test/ssl-tests/18-dtls-renegotiate.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 9
   4
   5 test-0 = 0-renegotiate-client-no-resume
   6 test-1 = 1-renegotiate-client-resume
   7 test-2 = 2-renegotiate-server-resume
   8 test-3 = 3-renegotiate-client-auth-require
   9 test-4 = 4-renegotiate-client-auth-once
  10 test-5 = 5-renegotiate-aead-to-non-aead
  11 test-6 = 6-renegotiate-non-aead-to-aead
  12 test-7 = 7-renegotiate-non-aead-to-non-aead
  13 test-8 = 8-renegotiate-aead-to-aead
  14 # ===========================================================
  15
  16 [0-renegotiate-client-no-resume]
  17 ssl_conf = 0-renegotiate-client-no-resume-ssl
  18
  19 [0-renegotiate-client-no-resume-ssl]
  20 server = 0-renegotiate-client-no-resume-server
  21 client = 0-renegotiate-client-no-resume-client
  22
  23 [0-renegotiate-client-no-resume-server]
  24 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  25 CipherString = DEFAULT
  26 Options = NoResumptionOnRenegotiation
  27 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  28
  29 [0-renegotiate-client-no-resume-client]
  30 CipherString = DEFAULT
  31 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  32 VerifyMode = Peer
  33
  34 [test-0]
  35 ExpectedResult = Success
  36 HandshakeMode = RenegotiateClient
  37 Method = DTLS
  38 ResumptionExpected = No
  39
  40
  41 # ===========================================================
  42
  43 [1-renegotiate-client-resume]
  44 ssl_conf = 1-renegotiate-client-resume-ssl
  45
  46 [1-renegotiate-client-resume-ssl]
  47 server = 1-renegotiate-client-resume-server
  48 client = 1-renegotiate-client-resume-client
  49
  50 [1-renegotiate-client-resume-server]
  51 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  52 CipherString = DEFAULT
  53 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  54
  55 [1-renegotiate-client-resume-client]
  56 CipherString = DEFAULT
  57 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  58 VerifyMode = Peer
  59
  60 [test-1]
  61 ExpectedResult = Success
  62 HandshakeMode = RenegotiateClient
  63 Method = DTLS
  64 ResumptionExpected = Yes
  65
  66
  67 # ===========================================================
  68
  69 [2-renegotiate-server-resume]
  70 ssl_conf = 2-renegotiate-server-resume-ssl
  71
  72 [2-renegotiate-server-resume-ssl]
  73 server = 2-renegotiate-server-resume-server
  74 client = 2-renegotiate-server-resume-client
  75
  76 [2-renegotiate-server-resume-server]
  77 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  78 CipherString = DEFAULT
  79 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  80
  81 [2-renegotiate-server-resume-client]
  82 CipherString = DEFAULT
  83 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  84 VerifyMode = Peer
  85
  86 [test-2]
  87 ExpectedResult = Success
  88 HandshakeMode = RenegotiateServer
  89 Method = DTLS
  90 ResumptionExpected = No
  91
  92
  93 # ===========================================================
  94
  95 [3-renegotiate-client-auth-require]
  96 ssl_conf = 3-renegotiate-client-auth-require-ssl
  97
  98 [3-renegotiate-client-auth-require-ssl]
  99 server = 3-renegotiate-client-auth-require-server
 100 client = 3-renegotiate-client-auth-require-client
 101
 102 [3-renegotiate-client-auth-require-server]
 103 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 104 CipherString = DEFAULT
 105 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 106 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
 107 VerifyMode = Require
 108
 109 [3-renegotiate-client-auth-require-client]
 110 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
 111 CipherString = DEFAULT
 112 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
 113 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 114 VerifyMode = Peer
 115
 116 [test-3]
 117 ExpectedResult = Success
 118 HandshakeMode = RenegotiateServer
 119 Method = DTLS
 120 ResumptionExpected = No
 121
 122
 123 # ===========================================================
 124
 125 [4-renegotiate-client-auth-once]
 126 ssl_conf = 4-renegotiate-client-auth-once-ssl
 127
 128 [4-renegotiate-client-auth-once-ssl]
 129 server = 4-renegotiate-client-auth-once-server
 130 client = 4-renegotiate-client-auth-once-client
 131
 132 [4-renegotiate-client-auth-once-server]
 133 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 134 CipherString = DEFAULT
 135 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 136 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
 137 VerifyMode = Once
 138
 139 [4-renegotiate-client-auth-once-client]
 140 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
 141 CipherString = DEFAULT
 142 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
 143 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 144 VerifyMode = Peer
 145
 146 [test-4]
 147 ExpectedResult = Success
 148 HandshakeMode = RenegotiateServer
 149 Method = DTLS
 150 ResumptionExpected = No
 151
 152
 153 # ===========================================================
 154
 155 [5-renegotiate-aead-to-non-aead]
 156 ssl_conf = 5-renegotiate-aead-to-non-aead-ssl
 157
 158 [5-renegotiate-aead-to-non-aead-ssl]
 159 server = 5-renegotiate-aead-to-non-aead-server
 160 client = 5-renegotiate-aead-to-non-aead-client
 161
 162 [5-renegotiate-aead-to-non-aead-server]
 163 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 164 CipherString = DEFAULT
 165 Options = NoResumptionOnRenegotiation
 166 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 167
 168 [5-renegotiate-aead-to-non-aead-client]
 169 CipherString = AES128-GCM-SHA256
 170 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 171 VerifyMode = Peer
 172
 173 [test-5]
 174 ExpectedResult = Success
 175 HandshakeMode = RenegotiateClient
 176 Method = DTLS
 177 ResumptionExpected = No
 178 client = 5-renegotiate-aead-to-non-aead-client-extra
 179
 180 [5-renegotiate-aead-to-non-aead-client-extra]
 181 RenegotiateCiphers = AES128-SHA
 182
 183
 184 # ===========================================================
 185
 186 [6-renegotiate-non-aead-to-aead]
 187 ssl_conf = 6-renegotiate-non-aead-to-aead-ssl
 188
 189 [6-renegotiate-non-aead-to-aead-ssl]
 190 server = 6-renegotiate-non-aead-to-aead-server
 191 client = 6-renegotiate-non-aead-to-aead-client
 192
 193 [6-renegotiate-non-aead-to-aead-server]
 194 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 195 CipherString = DEFAULT
 196 Options = NoResumptionOnRenegotiation
 197 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 198
 199 [6-renegotiate-non-aead-to-aead-client]
 200 CipherString = AES128-SHA
 201 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 202 VerifyMode = Peer
 203
 204 [test-6]
 205 ExpectedResult = Success
 206 HandshakeMode = RenegotiateClient
 207 Method = DTLS
 208 ResumptionExpected = No
 209 client = 6-renegotiate-non-aead-to-aead-client-extra
 210
 211 [6-renegotiate-non-aead-to-aead-client-extra]
 212 RenegotiateCiphers = AES128-GCM-SHA256
 213
 214
 215 # ===========================================================
 216
 217 [7-renegotiate-non-aead-to-non-aead]
 218 ssl_conf = 7-renegotiate-non-aead-to-non-aead-ssl
 219
 220 [7-renegotiate-non-aead-to-non-aead-ssl]
 221 server = 7-renegotiate-non-aead-to-non-aead-server
 222 client = 7-renegotiate-non-aead-to-non-aead-client
 223
 224 [7-renegotiate-non-aead-to-non-aead-server]
 225 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 226 CipherString = DEFAULT
 227 Options = NoResumptionOnRenegotiation
 228 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 229
 230 [7-renegotiate-non-aead-to-non-aead-client]
 231 CipherString = AES128-SHA
 232 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 233 VerifyMode = Peer
 234
 235 [test-7]
 236 ExpectedResult = Success
 237 HandshakeMode = RenegotiateClient
 238 Method = DTLS
 239 ResumptionExpected = No
 240 client = 7-renegotiate-non-aead-to-non-aead-client-extra
 241
 242 [7-renegotiate-non-aead-to-non-aead-client-extra]
 243 RenegotiateCiphers = AES256-SHA
 244
 245
 246 # ===========================================================
 247
 248 [8-renegotiate-aead-to-aead]
 249 ssl_conf = 8-renegotiate-aead-to-aead-ssl
 250
 251 [8-renegotiate-aead-to-aead-ssl]
 252 server = 8-renegotiate-aead-to-aead-server
 253 client = 8-renegotiate-aead-to-aead-client
 254
 255 [8-renegotiate-aead-to-aead-server]
 256 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 257 CipherString = DEFAULT
 258 Options = NoResumptionOnRenegotiation
 259 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 260
 261 [8-renegotiate-aead-to-aead-client]
 262 CipherString = AES128-GCM-SHA256
 263 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 264 VerifyMode = Peer
 265
 266 [test-8]
 267 ExpectedResult = Success
 268 HandshakeMode = RenegotiateClient
 269 Method = DTLS
 270 ResumptionExpected = No
 271 client = 8-renegotiate-aead-to-aead-client-extra
 272
 273 [8-renegotiate-aead-to-aead-client-extra]
 274 RenegotiateCiphers = AES256-GCM-SHA384
 275
 276