test/ssl-tests/12-ct.conf.in

   1 # -*- mode: perl; -*-
   2 # Copyright 2016-2016 The OpenSSL Project Authors. All Rights Reserved.
   3 #
   4 # Licensed under the OpenSSL license (the "License").  You may not use
   5 # this file except in compliance with the License.  You can obtain a copy
   6 # in the file LICENSE in the source distribution or at
   7 # https://www.openssl.org/source/license.html
   8
   9
  10 ## Test version negotiation
  11
  12 use strict;
  13 use warnings;
  14
  15 package ssltests;
  16
  17
  18 our @tests = (
  19     # Currently only have tests for certs without SCTs.
  20     {
  21         name => "ct-permissive",
  22         server => { },
  23         client => {
  24             extra => {
  25                 "CTValidation" => "Permissive",
  26             },
  27         },
  28         test => {
  29             "ExpectedResult" => "Success",
  30         },
  31     },
  32     {
  33         name => "ct-strict",
  34         server => { },
  35         client => {
  36             extra => {
  37                 "CTValidation" => "Strict",
  38             },
  39         },
  40         test => {
  41             "ExpectedResult" => "ClientFail",
  42             "ExpectedClientAlert" => "HandshakeFailure",
  43         },
  44     },
  45     {
  46         name => "ct-permissive-resumption",
  47         server => { },
  48         client => {
  49             extra => {
  50                 "CTValidation" => "Permissive",
  51             },
  52         },
  53         test => {
  54             "HandshakeMode" => "Resume",
  55             "ResumptionExpected" => "Yes",
  56             "ExpectedResult" => "Success",
  57         },
  58     },
  59     {
  60         name => "ct-strict-resumption",
  61         server => { },
  62         client => {
  63             extra => {
  64                 "CTValidation" => "Permissive",
  65             },
  66         },
  67         # SCTs are not present during resumption, so the resumption
  68         # should succeed.
  69         resume_client => {
  70             extra => {
  71                 "CTValidation" => "Strict",
  72             },
  73         },
  74         test => {
  75             "HandshakeMode" => "Resume",
  76             "ResumptionExpected" => "Yes",
  77             "ExpectedResult" => "Success",
  78         },
  79     },
  80 );