# https://www.openssl.org/source/license.html
-## Test version negotiation
+## Test NPN. Note that NPN is only supported up to TLSv1.2
use strict;
use warnings;
package ssltests;
-
our @tests = (
{
name => "npn-simple",
- server => { },
- client => { },
+ server => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ClientNPNProtocols" => "foo",
- "ServerNPNProtocols" => "foo",
- "ExpectedNPNProtocol" => "foo",
+ "ExpectedNPNProtocol" => "foo",
},
},
{
name => "npn-client-finds-match",
- server => { },
- client => { },
+ server => {
+ extra => {
+ "NPNProtocols" => "baz,bar",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,bar",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ClientNPNProtocols" => "foo,bar",
- "ServerNPNProtocols" => "baz,bar",
- "ExpectedNPNProtocol" => "bar",
+ "ExpectedNPNProtocol" => "bar",
},
},
{
name => "npn-client-honours-server-pref",
- server => { },
- client => { },
+ server => {
+ extra => {
+ "NPNProtocols" => "bar,foo",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,bar",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ClientNPNProtocols" => "foo,bar",
- "ServerNPNProtocols" => "bar,foo",
- "ExpectedNPNProtocol" => "bar",
+ "ExpectedNPNProtocol" => "bar",
},
},
{
name => "npn-client-first-pref-on-mismatch",
- server => { },
- client => { },
+ server => {
+ extra => {
+ "NPNProtocols" => "baz",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,bar",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ClientNPNProtocols" => "foo,bar",
- "ServerNPNProtocols" => "baz",
- "ExpectedNPNProtocol" => "foo",
+ "ExpectedNPNProtocol" => "foo",
},
},
{
name => "npn-no-server-support",
- server => { },
- client => { },
+ server => {},
+ client => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ClientNPNProtocols" => "foo",
- "ExpectedNPNProtocol" => undef,
+ "ExpectedNPNProtocol" => undef,
},
},
{
name => "npn-no-client-support",
- server => { },
- client => { },
+ server => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ },
+ client => {
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ServerNPNProtocols" => "foo",
- "ExpectedNPNProtocol" => undef,
+ "ExpectedNPNProtocol" => undef,
},
},
{
name => "npn-with-sni-no-context-switch",
- server => { },
- server2 => { },
- client => { },
+ server => {
+ extra => {
+ "NPNProtocols" => "foo",
+ "ServerNameCallback" => "IgnoreMismatch",
+ },
+ },
+ server2 => {
+ extra => {
+ "NPNProtocols" => "bar",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,bar",
+ "ServerName" => "server1",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ClientNPNProtocols" => "foo,bar",
- "ServerNPNProtocols" => "foo",
- "Server2NPNProtocols" => "bar",
- "ServerName" => "server1",
- "ServerNameCallback" => "IgnoreMismatch",
- "ExpectedServerName" => "server1",
- "ExpectedNPNProtocol" => "foo",
+ "ExpectedServerName" => "server1",
+ "ExpectedNPNProtocol" => "foo",
},
},
{
name => "npn-with-sni-context-switch",
- server => { },
- server2 => { },
- client => { },
+ server => {
+ extra => {
+ "NPNProtocols" => "foo",
+ "ServerNameCallback" => "IgnoreMismatch",
+ },
+ },
+ server2 => {
+ extra => {
+ "NPNProtocols" => "bar",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,bar",
+ "ServerName" => "server2",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ClientNPNProtocols" => "foo,bar",
- "ServerNPNProtocols" => "foo",
- "Server2NPNProtocols" => "bar",
- "ServerName" => "server2",
- "ServerNameCallback" => "IgnoreMismatch",
- "ExpectedServerName" => "server2",
- "ExpectedNPNProtocol" => "bar",
+ "ExpectedServerName" => "server2",
+ "ExpectedNPNProtocol" => "bar",
},
},
{
name => "npn-selected-sni-server-supports-npn",
- server => { },
- server2 => { },
- client => { },
+ server => {
+ extra => {
+ "ServerNameCallback" => "IgnoreMismatch",
+ },
+ },
+ server2 => {
+ extra => {
+ "NPNProtocols" => "bar",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,bar",
+ "ServerName" => "server2",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ClientNPNProtocols" => "foo,bar",
- "Server2NPNProtocols" => "bar",
- "ServerName" => "server2",
- "ServerNameCallback" => "IgnoreMismatch",
- "ExpectedServerName" => "server2",
- "ExpectedNPNProtocol" => "bar",
+ "ExpectedServerName" => "server2",
+ "ExpectedNPNProtocol" => "bar",
},
},
{
name => "npn-selected-sni-server-does-not-support-npn",
- server => { },
+ server => {
+ extra => {
+ "NPNProtocols" => "bar",
+ "ServerNameCallback" => "IgnoreMismatch",
+ },
+ },
server2 => { },
- client => { },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,bar",
+ "ServerName" => "server2",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
test => {
- "ClientNPNProtocols" => "foo,bar",
- "ServerNPNProtocols" => "foo",
- "ServerName" => "server2",
- "ServerNameCallback" => "IgnoreMismatch",
"ExpectedServerName" => "server2",
"ExpectedNPNProtocol" => undef,
},
},
{
name => "alpn-preferred-over-npn",
- server => { },
- client => { },
- test => {
- "ClientALPNProtocols" => "foo",
- "ClientNPNProtocols" => "bar",
- "ServerALPNProtocols" => "foo",
- "ServerNPNProtocols" => "bar",
- "ExpectedALPNProtocol" => "foo",
- "ExpectedNPNProtocol" => undef,
+ server => {
+ extra => {
+ "ALPNProtocols" => "foo",
+ "NPNProtocols" => "bar",
+ },
+ },
+ client => {
+ extra => {
+ "ALPNProtocols" => "foo",
+ "NPNProtocols" => "bar",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "ExpectedALPNProtocol" => "foo",
+ "ExpectedNPNProtocol" => undef,
},
},
{
name => "sni-npn-preferred-over-alpn",
- server => { },
- server2 => { },
- client => { },
- test => {
- "ClientALPNProtocols" => "foo",
- "ClientNPNProtocols" => "bar",
- "ServerALPNProtocols" => "foo",
- "Server2NPNProtocols" => "bar",
- "ServerName" => "server2",
- "ServerNameCallback" => "IgnoreMismatch",
- "ExpectedServerName" => "server2",
- "ExpectedALPNProtocol" => undef,
- "ExpectedNPNProtocol" => "bar",
+ server => {
+ extra => {
+ "ServerNameCallback" => "IgnoreMismatch",
+ "ALPNProtocols" => "foo",
+ },
+ },
+ server2 => {
+ extra => {
+ "NPNProtocols" => "bar",
+ },
+ },
+ client => {
+ extra => {
+ "ServerName" => "server2",
+ "ALPNProtocols" => "foo",
+ "NPNProtocols" => "bar",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "ExpectedALPNProtocol" => undef,
+ "ExpectedNPNProtocol" => "bar",
+ "ExpectedServerName" => "server2",
+ },
+ },
+ {
+ name => "npn-simple-resumption",
+ server => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "HandshakeMode" => "Resume",
+ "ResumptionExpected" => "Yes",
+ "ExpectedNPNProtocol" => "foo",
+ },
+ },
+ {
+ name => "npn-server-switch-resumption",
+ server => {
+ extra => {
+ "NPNProtocols" => "bar,foo",
+ },
+ },
+ resume_server => {
+ extra => {
+ "NPNProtocols" => "baz,foo",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,bar,baz",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "HandshakeMode" => "Resume",
+ "ResumptionExpected" => "Yes",
+ "ExpectedNPNProtocol" => "baz",
+ },
+ },
+ {
+ name => "npn-client-switch-resumption",
+ server => {
+ extra => {
+ "NPNProtocols" => "foo,bar,baz",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,baz",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ resume_client => {
+ extra => {
+ "NPNProtocols" => "bar,baz",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "HandshakeMode" => "Resume",
+ "ResumptionExpected" => "Yes",
+ "ExpectedNPNProtocol" => "bar",
+ },
+ },
+ {
+ name => "npn-client-first-pref-on-mismatch-resumption",
+ server => {
+ extra => {
+ "NPNProtocols" => "bar",
+ },
+ },
+ resume_server => {
+ extra => {
+ "NPNProtocols" => "baz",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo,bar",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "HandshakeMode" => "Resume",
+ "ResumptionExpected" => "Yes",
+ "ExpectedNPNProtocol" => "foo",
+ },
+ },
+ {
+ name => "npn-no-server-support-resumption",
+ server => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ },
+ resume_server => { },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "HandshakeMode" => "Resume",
+ "ResumptionExpected" => "Yes",
+ "ExpectedNPNProtocol" => undef,
+ },
+ },
+ {
+ name => "npn-no-client-support-resumption",
+ server => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ },
+ client => {
+ extra => {
+ "NPNProtocols" => "foo",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ resume_client => {
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "HandshakeMode" => "Resume",
+ "ResumptionExpected" => "Yes",
+ "ExpectedNPNProtocol" => undef,
+ },
+ },
+ {
+ name => "alpn-preferred-over-npn-resumption",
+ server => {
+ extra => {
+ "NPNProtocols" => "bar",
+ },
+ },
+ resume_server => {
+ extra => {
+ "ALPNProtocols" => "foo",
+ "NPNProtocols" => "baz",
+ },
+ },
+ client => {
+ extra => {
+ "ALPNProtocols" => "foo",
+ "NPNProtocols" => "bar,baz",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "HandshakeMode" => "Resume",
+ "ResumptionExpected" => "Yes",
+ "ExpectedALPNProtocol" => "foo",
+ "ExpectedNPNProtocol" => undef,
+ },
+ },
+ {
+ name => "npn-used-if-alpn-not-supported-resumption",
+ server => {
+ extra => {
+ "ALPNProtocols" => "foo",
+ "NPNProtocols" => "bar",
+ },
+ },
+ resume_server => {
+ extra => {
+ "NPNProtocols" => "baz",
+ },
+ },
+ client => {
+ extra => {
+ "ALPNProtocols" => "foo",
+ "NPNProtocols" => "bar,baz",
+ },
+ "MaxProtocol" => "TLSv1.2"
+ },
+ test => {
+ "HandshakeMode" => "Resume",
+ "ResumptionExpected" => "Yes",
+ "ExpectedALPNProtocol" => undef,
+ "ExpectedNPNProtocol" => "baz",
},
},
);
projects / openssl.git / blobdiff