wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2025-07-31 19:24:42 +02:00
Code Issues Packages Projects Releases Wiki Activity

DHE Speed Up

Browse Source 
1. Modify all the test configuration files to disable the DHE prime test.
2. Add a test configuration that tests three cipher suites with the DHE prime test enabled.
This commit is contained in:
John Safranek
2018-12-03 15:15:30 -08:00
parent a55f11cdd8
commit fa0b4cd2d5
16 changed files with 1628 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

163
tests/test-dtls.conf
View File

File diff suppressed because it is too large Load Diff

8
tests/test-ed25519.conf
View File

@@ -3,12 +3,14 @@
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-c ./certs/ed25519/server-ed25519.pem -c ./certs/ed25519/server-ed25519.pem
-k ./certs/ed25519/server-ed25519-key.pem -k ./certs/ed25519/server-ed25519-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-A ./certs/ed25519/root-ed25519.pem -A ./certs/ed25519/root-ed25519.pem
-C -C
-2
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3 -v 3
@@ -18,6 +20,7 @@
-A ./certs/ed25519/client-ed25519.pem -A ./certs/ed25519/client-ed25519.pem
-V -V
# Remove -V when CRL for ED25519 certificates available. # Remove -V when CRL for ED25519 certificates available.
-2
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3 -v 3
@@ -26,18 +29,21 @@
-k ./certs/ed25519/client-ed25519-key.pem -k ./certs/ed25519/client-ed25519-key.pem
-A ./certs/ed25519/root-ed25519.pem -A ./certs/ed25519/root-ed25519.pem
-C -C
-2
# server TLSv1.3 TLS13-AES128-GCM-SHA256 # server TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-c ./certs/ed25519/server-ed25519.pem -c ./certs/ed25519/server-ed25519.pem
-k ./certs/ed25519/server-ed25519-key.pem -k ./certs/ed25519/server-ed25519-key.pem
-2
# client TLSv1.3 TLS13-AES128-GCM-SHA256 # client TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-A ./certs/ed25519/root-ed25519.pem -A ./certs/ed25519/root-ed25519.pem
-C -C
-2
# Enable when CRL for ED25519 certificates available. # Enable when CRL for ED25519 certificates available.
# server TLSv1.3 TLS13-AES128-GCM-SHA256 # server TLSv1.3 TLS13-AES128-GCM-SHA256
@@ -48,6 +54,7 @@
-A ./certs/ed25519/client-ed25519.pem -A ./certs/ed25519/client-ed25519.pem
-V -V
# Remove -V when CRL for ED25519 certificates available. # Remove -V when CRL for ED25519 certificates available.
-2
# client TLSv1.3 TLS13-AES128-GCM-SHA256 # client TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
@@ -56,4 +63,5 @@
-k ./certs/ed25519/client-ed25519-key.pem -k ./certs/ed25519/client-ed25519-key.pem
-A ./certs/ed25519/root-ed25519.pem -A ./certs/ed25519/root-ed25519.pem
-C -C
-2

9
tests/test-enckeys.conf
View File

@@ -1,40 +1,49 @@
# server RSA encrypted key # server RSA encrypted key
-v 3 -v 3
-k ./certs/server-keyEnc.pem -k ./certs/server-keyEnc.pem
-2
# client RSA encrypted key # client RSA encrypted key
-v 3 -v 3
-k ./certs/client-keyEnc.pem -k ./certs/client-keyEnc.pem
-2
# server RSA encrypted key PKCS8 # server RSA encrypted key PKCS8
-v 3 -v 3
-k ./certs/server-keyPkcs8Enc.pem -k ./certs/server-keyPkcs8Enc.pem
-2
# client RSA encrypted key # client RSA encrypted key
-v 3 -v 3
-k ./certs/client-keyEnc.pem -k ./certs/client-keyEnc.pem
-2
# server RSA encrypted key PKCS8 2 # server RSA encrypted key PKCS8 2
-v 3 -v 3
-k ./certs/server-keyPkcs8Enc2.pem -k ./certs/server-keyPkcs8Enc2.pem
-2
# client RSA encrypted key # client RSA encrypted key
-v 3 -v 3
-k ./certs/client-keyEnc.pem -k ./certs/client-keyEnc.pem
-2
# server RSA encrypted key PKCS8 12 # server RSA encrypted key PKCS8 12
-v 3 -v 3
-k ./certs/server-keyPkcs8Enc12.pem -k ./certs/server-keyPkcs8Enc12.pem
-2
# client RSA encrypted key # client RSA encrypted key
-v 3 -v 3
-k ./certs/client-keyEnc.pem -k ./certs/client-keyEnc.pem
-2
# server TLSv1.2 ECDHE-ECDSA-AES128-SHA256 PKCS8 encrypted key # server TLSv1.2 ECDHE-ECDSA-AES128-SHA256 PKCS8 encrypted key
-v 3 -v 3
-l ECDHE-ECDSA-AES128-SHA256 -l ECDHE-ECDSA-AES128-SHA256
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-keyPkcs8Enc.pem -k ./certs/ecc-keyPkcs8Enc.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES128-SHA256 # client TLSv1.2 ECDHE-ECDSA-AES128-SHA256
-v 3 -v 3

29
tests/test-fails.conf
View File

@@ -5,6 +5,7 @@
-k ./certs/server-key.pem -k ./certs/server-key.pem
-c ./certs/test/server-badcnnull.pem -c ./certs/test/server-badcnnull.pem
-d -d
-2
# client bad certificate common name has null # client bad certificate common name has null
-v 3 -v 3
@@ -13,6 +14,7 @@
-A ./certs/test/server-badcnnull.pem -A ./certs/test/server-badcnnull.pem
-m -m
-x -x
-2
# server bad certificate alternate name has null # server bad certificate alternate name has null
-v 3 -v 3
@@ -20,6 +22,7 @@
-k ./certs/server-key.pem -k ./certs/server-key.pem
-c ./certs/test/server-badaltnull.pem -c ./certs/test/server-badaltnull.pem
-d -d
-2
# client bad certificate alternate name has null # client bad certificate alternate name has null
-v 3 -v 3
@@ -28,6 +31,7 @@
-A ./certs/test/server-badaltnull.pem -A ./certs/test/server-badaltnull.pem
-m -m
-x -x
-2
# server nomatch common name # server nomatch common name
-v 3 -v 3
@@ -35,6 +39,7 @@
-k ./certs/server-key.pem -k ./certs/server-key.pem
-c ./certs/test/server-badcn.pem -c ./certs/test/server-badcn.pem
-d -d
-2
# client nomatch common name # client nomatch common name
-v 3 -v 3
@@ -43,6 +48,7 @@
-A ./certs/test/server-badcn.pem -A ./certs/test/server-badcn.pem
-m -m
-x -x
-2
# server nomatch alternate name # server nomatch alternate name
-v 3 -v 3
@@ -50,6 +56,7 @@
-k ./certs/server-key.pem -k ./certs/server-key.pem
-c ./certs/test/server-badaltname.pem -c ./certs/test/server-badaltname.pem
-d -d
-2
# client nomatch alternate name # client nomatch alternate name
-v 3 -v 3
@@ -58,47 +65,57 @@
-A ./certs/test/server-badaltname.pem -A ./certs/test/server-badaltname.pem
-m -m
-x -x
-2
# server RSA no signer error # server RSA no signer error
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-2
# client RSA no signer error # client RSA no signer error
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-A ./certs/client-cert.pem -A ./certs/client-cert.pem
-2
# server ECC no signer error # server ECC no signer error
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-2
# client ECC no signer error # client ECC no signer error
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-A ./certs/client-ecc-cert.pem -A ./certs/client-ecc-cert.pem
-2
# server RSA bad sig error # server RSA bad sig error
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-c ./certs/test/server-cert-rsa-badsig.pem -c ./certs/test/server-cert-rsa-badsig.pem
-2
# client RSA bad sig error # client RSA bad sig error
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-2
# server ECC bad sig error # server ECC bad sig error
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-c ./certs/test/server-cert-ecc-badsig.pem -c ./certs/test/server-cert-ecc-badsig.pem
-2
# client ECC bad sig error # client ECC bad sig error
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-2
# server missing CN from alternate names list # server missing CN from alternate names list
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-c ./certs/test/server-garbage.pem -c ./certs/test/server-garbage.pem
-2
# client missing CN from alternate names list # client missing CN from alternate names list
-v 3 -v 3
@@ -106,44 +123,53 @@
-h localhost -h localhost
-A ./certs/test/server-garbage.pem -A ./certs/test/server-garbage.pem
-m -m
-2
# Verify Callback Failure Tests # Verify Callback Failure Tests
# no error going into callback, return error # no error going into callback, return error
# server # server
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-2
# client verify should fail # client verify should fail
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-H verifyFail -H verifyFail
-2
# server verify should fail # server verify should fail
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-H verifyFail -H verifyFail
-2
# client # client
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-2
# server # server
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-2
# client verify should fail # client verify should fail
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-H verifyFail -H verifyFail
-2
# server verify should fail # server verify should fail
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-H verifyFail -H verifyFail
-2
# client # client
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-2
# error going into callback, return error # error going into callback, return error
# server # server
@@ -151,17 +177,20 @@
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-c ./certs/test/server-cert-rsa-badsig.pem -c ./certs/test/server-cert-rsa-badsig.pem
-k ./certs/server-key.pem -k ./certs/server-key.pem
-2
# client verify should fail # client verify should fail
-v 3 -v 3
-l ECDHE-RSA-AES128-GCM-SHA256 -l ECDHE-RSA-AES128-GCM-SHA256
-H verifyFail -H verifyFail
-2
# server # server
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-c ./certs/test/server-cert-ecc-badsig.pem -c ./certs/test/server-cert-ecc-badsig.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client verify should fail # client verify should fail
-v 3 -v 3

35
tests/test-maxfrag-dtls.conf
View File

@@ -4,6 +4,7 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -11,28 +12,33 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 1 -F 1
-2
# server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 1 -F 1
-2
# server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 1 -F 1
-2
# server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -40,6 +46,7 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -47,28 +54,33 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 2 -F 2
-2
# server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 2 -F 2
-2
# server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 2 -F 2
-2
# server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -76,6 +88,7 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -83,28 +96,33 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 3 -F 3
-2
# server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 3 -F 3
-2
# server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 3 -F 3
-2
# server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -112,6 +130,7 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -119,28 +138,33 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 4 -F 4
-2
# server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 4 -F 4
-2
# server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 4 -F 4
-2
# server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -148,6 +172,7 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -155,28 +180,33 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 5 -F 5
-2
# server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 5 -F 5
-2
# server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 5 -F 5
-2
# server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -184,6 +214,7 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-u -u
@@ -191,22 +222,26 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 6 -F 6
-2
# server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 6 -F 6
-2
# server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client DTLSv1.2 DHE-RSA-AES256-GCM-SHA384
-u -u

35
tests/test-maxfrag.conf
View File

@@ -3,175 +3,210 @@
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 1 -F 1
-2
# server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 1 -F 1
-2
# server TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 1 -F 1
-2
# server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 2 -F 2
-2
# server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 2 -F 2
-2
# server TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 2 -F 2
-2
# server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 3 -F 3
-2
# server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 3 -F 3
-2
# server TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 3 -F 3
-2
# server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 4 -F 4
-2
# server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 4 -F 4
-2
# server TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 4 -F 4
-2
# server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 5 -F 5
-2
# server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 5 -F 5
-2
# server TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-F 5 -F 5
-2
# server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-F 6 -F 6
-2
# server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-RSA-AES256-GCM-SHA384 -l ECDHE-RSA-AES256-GCM-SHA384
-F 6 -F 6
-2
# server TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # server TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3
-l DHE-RSA-AES256-GCM-SHA384 -l DHE-RSA-AES256-GCM-SHA384
-2
# client TLSv1.2 DHE-RSA-AES256-GCM-SHA384 # client TLSv1.2 DHE-RSA-AES256-GCM-SHA384
-v 3 -v 3

53
tests/test-psk-no-id.conf
View File

@@ -3,263 +3,311 @@
-I -I
-v 3 -v 3
-l PSK-CHACHA20-POLY1305 -l PSK-CHACHA20-POLY1305
-2
# No Hint client TLSv1.2 PSK-CHACHA20-POLY1305 # No Hint client TLSv1.2 PSK-CHACHA20-POLY1305
-s -s
-v 3 -v 3
-l PSK-CHACHA20-POLY1305 -l PSK-CHACHA20-POLY1305
-2
# No Hint server TLSv1.2 DHE-PSK-CHACHA20-POLY1305 # No Hint server TLSv1.2 DHE-PSK-CHACHA20-POLY1305
-s -s
-I -I
-v 3 -v 3
-l DHE-PSK-CHACHA20-POLY1305 -l DHE-PSK-CHACHA20-POLY1305
-2
# No Hint client TLSv1.2 DHE-PSK-CHACHA20-POLY1305 # No Hint client TLSv1.2 DHE-PSK-CHACHA20-POLY1305
-s -s
-v 3 -v 3
-l DHE-PSK-CHACHA20-POLY1305 -l DHE-PSK-CHACHA20-POLY1305
-2
# No Hint server TLSv1.2 ECDHE-PSK-CHACHA20-POLY1305 # No Hint server TLSv1.2 ECDHE-PSK-CHACHA20-POLY1305
-s -s
-I -I
-v 3 -v 3
-l ECDHE-PSK-CHACHA20-POLY1305 -l ECDHE-PSK-CHACHA20-POLY1305
-2
# No Hint client TLSv1.2 ECDHE-PSK-CHACHA20-POLY1305 # No Hint client TLSv1.2 ECDHE-PSK-CHACHA20-POLY1305
-s -s
-v 3 -v 3
-l ECDHE-PSK-CHACHA20-POLY1305 -l ECDHE-PSK-CHACHA20-POLY1305
-2
# No Hint server TLSv1 ECDHE-PSK-AES128-SHA256 # No Hint server TLSv1 ECDHE-PSK-AES128-SHA256
-s -s
-I -I
-v 1 -v 1
-l ECDHE-PSK-AES128-SHA256 -l ECDHE-PSK-AES128-SHA256
-2
# No Hint client TLSv1 ECDHE-PSK-AES128-SHA256 # No Hint client TLSv1 ECDHE-PSK-AES128-SHA256
-s -s
-v 1 -v 1
-l ECDHE-PSK-AES128-SHA256 -l ECDHE-PSK-AES128-SHA256
-2
# No Hint server TLSv1.1 ECDHE-PSK-AES128-SHA256 # No Hint server TLSv1.1 ECDHE-PSK-AES128-SHA256
-s -s
-I -I
-v 2 -v 2
-l ECDHE-PSK-AES128-SHA256 -l ECDHE-PSK-AES128-SHA256
-2
# No Hint client TLSv1.1 ECDHE-PSK-AES128-SHA256 # No Hint client TLSv1.1 ECDHE-PSK-AES128-SHA256
-s -s
-v 2 -v 2
-l ECDHE-PSK-AES128-SHA256 -l ECDHE-PSK-AES128-SHA256
-2
# No Hint server TLSv1.2 ECDHE-PSK-AES128-SHA256 # No Hint server TLSv1.2 ECDHE-PSK-AES128-SHA256
-s -s
-I -I
-v 3 -v 3
-l ECDHE-PSK-AES128-SHA256 -l ECDHE-PSK-AES128-SHA256
-2
# No Hint client TLSv1.2 ECDHE-PSK-AES128-SHA256 # No Hint client TLSv1.2 ECDHE-PSK-AES128-SHA256
-s -s
-v 3 -v 3
-l ECDHE-PSK-AES128-SHA256 -l ECDHE-PSK-AES128-SHA256
-2
# No Hint server TLSv1 ECDHE-PSK-NULL-SHA256 # No Hint server TLSv1 ECDHE-PSK-NULL-SHA256
-s -s
-I -I
-v 1 -v 1
-l ECDHE-PSK-NULL-SHA256 -l ECDHE-PSK-NULL-SHA256
-2
# No Hint client TLSv1 ECDHE-PSK-NULL-SHA256 # No Hint client TLSv1 ECDHE-PSK-NULL-SHA256
-s -s
-v 1 -v 1
-l ECDHE-PSK-NULL-SHA256 -l ECDHE-PSK-NULL-SHA256
-2
# No Hint server TLSv1.1 ECDHE-PSK-NULL-SHA256 # No Hint server TLSv1.1 ECDHE-PSK-NULL-SHA256
-s -s
-I -I
-v 2 -v 2
-l ECDHE-PSK-NULL-SHA256 -l ECDHE-PSK-NULL-SHA256
-2
# No Hint client TLSv1.1 ECDHE-PSK-NULL-SHA256 # No Hint client TLSv1.1 ECDHE-PSK-NULL-SHA256
-s -s
-v 2 -v 2
-l ECDHE-PSK-NULL-SHA256 -l ECDHE-PSK-NULL-SHA256
-2
# No Hint server TLSv1.2 ECDHE-PSK-NULL-SHA256 # No Hint server TLSv1.2 ECDHE-PSK-NULL-SHA256
-s -s
-I -I
-v 3 -v 3
-l ECDHE-PSK-NULL-SHA256 -l ECDHE-PSK-NULL-SHA256
-2
# No Hint client TLSv1.2 ECDHE-PSK-NULL-SHA256 # No Hint client TLSv1.2 ECDHE-PSK-NULL-SHA256
-s -s
-v 3 -v 3
-l ECDHE-PSK-NULL-SHA256 -l ECDHE-PSK-NULL-SHA256
-2
# No Hint server TLSv1 PSK-AES128 # No Hint server TLSv1 PSK-AES128
-s -s
-I -I
-v 1 -v 1
-l PSK-AES128-CBC-SHA -l PSK-AES128-CBC-SHA
-2
# No Hint client TLSv1 PSK-AES128 # No Hint client TLSv1 PSK-AES128
-s -s
-v 1 -v 1
-l PSK-AES128-CBC-SHA -l PSK-AES128-CBC-SHA
-2
# No Hint server TLSv1 PSK-AES256 # No Hint server TLSv1 PSK-AES256
-s -s
-I -I
-v 1 -v 1
-l PSK-AES256-CBC-SHA -l PSK-AES256-CBC-SHA
-2
# No Hint client TLSv1 PSK-AES256 # No Hint client TLSv1 PSK-AES256
-s -s
-v 1 -v 1
-l PSK-AES256-CBC-SHA -l PSK-AES256-CBC-SHA
-2
# No Hint server TLSv1.1 PSK-AES128 # No Hint server TLSv1.1 PSK-AES128
-s -s
-I -I
-v 2 -v 2
-l PSK-AES128-CBC-SHA -l PSK-AES128-CBC-SHA
-2
# No Hint client TLSv1.1 PSK-AES128 # No Hint client TLSv1.1 PSK-AES128
-s -s
-v 2 -v 2
-l PSK-AES128-CBC-SHA -l PSK-AES128-CBC-SHA
-2
# No Hint server TLSv1.1 PSK-AES256 # No Hint server TLSv1.1 PSK-AES256
-s -s
-I -I
-v 2 -v 2
-l PSK-AES256-CBC-SHA -l PSK-AES256-CBC-SHA
-2
# No Hint client TLSv1.1 PSK-AES256 # No Hint client TLSv1.1 PSK-AES256
-s -s
-v 2 -v 2
-l PSK-AES256-CBC-SHA -l PSK-AES256-CBC-SHA
-2
# No Hint server TLSv1.2 PSK-AES128 # No Hint server TLSv1.2 PSK-AES128
-s -s
-I -I
-v 3 -v 3
-l PSK-AES128-CBC-SHA -l PSK-AES128-CBC-SHA
-2
# No Hint client TLSv1.2 PSK-AES128 # No Hint client TLSv1.2 PSK-AES128
-s -s
-v 3 -v 3
-l PSK-AES128-CBC-SHA -l PSK-AES128-CBC-SHA
-2
# No Hint server TLSv1.2 PSK-AES256 # No Hint server TLSv1.2 PSK-AES256
-s -s
-I -I
-v 3 -v 3
-l PSK-AES256-CBC-SHA -l PSK-AES256-CBC-SHA
-2
# No Hint client TLSv1.2 PSK-AES256 # No Hint client TLSv1.2 PSK-AES256
-s -s
-v 3 -v 3
-l PSK-AES256-CBC-SHA -l PSK-AES256-CBC-SHA
-2
# No Hint server TLSv1.0 PSK-AES128-SHA256 # No Hint server TLSv1.0 PSK-AES128-SHA256
-s -s
-I -I
-v 1 -v 1
-l PSK-AES128-CBC-SHA256 -l PSK-AES128-CBC-SHA256
-2
# No Hint client TLSv1.0 PSK-AES128-SHA256 # No Hint client TLSv1.0 PSK-AES128-SHA256
-s -s
-v 1 -v 1
-l PSK-AES128-CBC-SHA256 -l PSK-AES128-CBC-SHA256
-2
# No Hint server TLSv1.1 PSK-AES128-SHA256 # No Hint server TLSv1.1 PSK-AES128-SHA256
-s -s
-I -I
-v 2 -v 2
-l PSK-AES128-CBC-SHA256 -l PSK-AES128-CBC-SHA256
-2
# No Hint client TLSv1.1 PSK-AES128-SHA256 # No Hint client TLSv1.1 PSK-AES128-SHA256
-s -s
-v 2 -v 2
-l PSK-AES128-CBC-SHA256 -l PSK-AES128-CBC-SHA256
-2
# No Hint server TLSv1.2 PSK-AES128-SHA256 # No Hint server TLSv1.2 PSK-AES128-SHA256
-s -s
-I -I
-v 3 -v 3
-l PSK-AES128-CBC-SHA256 -l PSK-AES128-CBC-SHA256
-2
# No Hint client TLSv1.2 PSK-AES128-SHA256 # No Hint client TLSv1.2 PSK-AES128-SHA256
-s -s
-v 3 -v 3
-l PSK-AES128-CBC-SHA256 -l PSK-AES128-CBC-SHA256
-2
# No Hint server TLSv1.0 PSK-AES256-SHA384 # No Hint server TLSv1.0 PSK-AES256-SHA384
-s -s
-I -I
-v 1 -v 1
-l PSK-AES256-CBC-SHA384 -l PSK-AES256-CBC-SHA384
-2
# No Hint client TLSv1.0 PSK-AES256-SHA384 # No Hint client TLSv1.0 PSK-AES256-SHA384
-s -s
-v 1 -v 1
-l PSK-AES256-CBC-SHA384 -l PSK-AES256-CBC-SHA384
-2
# No Hint server TLSv1.1 PSK-AES256-SHA384 # No Hint server TLSv1.1 PSK-AES256-SHA384
-s -s
-I -I
-v 2 -v 2
-l PSK-AES256-CBC-SHA384 -l PSK-AES256-CBC-SHA384
-2
# No Hint client TLSv1.1 PSK-AES256-SHA384 # No Hint client TLSv1.1 PSK-AES256-SHA384
-s -s
-v 2 -v 2
-l PSK-AES256-CBC-SHA384 -l PSK-AES256-CBC-SHA384
-2
# No Hint server TLSv1.2 PSK-AES256-SHA384 # No Hint server TLSv1.2 PSK-AES256-SHA384
-s -s
-I -I
-v 3 -v 3
-l PSK-AES256-CBC-SHA384 -l PSK-AES256-CBC-SHA384
-2
# No Hint client TLSv1.2 PSK-AES256-SHA384 # No Hint client TLSv1.2 PSK-AES256-SHA384
-s -s
-v 3 -v 3
-l PSK-AES256-CBC-SHA384 -l PSK-AES256-CBC-SHA384
-2
# server TLSv1.2 PSK-AES128-GCM-SHA256 # server TLSv1.2 PSK-AES128-GCM-SHA256
-s -s
-I -I
-v 3 -v 3
-l PSK-AES128-GCM-SHA256 -l PSK-AES128-GCM-SHA256
-2
# client TLSv1.2 PSK-AES128-GCM-SHA256 # client TLSv1.2 PSK-AES128-GCM-SHA256
-s -s
-v 3 -v 3
-l PSK-AES128-GCM-SHA256 -l PSK-AES128-GCM-SHA256
-2
# server TLSv1.2 PSK-AES256-GCM-SHA384 # server TLSv1.2 PSK-AES256-GCM-SHA384
-s -s
-I -I
-v 3 -v 3
-l PSK-AES256-GCM-SHA384 -l PSK-AES256-GCM-SHA384
-2
# client TLSv1.2 PSK-AES256-GCM-SHA384 # client TLSv1.2 PSK-AES256-GCM-SHA384
-s -s
-v 3 -v 3
-l PSK-AES256-GCM-SHA384 -l PSK-AES256-GCM-SHA384
-2
# server TLSv1.3 AES128-GCM-SHA256 # server TLSv1.3 AES128-GCM-SHA256
-s -s
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# client TLSv1.3 AES128-GCM-SHA256 # client TLSv1.3 AES128-GCM-SHA256
-s -s
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# server TLSv1.3 accepting EarlyData using PSK # server TLSv1.3 accepting EarlyData using PSK
-v 4 -v 4
@@ -267,6 +315,7 @@
-r -r
-s -s
-0 -0
-2
# client TLSv1.3 sending EarlyData using PSK # client TLSv1.3 sending EarlyData using PSK
-v 4 -v 4
@@ -274,12 +323,14 @@
-r -r
-s -s
-0 -0
-2
# server TLSv1.3 not accepting EarlyData using PSK # server TLSv1.3 not accepting EarlyData using PSK
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-s -s
-2
# client TLSv1.3 sending EarlyData using PSK # client TLSv1.3 sending EarlyData using PSK
-v 4 -v 4
@@ -287,6 +338,7 @@
-r -r
-s -s
-0 -0
-2
# server TLSv1.3 accepting EarlyData using PSK # server TLSv1.3 accepting EarlyData using PSK
-v 4 -v 4
@@ -294,6 +346,7 @@
-r -r
-s -s
-0 -0
-2
# client TLSv1.3 not sending EarlyData using PSK # client TLSv1.3 not sending EarlyData using PSK
-v 4 -v 4

1
tests/test-psk.conf
View File

@@ -1,6 +1,7 @@
# server - PSK plus certificates # server - PSK plus certificates
-j -j
-l PSK-CHACHA20-POLY1305 -l PSK-CHACHA20-POLY1305
-2
# client- standard PSK # client- standard PSK
-s -s

465
tests/test-qsh.conf
View File

File diff suppressed because it is too large Load Diff

189
tests/test-sctp.conf
View File

File diff suppressed because it is too large Load Diff

39
tests/test-sig.conf
View File

@@ -3,215 +3,254 @@
-l ECDHE-ECDSA-DES-CBC3-SHA -l ECDHE-ECDSA-DES-CBC3-SHA
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1 ECDHE-ECDSA-DES3 # client TLSv1 ECDHE-ECDSA-DES3
-v 1 -v 1
-l ECDHE-ECDSA-DES-CBC3-SHA -l ECDHE-ECDSA-DES-CBC3-SHA
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1 ECDHE-ECDSA-AES128 # server TLSv1 ECDHE-ECDSA-AES128
-v 1 -v 1
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1 ECDHE-ECDSA-AES128 # client TLSv1 ECDHE-ECDSA-AES128
-v 1 -v 1
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-2
# server TLSv1 ECDHE-ECDSA-AES128 # server TLSv1 ECDHE-ECDSA-AES128
-v 1 -v 1
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1 ECDHE-ECDSA-AES128 # client TLSv1 ECDHE-ECDSA-AES128
-v 1 -v 1
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1 ECDHE-ECDSA-AES256 # server TLSv1 ECDHE-ECDSA-AES256
-v 1 -v 1
-l ECDHE-ECDSA-AES256-SHA -l ECDHE-ECDSA-AES256-SHA
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1 ECDHE-ECDSA-AES256 # client TLSv1 ECDHE-ECDSA-AES256
-v 1 -v 1
-l ECDHE-ECDSA-AES256-SHA -l ECDHE-ECDSA-AES256-SHA
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.1 ECDHE-ECDSA-DES3 # server TLSv1.1 ECDHE-ECDSA-DES3
-v 2 -v 2
-l ECDHE-ECDSA-DES-CBC3-SHA -l ECDHE-ECDSA-DES-CBC3-SHA
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.1 ECDHE-ECDSA-DES3 # client TLSv1.1 ECDHE-ECDSA-DES3
-v 2 -v 2
-l ECDHE-ECDSA-DES-CBC3-SHA -l ECDHE-ECDSA-DES-CBC3-SHA
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.1 ECDHE-ECDSA-AES128 # server TLSv1.1 ECDHE-ECDSA-AES128
-v 2 -v 2
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.1 ECDHE-ECDSA-AES128 # client TLSv1.1 ECDHE-ECDSA-AES128
-v 2 -v 2
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-2
# server TLSv1.1 ECDHE-ECDSA-AES128 # server TLSv1.1 ECDHE-ECDSA-AES128
-v 2 -v 2
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.1 ECDHE-ECDSA-AES128 # client TLSv1.1 ECDHE-ECDSA-AES128
-v 2 -v 2
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.1 ECDHE-ECDSA-AES256 # server TLSv1.1 ECDHE-ECDSA-AES256
-v 2 -v 2
-l ECDHE-ECDSA-AES256-SHA -l ECDHE-ECDSA-AES256-SHA
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.1 ECDHE-ECDSA-AES256 # client TLSv1.1 ECDHE-ECDSA-AES256
-v 2 -v 2
-l ECDHE-ECDSA-AES256-SHA -l ECDHE-ECDSA-AES256-SHA
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDHE-ECDSA-DES3 # server TLSv1.2 ECDHE-ECDSA-DES3
-v 3 -v 3
-l ECDHE-ECDSA-DES-CBC3-SHA -l ECDHE-ECDSA-DES-CBC3-SHA
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-DES3 # client TLSv1.2 ECDHE-ECDSA-DES3
-v 3 -v 3
-l ECDHE-ECDSA-DES-CBC3-SHA -l ECDHE-ECDSA-DES-CBC3-SHA
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDHE-ECDSA-AES128 # server TLSv1.2 ECDHE-ECDSA-AES128
-v 3 -v 3
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES128 # client TLSv1.2 ECDHE-ECDSA-AES128
-v 3 -v 3
-l ECDHE-ECDSA-AES128-SHA -l ECDHE-ECDSA-AES128-SHA
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-2
# server TLSv1.2 ECDHE-ECDSA-AES128-SHA256 # server TLSv1.2 ECDHE-ECDSA-AES128-SHA256
-v 3 -v 3
-l ECDHE-ECDSA-AES128-SHA256 -l ECDHE-ECDSA-AES128-SHA256
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES128-SHA256 # client TLSv1.2 ECDHE-ECDSA-AES128-SHA256
-v 3 -v 3
-l ECDHE-ECDSA-AES128-SHA256 -l ECDHE-ECDSA-AES128-SHA256
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDHE-ECDSA-AES256 # server TLSv1.2 ECDHE-ECDSA-AES256
-v 3 -v 3
-l ECDHE-ECDSA-AES256-SHA -l ECDHE-ECDSA-AES256-SHA
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES256 # client TLSv1.2 ECDHE-ECDSA-AES256
-v 3 -v 3
-l ECDHE-ECDSA-AES256-SHA -l ECDHE-ECDSA-AES256-SHA
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDHE-EDCSA-CHACHA20-POLY1305 # server TLSv1.2 ECDHE-EDCSA-CHACHA20-POLY1305
-v 3 -v 3
-l ECDHE-ECDSA-CHACHA20-POLY1305 -l ECDHE-ECDSA-CHACHA20-POLY1305
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305 # client TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
-v 3 -v 3
-l ECDHE-ECDSA-CHACHA20-POLY1305 -l ECDHE-ECDSA-CHACHA20-POLY1305
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDH-ECDSA-AES128-SHA256 # server TLSv1.2 ECDH-ECDSA-AES128-SHA256
-v 3 -v 3
-l ECDH-ECDSA-AES128-SHA256 -l ECDH-ECDSA-AES128-SHA256
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDH-ECDSA-AES128-SHA256 # client TLSv1.2 ECDH-ECDSA-AES128-SHA256
-v 3 -v 3
-l ECDH-ECDSA-AES128-SHA256 -l ECDH-ECDSA-AES128-SHA256
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDH-ECDSA-AES256 # server TLSv1.2 ECDH-ECDSA-AES256
-v 3 -v 3
-l ECDH-ECDSA-AES256-SHA -l ECDH-ECDSA-AES256-SHA
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDH-ECDSA-AES256 # client TLSv1.2 ECDH-ECDSA-AES256
-v 3 -v 3
-l ECDH-ECDSA-AES256-SHA -l ECDH-ECDSA-AES256-SHA
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-privkey.pem -k ./certs/ecc-privkey.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3 -v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256 -l ECDHE-ECDSA-AES128-GCM-SHA256
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384 # client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3 -v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384 -l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDHE-ECDSA-AES128-CCM # server TLSv1.2 ECDHE-ECDSA-AES128-CCM
-v 3 -v 3
-l ECDHE-ECDSA-AES128-CCM -l ECDHE-ECDSA-AES128-CCM
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES128-CCM # client TLSv1.2 ECDHE-ECDSA-AES128-CCM
-v 3 -v 3
-l ECDHE-ECDSA-AES128-CCM -l ECDHE-ECDSA-AES128-CCM
-A ./certs/ca-cert.pem -A ./certs/ca-cert.pem
-2
# server TLSv1.2 ECDHE-ECDSA-AES128-CCM-8 # server TLSv1.2 ECDHE-ECDSA-AES128-CCM-8
-v 3 -v 3
-l ECDHE-ECDSA-AES128-CCM-8 -l ECDHE-ECDSA-AES128-CCM-8
-c ./certs/server-ecc-rsa.pem -c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.2 ECDHE-ECDSA-AES128-CCM-8 # client TLSv1.2 ECDHE-ECDSA-AES128-CCM-8
-v 3 -v 3

12
tests/test-tls13-down.conf
View File

@@ -2,43 +2,55 @@
# server TLSv1.3 downgrade # server TLSv1.3 downgrade
#-v d #-v d
#-l TLS13-CHACHA20-POLY1305-SHA256 #-l TLS13-CHACHA20-POLY1305-SHA256
-2
# client TLSv1.2 # client TLSv1.2
#-v 3 #-v 3
-2
# server TLSv1.2 # server TLSv1.2
-v 3 -v 3
-2
# client TLSv1.3 downgrade # client TLSv1.3 downgrade
-v d -v d
-2
# server TLSv1.3 downgrade # server TLSv1.3 downgrade
-v d -v d
-2
# client TLSv1.3 downgrade # client TLSv1.3 downgrade
-v d -v d
-2
# server TLSv1.3 downgrade but don't and resume # server TLSv1.3 downgrade but don't and resume
-v d -v d
-r -r
-2
# client TLSv1.3 downgrade but don't and resume # client TLSv1.3 downgrade but don't and resume
-v d -v d
-r -r
-2
# server TLSv1.3 downgrade and resume # server TLSv1.3 downgrade and resume
-v d -v d
-r -r
-2
# client TLSv1.2 and resume # client TLSv1.2 and resume
-v 3 -v 3
-r -r
-2
# server TLSv1.2 and resume # server TLSv1.2 and resume
-v d -v d
-r -r
-2
# lcient TLSv1.3 downgrade and resume # lcient TLSv1.3 downgrade and resume
-v 3 -v 3
-r -r
-2

13
tests/test-tls13-ecc.conf
View File

@@ -3,55 +3,65 @@
-l TLS13-CHACHA20-POLY1305-SHA256 -l TLS13-CHACHA20-POLY1305-SHA256
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.3 TLS13-CHACHA20-POLY1305-SHA256 # client TLSv1.3 TLS13-CHACHA20-POLY1305-SHA256
-v 4 -v 4
-l TLS13-CHACHA20-POLY1305-SHA256 -l TLS13-CHACHA20-POLY1305-SHA256
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-2
# server TLSv1.3 TLS13-AES128-GCM-SHA256 # server TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.3 TLS13-AES128-GCM-SHA256 # client TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-2
# server TLSv1.3 TLS13-AES256-GCM-SHA384 # server TLSv1.3 TLS13-AES256-GCM-SHA384
-v 4 -v 4
-l TLS13-AES256-GCM-SHA384 -l TLS13-AES256-GCM-SHA384
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.3 TLS13-AES256-GCM-SHA384 # client TLSv1.3 TLS13-AES256-GCM-SHA384
-v 4 -v 4
-l TLS13-AES256-GCM-SHA384 -l TLS13-AES256-GCM-SHA384
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-2
# server TLSv1.3 TLS13-AES128-CCM-SHA256 # server TLSv1.3 TLS13-AES128-CCM-SHA256
-v 4 -v 4
-l TLS13-AES128-CCM-SHA256 -l TLS13-AES128-CCM-SHA256
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.3 TLS13-AES128-CCM-SHA256 # client TLSv1.3 TLS13-AES128-CCM-SHA256
-v 4 -v 4
-l TLS13-AES128-CCM-SHA256 -l TLS13-AES128-CCM-SHA256
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-2
# server TLSv1.3 TLS13-AES128-CCM-8-SHA256 # server TLSv1.3 TLS13-AES128-CCM-8-SHA256
-v 4 -v 4
-l TLS13-AES128-CCM-8-SHA256 -l TLS13-AES128-CCM-8-SHA256
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-2
# client TLSv1.3 TLS13-AES128-CCM-8-SHA256 # client TLSv1.3 TLS13-AES128-CCM-8-SHA256
-v 4 -v 4
-l TLS13-AES128-CCM-8-SHA256 -l TLS13-AES128-CCM-8-SHA256
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-2
# server TLSv1.3 TLS13-AES128-GCM-SHA256 # server TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
@@ -59,12 +69,14 @@
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-t -t
-2
# client TLSv1.3 TLS13-AES128-GCM-SHA256 # client TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-A ./certs/ca-ecc-cert.pem -A ./certs/ca-ecc-cert.pem
-t -t
-2
# server TLSv1.3 TLS13-AES128-GCM-SHA256 # server TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
@@ -72,6 +84,7 @@
-c ./certs/server-ecc.pem -c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem -k ./certs/ecc-key.pem
-Y -Y
-2
# client TLSv1.3 TLS13-AES128-GCM-SHA256 # client TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4

5
tests/test-tls13-psk.conf
View File

@@ -3,28 +3,33 @@
-s -s
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-d -d
-2
# client TLSv1.3 PSK # client TLSv1.3 PSK
-v 4 -v 4
-s -s
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# server TLSv1.3 PSK # server TLSv1.3 PSK
-v 4 -v 4
-j -j
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-d -d
-2
# client TLSv1.3 PSK # client TLSv1.3 PSK
-v 4 -v 4
-s -s
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# server TLSv1.3 PSK # server TLSv1.3 PSK
-v 4 -v 4
-j -j
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-d -d
-2
# client TLSv1.3 not-PSK # client TLSv1.3 not-PSK
-v 4 -v 4

41
tests/test-tls13.conf
View File

@@ -1,193 +1,234 @@
# server TLSv1.3 TLS13-CHACHA20-POLY1305-SHA256 # server TLSv1.3 TLS13-CHACHA20-POLY1305-SHA256
-v 4 -v 4
-l TLS13-CHACHA20-POLY1305-SHA256 -l TLS13-CHACHA20-POLY1305-SHA256
-2
# client TLSv1.3 TLS13-CHACHA20-POLY1305-SHA256 # client TLSv1.3 TLS13-CHACHA20-POLY1305-SHA256
-v 4 -v 4
-l TLS13-CHACHA20-POLY1305-SHA256 -l TLS13-CHACHA20-POLY1305-SHA256
-2
# server TLSv1.3 TLS13-AES128-GCM-SHA256 # server TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# client TLSv1.3 TLS13-AES128-GCM-SHA256 # client TLSv1.3 TLS13-AES128-GCM-SHA256
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# server TLSv1.3 TLS13-AES256-GCM-SHA384 # server TLSv1.3 TLS13-AES256-GCM-SHA384
-v 4 -v 4
-l TLS13-AES256-GCM-SHA384 -l TLS13-AES256-GCM-SHA384
-2
# client TLSv1.3 TLS13-AES256-GCM-SHA384 # client TLSv1.3 TLS13-AES256-GCM-SHA384
-v 4 -v 4
-l TLS13-AES256-GCM-SHA384 -l TLS13-AES256-GCM-SHA384
-2
# server TLSv1.3 TLS13-AES128-CCM-SHA256 # server TLSv1.3 TLS13-AES128-CCM-SHA256
-v 4 -v 4
-l TLS13-AES128-CCM-SHA256 -l TLS13-AES128-CCM-SHA256
-2
# client TLSv1.3 TLS13-AES128-CCM-SHA256 # client TLSv1.3 TLS13-AES128-CCM-SHA256
-v 4 -v 4
-l TLS13-AES128-CCM-SHA256 -l TLS13-AES128-CCM-SHA256
-2
# server TLSv1.3 TLS13-AES128-CCM-8-SHA256 # server TLSv1.3 TLS13-AES128-CCM-8-SHA256
-v 4 -v 4
-l TLS13-AES128-CCM-8-SHA256 -l TLS13-AES128-CCM-8-SHA256
-2
# client TLSv1.3 TLS13-AES128-CCM-8-SHA256 # client TLSv1.3 TLS13-AES128-CCM-8-SHA256
-v 4 -v 4
-l TLS13-AES128-CCM-8-SHA256 -l TLS13-AES128-CCM-8-SHA256
-2
# server TLSv1.3 resumption # server TLSv1.3 resumption
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-2
# client TLSv1.3 resumption # client TLSv1.3 resumption
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-2
# server TLSv1.3 resumption - SHA384 # server TLSv1.3 resumption - SHA384
-v 4 -v 4
-l TLS13-AES256-GCM-SHA384 -l TLS13-AES256-GCM-SHA384
-r -r
-2
# client TLSv1.3 resumption - SHA384 # client TLSv1.3 resumption - SHA384
-v 4 -v 4
-l TLS13-AES256-GCM-SHA384 -l TLS13-AES256-GCM-SHA384
-r -r
-2
# server TLSv1.3 PSK without (EC)DHE # server TLSv1.3 PSK without (EC)DHE
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-2
# client TLSv1.3 PSK without (EC)DHE # client TLSv1.3 PSK without (EC)DHE
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-K -K
-2
# server TLSv1.3 accepting EarlyData # server TLSv1.3 accepting EarlyData
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-0 -0
-2
# client TLSv1.3 sending EarlyData # client TLSv1.3 sending EarlyData
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-0 -0
-2
# server TLSv1.3 not accepting EarlyData # server TLSv1.3 not accepting EarlyData
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-2
# client TLSv1.3 sending EarlyData # client TLSv1.3 sending EarlyData
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-0 -0
-2
# server TLSv1.3 accepting EarlyData # server TLSv1.3 accepting EarlyData
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-0 -0
-2
# client TLSv1.3 not sending EarlyData # client TLSv1.3 not sending EarlyData
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-r -r
-2
# server TLSv1.3 # server TLSv1.3
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# client TLSv1.3 Fragments # client TLSv1.3 Fragments
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-F 1 -F 1
-2
# server TLSv1.3 # server TLSv1.3
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# client TLSv1.3 HelloRetryRequest to negotiate Key Exchange algorithm # client TLSv1.3 HelloRetryRequest to negotiate Key Exchange algorithm
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-J -J
-2
# server TLSv1.3 # server TLSv1.3
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-J -J
-2
# client TLSv1.3 HelloRetryRequest with cookie # client TLSv1.3 HelloRetryRequest with cookie
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-J -J
-2
# server TLSv1.3 # server TLSv1.3
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# client TLSv1.3 no client certificate # client TLSv1.3 no client certificate
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-x -x
-2
# server TLSv1.3 # server TLSv1.3
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# client TLSv1.3 DH key exchange # client TLSv1.3 DH key exchange
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-y -y
-2
# server TLSv1.3 # server TLSv1.3
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# client TLSv1.3 ECC key exchange # client TLSv1.3 ECC key exchange
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-Y -Y
-2
# server TLSv1.3 # server TLSv1.3
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-2
# client TLSv1.3 ECC key exchange # client TLSv1.3 ECC key exchange
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-Y -Y
-2
# server TLSv1.3 multiple cipher suites # server TLSv1.3 multiple cipher suites
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256:TLS13-AES256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES128-CCM-SHA256:TLS13-AES128-CCM-8-SHA256 -l TLS13-AES128-GCM-SHA256:TLS13-AES256-GCM-SHA384:TLS13-CHACHA20-POLY1305-SHA256:TLS13-AES128-CCM-SHA256:TLS13-AES128-CCM-8-SHA256
-2
# client TLSv1.3 # client TLSv1.3
-v 4 -v 4
-2
# server TLSv1.3 KeyUpdate # server TLSv1.3 KeyUpdate
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-U -U
-2
# client TLSv1.3 KeyUpdate # client TLSv1.3 KeyUpdate
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-I -I
-2
# server TLSv1.3 Post-Handshake Authentication # server TLSv1.3 Post-Handshake Authentication
-v 4 -v 4
-l TLS13-AES128-GCM-SHA256 -l TLS13-AES128-GCM-SHA256
-Q -Q
-2
# client TLSv1.3 Post-Handshake Authentication # client TLSv1.3 Post-Handshake Authentication
-v 4 -v 4

531
tests/test.conf
View File

File diff suppressed because it is too large Load Diff