test/ssl-tests/03-custom_verify.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 9
   4
   5 test-0 = 0-verify-success
   6 test-1 = 1-verify-custom-reject
   7 test-2 = 2-verify-custom-allow
   8 test-3 = 3-noverify-success
   9 test-4 = 4-noverify-ignore-custom-reject
  10 test-5 = 5-noverify-accept-custom-allow
  11 test-6 = 6-verify-fail-no-root
  12 test-7 = 7-verify-custom-success-no-root
  13 test-8 = 8-verify-custom-fail-no-root
  14 # ===========================================================
  15
  16 [0-verify-success]
  17 ssl_conf = 0-verify-success-ssl
  18
  19 [0-verify-success-ssl]
  20 server = 0-verify-success-server
  21 client = 0-verify-success-client
  22
  23 [0-verify-success-server]
  24 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  25 CipherString = DEFAULT
  26 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  27
  28 [0-verify-success-client]
  29 CipherString = DEFAULT
  30 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  31 VerifyMode = Peer
  32
  33 [test-0]
  34 ExpectedResult = Success
  35
  36
  37 # ===========================================================
  38
  39 [1-verify-custom-reject]
  40 ssl_conf = 1-verify-custom-reject-ssl
  41
  42 [1-verify-custom-reject-ssl]
  43 server = 1-verify-custom-reject-server
  44 client = 1-verify-custom-reject-client
  45
  46 [1-verify-custom-reject-server]
  47 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  48 CipherString = DEFAULT
  49 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  50
  51 [1-verify-custom-reject-client]
  52 CipherString = DEFAULT
  53 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  54 VerifyMode = Peer
  55
  56 [test-1]
  57 ClientAlert = HandshakeFailure
  58 ClientVerifyCallback = RejectAll
  59 ExpectedResult = ClientFail
  60
  61
  62 # ===========================================================
  63
  64 [2-verify-custom-allow]
  65 ssl_conf = 2-verify-custom-allow-ssl
  66
  67 [2-verify-custom-allow-ssl]
  68 server = 2-verify-custom-allow-server
  69 client = 2-verify-custom-allow-client
  70
  71 [2-verify-custom-allow-server]
  72 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  73 CipherString = DEFAULT
  74 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  75
  76 [2-verify-custom-allow-client]
  77 CipherString = DEFAULT
  78 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  79 VerifyMode = Peer
  80
  81 [test-2]
  82 ClientVerifyCallback = AcceptAll
  83 ExpectedResult = Success
  84
  85
  86 # ===========================================================
  87
  88 [3-noverify-success]
  89 ssl_conf = 3-noverify-success-ssl
  90
  91 [3-noverify-success-ssl]
  92 server = 3-noverify-success-server
  93 client = 3-noverify-success-client
  94
  95 [3-noverify-success-server]
  96 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  97 CipherString = DEFAULT
  98 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  99
 100 [3-noverify-success-client]
 101 CipherString = DEFAULT
 102
 103 [test-3]
 104 ExpectedResult = Success
 105
 106
 107 # ===========================================================
 108
 109 [4-noverify-ignore-custom-reject]
 110 ssl_conf = 4-noverify-ignore-custom-reject-ssl
 111
 112 [4-noverify-ignore-custom-reject-ssl]
 113 server = 4-noverify-ignore-custom-reject-server
 114 client = 4-noverify-ignore-custom-reject-client
 115
 116 [4-noverify-ignore-custom-reject-server]
 117 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 118 CipherString = DEFAULT
 119 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 120
 121 [4-noverify-ignore-custom-reject-client]
 122 CipherString = DEFAULT
 123
 124 [test-4]
 125 ClientVerifyCallback = RejectAll
 126 ExpectedResult = Success
 127
 128
 129 # ===========================================================
 130
 131 [5-noverify-accept-custom-allow]
 132 ssl_conf = 5-noverify-accept-custom-allow-ssl
 133
 134 [5-noverify-accept-custom-allow-ssl]
 135 server = 5-noverify-accept-custom-allow-server
 136 client = 5-noverify-accept-custom-allow-client
 137
 138 [5-noverify-accept-custom-allow-server]
 139 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 140 CipherString = DEFAULT
 141 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 142
 143 [5-noverify-accept-custom-allow-client]
 144 CipherString = DEFAULT
 145
 146 [test-5]
 147 ClientVerifyCallback = AcceptAll
 148 ExpectedResult = Success
 149
 150
 151 # ===========================================================
 152
 153 [6-verify-fail-no-root]
 154 ssl_conf = 6-verify-fail-no-root-ssl
 155
 156 [6-verify-fail-no-root-ssl]
 157 server = 6-verify-fail-no-root-server
 158 client = 6-verify-fail-no-root-client
 159
 160 [6-verify-fail-no-root-server]
 161 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 162 CipherString = DEFAULT
 163 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 164
 165 [6-verify-fail-no-root-client]
 166 CipherString = DEFAULT
 167 VerifyMode = Peer
 168
 169 [test-6]
 170 ClientAlert = UnknownCA
 171 ExpectedResult = ClientFail
 172
 173
 174 # ===========================================================
 175
 176 [7-verify-custom-success-no-root]
 177 ssl_conf = 7-verify-custom-success-no-root-ssl
 178
 179 [7-verify-custom-success-no-root-ssl]
 180 server = 7-verify-custom-success-no-root-server
 181 client = 7-verify-custom-success-no-root-client
 182
 183 [7-verify-custom-success-no-root-server]
 184 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 185 CipherString = DEFAULT
 186 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 187
 188 [7-verify-custom-success-no-root-client]
 189 CipherString = DEFAULT
 190 VerifyMode = Peer
 191
 192 [test-7]
 193 ClientVerifyCallback = AcceptAll
 194 ExpectedResult = Success
 195
 196
 197 # ===========================================================
 198
 199 [8-verify-custom-fail-no-root]
 200 ssl_conf = 8-verify-custom-fail-no-root-ssl
 201
 202 [8-verify-custom-fail-no-root-ssl]
 203 server = 8-verify-custom-fail-no-root-server
 204 client = 8-verify-custom-fail-no-root-client
 205
 206 [8-verify-custom-fail-no-root-server]
 207 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 208 CipherString = DEFAULT
 209 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 210
 211 [8-verify-custom-fail-no-root-client]
 212 CipherString = DEFAULT
 213 VerifyMode = Peer
 214
 215 [test-8]
 216 ClientAlert = HandshakeFailure
 217 ClientVerifyCallback = RejectAll
 218 ExpectedResult = ClientFail
 219
 220