test/ssl-tests/08-npn.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 12
   4
   5 test-0 = 0-npn-simple
   6 test-1 = 1-npn-client-finds-match
   7 test-2 = 2-npn-client-honours-server-pref
   8 test-3 = 3-npn-client-first-pref-on-mismatch
   9 test-4 = 4-npn-no-server-support
  10 test-5 = 5-npn-no-client-support
  11 test-6 = 6-npn-with-sni-no-context-switch
  12 test-7 = 7-npn-with-sni-context-switch
  13 test-8 = 8-npn-selected-sni-server-supports-npn
  14 test-9 = 9-npn-selected-sni-server-does-not-support-npn
  15 test-10 = 10-alpn-preferred-over-npn
  16 test-11 = 11-sni-npn-preferred-over-alpn
  17 # ===========================================================
  18
  19 [0-npn-simple]
  20 ssl_conf = 0-npn-simple-ssl
  21
  22 [0-npn-simple-ssl]
  23 server = 0-npn-simple-server
  24 client = 0-npn-simple-client
  25
  26 [0-npn-simple-server]
  27 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  28 CipherString = DEFAULT
  29 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  30
  31 [0-npn-simple-client]
  32 CipherString = DEFAULT
  33 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  34 VerifyMode = Peer
  35
  36 [test-0]
  37 ExpectedNPNProtocol = foo
  38 server = 0-npn-simple-server-extra
  39 client = 0-npn-simple-client-extra
  40
  41 [0-npn-simple-server-extra]
  42 NPNProtocols = foo
  43
  44 [0-npn-simple-client-extra]
  45 NPNProtocols = foo
  46
  47
  48 # ===========================================================
  49
  50 [1-npn-client-finds-match]
  51 ssl_conf = 1-npn-client-finds-match-ssl
  52
  53 [1-npn-client-finds-match-ssl]
  54 server = 1-npn-client-finds-match-server
  55 client = 1-npn-client-finds-match-client
  56
  57 [1-npn-client-finds-match-server]
  58 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  59 CipherString = DEFAULT
  60 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  61
  62 [1-npn-client-finds-match-client]
  63 CipherString = DEFAULT
  64 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  65 VerifyMode = Peer
  66
  67 [test-1]
  68 ExpectedNPNProtocol = bar
  69 server = 1-npn-client-finds-match-server-extra
  70 client = 1-npn-client-finds-match-client-extra
  71
  72 [1-npn-client-finds-match-server-extra]
  73 NPNProtocols = baz,bar
  74
  75 [1-npn-client-finds-match-client-extra]
  76 NPNProtocols = foo,bar
  77
  78
  79 # ===========================================================
  80
  81 [2-npn-client-honours-server-pref]
  82 ssl_conf = 2-npn-client-honours-server-pref-ssl
  83
  84 [2-npn-client-honours-server-pref-ssl]
  85 server = 2-npn-client-honours-server-pref-server
  86 client = 2-npn-client-honours-server-pref-client
  87
  88 [2-npn-client-honours-server-pref-server]
  89 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  90 CipherString = DEFAULT
  91 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  92
  93 [2-npn-client-honours-server-pref-client]
  94 CipherString = DEFAULT
  95 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  96 VerifyMode = Peer
  97
  98 [test-2]
  99 ExpectedNPNProtocol = bar
 100 server = 2-npn-client-honours-server-pref-server-extra
 101 client = 2-npn-client-honours-server-pref-client-extra
 102
 103 [2-npn-client-honours-server-pref-server-extra]
 104 NPNProtocols = bar,foo
 105
 106 [2-npn-client-honours-server-pref-client-extra]
 107 NPNProtocols = foo,bar
 108
 109
 110 # ===========================================================
 111
 112 [3-npn-client-first-pref-on-mismatch]
 113 ssl_conf = 3-npn-client-first-pref-on-mismatch-ssl
 114
 115 [3-npn-client-first-pref-on-mismatch-ssl]
 116 server = 3-npn-client-first-pref-on-mismatch-server
 117 client = 3-npn-client-first-pref-on-mismatch-client
 118
 119 [3-npn-client-first-pref-on-mismatch-server]
 120 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 121 CipherString = DEFAULT
 122 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 123
 124 [3-npn-client-first-pref-on-mismatch-client]
 125 CipherString = DEFAULT
 126 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 127 VerifyMode = Peer
 128
 129 [test-3]
 130 ExpectedNPNProtocol = foo
 131 server = 3-npn-client-first-pref-on-mismatch-server-extra
 132 client = 3-npn-client-first-pref-on-mismatch-client-extra
 133
 134 [3-npn-client-first-pref-on-mismatch-server-extra]
 135 NPNProtocols = baz
 136
 137 [3-npn-client-first-pref-on-mismatch-client-extra]
 138 NPNProtocols = foo,bar
 139
 140
 141 # ===========================================================
 142
 143 [4-npn-no-server-support]
 144 ssl_conf = 4-npn-no-server-support-ssl
 145
 146 [4-npn-no-server-support-ssl]
 147 server = 4-npn-no-server-support-server
 148 client = 4-npn-no-server-support-client
 149
 150 [4-npn-no-server-support-server]
 151 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 152 CipherString = DEFAULT
 153 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 154
 155 [4-npn-no-server-support-client]
 156 CipherString = DEFAULT
 157 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 158 VerifyMode = Peer
 159
 160 [test-4]
 161 client = 4-npn-no-server-support-client-extra
 162
 163 [4-npn-no-server-support-client-extra]
 164 NPNProtocols = foo
 165
 166
 167 # ===========================================================
 168
 169 [5-npn-no-client-support]
 170 ssl_conf = 5-npn-no-client-support-ssl
 171
 172 [5-npn-no-client-support-ssl]
 173 server = 5-npn-no-client-support-server
 174 client = 5-npn-no-client-support-client
 175
 176 [5-npn-no-client-support-server]
 177 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 178 CipherString = DEFAULT
 179 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 180
 181 [5-npn-no-client-support-client]
 182 CipherString = DEFAULT
 183 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 184 VerifyMode = Peer
 185
 186 [test-5]
 187 server = 5-npn-no-client-support-server-extra
 188
 189 [5-npn-no-client-support-server-extra]
 190 NPNProtocols = foo
 191
 192
 193 # ===========================================================
 194
 195 [6-npn-with-sni-no-context-switch]
 196 ssl_conf = 6-npn-with-sni-no-context-switch-ssl
 197
 198 [6-npn-with-sni-no-context-switch-ssl]
 199 server = 6-npn-with-sni-no-context-switch-server
 200 client = 6-npn-with-sni-no-context-switch-client
 201 server2 = 6-npn-with-sni-no-context-switch-server2
 202
 203 [6-npn-with-sni-no-context-switch-server]
 204 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 205 CipherString = DEFAULT
 206 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 207
 208 [6-npn-with-sni-no-context-switch-server2]
 209 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 210 CipherString = DEFAULT
 211 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 212
 213 [6-npn-with-sni-no-context-switch-client]
 214 CipherString = DEFAULT
 215 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 216 VerifyMode = Peer
 217
 218 [test-6]
 219 ExpectedNPNProtocol = foo
 220 ExpectedServerName = server1
 221 server = 6-npn-with-sni-no-context-switch-server-extra
 222 server2 = 6-npn-with-sni-no-context-switch-server2-extra
 223 client = 6-npn-with-sni-no-context-switch-client-extra
 224
 225 [6-npn-with-sni-no-context-switch-server-extra]
 226 NPNProtocols = foo
 227 ServerNameCallback = IgnoreMismatch
 228
 229 [6-npn-with-sni-no-context-switch-server2-extra]
 230 NPNProtocols = bar
 231
 232 [6-npn-with-sni-no-context-switch-client-extra]
 233 NPNProtocols = foo,bar
 234 ServerName = server1
 235
 236
 237 # ===========================================================
 238
 239 [7-npn-with-sni-context-switch]
 240 ssl_conf = 7-npn-with-sni-context-switch-ssl
 241
 242 [7-npn-with-sni-context-switch-ssl]
 243 server = 7-npn-with-sni-context-switch-server
 244 client = 7-npn-with-sni-context-switch-client
 245 server2 = 7-npn-with-sni-context-switch-server2
 246
 247 [7-npn-with-sni-context-switch-server]
 248 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 249 CipherString = DEFAULT
 250 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 251
 252 [7-npn-with-sni-context-switch-server2]
 253 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 254 CipherString = DEFAULT
 255 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 256
 257 [7-npn-with-sni-context-switch-client]
 258 CipherString = DEFAULT
 259 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 260 VerifyMode = Peer
 261
 262 [test-7]
 263 ExpectedNPNProtocol = bar
 264 ExpectedServerName = server2
 265 server = 7-npn-with-sni-context-switch-server-extra
 266 server2 = 7-npn-with-sni-context-switch-server2-extra
 267 client = 7-npn-with-sni-context-switch-client-extra
 268
 269 [7-npn-with-sni-context-switch-server-extra]
 270 NPNProtocols = foo
 271 ServerNameCallback = IgnoreMismatch
 272
 273 [7-npn-with-sni-context-switch-server2-extra]
 274 NPNProtocols = bar
 275
 276 [7-npn-with-sni-context-switch-client-extra]
 277 NPNProtocols = foo,bar
 278 ServerName = server2
 279
 280
 281 # ===========================================================
 282
 283 [8-npn-selected-sni-server-supports-npn]
 284 ssl_conf = 8-npn-selected-sni-server-supports-npn-ssl
 285
 286 [8-npn-selected-sni-server-supports-npn-ssl]
 287 server = 8-npn-selected-sni-server-supports-npn-server
 288 client = 8-npn-selected-sni-server-supports-npn-client
 289 server2 = 8-npn-selected-sni-server-supports-npn-server2
 290
 291 [8-npn-selected-sni-server-supports-npn-server]
 292 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 293 CipherString = DEFAULT
 294 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 295
 296 [8-npn-selected-sni-server-supports-npn-server2]
 297 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 298 CipherString = DEFAULT
 299 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 300
 301 [8-npn-selected-sni-server-supports-npn-client]
 302 CipherString = DEFAULT
 303 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 304 VerifyMode = Peer
 305
 306 [test-8]
 307 ExpectedNPNProtocol = bar
 308 ExpectedServerName = server2
 309 server = 8-npn-selected-sni-server-supports-npn-server-extra
 310 server2 = 8-npn-selected-sni-server-supports-npn-server2-extra
 311 client = 8-npn-selected-sni-server-supports-npn-client-extra
 312
 313 [8-npn-selected-sni-server-supports-npn-server-extra]
 314 ServerNameCallback = IgnoreMismatch
 315
 316 [8-npn-selected-sni-server-supports-npn-server2-extra]
 317 NPNProtocols = bar
 318
 319 [8-npn-selected-sni-server-supports-npn-client-extra]
 320 NPNProtocols = foo,bar
 321 ServerName = server2
 322
 323
 324 # ===========================================================
 325
 326 [9-npn-selected-sni-server-does-not-support-npn]
 327 ssl_conf = 9-npn-selected-sni-server-does-not-support-npn-ssl
 328
 329 [9-npn-selected-sni-server-does-not-support-npn-ssl]
 330 server = 9-npn-selected-sni-server-does-not-support-npn-server
 331 client = 9-npn-selected-sni-server-does-not-support-npn-client
 332 server2 = 9-npn-selected-sni-server-does-not-support-npn-server2
 333
 334 [9-npn-selected-sni-server-does-not-support-npn-server]
 335 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 336 CipherString = DEFAULT
 337 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 338
 339 [9-npn-selected-sni-server-does-not-support-npn-server2]
 340 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 341 CipherString = DEFAULT
 342 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 343
 344 [9-npn-selected-sni-server-does-not-support-npn-client]
 345 CipherString = DEFAULT
 346 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 347 VerifyMode = Peer
 348
 349 [test-9]
 350 ExpectedServerName = server2
 351 server = 9-npn-selected-sni-server-does-not-support-npn-server-extra
 352 client = 9-npn-selected-sni-server-does-not-support-npn-client-extra
 353
 354 [9-npn-selected-sni-server-does-not-support-npn-server-extra]
 355 NPNProtocols = bar
 356 ServerNameCallback = IgnoreMismatch
 357
 358 [9-npn-selected-sni-server-does-not-support-npn-client-extra]
 359 NPNProtocols = foo,bar
 360 ServerName = server2
 361
 362
 363 # ===========================================================
 364
 365 [10-alpn-preferred-over-npn]
 366 ssl_conf = 10-alpn-preferred-over-npn-ssl
 367
 368 [10-alpn-preferred-over-npn-ssl]
 369 server = 10-alpn-preferred-over-npn-server
 370 client = 10-alpn-preferred-over-npn-client
 371
 372 [10-alpn-preferred-over-npn-server]
 373 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 374 CipherString = DEFAULT
 375 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 376
 377 [10-alpn-preferred-over-npn-client]
 378 CipherString = DEFAULT
 379 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 380 VerifyMode = Peer
 381
 382 [test-10]
 383 ExpectedALPNProtocol = foo
 384 server = 10-alpn-preferred-over-npn-server-extra
 385 client = 10-alpn-preferred-over-npn-client-extra
 386
 387 [10-alpn-preferred-over-npn-server-extra]
 388 ALPNProtocols = foo
 389 NPNProtocols = bar
 390
 391 [10-alpn-preferred-over-npn-client-extra]
 392 ALPNProtocols = foo
 393 NPNProtocols = bar
 394
 395
 396 # ===========================================================
 397
 398 [11-sni-npn-preferred-over-alpn]
 399 ssl_conf = 11-sni-npn-preferred-over-alpn-ssl
 400
 401 [11-sni-npn-preferred-over-alpn-ssl]
 402 server = 11-sni-npn-preferred-over-alpn-server
 403 client = 11-sni-npn-preferred-over-alpn-client
 404 server2 = 11-sni-npn-preferred-over-alpn-server2
 405
 406 [11-sni-npn-preferred-over-alpn-server]
 407 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 408 CipherString = DEFAULT
 409 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 410
 411 [11-sni-npn-preferred-over-alpn-server2]
 412 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 413 CipherString = DEFAULT
 414 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 415
 416 [11-sni-npn-preferred-over-alpn-client]
 417 CipherString = DEFAULT
 418 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 419 VerifyMode = Peer
 420
 421 [test-11]
 422 ExpectedNPNProtocol = bar
 423 ExpectedServerName = server2
 424 server = 11-sni-npn-preferred-over-alpn-server-extra
 425 server2 = 11-sni-npn-preferred-over-alpn-server2-extra
 426 client = 11-sni-npn-preferred-over-alpn-client-extra
 427
 428 [11-sni-npn-preferred-over-alpn-server-extra]
 429 ALPNProtocols = foo
 430 ServerNameCallback = IgnoreMismatch
 431
 432 [11-sni-npn-preferred-over-alpn-server2-extra]
 433 NPNProtocols = bar
 434
 435 [11-sni-npn-preferred-over-alpn-client-extra]
 436 ALPNProtocols = foo
 437 NPNProtocols = bar
 438 ServerName = server2
 439
 440