SSL test framework: port SNI tests
[openssl.git] / test / ssl-tests / 05-sni.conf
1 # Generated with generate_ssl_tests.pl
2
3 num_tests = 6
4
5 test-0 = 0-SNI-switch-context
6 test-1 = 1-SNI-keep-context
7 test-2 = 2-SNI-no-server-support
8 test-3 = 3-SNI-no-client-support
9 test-4 = 4-SNI-bad-sni-ignore-mismatch
10 test-5 = 5-SNI-bad-sni-reject-mismatch
11 # ===========================================================
12
13 [0-SNI-switch-context]
14 ssl_conf = 0-SNI-switch-context-ssl
15
16 [0-SNI-switch-context-ssl]
17 server = 0-SNI-switch-context-server
18 server2 = 0-SNI-switch-context-server2
19 client = 0-SNI-switch-context-client
20
21 [0-SNI-switch-context-server]
22 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
23 CipherString = DEFAULT
24 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
25
26 [0-SNI-switch-context-server2]
27 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
28 CipherString = DEFAULT
29 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
30
31 [0-SNI-switch-context-client]
32 CipherString = DEFAULT
33 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
34 VerifyMode = Peer
35
36 [test-0]
37 ExpectedResult = Success
38 ExpectedServerName = server2
39 ServerName = server2
40 ServerNameCallback = IgnoreMismatch
41
42
43 # ===========================================================
44
45 [1-SNI-keep-context]
46 ssl_conf = 1-SNI-keep-context-ssl
47
48 [1-SNI-keep-context-ssl]
49 server = 1-SNI-keep-context-server
50 server2 = 1-SNI-keep-context-server2
51 client = 1-SNI-keep-context-client
52
53 [1-SNI-keep-context-server]
54 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
55 CipherString = DEFAULT
56 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
57
58 [1-SNI-keep-context-server2]
59 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
60 CipherString = DEFAULT
61 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
62
63 [1-SNI-keep-context-client]
64 CipherString = DEFAULT
65 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
66 VerifyMode = Peer
67
68 [test-1]
69 ExpectedResult = Success
70 ExpectedServerName = server1
71 ServerName = server1
72 ServerNameCallback = IgnoreMismatch
73
74
75 # ===========================================================
76
77 [2-SNI-no-server-support]
78 ssl_conf = 2-SNI-no-server-support-ssl
79
80 [2-SNI-no-server-support-ssl]
81 server = 2-SNI-no-server-support-server
82 client = 2-SNI-no-server-support-client
83
84 [2-SNI-no-server-support-server]
85 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
86 CipherString = DEFAULT
87 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
88
89 [2-SNI-no-server-support-client]
90 CipherString = DEFAULT
91 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
92 VerifyMode = Peer
93
94 [test-2]
95 ExpectedResult = Success
96 ServerName = server1
97
98
99 # ===========================================================
100
101 [3-SNI-no-client-support]
102 ssl_conf = 3-SNI-no-client-support-ssl
103
104 [3-SNI-no-client-support-ssl]
105 server = 3-SNI-no-client-support-server
106 server2 = 3-SNI-no-client-support-server2
107 client = 3-SNI-no-client-support-client
108
109 [3-SNI-no-client-support-server]
110 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
111 CipherString = DEFAULT
112 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
113
114 [3-SNI-no-client-support-server2]
115 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
116 CipherString = DEFAULT
117 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
118
119 [3-SNI-no-client-support-client]
120 CipherString = DEFAULT
121 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
122 VerifyMode = Peer
123
124 [test-3]
125 ExpectedResult = Success
126 ExpectedServerName = server1
127 ServerNameCallback = IgnoreMismatch
128
129
130 # ===========================================================
131
132 [4-SNI-bad-sni-ignore-mismatch]
133 ssl_conf = 4-SNI-bad-sni-ignore-mismatch-ssl
134
135 [4-SNI-bad-sni-ignore-mismatch-ssl]
136 server = 4-SNI-bad-sni-ignore-mismatch-server
137 server2 = 4-SNI-bad-sni-ignore-mismatch-server2
138 client = 4-SNI-bad-sni-ignore-mismatch-client
139
140 [4-SNI-bad-sni-ignore-mismatch-server]
141 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
142 CipherString = DEFAULT
143 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
144
145 [4-SNI-bad-sni-ignore-mismatch-server2]
146 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
147 CipherString = DEFAULT
148 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
149
150 [4-SNI-bad-sni-ignore-mismatch-client]
151 CipherString = DEFAULT
152 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
153 VerifyMode = Peer
154
155 [test-4]
156 ExpectedResult = Success
157 ExpectedServerName = server1
158 ServerName = invalid
159 ServerNameCallback = IgnoreMismatch
160
161
162 # ===========================================================
163
164 [5-SNI-bad-sni-reject-mismatch]
165 ssl_conf = 5-SNI-bad-sni-reject-mismatch-ssl
166
167 [5-SNI-bad-sni-reject-mismatch-ssl]
168 server = 5-SNI-bad-sni-reject-mismatch-server
169 server2 = 5-SNI-bad-sni-reject-mismatch-server2
170 client = 5-SNI-bad-sni-reject-mismatch-client
171
172 [5-SNI-bad-sni-reject-mismatch-server]
173 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
174 CipherString = DEFAULT
175 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
176
177 [5-SNI-bad-sni-reject-mismatch-server2]
178 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
179 CipherString = DEFAULT
180 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
181
182 [5-SNI-bad-sni-reject-mismatch-client]
183 CipherString = DEFAULT
184 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
185 VerifyMode = Peer
186
187 [test-5]
188 ExpectedResult = ServerFail
189 ServerAlert = UnrecognizedName
190 ServerName = invalid
191 ServerNameCallback = RejectMismatch
192
193