test/ssl-tests/03-custom_verify.cnf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 10
   4
   5 test-0 = 0-verify-success
   6 test-1 = 1-verify-custom-reject
   7 test-2 = 2-verify-custom-allow
   8 test-3 = 3-verify-custom-retry
   9 test-4 = 4-noverify-success
  10 test-5 = 5-noverify-ignore-custom-reject
  11 test-6 = 6-noverify-accept-custom-allow
  12 test-7 = 7-verify-fail-no-root
  13 test-8 = 8-verify-custom-success-no-root
  14 test-9 = 9-verify-custom-fail-no-root
  15 # ===========================================================
  16
  17 [0-verify-success]
  18 ssl_conf = 0-verify-success-ssl
  19
  20 [0-verify-success-ssl]
  21 server = 0-verify-success-server
  22 client = 0-verify-success-client
  23
  24 [0-verify-success-server]
  25 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  26 CipherString = DEFAULT
  27 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  28
  29 [0-verify-success-client]
  30 CipherString = DEFAULT
  31 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  32 VerifyMode = Peer
  33
  34 [test-0]
  35 ExpectedResult = Success
  36
  37
  38 # ===========================================================
  39
  40 [1-verify-custom-reject]
  41 ssl_conf = 1-verify-custom-reject-ssl
  42
  43 [1-verify-custom-reject-ssl]
  44 server = 1-verify-custom-reject-server
  45 client = 1-verify-custom-reject-client
  46
  47 [1-verify-custom-reject-server]
  48 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  49 CipherString = DEFAULT
  50 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  51
  52 [1-verify-custom-reject-client]
  53 CipherString = DEFAULT
  54 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  55 VerifyMode = Peer
  56
  57 [test-1]
  58 ExpectedClientAlert = HandshakeFailure
  59 ExpectedResult = ClientFail
  60 client = 1-verify-custom-reject-client-extra
  61
  62 [1-verify-custom-reject-client-extra]
  63 VerifyCallback = RejectAll
  64
  65
  66 # ===========================================================
  67
  68 [2-verify-custom-allow]
  69 ssl_conf = 2-verify-custom-allow-ssl
  70
  71 [2-verify-custom-allow-ssl]
  72 server = 2-verify-custom-allow-server
  73 client = 2-verify-custom-allow-client
  74
  75 [2-verify-custom-allow-server]
  76 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  77 CipherString = DEFAULT
  78 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  79
  80 [2-verify-custom-allow-client]
  81 CipherString = DEFAULT
  82 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  83 VerifyMode = Peer
  84
  85 [test-2]
  86 ExpectedResult = Success
  87 client = 2-verify-custom-allow-client-extra
  88
  89 [2-verify-custom-allow-client-extra]
  90 VerifyCallback = AcceptAll
  91
  92
  93 # ===========================================================
  94
  95 [3-verify-custom-retry]
  96 ssl_conf = 3-verify-custom-retry-ssl
  97
  98 [3-verify-custom-retry-ssl]
  99 server = 3-verify-custom-retry-server
 100 client = 3-verify-custom-retry-client
 101
 102 [3-verify-custom-retry-server]
 103 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 104 CipherString = DEFAULT
 105 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 106
 107 [3-verify-custom-retry-client]
 108 CipherString = DEFAULT
 109 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 110 VerifyMode = Peer
 111
 112 [test-3]
 113 ExpectedResult = Success
 114 client = 3-verify-custom-retry-client-extra
 115
 116 [3-verify-custom-retry-client-extra]
 117 VerifyCallback = RetryOnce
 118
 119
 120 # ===========================================================
 121
 122 [4-noverify-success]
 123 ssl_conf = 4-noverify-success-ssl
 124
 125 [4-noverify-success-ssl]
 126 server = 4-noverify-success-server
 127 client = 4-noverify-success-client
 128
 129 [4-noverify-success-server]
 130 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 131 CipherString = DEFAULT
 132 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 133
 134 [4-noverify-success-client]
 135 CipherString = DEFAULT
 136
 137 [test-4]
 138 ExpectedResult = Success
 139
 140
 141 # ===========================================================
 142
 143 [5-noverify-ignore-custom-reject]
 144 ssl_conf = 5-noverify-ignore-custom-reject-ssl
 145
 146 [5-noverify-ignore-custom-reject-ssl]
 147 server = 5-noverify-ignore-custom-reject-server
 148 client = 5-noverify-ignore-custom-reject-client
 149
 150 [5-noverify-ignore-custom-reject-server]
 151 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 152 CipherString = DEFAULT
 153 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 154
 155 [5-noverify-ignore-custom-reject-client]
 156 CipherString = DEFAULT
 157
 158 [test-5]
 159 ExpectedResult = Success
 160 client = 5-noverify-ignore-custom-reject-client-extra
 161
 162 [5-noverify-ignore-custom-reject-client-extra]
 163 VerifyCallback = RejectAll
 164
 165
 166 # ===========================================================
 167
 168 [6-noverify-accept-custom-allow]
 169 ssl_conf = 6-noverify-accept-custom-allow-ssl
 170
 171 [6-noverify-accept-custom-allow-ssl]
 172 server = 6-noverify-accept-custom-allow-server
 173 client = 6-noverify-accept-custom-allow-client
 174
 175 [6-noverify-accept-custom-allow-server]
 176 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 177 CipherString = DEFAULT
 178 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 179
 180 [6-noverify-accept-custom-allow-client]
 181 CipherString = DEFAULT
 182
 183 [test-6]
 184 ExpectedResult = Success
 185 client = 6-noverify-accept-custom-allow-client-extra
 186
 187 [6-noverify-accept-custom-allow-client-extra]
 188 VerifyCallback = AcceptAll
 189
 190
 191 # ===========================================================
 192
 193 [7-verify-fail-no-root]
 194 ssl_conf = 7-verify-fail-no-root-ssl
 195
 196 [7-verify-fail-no-root-ssl]
 197 server = 7-verify-fail-no-root-server
 198 client = 7-verify-fail-no-root-client
 199
 200 [7-verify-fail-no-root-server]
 201 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 202 CipherString = DEFAULT
 203 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 204
 205 [7-verify-fail-no-root-client]
 206 CipherString = DEFAULT
 207 VerifyMode = Peer
 208
 209 [test-7]
 210 ExpectedClientAlert = UnknownCA
 211 ExpectedResult = ClientFail
 212
 213
 214 # ===========================================================
 215
 216 [8-verify-custom-success-no-root]
 217 ssl_conf = 8-verify-custom-success-no-root-ssl
 218
 219 [8-verify-custom-success-no-root-ssl]
 220 server = 8-verify-custom-success-no-root-server
 221 client = 8-verify-custom-success-no-root-client
 222
 223 [8-verify-custom-success-no-root-server]
 224 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 225 CipherString = DEFAULT
 226 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 227
 228 [8-verify-custom-success-no-root-client]
 229 CipherString = DEFAULT
 230 VerifyMode = Peer
 231
 232 [test-8]
 233 ExpectedResult = Success
 234 client = 8-verify-custom-success-no-root-client-extra
 235
 236 [8-verify-custom-success-no-root-client-extra]
 237 VerifyCallback = AcceptAll
 238
 239
 240 # ===========================================================
 241
 242 [9-verify-custom-fail-no-root]
 243 ssl_conf = 9-verify-custom-fail-no-root-ssl
 244
 245 [9-verify-custom-fail-no-root-ssl]
 246 server = 9-verify-custom-fail-no-root-server
 247 client = 9-verify-custom-fail-no-root-client
 248
 249 [9-verify-custom-fail-no-root-server]
 250 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 251 CipherString = DEFAULT
 252 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 253
 254 [9-verify-custom-fail-no-root-client]
 255 CipherString = DEFAULT
 256 VerifyMode = Peer
 257
 258 [test-9]
 259 ExpectedClientAlert = HandshakeFailure
 260 ExpectedResult = ClientFail
 261 client = 9-verify-custom-fail-no-root-client-extra
 262
 263 [9-verify-custom-fail-no-root-client-extra]
 264 VerifyCallback = RejectAll
 265
 266