test/ssl-tests/14-curves.cnf.in

   1 # -*- mode: perl; -*-
   2
   3 ## SSL test configurations
   4
   5 package ssltests;
   6
   7 use strict;
   8 use warnings;
   9
  10 use OpenSSL::Test;
  11 use OpenSSL::Test::Utils qw(anydisabled);
  12
  13 our $fips_mode;
  14
  15 my @curves = ("sect163k1", "sect163r2", "sect233k1", "sect233r1",
  16               "sect283k1", "sect283r1", "sect409k1", "sect409r1",
  17               "sect571k1", "sect571r1", "prime192v1", "secp224r1",
  18               "prime256v1", "secp384r1", "secp521r1", "X25519",
  19               "X448");
  20
  21 my @curves_non_fips = ("sect163r1", "sect193r1", "sect193r2", "sect239k1",
  22                        "secp160k1", "secp160r1", "secp160r2", "secp192k1",
  23                        "secp224k1",  "secp256k1", "brainpoolP256r1",
  24                        "brainpoolP384r1", "brainpoolP512r1");
  25
  26 push @curves, @curves_non_fips if !$fips_mode;
  27
  28 our @tests = ();
  29
  30 sub generate_tests() {
  31     foreach (0..$#curves) {
  32         my $curve = $curves[$_];
  33         push @tests, {
  34             name => "curve-${curve}",
  35             server => {
  36                 "Curves" => $curve,
  37                 # TODO(TLS1.3): Can we get this to work for TLSv1.3?
  38                 "MaxProtocol" => "TLSv1.2"
  39             },
  40             client => {
  41                 "CipherString" => "ECDHE",
  42                 "MaxProtocol" => "TLSv1.2",
  43                 "Curves" => $curve
  44             },
  45             test   => {
  46                 "ExpectedTmpKeyType" => $curve,
  47                 "ExpectedResult" => "Success"
  48             },
  49         };
  50     }
  51 }
  52
  53 generate_tests();