test/ssl-tests/08-npn.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 12
   4
   5 test-0 = 0-npn-simple
   6 test-1 = 1-npn-client-finds-match
   7 test-2 = 2-npn-client-honours-server-pref
   8 test-3 = 3-npn-client-first-pref-on-mismatch
   9 test-4 = 4-npn-no-server-support
  10 test-5 = 5-npn-no-client-support
  11 test-6 = 6-npn-with-sni-no-context-switch
  12 test-7 = 7-npn-with-sni-context-switch
  13 test-8 = 8-npn-selected-sni-server-supports-npn
  14 test-9 = 9-npn-selected-sni-server-does-not-support-npn
  15 test-10 = 10-alpn-preferred-over-npn
  16 test-11 = 11-sni-npn-preferred-over-alpn
  17 # ===========================================================
  18
  19 [0-npn-simple]
  20 ssl_conf = 0-npn-simple-ssl
  21
  22 [0-npn-simple-ssl]
  23 server = 0-npn-simple-server
  24 client = 0-npn-simple-client
  25
  26 [0-npn-simple-server]
  27 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  28 CipherString = DEFAULT
  29 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  30
  31 [0-npn-simple-client]
  32 CipherString = DEFAULT
  33 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  34 VerifyMode = Peer
  35
  36 [test-0]
  37 ClientNPNProtocols = foo
  38 ExpectedNPNProtocol = foo
  39 ServerNPNProtocols = foo
  40
  41
  42 # ===========================================================
  43
  44 [1-npn-client-finds-match]
  45 ssl_conf = 1-npn-client-finds-match-ssl
  46
  47 [1-npn-client-finds-match-ssl]
  48 server = 1-npn-client-finds-match-server
  49 client = 1-npn-client-finds-match-client
  50
  51 [1-npn-client-finds-match-server]
  52 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  53 CipherString = DEFAULT
  54 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  55
  56 [1-npn-client-finds-match-client]
  57 CipherString = DEFAULT
  58 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  59 VerifyMode = Peer
  60
  61 [test-1]
  62 ClientNPNProtocols = foo,bar
  63 ExpectedNPNProtocol = bar
  64 ServerNPNProtocols = baz,bar
  65
  66
  67 # ===========================================================
  68
  69 [2-npn-client-honours-server-pref]
  70 ssl_conf = 2-npn-client-honours-server-pref-ssl
  71
  72 [2-npn-client-honours-server-pref-ssl]
  73 server = 2-npn-client-honours-server-pref-server
  74 client = 2-npn-client-honours-server-pref-client
  75
  76 [2-npn-client-honours-server-pref-server]
  77 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  78 CipherString = DEFAULT
  79 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  80
  81 [2-npn-client-honours-server-pref-client]
  82 CipherString = DEFAULT
  83 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  84 VerifyMode = Peer
  85
  86 [test-2]
  87 ClientNPNProtocols = foo,bar
  88 ExpectedNPNProtocol = bar
  89 ServerNPNProtocols = bar,foo
  90
  91
  92 # ===========================================================
  93
  94 [3-npn-client-first-pref-on-mismatch]
  95 ssl_conf = 3-npn-client-first-pref-on-mismatch-ssl
  96
  97 [3-npn-client-first-pref-on-mismatch-ssl]
  98 server = 3-npn-client-first-pref-on-mismatch-server
  99 client = 3-npn-client-first-pref-on-mismatch-client
 100
 101 [3-npn-client-first-pref-on-mismatch-server]
 102 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 103 CipherString = DEFAULT
 104 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 105
 106 [3-npn-client-first-pref-on-mismatch-client]
 107 CipherString = DEFAULT
 108 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 109 VerifyMode = Peer
 110
 111 [test-3]
 112 ClientNPNProtocols = foo,bar
 113 ExpectedNPNProtocol = foo
 114 ServerNPNProtocols = baz
 115
 116
 117 # ===========================================================
 118
 119 [4-npn-no-server-support]
 120 ssl_conf = 4-npn-no-server-support-ssl
 121
 122 [4-npn-no-server-support-ssl]
 123 server = 4-npn-no-server-support-server
 124 client = 4-npn-no-server-support-client
 125
 126 [4-npn-no-server-support-server]
 127 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 128 CipherString = DEFAULT
 129 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 130
 131 [4-npn-no-server-support-client]
 132 CipherString = DEFAULT
 133 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 134 VerifyMode = Peer
 135
 136 [test-4]
 137 ClientNPNProtocols = foo
 138
 139
 140 # ===========================================================
 141
 142 [5-npn-no-client-support]
 143 ssl_conf = 5-npn-no-client-support-ssl
 144
 145 [5-npn-no-client-support-ssl]
 146 server = 5-npn-no-client-support-server
 147 client = 5-npn-no-client-support-client
 148
 149 [5-npn-no-client-support-server]
 150 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 151 CipherString = DEFAULT
 152 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 153
 154 [5-npn-no-client-support-client]
 155 CipherString = DEFAULT
 156 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 157 VerifyMode = Peer
 158
 159 [test-5]
 160 ServerNPNProtocols = foo
 161
 162
 163 # ===========================================================
 164
 165 [6-npn-with-sni-no-context-switch]
 166 ssl_conf = 6-npn-with-sni-no-context-switch-ssl
 167
 168 [6-npn-with-sni-no-context-switch-ssl]
 169 server = 6-npn-with-sni-no-context-switch-server
 170 client = 6-npn-with-sni-no-context-switch-client
 171 server2 = 6-npn-with-sni-no-context-switch-server2
 172
 173 [6-npn-with-sni-no-context-switch-server]
 174 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 175 CipherString = DEFAULT
 176 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 177
 178 [6-npn-with-sni-no-context-switch-server2]
 179 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 180 CipherString = DEFAULT
 181 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 182
 183 [6-npn-with-sni-no-context-switch-client]
 184 CipherString = DEFAULT
 185 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 186 VerifyMode = Peer
 187
 188 [test-6]
 189 ClientNPNProtocols = foo,bar
 190 ExpectedNPNProtocol = foo
 191 ExpectedServerName = server1
 192 Server2NPNProtocols = bar
 193 ServerNPNProtocols = foo
 194 ServerName = server1
 195 ServerNameCallback = IgnoreMismatch
 196
 197
 198 # ===========================================================
 199
 200 [7-npn-with-sni-context-switch]
 201 ssl_conf = 7-npn-with-sni-context-switch-ssl
 202
 203 [7-npn-with-sni-context-switch-ssl]
 204 server = 7-npn-with-sni-context-switch-server
 205 client = 7-npn-with-sni-context-switch-client
 206 server2 = 7-npn-with-sni-context-switch-server2
 207
 208 [7-npn-with-sni-context-switch-server]
 209 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 210 CipherString = DEFAULT
 211 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 212
 213 [7-npn-with-sni-context-switch-server2]
 214 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 215 CipherString = DEFAULT
 216 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 217
 218 [7-npn-with-sni-context-switch-client]
 219 CipherString = DEFAULT
 220 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 221 VerifyMode = Peer
 222
 223 [test-7]
 224 ClientNPNProtocols = foo,bar
 225 ExpectedNPNProtocol = bar
 226 ExpectedServerName = server2
 227 Server2NPNProtocols = bar
 228 ServerNPNProtocols = foo
 229 ServerName = server2
 230 ServerNameCallback = IgnoreMismatch
 231
 232
 233 # ===========================================================
 234
 235 [8-npn-selected-sni-server-supports-npn]
 236 ssl_conf = 8-npn-selected-sni-server-supports-npn-ssl
 237
 238 [8-npn-selected-sni-server-supports-npn-ssl]
 239 server = 8-npn-selected-sni-server-supports-npn-server
 240 client = 8-npn-selected-sni-server-supports-npn-client
 241 server2 = 8-npn-selected-sni-server-supports-npn-server2
 242
 243 [8-npn-selected-sni-server-supports-npn-server]
 244 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 245 CipherString = DEFAULT
 246 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 247
 248 [8-npn-selected-sni-server-supports-npn-server2]
 249 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 250 CipherString = DEFAULT
 251 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 252
 253 [8-npn-selected-sni-server-supports-npn-client]
 254 CipherString = DEFAULT
 255 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 256 VerifyMode = Peer
 257
 258 [test-8]
 259 ClientNPNProtocols = foo,bar
 260 ExpectedNPNProtocol = bar
 261 ExpectedServerName = server2
 262 Server2NPNProtocols = bar
 263 ServerName = server2
 264 ServerNameCallback = IgnoreMismatch
 265
 266
 267 # ===========================================================
 268
 269 [9-npn-selected-sni-server-does-not-support-npn]
 270 ssl_conf = 9-npn-selected-sni-server-does-not-support-npn-ssl
 271
 272 [9-npn-selected-sni-server-does-not-support-npn-ssl]
 273 server = 9-npn-selected-sni-server-does-not-support-npn-server
 274 client = 9-npn-selected-sni-server-does-not-support-npn-client
 275 server2 = 9-npn-selected-sni-server-does-not-support-npn-server2
 276
 277 [9-npn-selected-sni-server-does-not-support-npn-server]
 278 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 279 CipherString = DEFAULT
 280 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 281
 282 [9-npn-selected-sni-server-does-not-support-npn-server2]
 283 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 284 CipherString = DEFAULT
 285 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 286
 287 [9-npn-selected-sni-server-does-not-support-npn-client]
 288 CipherString = DEFAULT
 289 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 290 VerifyMode = Peer
 291
 292 [test-9]
 293 ClientNPNProtocols = foo,bar
 294 ExpectedServerName = server2
 295 ServerNPNProtocols = foo
 296 ServerName = server2
 297 ServerNameCallback = IgnoreMismatch
 298
 299
 300 # ===========================================================
 301
 302 [10-alpn-preferred-over-npn]
 303 ssl_conf = 10-alpn-preferred-over-npn-ssl
 304
 305 [10-alpn-preferred-over-npn-ssl]
 306 server = 10-alpn-preferred-over-npn-server
 307 client = 10-alpn-preferred-over-npn-client
 308
 309 [10-alpn-preferred-over-npn-server]
 310 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 311 CipherString = DEFAULT
 312 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 313
 314 [10-alpn-preferred-over-npn-client]
 315 CipherString = DEFAULT
 316 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 317 VerifyMode = Peer
 318
 319 [test-10]
 320 ClientALPNProtocols = foo
 321 ClientNPNProtocols = bar
 322 ExpectedALPNProtocol = foo
 323 ServerALPNProtocols = foo
 324 ServerNPNProtocols = bar
 325
 326
 327 # ===========================================================
 328
 329 [11-sni-npn-preferred-over-alpn]
 330 ssl_conf = 11-sni-npn-preferred-over-alpn-ssl
 331
 332 [11-sni-npn-preferred-over-alpn-ssl]
 333 server = 11-sni-npn-preferred-over-alpn-server
 334 client = 11-sni-npn-preferred-over-alpn-client
 335 server2 = 11-sni-npn-preferred-over-alpn-server2
 336
 337 [11-sni-npn-preferred-over-alpn-server]
 338 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 339 CipherString = DEFAULT
 340 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 341
 342 [11-sni-npn-preferred-over-alpn-server2]
 343 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 344 CipherString = DEFAULT
 345 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 346
 347 [11-sni-npn-preferred-over-alpn-client]
 348 CipherString = DEFAULT
 349 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 350 VerifyMode = Peer
 351
 352 [test-11]
 353 ClientALPNProtocols = foo
 354 ClientNPNProtocols = bar
 355 ExpectedNPNProtocol = bar
 356 ExpectedServerName = server2
 357 Server2NPNProtocols = bar
 358 ServerALPNProtocols = foo
 359 ServerName = server2
 360 ServerNameCallback = IgnoreMismatch
 361
 362