Add option to disable Extended Master Secret
[openssl.git] / test / ssl-tests / 30-extended-master-secret.conf
1 # Generated with generate_ssl_tests.pl
2
3 num_tests = 7
4
5 test-0 = 0-disable-extended-master-secret-server-sha
6 test-1 = 1-disable-extended-master-secret-client-sha
7 test-2 = 2-disable-extended-master-secret-both-sha
8 test-3 = 3-disable-extended-master-secret-both-resume
9 test-4 = 4-disable-extended-master-secret-server-sha2
10 test-5 = 5-disable-extended-master-secret-client-sha2
11 test-6 = 6-disable-extended-master-secret-both-sha2
12 # ===========================================================
13
14 [0-disable-extended-master-secret-server-sha]
15 ssl_conf = 0-disable-extended-master-secret-server-sha-ssl
16
17 [0-disable-extended-master-secret-server-sha-ssl]
18 server = 0-disable-extended-master-secret-server-sha-server
19 client = 0-disable-extended-master-secret-server-sha-client
20
21 [0-disable-extended-master-secret-server-sha-server]
22 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
23 CipherString = DEFAULT
24 Options = -ExtendedMasterSecret
25 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
26
27 [0-disable-extended-master-secret-server-sha-client]
28 CipherString = AES128-SHA
29 MaxProtocol = TLSv1.2
30 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
31 VerifyMode = Peer
32
33 [test-0]
34 ExpectedResult = Success
35
36
37 # ===========================================================
38
39 [1-disable-extended-master-secret-client-sha]
40 ssl_conf = 1-disable-extended-master-secret-client-sha-ssl
41
42 [1-disable-extended-master-secret-client-sha-ssl]
43 server = 1-disable-extended-master-secret-client-sha-server
44 client = 1-disable-extended-master-secret-client-sha-client
45
46 [1-disable-extended-master-secret-client-sha-server]
47 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
48 CipherString = DEFAULT
49 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
50
51 [1-disable-extended-master-secret-client-sha-client]
52 CipherString = AES128-SHA
53 MaxProtocol = TLSv1.2
54 Options = -ExtendedMasterSecret
55 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
56 VerifyMode = Peer
57
58 [test-1]
59 ExpectedResult = Success
60
61
62 # ===========================================================
63
64 [2-disable-extended-master-secret-both-sha]
65 ssl_conf = 2-disable-extended-master-secret-both-sha-ssl
66
67 [2-disable-extended-master-secret-both-sha-ssl]
68 server = 2-disable-extended-master-secret-both-sha-server
69 client = 2-disable-extended-master-secret-both-sha-client
70
71 [2-disable-extended-master-secret-both-sha-server]
72 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
73 CipherString = DEFAULT
74 Options = -ExtendedMasterSecret
75 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
76
77 [2-disable-extended-master-secret-both-sha-client]
78 CipherString = AES128-SHA
79 MaxProtocol = TLSv1.2
80 Options = -ExtendedMasterSecret
81 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
82 VerifyMode = Peer
83
84 [test-2]
85 ExpectedResult = Success
86
87
88 # ===========================================================
89
90 [3-disable-extended-master-secret-both-resume]
91 ssl_conf = 3-disable-extended-master-secret-both-resume-ssl
92
93 [3-disable-extended-master-secret-both-resume-ssl]
94 server = 3-disable-extended-master-secret-both-resume-server
95 client = 3-disable-extended-master-secret-both-resume-client
96 resume-server = 3-disable-extended-master-secret-both-resume-resume-server
97 resume-client = 3-disable-extended-master-secret-both-resume-resume-client
98
99 [3-disable-extended-master-secret-both-resume-server]
100 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
101 CipherString = DEFAULT
102 Options = -ExtendedMasterSecret
103 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
104
105 [3-disable-extended-master-secret-both-resume-resume-server]
106 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
107 CipherString = DEFAULT
108 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
109
110 [3-disable-extended-master-secret-both-resume-client]
111 CipherString = AES128-SHA
112 MaxProtocol = TLSv1.2
113 Options = -ExtendedMasterSecret
114 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
115 VerifyMode = Peer
116
117 [3-disable-extended-master-secret-both-resume-resume-client]
118 CipherString = AES128-SHA
119 MaxProtocol = TLSv1.2
120 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
121 VerifyMode = Peer
122
123 [test-3]
124 ExpectedResult = Success
125 HandshakeMode = Resume
126
127
128 # ===========================================================
129
130 [4-disable-extended-master-secret-server-sha2]
131 ssl_conf = 4-disable-extended-master-secret-server-sha2-ssl
132
133 [4-disable-extended-master-secret-server-sha2-ssl]
134 server = 4-disable-extended-master-secret-server-sha2-server
135 client = 4-disable-extended-master-secret-server-sha2-client
136
137 [4-disable-extended-master-secret-server-sha2-server]
138 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
139 CipherString = DEFAULT
140 Options = -ExtendedMasterSecret
141 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
142
143 [4-disable-extended-master-secret-server-sha2-client]
144 CipherString = AES128-SHA256
145 MaxProtocol = TLSv1.2
146 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
147 VerifyMode = Peer
148
149 [test-4]
150 ExpectedResult = Success
151
152
153 # ===========================================================
154
155 [5-disable-extended-master-secret-client-sha2]
156 ssl_conf = 5-disable-extended-master-secret-client-sha2-ssl
157
158 [5-disable-extended-master-secret-client-sha2-ssl]
159 server = 5-disable-extended-master-secret-client-sha2-server
160 client = 5-disable-extended-master-secret-client-sha2-client
161
162 [5-disable-extended-master-secret-client-sha2-server]
163 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
164 CipherString = DEFAULT
165 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
166
167 [5-disable-extended-master-secret-client-sha2-client]
168 CipherString = AES128-SHA256
169 MaxProtocol = TLSv1.2
170 Options = -ExtendedMasterSecret
171 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
172 VerifyMode = Peer
173
174 [test-5]
175 ExpectedResult = Success
176
177
178 # ===========================================================
179
180 [6-disable-extended-master-secret-both-sha2]
181 ssl_conf = 6-disable-extended-master-secret-both-sha2-ssl
182
183 [6-disable-extended-master-secret-both-sha2-ssl]
184 server = 6-disable-extended-master-secret-both-sha2-server
185 client = 6-disable-extended-master-secret-both-sha2-client
186
187 [6-disable-extended-master-secret-both-sha2-server]
188 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
189 CipherString = DEFAULT
190 Options = -ExtendedMasterSecret
191 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
192
193 [6-disable-extended-master-secret-both-sha2-client]
194 CipherString = AES128-SHA256
195 MaxProtocol = TLSv1.2
196 Options = -ExtendedMasterSecret
197 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
198 VerifyMode = Peer
199
200 [test-6]
201 ExpectedResult = Success
202
203