-alpn-not-supported-resumption-ssl]
754 server = 19-npn-used-if-alpn-not-supported-resumption-server
755 client = 19-npn-used-if-alpn-not-supported-resumption-client
756 resume-server = 19-npn-used-if-alpn-not-supported-resumption-resume-server
757 resume-client = 19-npn-used-if-alpn-not-supported-resumption-client
758
759 [19-npn-used-if-alpn-not-supported-resumption-server]
760 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
761 CipherString = DEFAULT
762 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
763
764 [19-npn-used-if-alpn-not-supported-resumption-resume-server]
765 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
766 CipherString = DEFAULT
767 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
768
769 [19-npn-used-if-alpn-not-supported-resumption-client]
770 CipherString = DEFAULT
771 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
772 VerifyMode = Peer
773
774 [test-19]
775 ExpectedNPNProtocol = baz
776 HandshakeMode = Resume
777 ResumptionExpected = Yes
778 server = 19-npn-used-if-alpn-not-supported-resumption-server-extra
779 resume-server = 19-npn-used-if-alpn-not-supported-resumption-resume-server-extra
780 client = 19-npn-used-if-alpn-not-supported-resumption-client-extra
781 resume-client = 19-npn-used-if-alpn-not-supported-resumption-client-extra
782
783 [19-npn-used-if-alpn-not-supported-resumption-server-extra]
784 ALPNProtocols = foo
785 NPNProtocols = bar
786
787 [19-npn-used-if-alpn-not-supported-resumption-resume-server-extra]
788 NPNProtocols = baz
789
790 [19-npn-used-if-alpn-not-supported-resumption-client-extra]
791 ALPNProtocols = foo
792 NPNProtocols = bar,baz
793
794