test/ssl-tests/05-sni.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 6
   4
   5 test-0 = 0-SNI-switch-context
   6 test-1 = 1-SNI-keep-context
   7 test-2 = 2-SNI-no-server-support
   8 test-3 = 3-SNI-no-client-support
   9 test-4 = 4-SNI-bad-sni-ignore-mismatch
  10 test-5 = 5-SNI-bad-sni-reject-mismatch
  11 # ===========================================================
  12
  13 [0-SNI-switch-context]
  14 ssl_conf = 0-SNI-switch-context-ssl
  15
  16 [0-SNI-switch-context-ssl]
  17 server = 0-SNI-switch-context-server
  18 client = 0-SNI-switch-context-client
  19 server2 = 0-SNI-switch-context-server
  20
  21 [0-SNI-switch-context-server]
  22 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  23 CipherString = DEFAULT
  24 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  25
  26 [0-SNI-switch-context-client]
  27 CipherString = DEFAULT
  28 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  29 VerifyMode = Peer
  30
  31 [test-0]
  32 ExpectedResult = Success
  33 ExpectedServerName = server2
  34 server = 0-SNI-switch-context-server-extra
  35 server2 = 0-SNI-switch-context-server-extra
  36 client = 0-SNI-switch-context-client-extra
  37
  38 [0-SNI-switch-context-server-extra]
  39 ServerNameCallback = IgnoreMismatch
  40
  41 [0-SNI-switch-context-client-extra]
  42 ServerName = server2
  43
  44
  45 # ===========================================================
  46
  47 [1-SNI-keep-context]
  48 ssl_conf = 1-SNI-keep-context-ssl
  49
  50 [1-SNI-keep-context-ssl]
  51 server = 1-SNI-keep-context-server
  52 client = 1-SNI-keep-context-client
  53 server2 = 1-SNI-keep-context-server
  54
  55 [1-SNI-keep-context-server]
  56 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  57 CipherString = DEFAULT
  58 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  59
  60 [1-SNI-keep-context-client]
  61 CipherString = DEFAULT
  62 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  63 VerifyMode = Peer
  64
  65 [test-1]
  66 ExpectedResult = Success
  67 ExpectedServerName = server1
  68 server = 1-SNI-keep-context-server-extra
  69 server2 = 1-SNI-keep-context-server-extra
  70 client = 1-SNI-keep-context-client-extra
  71
  72 [1-SNI-keep-context-server-extra]
  73 ServerNameCallback = IgnoreMismatch
  74
  75 [1-SNI-keep-context-client-extra]
  76 ServerName = server1
  77
  78
  79 # ===========================================================
  80
  81 [2-SNI-no-server-support]
  82 ssl_conf = 2-SNI-no-server-support-ssl
  83
  84 [2-SNI-no-server-support-ssl]
  85 server = 2-SNI-no-server-support-server
  86 client = 2-SNI-no-server-support-client
  87
  88 [2-SNI-no-server-support-server]
  89 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  90 CipherString = DEFAULT
  91 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  92
  93 [2-SNI-no-server-support-client]
  94 CipherString = DEFAULT
  95 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  96 VerifyMode = Peer
  97
  98 [test-2]
  99 ExpectedResult = Success
 100 client = 2-SNI-no-server-support-client-extra
 101
 102 [2-SNI-no-server-support-client-extra]
 103 ServerName = server1
 104
 105
 106 # ===========================================================
 107
 108 [3-SNI-no-client-support]
 109 ssl_conf = 3-SNI-no-client-support-ssl
 110
 111 [3-SNI-no-client-support-ssl]
 112 server = 3-SNI-no-client-support-server
 113 client = 3-SNI-no-client-support-client
 114 server2 = 3-SNI-no-client-support-server
 115
 116 [3-SNI-no-client-support-server]
 117 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 118 CipherString = DEFAULT
 119 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 120
 121 [3-SNI-no-client-support-client]
 122 CipherString = DEFAULT
 123 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 124 VerifyMode = Peer
 125
 126 [test-3]
 127 ExpectedResult = Success
 128 ExpectedServerName = server1
 129 server = 3-SNI-no-client-support-server-extra
 130 server2 = 3-SNI-no-client-support-server-extra
 131
 132 [3-SNI-no-client-support-server-extra]
 133 ServerNameCallback = IgnoreMismatch
 134
 135
 136 # ===========================================================
 137
 138 [4-SNI-bad-sni-ignore-mismatch]
 139 ssl_conf = 4-SNI-bad-sni-ignore-mismatch-ssl
 140
 141 [4-SNI-bad-sni-ignore-mismatch-ssl]
 142 server = 4-SNI-bad-sni-ignore-mismatch-server
 143 client = 4-SNI-bad-sni-ignore-mismatch-client
 144 server2 = 4-SNI-bad-sni-ignore-mismatch-server
 145
 146 [4-SNI-bad-sni-ignore-mismatch-server]
 147 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 148 CipherString = DEFAULT
 149 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 150
 151 [4-SNI-bad-sni-ignore-mismatch-client]
 152 CipherString = DEFAULT
 153 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 154 VerifyMode = Peer
 155
 156 [test-4]
 157 ExpectedResult = Success
 158 ExpectedServerName = server1
 159 server = 4-SNI-bad-sni-ignore-mismatch-server-extra
 160 server2 = 4-SNI-bad-sni-ignore-mismatch-server-extra
 161 client = 4-SNI-bad-sni-ignore-mismatch-client-extra
 162
 163 [4-SNI-bad-sni-ignore-mismatch-server-extra]
 164 ServerNameCallback = IgnoreMismatch
 165
 166 [4-SNI-bad-sni-ignore-mismatch-client-extra]
 167 ServerName = invalid
 168
 169
 170 # ===========================================================
 171
 172 [5-SNI-bad-sni-reject-mismatch]
 173 ssl_conf = 5-SNI-bad-sni-reject-mismatch-ssl
 174
 175 [5-SNI-bad-sni-reject-mismatch-ssl]
 176 server = 5-SNI-bad-sni-reject-mismatch-server
 177 client = 5-SNI-bad-sni-reject-mismatch-client
 178 server2 = 5-SNI-bad-sni-reject-mismatch-server
 179
 180 [5-SNI-bad-sni-reject-mismatch-server]
 181 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 182 CipherString = DEFAULT
 183 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 184
 185 [5-SNI-bad-sni-reject-mismatch-client]
 186 CipherString = DEFAULT
 187 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 188 VerifyMode = Peer
 189
 190 [test-5]
 191 ExpectedResult = ServerFail
 192 ExpectedServerAlert = UnrecognizedName
 193 server = 5-SNI-bad-sni-reject-mismatch-server-extra
 194 server2 = 5-SNI-bad-sni-reject-mismatch-server-extra
 195 client = 5-SNI-bad-sni-reject-mismatch-client-extra
 196
 197 [5-SNI-bad-sni-reject-mismatch-server-extra]
 198 ServerNameCallback = RejectMismatch
 199
 200 [5-SNI-bad-sni-reject-mismatch-client-extra]
 201 ServerName = invalid
 202
 203