test/ssl-tests/08-npn.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 20
   4
   5 test-0 = 0-npn-simple
   6 test-1 = 1-npn-client-finds-match
   7 test-2 = 2-npn-client-honours-server-pref
   8 test-3 = 3-npn-client-first-pref-on-mismatch
   9 test-4 = 4-npn-no-server-support
  10 test-5 = 5-npn-no-client-support
  11 test-6 = 6-npn-with-sni-no-context-switch
  12 test-7 = 7-npn-with-sni-context-switch
  13 test-8 = 8-npn-selected-sni-server-supports-npn
  14 test-9 = 9-npn-selected-sni-server-does-not-support-npn
  15 test-10 = 10-alpn-preferred-over-npn
  16 test-11 = 11-sni-npn-preferred-over-alpn
  17 test-12 = 12-npn-simple-resumption
  18 test-13 = 13-npn-server-switch-resumption
  19 test-14 = 14-npn-client-switch-resumption
  20 test-15 = 15-npn-client-first-pref-on-mismatch-resumption
  21 test-16 = 16-npn-no-server-support-resumption
  22 test-17 = 17-npn-no-client-support-resumption
  23 test-18 = 18-alpn-preferred-over-npn-resumption
  24 test-19 = 19-npn-used-if-alpn-not-supported-resumption
  25 # ===========================================================
  26
  27 [0-npn-simple]
  28 ssl_conf = 0-npn-simple-ssl
  29
  30 [0-npn-simple-ssl]
  31 server = 0-npn-simple-server
  32 client = 0-npn-simple-client
  33
  34 [0-npn-simple-server]
  35 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  36 CipherString = DEFAULT
  37 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  38
  39 [0-npn-simple-client]
  40 CipherString = DEFAULT
  41 MaxProtocol = TLSv1.2
  42 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  43 VerifyMode = Peer
  44
  45 [test-0]
  46 ExpectedNPNProtocol = foo
  47 server = 0-npn-simple-server-extra
  48 client = 0-npn-simple-client-extra
  49
  50 [0-npn-simple-server-extra]
  51 NPNProtocols = foo
  52
  53 [0-npn-simple-client-extra]
  54 NPNProtocols = foo
  55
  56
  57 # ===========================================================
  58
  59 [1-npn-client-finds-match]
  60 ssl_conf = 1-npn-client-finds-match-ssl
  61
  62 [1-npn-client-finds-match-ssl]
  63 server = 1-npn-client-finds-match-server
  64 client = 1-npn-client-finds-match-client
  65
  66 [1-npn-client-finds-match-server]
  67 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  68 CipherString = DEFAULT
  69 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  70
  71 [1-npn-client-finds-match-client]
  72 CipherString = DEFAULT
  73 MaxProtocol = TLSv1.2
  74 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  75 VerifyMode = Peer
  76
  77 [test-1]
  78 ExpectedNPNProtocol = bar
  79 server = 1-npn-client-finds-match-server-extra
  80 client = 1-npn-client-finds-match-client-extra
  81
  82 [1-npn-client-finds-match-server-extra]
  83 NPNProtocols = baz,bar
  84
  85 [1-npn-client-finds-match-client-extra]
  86 NPNProtocols = foo,bar
  87
  88
  89 # ===========================================================
  90
  91 [2-npn-client-honours-server-pref]
  92 ssl_conf = 2-npn-client-honours-server-pref-ssl
  93
  94 [2-npn-client-honours-server-pref-ssl]
  95 server = 2-npn-client-honours-server-pref-server
  96 client = 2-npn-client-honours-server-pref-client
  97
  98 [2-npn-client-honours-server-pref-server]
  99 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 100 CipherString = DEFAULT
 101 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 102
 103 [2-npn-client-honours-server-pref-client]
 104 CipherString = DEFAULT
 105 MaxProtocol = TLSv1.2
 106 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 107 VerifyMode = Peer
 108
 109 [test-2]
 110 ExpectedNPNProtocol = bar
 111 server = 2-npn-client-honours-server-pref-server-extra
 112 client = 2-npn-client-honours-server-pref-client-extra
 113
 114 [2-npn-client-honours-server-pref-server-extra]
 115 NPNProtocols = bar,foo
 116
 117 [2-npn-client-honours-server-pref-client-extra]
 118 NPNProtocols = foo,bar
 119
 120
 121 # ===========================================================
 122
 123 [3-npn-client-first-pref-on-mismatch]
 124 ssl_conf = 3-npn-client-first-pref-on-mismatch-ssl
 125
 126 [3-npn-client-first-pref-on-mismatch-ssl]
 127 server = 3-npn-client-first-pref-on-mismatch-server
 128 client = 3-npn-client-first-pref-on-mismatch-client
 129
 130 [3-npn-client-first-pref-on-mismatch-server]
 131 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 132 CipherString = DEFAULT
 133 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 134
 135 [3-npn-client-first-pref-on-mismatch-client]
 136 CipherString = DEFAULT
 137 MaxProtocol = TLSv1.2
 138 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 139 VerifyMode = Peer
 140
 141 [test-3]
 142 ExpectedNPNProtocol = foo
 143 server = 3-npn-client-first-pref-on-mismatch-server-extra
 144 client = 3-npn-client-first-pref-on-mismatch-client-extra
 145
 146 [3-npn-client-first-pref-on-mismatch-server-extra]
 147 NPNProtocols = baz
 148
 149 [3-npn-client-first-pref-on-mismatch-client-extra]
 150 NPNProtocols = foo,bar
 151
 152
 153 # ===========================================================
 154
 155 [4-npn-no-server-support]
 156 ssl_conf = 4-npn-no-server-support-ssl
 157
 158 [4-npn-no-server-support-ssl]
 159 server = 4-npn-no-server-support-server
 160 client = 4-npn-no-server-support-client
 161
 162 [4-npn-no-server-support-server]
 163 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 164 CipherString = DEFAULT
 165 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 166
 167 [4-npn-no-server-support-client]
 168 CipherString = DEFAULT
 169 MaxProtocol = TLSv1.2
 170 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 171 VerifyMode = Peer
 172
 173 [test-4]
 174 client = 4-npn-no-server-support-client-extra
 175
 176 [4-npn-no-server-support-client-extra]
 177 NPNProtocols = foo
 178
 179
 180 # ===========================================================
 181
 182 [5-npn-no-client-support]
 183 ssl_conf = 5-npn-no-client-support-ssl
 184
 185 [5-npn-no-client-support-ssl]
 186 server = 5-npn-no-client-support-server
 187 client = 5-npn-no-client-support-client
 188
 189 [5-npn-no-client-support-server]
 190 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 191 CipherString = DEFAULT
 192 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 193
 194 [5-npn-no-client-support-client]
 195 CipherString = DEFAULT
 196 MaxProtocol = TLSv1.2
 197 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 198 VerifyMode = Peer
 199
 200 [test-5]
 201 server = 5-npn-no-client-support-server-extra
 202
 203 [5-npn-no-client-support-server-extra]
 204 NPNProtocols = foo
 205
 206
 207 # ===========================================================
 208
 209 [6-npn-with-sni-no-context-switch]
 210 ssl_conf = 6-npn-with-sni-no-context-switch-ssl
 211
 212 [6-npn-with-sni-no-context-switch-ssl]
 213 server = 6-npn-with-sni-no-context-switch-server
 214 client = 6-npn-with-sni-no-context-switch-client
 215 server2 = 6-npn-with-sni-no-context-switch-server2
 216
 217 [6-npn-with-sni-no-context-switch-server]
 218 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 219 CipherString = DEFAULT
 220 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 221
 222 [6-npn-with-sni-no-context-switch-server2]
 223 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 224 CipherString = DEFAULT
 225 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 226
 227 [6-npn-with-sni-no-context-switch-client]
 228 CipherString = DEFAULT
 229 MaxProtocol = TLSv1.2
 230 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 231 VerifyMode = Peer
 232
 233 [test-6]
 234 ExpectedNPNProtocol = foo
 235 ExpectedServerName = server1
 236 server = 6-npn-with-sni-no-context-switch-server-extra
 237 server2 = 6-npn-with-sni-no-context-switch-server2-extra
 238 client = 6-npn-with-sni-no-context-switch-client-extra
 239
 240 [6-npn-with-sni-no-context-switch-server-extra]
 241 NPNProtocols = foo
 242 ServerNameCallback = IgnoreMismatch
 243
 244 [6-npn-with-sni-no-context-switch-server2-extra]
 245 NPNProtocols = bar
 246
 247 [6-npn-with-sni-no-context-switch-client-extra]
 248 NPNProtocols = foo,bar
 249 ServerName = server1
 250
 251
 252 # ===========================================================
 253
 254 [7-npn-with-sni-context-switch]
 255 ssl_conf = 7-npn-with-sni-context-switch-ssl
 256
 257 [7-npn-with-sni-context-switch-ssl]
 258 server = 7-npn-with-sni-context-switch-server
 259 client = 7-npn-with-sni-context-switch-client
 260 server2 = 7-npn-with-sni-context-switch-server2
 261
 262 [7-npn-with-sni-context-switch-server]
 263 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 264 CipherString = DEFAULT
 265 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 266
 267 [7-npn-with-sni-context-switch-server2]
 268 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 269 CipherString = DEFAULT
 270 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 271
 272 [7-npn-with-sni-context-switch-client]
 273 CipherString = DEFAULT
 274 MaxProtocol = TLSv1.2
 275 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 276 VerifyMode = Peer
 277
 278 [test-7]
 279 ExpectedNPNProtocol = bar
 280 ExpectedServerName = server2
 281 server = 7-npn-with-sni-context-switch-server-extra
 282 server2 = 7-npn-with-sni-context-switch-server2-extra
 283 client = 7-npn-with-sni-context-switch-client-extra
 284
 285 [7-npn-with-sni-context-switch-server-extra]
 286 NPNProtocols = foo
 287 ServerNameCallback = IgnoreMismatch
 288
 289 [7-npn-with-sni-context-switch-server2-extra]
 290 NPNProtocols = bar
 291
 292 [7-npn-with-sni-context-switch-client-extra]
 293 NPNProtocols = foo,bar
 294 ServerName = server2
 295
 296
 297 # ===========================================================
 298
 299 [8-npn-selected-sni-server-supports-npn]
 300 ssl_conf = 8-npn-selected-sni-server-supports-npn-ssl
 301
 302 [8-npn-selected-sni-server-supports-npn-ssl]
 303 server = 8-npn-selected-sni-server-supports-npn-server
 304 client = 8-npn-selected-sni-server-supports-npn-client
 305 server2 = 8-npn-selected-sni-server-supports-npn-server2
 306
 307 [8-npn-selected-sni-server-supports-npn-server]
 308 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 309 CipherString = DEFAULT
 310 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 311
 312 [8-npn-selected-sni-server-supports-npn-server2]
 313 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 314 CipherString = DEFAULT
 315 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 316
 317 [8-npn-selected-sni-server-supports-npn-client]
 318 CipherString = DEFAULT
 319 MaxProtocol = TLSv1.2
 320 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 321 VerifyMode = Peer
 322
 323 [test-8]
 324 ExpectedNPNProtocol = bar
 325 ExpectedServerName = server2
 326 server = 8-npn-selected-sni-server-supports-npn-server-extra
 327 server2 = 8-npn-selected-sni-server-supports-npn-server2-extra
 328 client = 8-npn-selected-sni-server-supports-npn-client-extra
 329
 330 [8-npn-selected-sni-server-supports-npn-server-extra]
 331 ServerNameCallback = IgnoreMismatch
 332
 333 [8-npn-selected-sni-server-supports-npn-server2-extra]
 334 NPNProtocols = bar
 335
 336 [8-npn-selected-sni-server-supports-npn-client-extra]
 337 NPNProtocols = foo,bar
 338 ServerName = server2
 339
 340
 341 # ===========================================================
 342
 343 [9-npn-selected-sni-server-does-not-support-npn]
 344 ssl_conf = 9-npn-selected-sni-server-does-not-support-npn-ssl
 345
 346 [9-npn-selected-sni-server-does-not-support-npn-ssl]
 347 server = 9-npn-selected-sni-server-does-not-support-npn-server
 348 client = 9-npn-selected-sni-server-does-not-support-npn-client
 349 server2 = 9-npn-selected-sni-server-does-not-support-npn-server2
 350
 351 [9-npn-selected-sni-server-does-not-support-npn-server]
 352 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 353 CipherString = DEFAULT
 354 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 355
 356 [9-npn-selected-sni-server-does-not-support-npn-server2]
 357 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 358 CipherString = DEFAULT
 359 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 360
 361 [9-npn-selected-sni-server-does-not-support-npn-client]
 362 CipherString = DEFAULT
 363 MaxProtocol = TLSv1.2
 364 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 365 VerifyMode = Peer
 366
 367 [test-9]
 368 ExpectedServerName = server2
 369 server = 9-npn-selected-sni-server-does-not-support-npn-server-extra
 370 client = 9-npn-selected-sni-server-does-not-support-npn-client-extra
 371
 372 [9-npn-selected-sni-server-does-not-support-npn-server-extra]
 373 NPNProtocols = bar
 374 ServerNameCallback = IgnoreMismatch
 375
 376 [9-npn-selected-sni-server-does-not-support-npn-client-extra]
 377 NPNProtocols = foo,bar
 378 ServerName = server2
 379
 380
 381 # ===========================================================
 382
 383 [10-alpn-preferred-over-npn]
 384 ssl_conf = 10-alpn-preferred-over-npn-ssl
 385
 386 [10-alpn-preferred-over-npn-ssl]
 387 server = 10-alpn-preferred-over-npn-server
 388 client = 10-alpn-preferred-over-npn-client
 389
 390 [10-alpn-preferred-over-npn-server]
 391 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 392 CipherString = DEFAULT
 393 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 394
 395 [10-alpn-preferred-over-npn-client]
 396 CipherString = DEFAULT
 397 MaxProtocol = TLSv1.2
 398 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 399 VerifyMode = Peer
 400
 401 [test-10]
 402 ExpectedALPNProtocol = foo
 403 server = 10-alpn-preferred-over-npn-server-extra
 404 client = 10-alpn-preferred-over-npn-client-extra
 405
 406 [10-alpn-preferred-over-npn-server-extra]
 407 ALPNProtocols = foo
 408 NPNProtocols = bar
 409
 410 [10-alpn-preferred-over-npn-client-extra]
 411 ALPNProtocols = foo
 412 NPNProtocols = bar
 413
 414
 415 # ===========================================================
 416
 417 [11-sni-npn-preferred-over-alpn]
 418 ssl_conf = 11-sni-npn-preferred-over-alpn-ssl
 419
 420 [11-sni-npn-preferred-over-alpn-ssl]
 421 server = 11-sni-npn-preferred-over-alpn-server
 422 client = 11-sni-npn-preferred-over-alpn-client
 423 server2 = 11-sni-npn-preferred-over-alpn-server2
 424
 425 [11-sni-npn-preferred-over-alpn-server]
 426 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 427 CipherString = DEFAULT
 428 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 429
 430 [11-sni-npn-preferred-over-alpn-server2]
 431 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 432 CipherString = DEFAULT
 433 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 434
 435 [11-sni-npn-preferred-over-alpn-client]
 436 CipherString = DEFAULT
 437 MaxProtocol = TLSv1.2
 438 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 439 VerifyMode = Peer
 440
 441 [test-11]
 442 ExpectedNPNProtocol = bar
 443 ExpectedServerName = server2
 444 server = 11-sni-npn-preferred-over-alpn-server-extra
 445 server2 = 11-sni-npn-preferred-over-alpn-server2-extra
 446 client = 11-sni-npn-preferred-over-alpn-client-extra
 447
 448 [11-sni-npn-preferred-over-alpn-server-extra]
 449 ALPNProtocols = foo
 450 ServerNameCallback = IgnoreMismatch
 451
 452 [11-sni-npn-preferred-over-alpn-server2-extra]
 453 NPNProtocols = bar
 454
 455 [11-sni-npn-preferred-over-alpn-client-extra]
 456 ALPNProtocols = foo
 457 NPNProtocols = bar
 458 ServerName = server2
 459
 460
 461 # ===========================================================
 462
 463 [12-npn-simple-resumption]
 464 ssl_conf = 12-npn-simple-resumption-ssl
 465
 466 [12-npn-simple-resumption-ssl]
 467 server = 12-npn-simple-resumption-server
 468 client = 12-npn-simple-resumption-client
 469 resume-server = 12-npn-simple-resumption-server
 470 resume-client = 12-npn-simple-resumption-client
 471
 472 [12-npn-simple-resumption-server]
 473 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 474 CipherString = DEFAULT
 475 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 476
 477 [12-npn-simple-resumption-client]
 478 CipherString = DEFAULT
 479 MaxProtocol = TLSv1.2
 480 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 481 VerifyMode = Peer
 482
 483 [test-12]
 484 ExpectedNPNProtocol = foo
 485 HandshakeMode = Resume
 486 ResumptionExpected = Yes
 487 server = 12-npn-simple-resumption-server-extra
 488 resume-server = 12-npn-simple-resumption-server-extra
 489 client = 12-npn-simple-resumption-client-extra
 490 resume-client = 12-npn-simple-resumption-client-extra
 491
 492 [12-npn-simple-resumption-server-extra]
 493 NPNProtocols = foo
 494
 495 [12-npn-simple-resumption-client-extra]
 496 NPNProtocols = foo
 497
 498
 499 # ===========================================================
 500
 501 [13-npn-server-switch-resumption]
 502 ssl_conf = 13-npn-server-switch-resumption-ssl
 503
 504 [13-npn-server-switch-resumption-ssl]
 505 server = 13-npn-server-switch-resumption-server
 506 client = 13-npn-server-switch-resumption-client
 507 resume-server = 13-npn-server-switch-resumption-resume-server
 508 resume-client = 13-npn-server-switch-resumption-client
 509
 510 [13-npn-server-switch-resumption-server]
 511 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 512 CipherString = DEFAULT
 513 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 514
 515 [13-npn-server-switch-resumption-resume-server]
 516 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 517 CipherString = DEFAULT
 518 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 519
 520 [13-npn-server-switch-resumption-client]
 521 CipherString = DEFAULT
 522 MaxProtocol = TLSv1.2
 523 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 524 VerifyMode = Peer
 525
 526 [test-13]
 527 ExpectedNPNProtocol = baz
 528 HandshakeMode = Resume
 529 ResumptionExpected = Yes
 530 server = 13-npn-server-switch-resumption-server-extra
 531 resume-server = 13-npn-server-switch-resumption-resume-server-extra
 532 client = 13-npn-server-switch-resumption-client-extra
 533 resume-client = 13-npn-server-switch-resumption-client-extra
 534
 535 [13-npn-server-switch-resumption-server-extra]
 536 NPNProtocols = bar,foo
 537
 538 [13-npn-server-switch-resumption-resume-server-extra]
 539 NPNProtocols = baz,foo
 540
 541 [13-npn-server-switch-resumption-client-extra]
 542 NPNProtocols = foo,bar,baz
 543
 544
 545 # ===========================================================
 546
 547 [14-npn-client-switch-resumption]
 548 ssl_conf = 14-npn-client-switch-resumption-ssl
 549
 550 [14-npn-client-switch-resumption-ssl]
 551 server = 14-npn-client-switch-resumption-server
 552 client = 14-npn-client-switch-resumption-client
 553 resume-server = 14-npn-client-switch-resumption-server
 554 resume-client = 14-npn-client-switch-resumption-resume-client
 555
 556 [14-npn-client-switch-resumption-server]
 557 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 558 CipherString = DEFAULT
 559 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 560
 561 [14-npn-client-switch-resumption-client]
 562 CipherString = DEFAULT
 563 MaxProtocol = TLSv1.2
 564 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 565 VerifyMode = Peer
 566
 567 [14-npn-client-switch-resumption-resume-client]
 568 CipherString = DEFAULT
 569 MaxProtocol = TLSv1.2
 570 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 571 VerifyMode = Peer
 572
 573 [test-14]
 574 ExpectedNPNProtocol = bar
 575 HandshakeMode = Resume
 576 ResumptionExpected = Yes
 577 server = 14-npn-client-switch-resumption-server-extra
 578 resume-server = 14-npn-client-switch-resumption-server-extra
 579 client = 14-npn-client-switch-resumption-client-extra
 580 resume-client = 14-npn-client-switch-resumption-resume-client-extra
 581
 582 [14-npn-client-switch-resumption-server-extra]
 583 NPNProtocols = foo,bar,baz
 584
 585 [14-npn-client-switch-resumption-client-extra]
 586 NPNProtocols = foo,baz
 587
 588 [14-npn-client-switch-resumption-resume-client-extra]
 589 NPNProtocols = bar,baz
 590
 591
 592 # ===========================================================
 593
 594 [15-npn-client-first-pref-on-mismatch-resumption]
 595 ssl_conf = 15-npn-client-first-pref-on-mismatch-resumption-ssl
 596
 597 [15-npn-client-first-pref-on-mismatch-resumption-ssl]
 598 server = 15-npn-client-first-pref-on-mismatch-resumption-server
 599 client = 15-npn-client-first-pref-on-mismatch-resumption-client
 600 resume-server = 15-npn-client-first-pref-on-mismatch-resumption-resume-server
 601 resume-client = 15-npn-client-first-pref-on-mismatch-resumption-client
 602
 603 [15-npn-client-first-pref-on-mismatch-resumption-server]
 604 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 605 CipherString = DEFAULT
 606 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 607
 608 [15-npn-client-first-pref-on-mismatch-resumption-resume-server]
 609 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 610 CipherString = DEFAULT
 611 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 612
 613 [15-npn-client-first-pref-on-mismatch-resumption-client]
 614 CipherString = DEFAULT
 615 MaxProtocol = TLSv1.2
 616 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 617 VerifyMode = Peer
 618
 619 [test-15]
 620 ExpectedNPNProtocol = foo
 621 HandshakeMode = Resume
 622 ResumptionExpected = Yes
 623 server = 15-npn-client-first-pref-on-mismatch-resumption-server-extra
 624 resume-server = 15-npn-client-first-pref-on-mismatch-resumption-resume-server-extra
 625 client = 15-npn-client-first-pref-on-mismatch-resumption-client-extra
 626 resume-client = 15-npn-client-first-pref-on-mismatch-resumption-client-extra
 627
 628 [15-npn-client-first-pref-on-mismatch-resumption-server-extra]
 629 NPNProtocols = bar
 630
 631 [15-npn-client-first-pref-on-mismatch-resumption-resume-server-extra]
 632 NPNProtocols = baz
 633
 634 [15-npn-client-first-pref-on-mismatch-resumption-client-extra]
 635 NPNProtocols = foo,bar
 636
 637
 638 # ===========================================================
 639
 640 [16-npn-no-server-support-resumption]
 641 ssl_conf = 16-npn-no-server-support-resumption-ssl
 642
 643 [16-npn-no-server-support-resumption-ssl]
 644 server = 16-npn-no-server-support-resumption-server
 645 client = 16-npn-no-server-support-resumption-client
 646 resume-server = 16-npn-no-server-support-resumption-resume-server
 647 resume-client = 16-npn-no-server-support-resumption-client
 648
 649 [16-npn-no-server-support-resumption-server]
 650 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 651 CipherString = DEFAULT
 652 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 653
 654 [16-npn-no-server-support-resumption-resume-server]
 655 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 656 CipherString = DEFAULT
 657 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 658
 659 [16-npn-no-server-support-resumption-client]
 660 CipherString = DEFAULT
 661 MaxProtocol = TLSv1.2
 662 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 663 VerifyMode = Peer
 664
 665 [test-16]
 666 HandshakeMode = Resume
 667 ResumptionExpected = Yes
 668 server = 16-npn-no-server-support-resumption-server-extra
 669 client = 16-npn-no-server-support-resumption-client-extra
 670 resume-client = 16-npn-no-server-support-resumption-client-extra
 671
 672 [16-npn-no-server-support-resumption-server-extra]
 673 NPNProtocols = foo
 674
 675 [16-npn-no-server-support-resumption-client-extra]
 676 NPNProtocols = foo
 677
 678
 679 # ===========================================================
 680
 681 [17-npn-no-client-support-resumption]
 682 ssl_conf = 17-npn-no-client-support-resumption-ssl
 683
 684 [17-npn-no-client-support-resumption-ssl]
 685 server = 17-npn-no-client-support-resumption-server
 686 client = 17-npn-no-client-support-resumption-client
 687 resume-server = 17-npn-no-client-support-resumption-server
 688 resume-client = 17-npn-no-client-support-resumption-resume-client
 689
 690 [17-npn-no-client-support-resumption-server]
 691 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 692 CipherString = DEFAULT
 693 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 694
 695 [17-npn-no-client-support-resumption-client]
 696 CipherString = DEFAULT
 697 MaxProtocol = TLSv1.2
 698 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 699 VerifyMode = Peer
 700
 701 [17-npn-no-client-support-resumption-resume-client]
 702 CipherString = DEFAULT
 703 MaxProtocol = TLSv1.2
 704 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 705 VerifyMode = Peer
 706
 707 [test-17]
 708 HandshakeMode = Resume
 709 ResumptionExpected = Yes
 710 server = 17-npn-no-client-support-resumption-server-extra
 711 resume-server = 17-npn-no-client-support-resumption-server-extra
 712 client = 17-npn-no-client-support-resumption-client-extra
 713
 714 [17-npn-no-client-support-resumption-server-extra]
 715 NPNProtocols = foo
 716
 717 [17-npn-no-client-support-resumption-client-extra]
 718 NPNProtocols = foo
 719
 720
 721 # ===========================================================
 722
 723 [18-alpn-preferred-over-npn-resumption]
 724 ssl_conf = 18-alpn-preferred-over-npn-resumption-ssl
 725
 726 [18-alpn-preferred-over-npn-resumption-ssl]
 727 server = 18-alpn-preferred-over-npn-resumption-server
 728 client = 18-alpn-preferred-over-npn-resumption-client
 729 resume-server = 18-alpn-preferred-over-npn-resumption-resume-server
 730 resume-client = 18-alpn-preferred-over-npn-resumption-client
 731
 732 [18-alpn-preferred-over-npn-resumption-server]
 733 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 734 CipherString = DEFAULT
 735 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 736
 737 [18-alpn-preferred-over-npn-resumption-resume-server]
 738 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 739 CipherString = DEFAULT
 740 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 741
 742 [18-alpn-preferred-over-npn-resumption-client]
 743 CipherString = DEFAULT
 744 MaxProtocol = TLSv1.2
 745 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 746 VerifyMode = Peer
 747
 748 [test-18]
 749 ExpectedALPNProtocol = foo
 750 HandshakeMode = Resume
 751 ResumptionExpected = Yes
 752 server = 18-alpn-preferred-over-npn-resumption-server-extra
 753 resume-server = 18-alpn-preferred-over-npn-resumption-resume-server-extra
 754 client = 18-alpn-preferred-over-npn-resumption-client-extra
 755 resume-client = 18-alpn-preferred-over-npn-resumption-client-extra
 756
 757 [18-alpn-preferred-over-npn-resumption-server-extra]
 758 NPNProtocols = bar
 759
 760 [18-alpn-preferred-over-npn-resumption-resume-server-extra]
 761 ALPNProtocols = foo
 762 NPNProtocols = baz
 763
 764 [18-alpn-preferred-over-npn-resumption-client-extra]
 765 ALPNProtocols = foo
 766 NPNProtocols = bar,baz
 767
 768
 769 # ===========================================================
 770
 771 [19-npn-used-if-alpn-not-supported-resumption]
 772 ssl_conf = 19-npn-used-if-alpn-not-supported-resumption-ssl
 773
 774 [19-npn-used-if-alpn-not-supported-resumption-ssl]
 775 server = 19-npn-used-if-alpn-not-supported-resumption-server
 776 client = 19-npn-used-if-alpn-not-supported-resumption-client
 777 resume-server = 19-npn-used-if-alpn-not-supported-resumption-resume-server
 778 resume-client = 19-npn-used-if-alpn-not-supported-resumption-client
 779
 780 [19-npn-used-if-alpn-not-supported-resumption-server]
 781 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 782 CipherString = DEFAULT
 783 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 784
 785 [19-npn-used-if-alpn-not-supported-resumption-resume-server]
 786 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 787 CipherString = DEFAULT
 788 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 789
 790 [19-npn-used-if-alpn-not-supported-resumption-client]
 791 CipherString = DEFAULT
 792 MaxProtocol = TLSv1.2
 793 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 794 VerifyMode = Peer
 795
 796 [test-19]
 797 ExpectedNPNProtocol = baz
 798 HandshakeMode = Resume
 799 ResumptionExpected = Yes
 800 server = 19-npn-used-if-alpn-not-supported-resumption-server-extra
 801 resume-server = 19-npn-used-if-alpn-not-supported-resumption-resume-server-extra
 802 client = 19-npn-used-if-alpn-not-supported-resumption-client-extra
 803 resume-client = 19-npn-used-if-alpn-not-supported-resumption-client-extra
 804
 805 [19-npn-used-if-alpn-not-supported-resumption-server-extra]
 806 ALPNProtocols = foo
 807 NPNProtocols = bar
 808
 809 [19-npn-used-if-alpn-not-supported-resumption-resume-server-extra]
 810 NPNProtocols = baz
 811
 812 [19-npn-used-if-alpn-not-supported-resumption-client-extra]
 813 ALPNProtocols = foo
 814 NPNProtocols = bar,baz
 815
 816