9f85a955e194e413d33e993bc7a177070b779737
[openssl.git] / test / ssl-tests / 28-seclevel.conf.in
1 # -*- mode: perl; -*-
2 # Copyright 2016-2016 The OpenSSL Project Authors. All Rights Reserved.
3 #
4 # Licensed under the OpenSSL license (the "License").  You may not use
5 # this file except in compliance with the License.  You can obtain a copy
6 # in the file LICENSE in the source distribution or at
7 # https://www.openssl.org/source/license.html
8
9
10 ## SSL test configurations
11
12 package ssltests;
13 use OpenSSL::Test::Utils;
14
15 our @tests = (
16     {
17         name => "SECLEVEL 3 with default key",
18         server => { "CipherString" => "DEFAULT:\@SECLEVEL=3" },
19         client => { },
20         test   => { "ExpectedResult" => "ServerFail" },
21     },
22 );
23
24 our @tests_ec = (
25     {
26         name => "SECLEVEL 3 with ED448 key",
27         server => { "CipherString" => "DEFAULT:\@SECLEVEL=3",
28                     "Certificate" => test_pem("server-ed448-cert.pem"),
29                     "PrivateKey" => test_pem("server-ed448-key.pem") },
30         client => { },
31         test   => { "ExpectedResult" => "Success" },
32     },
33     {
34         name => "SECLEVEL 3 with P-384 key, X25519 ECDHE",
35         server => { "CipherString" => "DEFAULT:\@SECLEVEL=3",
36                     "Certificate" => test_pem("p384-server-cert.pem"),
37                     "PrivateKey" => test_pem("p384-server-key.pem"),
38                     "Groups" => "X25519" },
39         client => { "CipherString" => "ECDHE:\@SECLEVEL=3",
40                     "VerifyCAFile" => test_pem("p384-root.pem") },
41         test   => { "ExpectedResult" => "Success" },
42     },
43 );
44
45 our @tests_tls1_2 = (
46     {
47         name => "SECLEVEL 3 with ED448 key, TLSv1.2",
48         server => { "CipherString" => "DEFAULT:\@SECLEVEL=3",
49                     "Certificate" => test_pem("server-ed448-cert.pem"),
50                     "PrivateKey" => test_pem("server-ed448-key.pem"),
51                     "MaxProtocol" => "TLSv1.2" },
52         client => { },
53         test   => { "ExpectedResult" => "Success" },
54     },
55 );
56
57 push @tests, @tests_ec unless disabled("ec");
58 push @tests, @tests_tls1_2 unless disabled("tls1_2") || disabled("ec");