test/ssl-tests/28-seclevel.conf.in

   1 # -*- mode: perl; -*-
   2 # Copyright 2016-2016 The OpenSSL Project Authors. All Rights Reserved.
   3 #
   4 # Licensed under the OpenSSL license (the "License").  You may not use
   5 # this file except in compliance with the License.  You can obtain a copy
   6 # in the file LICENSE in the source distribution or at
   7 # https://www.openssl.org/source/license.html
   8
   9
  10 ## SSL test configurations
  11
  12 package ssltests;
  13 use OpenSSL::Test::Utils;
  14
  15 our @tests = (
  16     {
  17         name => "SECLEVEL 3 with default key",
  18         server => { "CipherString" => "DEFAULT:\@SECLEVEL=3" },
  19         client => { },
  20         test   => { "ExpectedResult" => "ServerFail" },
  21     },
  22 );
  23
  24 our @tests_ec = (
  25     {
  26         name => "SECLEVEL 3 with ED448 key",
  27         server => { "CipherString" => "DEFAULT:\@SECLEVEL=3",
  28                     "Certificate" => test_pem("server-ed448-cert.pem"),
  29                     "PrivateKey" => test_pem("server-ed448-key.pem") },
  30         client => { },
  31         test   => { "ExpectedResult" => "Success" },
  32     },
  33     {
  34         name => "SECLEVEL 3 with P-384 key, X25519 ECDHE",
  35         server => { "CipherString" => "DEFAULT:\@SECLEVEL=3",
  36                     "Certificate" => test_pem("p384-server-cert.pem"),
  37                     "PrivateKey" => test_pem("p384-server-key.pem"),
  38                     "Groups" => "X25519" },
  39         client => { "CipherString" => "ECDHE:\@SECLEVEL=3",
  40                     "VerifyCAFile" => test_pem("p384-root.pem") },
  41         test   => { "ExpectedResult" => "Success" },
  42     },
  43 );
  44
  45 our @tests_tls1_2 = (
  46     {
  47         name => "SECLEVEL 3 with ED448 key, TLSv1.2",
  48         server => { "CipherString" => "DEFAULT:\@SECLEVEL=3",
  49                     "Certificate" => test_pem("server-ed448-cert.pem"),
  50                     "PrivateKey" => test_pem("server-ed448-key.pem"),
  51                     "MaxProtocol" => "TLSv1.2" },
  52         client => { },
  53         test   => { "ExpectedResult" => "Success" },
  54     },
  55 );
  56
  57 push @tests, @tests_ec unless disabled("ec");
  58 push @tests, @tests_tls1_2 unless disabled("tls1_2") || disabled("ec");