test/ssl-tests/03-custom_verify.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 9
   4
   5 test-0 = 0-verify-success
   6 test-1 = 1-verify-custom-reject
   7 test-2 = 2-verify-custom-allow
   8 test-3 = 3-noverify-success
   9 test-4 = 4-noverify-ignore-custom-reject
  10 test-5 = 5-noverify-accept-custom-allow
  11 test-6 = 6-verify-fail-no-root
  12 test-7 = 7-verify-custom-success-no-root
  13 test-8 = 8-verify-custom-fail-no-root
  14 # ===========================================================
  15
  16 [0-verify-success]
  17 ssl_conf = 0-verify-success-ssl
  18
  19 [0-verify-success-ssl]
  20 server = 0-verify-success-server
  21 client = 0-verify-success-client
  22
  23 [0-verify-success-server]
  24 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  25 CipherString = DEFAULT
  26 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  27
  28 [0-verify-success-client]
  29 CipherString = DEFAULT
  30 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  31 VerifyMode = Peer
  32
  33 [test-0]
  34 ExpectedResult = Success
  35
  36
  37 # ===========================================================
  38
  39 [1-verify-custom-reject]
  40 ssl_conf = 1-verify-custom-reject-ssl
  41
  42 [1-verify-custom-reject-ssl]
  43 server = 1-verify-custom-reject-server
  44 client = 1-verify-custom-reject-client
  45
  46 [1-verify-custom-reject-server]
  47 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  48 CipherString = DEFAULT
  49 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  50
  51 [1-verify-custom-reject-client]
  52 CipherString = DEFAULT
  53 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  54 VerifyMode = Peer
  55
  56 [test-1]
  57 ExpectedClientAlert = HandshakeFailure
  58 ExpectedResult = ClientFail
  59 client = 1-verify-custom-reject-client-extra
  60
  61 [1-verify-custom-reject-client-extra]
  62 VerifyCallback = RejectAll
  63
  64
  65 # ===========================================================
  66
  67 [2-verify-custom-allow]
  68 ssl_conf = 2-verify-custom-allow-ssl
  69
  70 [2-verify-custom-allow-ssl]
  71 server = 2-verify-custom-allow-server
  72 client = 2-verify-custom-allow-client
  73
  74 [2-verify-custom-allow-server]
  75 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  76 CipherString = DEFAULT
  77 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  78
  79 [2-verify-custom-allow-client]
  80 CipherString = DEFAULT
  81 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  82 VerifyMode = Peer
  83
  84 [test-2]
  85 ExpectedResult = Success
  86 client = 2-verify-custom-allow-client-extra
  87
  88 [2-verify-custom-allow-client-extra]
  89 VerifyCallback = AcceptAll
  90
  91
  92 # ===========================================================
  93
  94 [3-noverify-success]
  95 ssl_conf = 3-noverify-success-ssl
  96
  97 [3-noverify-success-ssl]
  98 server = 3-noverify-success-server
  99 client = 3-noverify-success-client
 100
 101 [3-noverify-success-server]
 102 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 103 CipherString = DEFAULT
 104 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 105
 106 [3-noverify-success-client]
 107 CipherString = DEFAULT
 108
 109 [test-3]
 110 ExpectedResult = Success
 111
 112
 113 # ===========================================================
 114
 115 [4-noverify-ignore-custom-reject]
 116 ssl_conf = 4-noverify-ignore-custom-reject-ssl
 117
 118 [4-noverify-ignore-custom-reject-ssl]
 119 server = 4-noverify-ignore-custom-reject-server
 120 client = 4-noverify-ignore-custom-reject-client
 121
 122 [4-noverify-ignore-custom-reject-server]
 123 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 124 CipherString = DEFAULT
 125 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 126
 127 [4-noverify-ignore-custom-reject-client]
 128 CipherString = DEFAULT
 129
 130 [test-4]
 131 ExpectedResult = Success
 132 client = 4-noverify-ignore-custom-reject-client-extra
 133
 134 [4-noverify-ignore-custom-reject-client-extra]
 135 VerifyCallback = RejectAll
 136
 137
 138 # ===========================================================
 139
 140 [5-noverify-accept-custom-allow]
 141 ssl_conf = 5-noverify-accept-custom-allow-ssl
 142
 143 [5-noverify-accept-custom-allow-ssl]
 144 server = 5-noverify-accept-custom-allow-server
 145 client = 5-noverify-accept-custom-allow-client
 146
 147 [5-noverify-accept-custom-allow-server]
 148 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 149 CipherString = DEFAULT
 150 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 151
 152 [5-noverify-accept-custom-allow-client]
 153 CipherString = DEFAULT
 154
 155 [test-5]
 156 ExpectedResult = Success
 157 client = 5-noverify-accept-custom-allow-client-extra
 158
 159 [5-noverify-accept-custom-allow-client-extra]
 160 VerifyCallback = AcceptAll
 161
 162
 163 # ===========================================================
 164
 165 [6-verify-fail-no-root]
 166 ssl_conf = 6-verify-fail-no-root-ssl
 167
 168 [6-verify-fail-no-root-ssl]
 169 server = 6-verify-fail-no-root-server
 170 client = 6-verify-fail-no-root-client
 171
 172 [6-verify-fail-no-root-server]
 173 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 174 CipherString = DEFAULT
 175 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 176
 177 [6-verify-fail-no-root-client]
 178 CipherString = DEFAULT
 179 VerifyMode = Peer
 180
 181 [test-6]
 182 ExpectedClientAlert = UnknownCA
 183 ExpectedResult = ClientFail
 184
 185
 186 # ===========================================================
 187
 188 [7-verify-custom-success-no-root]
 189 ssl_conf = 7-verify-custom-success-no-root-ssl
 190
 191 [7-verify-custom-success-no-root-ssl]
 192 server = 7-verify-custom-success-no-root-server
 193 client = 7-verify-custom-success-no-root-client
 194
 195 [7-verify-custom-success-no-root-server]
 196 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 197 CipherString = DEFAULT
 198 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 199
 200 [7-verify-custom-success-no-root-client]
 201 CipherString = DEFAULT
 202 VerifyMode = Peer
 203
 204 [test-7]
 205 ExpectedResult = Success
 206 client = 7-verify-custom-success-no-root-client-extra
 207
 208 [7-verify-custom-success-no-root-client-extra]
 209 VerifyCallback = AcceptAll
 210
 211
 212 # ===========================================================
 213
 214 [8-verify-custom-fail-no-root]
 215 ssl_conf = 8-verify-custom-fail-no-root-ssl
 216
 217 [8-verify-custom-fail-no-root-ssl]
 218 server = 8-verify-custom-fail-no-root-server
 219 client = 8-verify-custom-fail-no-root-client
 220
 221 [8-verify-custom-fail-no-root-server]
 222 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 223 CipherString = DEFAULT
 224 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 225
 226 [8-verify-custom-fail-no-root-client]
 227 CipherString = DEFAULT
 228 VerifyMode = Peer
 229
 230 [test-8]
 231 ExpectedClientAlert = HandshakeFailure
 232 ExpectedResult = ClientFail
 233 client = 8-verify-custom-fail-no-root-client-extra
 234
 235 [8-verify-custom-fail-no-root-client-extra]
 236 VerifyCallback = RejectAll
 237
 238