X-Git-Url: https://git.openssl.org/?p=openssl.git;a=blobdiff_plain;f=test%2Fssl-tests%2F05-sni.conf;h=a6c7f43911aa53acf80333f51d4227a2d79f9eb0;hp=d5d350e3993c5536163da12d065d277fed22c485;hb=eefc485bda4ab1ac7293b4c749c251b662d9fba8;hpb=80de0c5947cf29ef04227714f3cae5c615012449 diff --git a/test/ssl-tests/05-sni.conf b/test/ssl-tests/05-sni.conf index d5d350e399..a6c7f43911 100644 --- a/test/ssl-tests/05-sni.conf +++ b/test/ssl-tests/05-sni.conf @@ -8,9 +8,9 @@ test-2 = 2-SNI-no-server-support test-3 = 3-SNI-no-client-support test-4 = 4-SNI-bad-sni-ignore-mismatch test-5 = 5-SNI-bad-sni-reject-mismatch -test-6 = 6-SNI-bad-early-sni-ignore-mismatch -test-7 = 7-SNI-bad-early-sni-reject-mismatch -test-8 = 8-SNI-early-disable-v12 +test-6 = 6-SNI-bad-clienthello-sni-ignore-mismatch +test-7 = 7-SNI-bad-clienthello-sni-reject-mismatch +test-8 = 8-SNI-clienthello-disable-v12 # =========================================================== [0-SNI-switch-context] @@ -206,20 +206,20 @@ ServerName = invalid # =========================================================== -[6-SNI-bad-early-sni-ignore-mismatch] -ssl_conf = 6-SNI-bad-early-sni-ignore-mismatch-ssl +[6-SNI-bad-clienthello-sni-ignore-mismatch] +ssl_conf = 6-SNI-bad-clienthello-sni-ignore-mismatch-ssl -[6-SNI-bad-early-sni-ignore-mismatch-ssl] -server = 6-SNI-bad-early-sni-ignore-mismatch-server -client = 6-SNI-bad-early-sni-ignore-mismatch-client -server2 = 6-SNI-bad-early-sni-ignore-mismatch-server +[6-SNI-bad-clienthello-sni-ignore-mismatch-ssl] +server = 6-SNI-bad-clienthello-sni-ignore-mismatch-server +client = 6-SNI-bad-clienthello-sni-ignore-mismatch-client +server2 = 6-SNI-bad-clienthello-sni-ignore-mismatch-server -[6-SNI-bad-early-sni-ignore-mismatch-server] +[6-SNI-bad-clienthello-sni-ignore-mismatch-server] Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem -[6-SNI-bad-early-sni-ignore-mismatch-client] +[6-SNI-bad-clienthello-sni-ignore-mismatch-client] CipherString = DEFAULT VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem VerifyMode = Peer @@ -227,33 +227,33 @@ VerifyMode = Peer [test-6] ExpectedResult = Success ExpectedServerName = server1 -server = 6-SNI-bad-early-sni-ignore-mismatch-server-extra -server2 = 6-SNI-bad-early-sni-ignore-mismatch-server-extra -client = 6-SNI-bad-early-sni-ignore-mismatch-client-extra +server = 6-SNI-bad-clienthello-sni-ignore-mismatch-server-extra +server2 = 6-SNI-bad-clienthello-sni-ignore-mismatch-server-extra +client = 6-SNI-bad-clienthello-sni-ignore-mismatch-client-extra -[6-SNI-bad-early-sni-ignore-mismatch-server-extra] -ServerNameCallback = EarlyIgnoreMismatch +[6-SNI-bad-clienthello-sni-ignore-mismatch-server-extra] +ServerNameCallback = ClientHelloIgnoreMismatch -[6-SNI-bad-early-sni-ignore-mismatch-client-extra] +[6-SNI-bad-clienthello-sni-ignore-mismatch-client-extra] ServerName = invalid # =========================================================== -[7-SNI-bad-early-sni-reject-mismatch] -ssl_conf = 7-SNI-bad-early-sni-reject-mismatch-ssl +[7-SNI-bad-clienthello-sni-reject-mismatch] +ssl_conf = 7-SNI-bad-clienthello-sni-reject-mismatch-ssl -[7-SNI-bad-early-sni-reject-mismatch-ssl] -server = 7-SNI-bad-early-sni-reject-mismatch-server -client = 7-SNI-bad-early-sni-reject-mismatch-client -server2 = 7-SNI-bad-early-sni-reject-mismatch-server +[7-SNI-bad-clienthello-sni-reject-mismatch-ssl] +server = 7-SNI-bad-clienthello-sni-reject-mismatch-server +client = 7-SNI-bad-clienthello-sni-reject-mismatch-client +server2 = 7-SNI-bad-clienthello-sni-reject-mismatch-server -[7-SNI-bad-early-sni-reject-mismatch-server] +[7-SNI-bad-clienthello-sni-reject-mismatch-server] Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem -[7-SNI-bad-early-sni-reject-mismatch-client] +[7-SNI-bad-clienthello-sni-reject-mismatch-client] CipherString = DEFAULT VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem VerifyMode = Peer @@ -261,33 +261,33 @@ VerifyMode = Peer [test-7] ExpectedResult = ServerFail ExpectedServerAlert = UnrecognizedName -server = 7-SNI-bad-early-sni-reject-mismatch-server-extra -server2 = 7-SNI-bad-early-sni-reject-mismatch-server-extra -client = 7-SNI-bad-early-sni-reject-mismatch-client-extra +server = 7-SNI-bad-clienthello-sni-reject-mismatch-server-extra +server2 = 7-SNI-bad-clienthello-sni-reject-mismatch-server-extra +client = 7-SNI-bad-clienthello-sni-reject-mismatch-client-extra -[7-SNI-bad-early-sni-reject-mismatch-server-extra] -ServerNameCallback = EarlyRejectMismatch +[7-SNI-bad-clienthello-sni-reject-mismatch-server-extra] +ServerNameCallback = ClientHelloRejectMismatch -[7-SNI-bad-early-sni-reject-mismatch-client-extra] +[7-SNI-bad-clienthello-sni-reject-mismatch-client-extra] ServerName = invalid # =========================================================== -[8-SNI-early-disable-v12] -ssl_conf = 8-SNI-early-disable-v12-ssl +[8-SNI-clienthello-disable-v12] +ssl_conf = 8-SNI-clienthello-disable-v12-ssl -[8-SNI-early-disable-v12-ssl] -server = 8-SNI-early-disable-v12-server -client = 8-SNI-early-disable-v12-client -server2 = 8-SNI-early-disable-v12-server +[8-SNI-clienthello-disable-v12-ssl] +server = 8-SNI-clienthello-disable-v12-server +client = 8-SNI-clienthello-disable-v12-client +server2 = 8-SNI-clienthello-disable-v12-server -[8-SNI-early-disable-v12-server] +[8-SNI-clienthello-disable-v12-server] Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem -[8-SNI-early-disable-v12-client] +[8-SNI-clienthello-disable-v12-client] CipherString = DEFAULT VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem VerifyMode = Peer @@ -295,14 +295,14 @@ VerifyMode = Peer [test-8] ExpectedProtocol = TLSv1.1 ExpectedServerName = server2 -server = 8-SNI-early-disable-v12-server-extra -server2 = 8-SNI-early-disable-v12-server-extra -client = 8-SNI-early-disable-v12-client-extra +server = 8-SNI-clienthello-disable-v12-server-extra +server2 = 8-SNI-clienthello-disable-v12-server-extra +client = 8-SNI-clienthello-disable-v12-client-extra -[8-SNI-early-disable-v12-server-extra] -ServerNameCallback = EarlyNoV12 +[8-SNI-clienthello-disable-v12-server-extra] +ServerNameCallback = ClientHelloNoV12 -[8-SNI-early-disable-v12-client-extra] +[8-SNI-clienthello-disable-v12-client-extra] ServerName = server2