test/ssl-tests/14-curves.cnf.in

   1 # -*- mode: perl; -*-
   2
   3 ## SSL test configurations
   4
   5 package ssltests;
   6
   7 use strict;
   8 use warnings;
   9
  10 use OpenSSL::Test;
  11 use OpenSSL::Test::Utils qw(anydisabled);
  12
  13 our $fips_mode;
  14
  15 my @curves = ("prime256v1", "secp384r1", "secp521r1", "X25519",
  16               "X448");
  17
  18 my @curves_tls_1_2 = ("sect233k1", "sect233r1",
  19               "sect283k1", "sect283r1", "sect409k1", "sect409r1",
  20               "sect571k1", "sect571r1", "secp224r1");
  21
  22 my @curves_non_fips = ("sect163k1", "sect163r2", "prime192v1",
  23                        "sect163r1", "sect193r1", "sect193r2", "sect239k1",
  24                        "secp160k1", "secp160r1", "secp160r2", "secp192k1",
  25                        "secp224k1",  "secp256k1", "brainpoolP256r1",
  26                        "brainpoolP384r1", "brainpoolP512r1");
  27
  28 push @curves_tls_1_2, @curves_non_fips if !$fips_mode;
  29
  30 our @tests = ();
  31
  32 sub generate_tests() {
  33     foreach (0..$#curves) {
  34         my $curve = $curves[$_];
  35         push @tests, {
  36             name => "curve-${curve}",
  37             server => {
  38                 "Curves" => $curve,
  39                 "MaxProtocol" => "TLSv1.3"
  40             },
  41             client => {
  42                 "CipherString" => "ECDHE",
  43                 "MaxProtocol" => "TLSv1.3",
  44                 "Curves" => $curve
  45             },
  46             test   => {
  47                 "ExpectedTmpKeyType" => $curve,
  48                 "ExpectedProtocol" => "TLSv1.3",
  49                 "ExpectedResult" => "Success"
  50             },
  51         };
  52     }
  53     foreach (0..$#curves_tls_1_2) {
  54         my $curve = $curves_tls_1_2[$_];
  55         push @tests, {
  56             name => "curve-${curve}",
  57             server => {
  58                 "Curves" => $curve,
  59                 "MaxProtocol" => "TLSv1.3"
  60             },
  61             client => {
  62                 "CipherString" => "ECDHE",
  63                 "MaxProtocol" => "TLSv1.2",
  64                 "Curves" => $curve
  65             },
  66             test   => {
  67                 "ExpectedTmpKeyType" => $curve,
  68                 "ExpectedProtocol" => "TLSv1.2",
  69                 "ExpectedResult" => "Success"
  70             },
  71         };
  72     }
  73     foreach (0..$#curves_tls_1_2) {
  74         my $curve = $curves_tls_1_2[$_];
  75         push @tests, {
  76             name => "curve-${curve}-tls13",
  77             server => {
  78                 "Curves" => $curve,
  79                 "MaxProtocol" => "TLSv1.3"
  80             },
  81             client => {
  82                 "CipherString" => "ECDHE",
  83                 "MinProtocol" => "TLSv1.3",
  84                 "Curves" => $curve
  85             },
  86             test   => {
  87                 "ExpectedResult" => "ClientFail"
  88             },
  89         };
  90     }
  91 }
  92
  93 generate_tests();