# Generated with generate_ssl_tests.pl
-num_tests = 676
+num_tests = 678
test-0 = 0-version-negotiation
test-1 = 1-version-negotiation
test-673 = 673-version-negotiation
test-674 = 674-version-negotiation
test-675 = 675-version-negotiation
+test-676 = 676-ciphersuite-sanity-check-client
+test-677 = 677-ciphersuite-sanity-check-server
# ===========================================================
[0-version-negotiation]
VerifyMode = Peer
[test-108]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-109]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-114]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-115]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-119]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-120]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-123]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-124]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-126]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-127]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-128]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-129]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-134]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-135]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-140]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-141]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-145]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-146]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-149]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-150]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-152]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-153]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-154]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-155]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-264]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-265]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-270]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-271]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-275]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-276]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-279]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-280]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-282]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-283]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-284]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-285]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-290]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-291]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-296]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-297]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-301]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-302]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-305]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-306]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-308]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-309]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-310]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-311]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-394]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-395]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-400]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-401]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-405]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-406]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-409]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-410]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-412]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-413]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-414]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-415]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-420]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-421]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-426]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-427]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-431]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-432]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-435]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-436]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-438]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-439]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-440]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-441]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-495]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-498]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-499]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-501]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-504]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-505]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-506]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-509]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-510]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-513]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-514]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-516]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-517]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-518]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-519]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-521]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-524]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-525]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-527]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-530]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-531]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-532]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-535]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-536]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-539]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-540]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-542]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-543]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-544]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-545]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-573]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-574]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-576]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-577]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-579]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-580]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-582]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-583]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-584]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-585]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-587]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-588]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-589]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-591]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-592]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-594]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-595]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-596]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-597]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-599]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-600]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-602]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-603]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-605]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-606]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-608]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-609]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-610]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-611]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-613]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-614]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-615]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-617]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-618]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-620]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-621]
-ExpectedProtocol = TLSv1.2
+ExpectedProtocol = TLSv1.3
ExpectedResult = Success
VerifyMode = Peer
[test-622]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-623]
-ExpectedResult = ServerFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-624]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-625]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-626]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-627]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-628]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-629]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-630]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-631]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-632]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-633]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-634]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-635]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-636]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-637]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-638]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-639]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-640]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-641]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-642]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-643]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-644]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-645]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-646]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-647]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-648]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-649]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-650]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-651]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-652]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-653]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-654]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-655]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-656]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-657]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-658]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-659]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-660]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-661]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-662]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-663]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-664]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-665]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-666]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-667]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-668]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-669]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-670]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-671]
-ExpectedResult = ClientFail
+ExpectedResult = ServerFail
# ===========================================================
VerifyMode = Peer
[test-672]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-673]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-674]
-ExpectedResult = ClientFail
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
# ===========================================================
VerifyMode = Peer
[test-675]
+ExpectedProtocol = TLSv1.3
+ExpectedResult = Success
+
+
+# ===========================================================
+
+[676-ciphersuite-sanity-check-client]
+ssl_conf = 676-ciphersuite-sanity-check-client-ssl
+
+[676-ciphersuite-sanity-check-client-ssl]
+server = 676-ciphersuite-sanity-check-client-server
+client = 676-ciphersuite-sanity-check-client-client
+
+[676-ciphersuite-sanity-check-client-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = DEFAULT
+MaxProtocol = TLSv1.2
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[676-ciphersuite-sanity-check-client-client]
+CipherString = AES128-SHA
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-676]
ExpectedResult = ClientFail
+# ===========================================================
+
+[677-ciphersuite-sanity-check-server]
+ssl_conf = 677-ciphersuite-sanity-check-server-ssl
+
+[677-ciphersuite-sanity-check-server-ssl]
+server = 677-ciphersuite-sanity-check-server-server
+client = 677-ciphersuite-sanity-check-server-client
+
+[677-ciphersuite-sanity-check-server-server]
+Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
+CipherString = AES128-SHA
+PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
+
+[677-ciphersuite-sanity-check-server-client]
+CipherString = AES128-SHA
+MaxProtocol = TLSv1.2
+VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
+VerifyMode = Peer
+
+[test-677]
+ExpectedResult = ServerFail
+
+