test/ssl-tests/05-sni.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 6
   4
   5 test-0 = 0-SNI-switch-context
   6 test-1 = 1-SNI-keep-context
   7 test-2 = 2-SNI-no-server-support
   8 test-3 = 3-SNI-no-client-support
   9 test-4 = 4-SNI-bad-sni-ignore-mismatch
  10 test-5 = 5-SNI-bad-sni-reject-mismatch
  11 # ===========================================================
  12
  13 [0-SNI-switch-context]
  14 ssl_conf = 0-SNI-switch-context-ssl
  15
  16 [0-SNI-switch-context-ssl]
  17 server = 0-SNI-switch-context-server
  18 client = 0-SNI-switch-context-client
  19 server2 = 0-SNI-switch-context-server
  20
  21 [0-SNI-switch-context-server]
  22 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  23 CipherString = DEFAULT
  24 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  25
  26 [0-SNI-switch-context-client]
  27 CipherString = DEFAULT
  28 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  29 VerifyMode = Peer
  30
  31 [test-0]
  32 ExpectedResult = Success
  33 ExpectedServerName = server2
  34 ServerName = server2
  35 ServerNameCallback = IgnoreMismatch
  36
  37
  38 # ===========================================================
  39
  40 [1-SNI-keep-context]
  41 ssl_conf = 1-SNI-keep-context-ssl
  42
  43 [1-SNI-keep-context-ssl]
  44 server = 1-SNI-keep-context-server
  45 client = 1-SNI-keep-context-client
  46 server2 = 1-SNI-keep-context-server
  47
  48 [1-SNI-keep-context-server]
  49 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  50 CipherString = DEFAULT
  51 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  52
  53 [1-SNI-keep-context-client]
  54 CipherString = DEFAULT
  55 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  56 VerifyMode = Peer
  57
  58 [test-1]
  59 ExpectedResult = Success
  60 ExpectedServerName = server1
  61 ServerName = server1
  62 ServerNameCallback = IgnoreMismatch
  63
  64
  65 # ===========================================================
  66
  67 [2-SNI-no-server-support]
  68 ssl_conf = 2-SNI-no-server-support-ssl
  69
  70 [2-SNI-no-server-support-ssl]
  71 server = 2-SNI-no-server-support-server
  72 client = 2-SNI-no-server-support-client
  73
  74 [2-SNI-no-server-support-server]
  75 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  76 CipherString = DEFAULT
  77 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  78
  79 [2-SNI-no-server-support-client]
  80 CipherString = DEFAULT
  81 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  82 VerifyMode = Peer
  83
  84 [test-2]
  85 ExpectedResult = Success
  86 ServerName = server1
  87
  88
  89 # ===========================================================
  90
  91 [3-SNI-no-client-support]
  92 ssl_conf = 3-SNI-no-client-support-ssl
  93
  94 [3-SNI-no-client-support-ssl]
  95 server = 3-SNI-no-client-support-server
  96 client = 3-SNI-no-client-support-client
  97 server2 = 3-SNI-no-client-support-server
  98
  99 [3-SNI-no-client-support-server]
 100 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 101 CipherString = DEFAULT
 102 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 103
 104 [3-SNI-no-client-support-client]
 105 CipherString = DEFAULT
 106 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 107 VerifyMode = Peer
 108
 109 [test-3]
 110 ExpectedResult = Success
 111 ExpectedServerName = server1
 112 ServerNameCallback = IgnoreMismatch
 113
 114
 115 # ===========================================================
 116
 117 [4-SNI-bad-sni-ignore-mismatch]
 118 ssl_conf = 4-SNI-bad-sni-ignore-mismatch-ssl
 119
 120 [4-SNI-bad-sni-ignore-mismatch-ssl]
 121 server = 4-SNI-bad-sni-ignore-mismatch-server
 122 client = 4-SNI-bad-sni-ignore-mismatch-client
 123 server2 = 4-SNI-bad-sni-ignore-mismatch-server
 124
 125 [4-SNI-bad-sni-ignore-mismatch-server]
 126 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 127 CipherString = DEFAULT
 128 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 129
 130 [4-SNI-bad-sni-ignore-mismatch-client]
 131 CipherString = DEFAULT
 132 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 133 VerifyMode = Peer
 134
 135 [test-4]
 136 ExpectedResult = Success
 137 ExpectedServerName = server1
 138 ServerName = invalid
 139 ServerNameCallback = IgnoreMismatch
 140
 141
 142 # ===========================================================
 143
 144 [5-SNI-bad-sni-reject-mismatch]
 145 ssl_conf = 5-SNI-bad-sni-reject-mismatch-ssl
 146
 147 [5-SNI-bad-sni-reject-mismatch-ssl]
 148 server = 5-SNI-bad-sni-reject-mismatch-server
 149 client = 5-SNI-bad-sni-reject-mismatch-client
 150 server2 = 5-SNI-bad-sni-reject-mismatch-server
 151
 152 [5-SNI-bad-sni-reject-mismatch-server]
 153 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 154 CipherString = DEFAULT
 155 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 156
 157 [5-SNI-bad-sni-reject-mismatch-client]
 158 CipherString = DEFAULT
 159 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 160 VerifyMode = Peer
 161
 162 [test-5]
 163 ExpectedResult = ServerFail
 164 ServerAlert = UnrecognizedName
 165 ServerName = invalid
 166 ServerNameCallback = RejectMismatch
 167
 168