test/ssl-tests/03-custom_verify.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 9
   4
   5 test-0 = 0-verify-success
   6 test-1 = 1-verify-custom-reject
   7 test-2 = 2-verify-custom-allow
   8 test-3 = 3-noverify-success
   9 test-4 = 4-noverify-ignore-custom-reject
  10 test-5 = 5-noverify-accept-custom-allow
  11 test-6 = 6-verify-fail-no-root
  12 test-7 = 7-verify-custom-success-no-root
  13 test-8 = 8-verify-custom-fail-no-root
  14 # ===========================================================
  15
  16 [0-verify-success]
  17 ssl_conf = 0-verify-success-ssl
  18
  19 [0-verify-success-ssl]
  20 server = 0-verify-success-server
  21 client = 0-verify-success-client
  22
  23 [0-verify-success-server]
  24 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  25 CipherString = DEFAULT
  26 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  27
  28
  29 [0-verify-success-client]
  30 CipherString = DEFAULT
  31 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  32 VerifyMode = Peer
  33
  34
  35 [test-0]
  36 ExpectedResult = Success
  37
  38
  39 # ===========================================================
  40
  41 [1-verify-custom-reject]
  42 ssl_conf = 1-verify-custom-reject-ssl
  43
  44 [1-verify-custom-reject-ssl]
  45 server = 1-verify-custom-reject-server
  46 client = 1-verify-custom-reject-client
  47
  48 [1-verify-custom-reject-server]
  49 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  50 CipherString = DEFAULT
  51 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  52
  53
  54 [1-verify-custom-reject-client]
  55 CipherString = DEFAULT
  56 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  57 VerifyMode = Peer
  58
  59
  60 [test-1]
  61 ClientAlert = HandshakeFailure
  62 ClientVerifyCallback = RejectAll
  63 ExpectedResult = ClientFail
  64
  65
  66 # ===========================================================
  67
  68 [2-verify-custom-allow]
  69 ssl_conf = 2-verify-custom-allow-ssl
  70
  71 [2-verify-custom-allow-ssl]
  72 server = 2-verify-custom-allow-server
  73 client = 2-verify-custom-allow-client
  74
  75 [2-verify-custom-allow-server]
  76 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  77 CipherString = DEFAULT
  78 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  79
  80
  81 [2-verify-custom-allow-client]
  82 CipherString = DEFAULT
  83 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  84 VerifyMode = Peer
  85
  86
  87 [test-2]
  88 ClientVerifyCallback = AcceptAll
  89 ExpectedResult = Success
  90
  91
  92 # ===========================================================
  93
  94 [3-noverify-success]
  95 ssl_conf = 3-noverify-success-ssl
  96
  97 [3-noverify-success-ssl]
  98 server = 3-noverify-success-server
  99 client = 3-noverify-success-client
 100
 101 [3-noverify-success-server]
 102 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 103 CipherString = DEFAULT
 104 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 105
 106
 107 [3-noverify-success-client]
 108 CipherString = DEFAULT
 109
 110
 111 [test-3]
 112 ExpectedResult = Success
 113
 114
 115 # ===========================================================
 116
 117 [4-noverify-ignore-custom-reject]
 118 ssl_conf = 4-noverify-ignore-custom-reject-ssl
 119
 120 [4-noverify-ignore-custom-reject-ssl]
 121 server = 4-noverify-ignore-custom-reject-server
 122 client = 4-noverify-ignore-custom-reject-client
 123
 124 [4-noverify-ignore-custom-reject-server]
 125 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 126 CipherString = DEFAULT
 127 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 128
 129
 130 [4-noverify-ignore-custom-reject-client]
 131 CipherString = DEFAULT
 132
 133
 134 [test-4]
 135 ClientVerifyCallback = RejectAll
 136 ExpectedResult = Success
 137
 138
 139 # ===========================================================
 140
 141 [5-noverify-accept-custom-allow]
 142 ssl_conf = 5-noverify-accept-custom-allow-ssl
 143
 144 [5-noverify-accept-custom-allow-ssl]
 145 server = 5-noverify-accept-custom-allow-server
 146 client = 5-noverify-accept-custom-allow-client
 147
 148 [5-noverify-accept-custom-allow-server]
 149 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 150 CipherString = DEFAULT
 151 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 152
 153
 154 [5-noverify-accept-custom-allow-client]
 155 CipherString = DEFAULT
 156
 157
 158 [test-5]
 159 ClientVerifyCallback = AcceptAll
 160 ExpectedResult = Success
 161
 162
 163 # ===========================================================
 164
 165 [6-verify-fail-no-root]
 166 ssl_conf = 6-verify-fail-no-root-ssl
 167
 168 [6-verify-fail-no-root-ssl]
 169 server = 6-verify-fail-no-root-server
 170 client = 6-verify-fail-no-root-client
 171
 172 [6-verify-fail-no-root-server]
 173 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 174 CipherString = DEFAULT
 175 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 176
 177
 178 [6-verify-fail-no-root-client]
 179 CipherString = DEFAULT
 180 VerifyMode = Peer
 181
 182
 183 [test-6]
 184 ClientAlert = UnknownCA
 185 ExpectedResult = ClientFail
 186
 187
 188 # ===========================================================
 189
 190 [7-verify-custom-success-no-root]
 191 ssl_conf = 7-verify-custom-success-no-root-ssl
 192
 193 [7-verify-custom-success-no-root-ssl]
 194 server = 7-verify-custom-success-no-root-server
 195 client = 7-verify-custom-success-no-root-client
 196
 197 [7-verify-custom-success-no-root-server]
 198 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 199 CipherString = DEFAULT
 200 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 201
 202
 203 [7-verify-custom-success-no-root-client]
 204 CipherString = DEFAULT
 205 VerifyMode = Peer
 206
 207
 208 [test-7]
 209 ClientVerifyCallback = AcceptAll
 210 ExpectedResult = Success
 211
 212
 213 # ===========================================================
 214
 215 [8-verify-custom-fail-no-root]
 216 ssl_conf = 8-verify-custom-fail-no-root-ssl
 217
 218 [8-verify-custom-fail-no-root-ssl]
 219 server = 8-verify-custom-fail-no-root-server
 220 client = 8-verify-custom-fail-no-root-client
 221
 222 [8-verify-custom-fail-no-root-server]
 223 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 224 CipherString = DEFAULT
 225 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 226
 227
 228 [8-verify-custom-fail-no-root-client]
 229 CipherString = DEFAULT
 230 VerifyMode = Peer
 231
 232
 233 [test-8]
 234 ClientAlert = HandshakeFailure
 235 ClientVerifyCallback = RejectAll
 236 ExpectedResult = ClientFail
 237
 238