test/ssl-tests/05-sni.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 6
   4
   5 test-0 = 0-SNI-switch-context
   6 test-1 = 1-SNI-keep-context
   7 test-2 = 2-SNI-no-server-support
   8 test-3 = 3-SNI-no-client-support
   9 test-4 = 4-SNI-bad-sni-ignore-mismatch
  10 test-5 = 5-SNI-bad-sni-reject-mismatch
  11 # ===========================================================
  12
  13 [0-SNI-switch-context]
  14 ssl_conf = 0-SNI-switch-context-ssl
  15
  16 [0-SNI-switch-context-ssl]
  17 server = 0-SNI-switch-context-server
  18 server2 = 0-SNI-switch-context-server2
  19 client = 0-SNI-switch-context-client
  20
  21 [0-SNI-switch-context-server]
  22 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  23 CipherString = DEFAULT
  24 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  25
  26 [0-SNI-switch-context-server2]
  27 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  28 CipherString = DEFAULT
  29 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  30
  31 [0-SNI-switch-context-client]
  32 CipherString = DEFAULT
  33 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  34 VerifyMode = Peer
  35
  36 [test-0]
  37 ExpectedResult = Success
  38 ExpectedServerName = server2
  39 ServerName = server2
  40 ServerNameCallback = IgnoreMismatch
  41
  42
  43 # ===========================================================
  44
  45 [1-SNI-keep-context]
  46 ssl_conf = 1-SNI-keep-context-ssl
  47
  48 [1-SNI-keep-context-ssl]
  49 server = 1-SNI-keep-context-server
  50 server2 = 1-SNI-keep-context-server2
  51 client = 1-SNI-keep-context-client
  52
  53 [1-SNI-keep-context-server]
  54 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  55 CipherString = DEFAULT
  56 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  57
  58 [1-SNI-keep-context-server2]
  59 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  60 CipherString = DEFAULT
  61 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  62
  63 [1-SNI-keep-context-client]
  64 CipherString = DEFAULT
  65 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  66 VerifyMode = Peer
  67
  68 [test-1]
  69 ExpectedResult = Success
  70 ExpectedServerName = server1
  71 ServerName = server1
  72 ServerNameCallback = IgnoreMismatch
  73
  74
  75 # ===========================================================
  76
  77 [2-SNI-no-server-support]
  78 ssl_conf = 2-SNI-no-server-support-ssl
  79
  80 [2-SNI-no-server-support-ssl]
  81 server = 2-SNI-no-server-support-server
  82 client = 2-SNI-no-server-support-client
  83
  84 [2-SNI-no-server-support-server]
  85 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  86 CipherString = DEFAULT
  87 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  88
  89 [2-SNI-no-server-support-client]
  90 CipherString = DEFAULT
  91 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  92 VerifyMode = Peer
  93
  94 [test-2]
  95 ExpectedResult = Success
  96 ServerName = server1
  97
  98
  99 # ===========================================================
 100
 101 [3-SNI-no-client-support]
 102 ssl_conf = 3-SNI-no-client-support-ssl
 103
 104 [3-SNI-no-client-support-ssl]
 105 server = 3-SNI-no-client-support-server
 106 server2 = 3-SNI-no-client-support-server2
 107 client = 3-SNI-no-client-support-client
 108
 109 [3-SNI-no-client-support-server]
 110 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 111 CipherString = DEFAULT
 112 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 113
 114 [3-SNI-no-client-support-server2]
 115 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 116 CipherString = DEFAULT
 117 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 118
 119 [3-SNI-no-client-support-client]
 120 CipherString = DEFAULT
 121 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 122 VerifyMode = Peer
 123
 124 [test-3]
 125 ExpectedResult = Success
 126 ExpectedServerName = server1
 127 ServerNameCallback = IgnoreMismatch
 128
 129
 130 # ===========================================================
 131
 132 [4-SNI-bad-sni-ignore-mismatch]
 133 ssl_conf = 4-SNI-bad-sni-ignore-mismatch-ssl
 134
 135 [4-SNI-bad-sni-ignore-mismatch-ssl]
 136 server = 4-SNI-bad-sni-ignore-mismatch-server
 137 server2 = 4-SNI-bad-sni-ignore-mismatch-server2
 138 client = 4-SNI-bad-sni-ignore-mismatch-client
 139
 140 [4-SNI-bad-sni-ignore-mismatch-server]
 141 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 142 CipherString = DEFAULT
 143 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 144
 145 [4-SNI-bad-sni-ignore-mismatch-server2]
 146 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 147 CipherString = DEFAULT
 148 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 149
 150 [4-SNI-bad-sni-ignore-mismatch-client]
 151 CipherString = DEFAULT
 152 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 153 VerifyMode = Peer
 154
 155 [test-4]
 156 ExpectedResult = Success
 157 ExpectedServerName = server1
 158 ServerName = invalid
 159 ServerNameCallback = IgnoreMismatch
 160
 161
 162 # ===========================================================
 163
 164 [5-SNI-bad-sni-reject-mismatch]
 165 ssl_conf = 5-SNI-bad-sni-reject-mismatch-ssl
 166
 167 [5-SNI-bad-sni-reject-mismatch-ssl]
 168 server = 5-SNI-bad-sni-reject-mismatch-server
 169 server2 = 5-SNI-bad-sni-reject-mismatch-server2
 170 client = 5-SNI-bad-sni-reject-mismatch-client
 171
 172 [5-SNI-bad-sni-reject-mismatch-server]
 173 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 174 CipherString = DEFAULT
 175 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 176
 177 [5-SNI-bad-sni-reject-mismatch-server2]
 178 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 179 CipherString = DEFAULT
 180 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 181
 182 [5-SNI-bad-sni-reject-mismatch-client]
 183 CipherString = DEFAULT
 184 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 185 VerifyMode = Peer
 186
 187 [test-5]
 188 ExpectedResult = ServerFail
 189 ServerAlert = UnrecognizedName
 190 ServerName = invalid
 191 ServerNameCallback = RejectMismatch
 192
 193