test/ssl-tests/18-dtls-renegotiate.conf

   1 # Generated with generate_ssl_tests.pl
   2
   3 num_tests = 9
   4
   5 test-0 = 0-renegotiate-client-no-resume
   6 test-1 = 1-renegotiate-client-resume
   7 test-2 = 2-renegotiate-server-resume
   8 test-3 = 3-renegotiate-client-auth-require
   9 test-4 = 4-renegotiate-client-auth-once
  10 test-5 = 5-renegotiate-aead-to-non-aead
  11 test-6 = 6-renegotiate-non-aead-to-aead
  12 test-7 = 7-renegotiate-non-aead-to-non-aead
  13 test-8 = 8-renegotiate-aead-to-aead
  14 # ===========================================================
  15
  16 [0-renegotiate-client-no-resume]
  17 ssl_conf = 0-renegotiate-client-no-resume-ssl
  18
  19 [0-renegotiate-client-no-resume-ssl]
  20 server = 0-renegotiate-client-no-resume-server
  21 client = 0-renegotiate-client-no-resume-client
  22
  23 [0-renegotiate-client-no-resume-server]
  24 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  25 CipherString = DEFAULT
  26 Options = NoResumptionOnRenegotiation
  27 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  28
  29 [0-renegotiate-client-no-resume-client]
  30 CipherString = DEFAULT
  31 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  32 VerifyMode = Peer
  33
  34 [test-0]
  35 ExpectedResult = Success
  36 HandshakeMode = RenegotiateClient
  37 Method = DTLS
  38 ResumptionExpected = No
  39 UseSCTP = No
  40
  41
  42 # ===========================================================
  43
  44 [1-renegotiate-client-resume]
  45 ssl_conf = 1-renegotiate-client-resume-ssl
  46
  47 [1-renegotiate-client-resume-ssl]
  48 server = 1-renegotiate-client-resume-server
  49 client = 1-renegotiate-client-resume-client
  50
  51 [1-renegotiate-client-resume-server]
  52 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  53 CipherString = DEFAULT
  54 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  55
  56 [1-renegotiate-client-resume-client]
  57 CipherString = DEFAULT
  58 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  59 VerifyMode = Peer
  60
  61 [test-1]
  62 ExpectedResult = Success
  63 HandshakeMode = RenegotiateClient
  64 Method = DTLS
  65 ResumptionExpected = Yes
  66 UseSCTP = No
  67
  68
  69 # ===========================================================
  70
  71 [2-renegotiate-server-resume]
  72 ssl_conf = 2-renegotiate-server-resume-ssl
  73
  74 [2-renegotiate-server-resume-ssl]
  75 server = 2-renegotiate-server-resume-server
  76 client = 2-renegotiate-server-resume-client
  77
  78 [2-renegotiate-server-resume-server]
  79 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  80 CipherString = DEFAULT
  81 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  82
  83 [2-renegotiate-server-resume-client]
  84 CipherString = DEFAULT
  85 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  86 VerifyMode = Peer
  87
  88 [test-2]
  89 ExpectedResult = Success
  90 HandshakeMode = RenegotiateServer
  91 Method = DTLS
  92 ResumptionExpected = No
  93 UseSCTP = No
  94
  95
  96 # ===========================================================
  97
  98 [3-renegotiate-client-auth-require]
  99 ssl_conf = 3-renegotiate-client-auth-require-ssl
 100
 101 [3-renegotiate-client-auth-require-ssl]
 102 server = 3-renegotiate-client-auth-require-server
 103 client = 3-renegotiate-client-auth-require-client
 104
 105 [3-renegotiate-client-auth-require-server]
 106 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 107 CipherString = DEFAULT
 108 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 109 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
 110 VerifyMode = Require
 111
 112 [3-renegotiate-client-auth-require-client]
 113 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
 114 CipherString = DEFAULT
 115 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
 116 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 117 VerifyMode = Peer
 118
 119 [test-3]
 120 ExpectedResult = Success
 121 HandshakeMode = RenegotiateServer
 122 Method = DTLS
 123 ResumptionExpected = No
 124 UseSCTP = No
 125
 126
 127 # ===========================================================
 128
 129 [4-renegotiate-client-auth-once]
 130 ssl_conf = 4-renegotiate-client-auth-once-ssl
 131
 132 [4-renegotiate-client-auth-once-ssl]
 133 server = 4-renegotiate-client-auth-once-server
 134 client = 4-renegotiate-client-auth-once-client
 135
 136 [4-renegotiate-client-auth-once-server]
 137 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 138 CipherString = DEFAULT
 139 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 140 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
 141 VerifyMode = Once
 142
 143 [4-renegotiate-client-auth-once-client]
 144 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
 145 CipherString = DEFAULT
 146 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
 147 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 148 VerifyMode = Peer
 149
 150 [test-4]
 151 ExpectedResult = Success
 152 HandshakeMode = RenegotiateServer
 153 Method = DTLS
 154 ResumptionExpected = No
 155 UseSCTP = No
 156
 157
 158 # ===========================================================
 159
 160 [5-renegotiate-aead-to-non-aead]
 161 ssl_conf = 5-renegotiate-aead-to-non-aead-ssl
 162
 163 [5-renegotiate-aead-to-non-aead-ssl]
 164 server = 5-renegotiate-aead-to-non-aead-server
 165 client = 5-renegotiate-aead-to-non-aead-client
 166
 167 [5-renegotiate-aead-to-non-aead-server]
 168 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 169 CipherString = DEFAULT
 170 Options = NoResumptionOnRenegotiation
 171 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 172
 173 [5-renegotiate-aead-to-non-aead-client]
 174 CipherString = AES128-GCM-SHA256
 175 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 176 VerifyMode = Peer
 177
 178 [test-5]
 179 ExpectedResult = Success
 180 HandshakeMode = RenegotiateClient
 181 Method = DTLS
 182 ResumptionExpected = No
 183 UseSCTP = No
 184 client = 5-renegotiate-aead-to-non-aead-client-extra
 185
 186 [5-renegotiate-aead-to-non-aead-client-extra]
 187 RenegotiateCiphers = AES128-SHA
 188
 189
 190 # ===========================================================
 191
 192 [6-renegotiate-non-aead-to-aead]
 193 ssl_conf = 6-renegotiate-non-aead-to-aead-ssl
 194
 195 [6-renegotiate-non-aead-to-aead-ssl]
 196 server = 6-renegotiate-non-aead-to-aead-server
 197 client = 6-renegotiate-non-aead-to-aead-client
 198
 199 [6-renegotiate-non-aead-to-aead-server]
 200 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 201 CipherString = DEFAULT
 202 Options = NoResumptionOnRenegotiation
 203 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 204
 205 [6-renegotiate-non-aead-to-aead-client]
 206 CipherString = AES128-SHA
 207 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 208 VerifyMode = Peer
 209
 210 [test-6]
 211 ExpectedResult = Success
 212 HandshakeMode = RenegotiateClient
 213 Method = DTLS
 214 ResumptionExpected = No
 215 UseSCTP = No
 216 client = 6-renegotiate-non-aead-to-aead-client-extra
 217
 218 [6-renegotiate-non-aead-to-aead-client-extra]
 219 RenegotiateCiphers = AES128-GCM-SHA256
 220
 221
 222 # ===========================================================
 223
 224 [7-renegotiate-non-aead-to-non-aead]
 225 ssl_conf = 7-renegotiate-non-aead-to-non-aead-ssl
 226
 227 [7-renegotiate-non-aead-to-non-aead-ssl]
 228 server = 7-renegotiate-non-aead-to-non-aead-server
 229 client = 7-renegotiate-non-aead-to-non-aead-client
 230
 231 [7-renegotiate-non-aead-to-non-aead-server]
 232 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 233 CipherString = DEFAULT
 234 Options = NoResumptionOnRenegotiation
 235 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 236
 237 [7-renegotiate-non-aead-to-non-aead-client]
 238 CipherString = AES128-SHA
 239 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 240 VerifyMode = Peer
 241
 242 [test-7]
 243 ExpectedResult = Success
 244 HandshakeMode = RenegotiateClient
 245 Method = DTLS
 246 ResumptionExpected = No
 247 UseSCTP = No
 248 client = 7-renegotiate-non-aead-to-non-aead-client-extra
 249
 250 [7-renegotiate-non-aead-to-non-aead-client-extra]
 251 RenegotiateCiphers = AES256-SHA
 252
 253
 254 # ===========================================================
 255
 256 [8-renegotiate-aead-to-aead]
 257 ssl_conf = 8-renegotiate-aead-to-aead-ssl
 258
 259 [8-renegotiate-aead-to-aead-ssl]
 260 server = 8-renegotiate-aead-to-aead-server
 261 client = 8-renegotiate-aead-to-aead-client
 262
 263 [8-renegotiate-aead-to-aead-server]
 264 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
 265 CipherString = DEFAULT
 266 Options = NoResumptionOnRenegotiation
 267 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
 268
 269 [8-renegotiate-aead-to-aead-client]
 270 CipherString = AES128-GCM-SHA256
 271 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
 272 VerifyMode = Peer
 273
 274 [test-8]
 275 ExpectedResult = Success
 276 HandshakeMode = RenegotiateClient
 277 Method = DTLS
 278 ResumptionExpected = No
 279 UseSCTP = No
 280 client = 8-renegotiate-aead-to-aead-client-extra
 281
 282 [8-renegotiate-aead-to-aead-client-extra]
 283 RenegotiateCiphers = AES256-GCM-SHA384
 284
 285