test/ssl-tests/12-ct.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 6
   4
   5 test-0 = 0-ct-permissive-without-scts
   6 test-1 = 1-ct-permissive-with-scts
   7 test-2 = 2-ct-strict-without-scts
   8 test-3 = 3-ct-strict-with-scts
   9 test-4 = 4-ct-permissive-resumption
  10 test-5 = 5-ct-strict-resumption
  11 # ===========================================================
  12
  13 [0-ct-permissive-without-scts]
  14 ssl_conf = 0-ct-permissive-without-scts-ssl
  15
  16 [0-ct-permissive-without-scts-ssl]
  17 server = 0-ct-permissive-without-scts-server
  18 client = 0-ct-permissive-without-scts-client
  19
  20 [0-ct-permissive-without-scts-server]
  21 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  22 CipherString = DEFAULT
  23 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  24
  25 [0-ct-permissive-without-scts-client]
  26 CipherString = DEFAULT
  27 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  28 VerifyMode = Peer
  29
  30 [test-0]
  31 ExpectedResult = Success
  32 client = 0-ct-permissive-without-scts-client-extra
  33
  34 [0-ct-permissive-without-scts-client-extra]
  35 CTValidation = Permissive
  36
  37
  38 # ===========================================================
  39
  40 [1-ct-permissive-with-scts]
  41 ssl_conf = 1-ct-permissive-with-scts-ssl
  42
  43 [1-ct-permissive-with-scts-ssl]
  44 server = 1-ct-permissive-with-scts-server
  45 client = 1-ct-permissive-with-scts-client
  46
  47 [1-ct-permissive-with-scts-server]
  48 Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
  49 CipherString = DEFAULT
  50 PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
  51
  52 [1-ct-permissive-with-scts-client]
  53 CipherString = DEFAULT
  54 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
  55 VerifyMode = Peer
  56
  57 [test-1]
  58 ExpectedResult = Success
  59 client = 1-ct-permissive-with-scts-client-extra
  60
  61 [1-ct-permissive-with-scts-client-extra]
  62 CTValidation = Permissive
  63
  64
  65 # ===========================================================
  66
  67 [2-ct-strict-without-scts]
  68 ssl_conf = 2-ct-strict-without-scts-ssl
  69
  70 [2-ct-strict-without-scts-ssl]
  71 server = 2-ct-strict-without-scts-server
  72 client = 2-ct-strict-without-scts-client
  73
  74 [2-ct-strict-without-scts-server]
  75 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  76 CipherString = DEFAULT
  77 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  78
  79 [2-ct-strict-without-scts-client]
  80 CipherString = DEFAULT
  81 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  82 VerifyMode = Peer
  83
  84 [test-2]
  85 ExpectedClientAlert = HandshakeFailure
  86 ExpectedResult = ClientFail
  87 client = 2-ct-strict-without-scts-client-extra
  88
  89 [2-ct-strict-without-scts-client-extra]
  90 CTValidation = Strict
  91
  92
  93 # ===========================================================
  94
  95 [3-ct-strict-with-scts]
  96 ssl_conf = 3-ct-strict-with-scts-ssl
  97
  98 [3-ct-strict-with-scts-ssl]
  99 server = 3-ct-strict-with-scts-server
 100 client = 3-ct-strict-with-scts-client
 101
 102 [3-ct-strict-with-scts-server]
 103 Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
 104 CipherString = DEFAULT
 105 PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
 106
 107 [3-ct-strict-with-scts-client]
 108 CipherString = DEFAULT
 109 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
 110 VerifyMode = Peer
 111
 112 [test-3]
 113 ExpectedResult = Success
 114 client = 3-ct-strict-with-scts-client-extra
 115
 116 [3-ct-strict-with-scts-client-extra]
 117 CTValidation = Strict
 118
 119
 120 # ===========================================================
 121
 122 [4-ct-permissive-resumption]
 123 ssl_conf = 4-ct-permissive-resumption-ssl
 124
 125 [4-ct-permissive-resumption-ssl]
 126 server = 4-ct-permissive-resumption-server
 127 client = 4-ct-permissive-resumption-client
 128 resume-server = 4-ct-permissive-resumption-server
 129 resume-client = 4-ct-permissive-resumption-client
 130
 131 [4-ct-permissive-resumption-server]
 132 Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
 133 CipherString = DEFAULT
 134 PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
 135
 136 [4-ct-permissive-resumption-client]
 137 CipherString = DEFAULT
 138 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
 139 VerifyMode = Peer
 140
 141 [test-4]
 142 ExpectedResult = Success
 143 HandshakeMode = Resume
 144 ResumptionExpected = Yes
 145 client = 4-ct-permissive-resumption-client-extra
 146 resume-client = 4-ct-permissive-resumption-client-extra
 147
 148 [4-ct-permissive-resumption-client-extra]
 149 CTValidation = Permissive
 150
 151
 152 # ===========================================================
 153
 154 [5-ct-strict-resumption]
 155 ssl_conf = 5-ct-strict-resumption-ssl
 156
 157 [5-ct-strict-resumption-ssl]
 158 server = 5-ct-strict-resumption-server
 159 client = 5-ct-strict-resumption-client
 160 resume-server = 5-ct-strict-resumption-server
 161 resume-client = 5-ct-strict-resumption-resume-client
 162
 163 [5-ct-strict-resumption-server]
 164 Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
 165 CipherString = DEFAULT
 166 PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
 167
 168 [5-ct-strict-resumption-client]
 169 CipherString = DEFAULT
 170 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
 171 VerifyMode = Peer
 172
 173 [5-ct-strict-resumption-resume-client]
 174 CipherString = DEFAULT
 175 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 176 VerifyMode = Peer
 177
 178 [test-5]
 179 ExpectedResult = Success
 180 HandshakeMode = Resume
 181 ResumptionExpected = Yes
 182 client = 5-ct-strict-resumption-client-extra
 183 resume-client = 5-ct-strict-resumption-resume-client-extra
 184
 185 [5-ct-strict-resumption-client-extra]
 186 CTValidation = Strict
 187
 188 [5-ct-strict-resumption-resume-client-extra]
 189 CTValidation = Strict
 190
 191