test/ssl-tests/12-ct.conf.in

   1 # -*- mode: perl; -*-
   2 # Copyright 2016-2016 The OpenSSL Project Authors. All Rights Reserved.
   3 #
   4 # Licensed under the OpenSSL license (the "License").  You may not use
   5 # this file except in compliance with the License.  You can obtain a copy
   6 # in the file LICENSE in the source distribution or at
   7 # https://www.openssl.org/source/license.html
   8
   9
  10 ## Test version negotiation
  11
  12 use strict;
  13 use warnings;
  14
  15 package ssltests;
  16
  17
  18 our @tests = (
  19     # Currently only have tests for certs without SCTs.
  20     {
  21         name => "ct-permissive",
  22         server => { },
  23         client => {
  24             extra => {
  25                 "CTValidation" => "Permissive",
  26             },
  27         },
  28         test => {
  29             "ExpectedResult" => "Success",
  30         },
  31     },
  32     {
  33         name => "ct-strict",
  34         server => { },
  35         client => {
  36             extra => {
  37                 "CTValidation" => "Strict",
  38             },
  39         },
  40         test => {
  41             "ExpectedResult" => "ClientFail",
  42             "ExpectedClientAlert" => "HandshakeFailure",
  43         },
  44     },
  45     {
  46         name => "ct-permissive-resumption",
  47         server => { },
  48         client => {
  49             #TODO(TLS1.3): Temporarily set to TLSv1.2 until we implement TLS1.3
  50             #              resumption
  51             MaxProtocol => "TLSv1.2",
  52             extra => {
  53                 "CTValidation" => "Permissive",
  54             },
  55         },
  56         test => {
  57             "HandshakeMode" => "Resume",
  58             "ResumptionExpected" => "Yes",
  59             "ExpectedResult" => "Success",
  60         },
  61     },
  62     {
  63         name => "ct-strict-resumption",
  64         server => { },
  65         client => {
  66             #TODO(TLS1.3): Temporarily set to TLSv1.2 until we implement TLS1.3
  67             #              resumption
  68             MaxProtocol => "TLSv1.2",
  69             extra => {
  70                 "CTValidation" => "Permissive",
  71             },
  72         },
  73         # SCTs are not present during resumption, so the resumption
  74         # should succeed.
  75         resume_client => {
  76             #TODO(TLS1.3): Temporarily set to TLSv1.2 until we implement TLS1.3
  77             #              resumption
  78             MaxProtocol => "TLSv1.2",
  79             extra => {
  80                 "CTValidation" => "Strict",
  81             },
  82         },
  83         test => {
  84             "HandshakeMode" => "Resume",
  85             "ResumptionExpected" => "Yes",
  86             "ExpectedResult" => "Success",
  87         },
  88     },
  89 );