1# Generated with generate_ssl_tests.pl
2
3num_tests = 9
4
5test-0 = 0-renegotiate-client-no-resume
6test-1 = 1-renegotiate-client-resume
7test-2 = 2-renegotiate-server-resume
8test-3 = 3-renegotiate-client-auth-require
9test-4 = 4-renegotiate-client-auth-once
10test-5 = 5-renegotiate-aead-to-non-aead
11test-6 = 6-renegotiate-non-aead-to-aead
12test-7 = 7-renegotiate-non-aead-to-non-aead
13test-8 = 8-renegotiate-aead-to-aead
14# ===========================================================
15
16[0-renegotiate-client-no-resume]
17ssl_conf = 0-renegotiate-client-no-resume-ssl
18
19[0-renegotiate-client-no-resume-ssl]
20server = 0-renegotiate-client-no-resume-server
21client = 0-renegotiate-client-no-resume-client
22
23[0-renegotiate-client-no-resume-server]
24Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
25CipherString = DEFAULT:@SECLEVEL=0
26MaxProtocol = DTLSv1.2
27Options = NoResumptionOnRenegotiation
28PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
29
30[0-renegotiate-client-no-resume-client]
31CipherString = DEFAULT:@SECLEVEL=0
32VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
33VerifyMode = Peer
34
35[test-0]
36ExpectedResult = Success
37HandshakeMode = RenegotiateClient
38Method = DTLS
39ResumptionExpected = No
40UseSCTP = No
41
42
43# ===========================================================
44
45[1-renegotiate-client-resume]
46ssl_conf = 1-renegotiate-client-resume-ssl
47
48[1-renegotiate-client-resume-ssl]
49server = 1-renegotiate-client-resume-server
50client = 1-renegotiate-client-resume-client
51
52[1-renegotiate-client-resume-server]
53Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
54CipherString = DEFAULT:@SECLEVEL=0
55MaxProtocol = DTLSv1.2
56PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
57
58[1-renegotiate-client-resume-client]
59CipherString = DEFAULT:@SECLEVEL=0
60VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
61VerifyMode = Peer
62
63[test-1]
64ExpectedResult = Success
65HandshakeMode = RenegotiateClient
66Method = DTLS
67ResumptionExpected = Yes
68UseSCTP = No
69
70
71# ===========================================================
72
73[2-renegotiate-server-resume]
74ssl_conf = 2-renegotiate-server-resume-ssl
75
76[2-renegotiate-server-resume-ssl]
77server = 2-renegotiate-server-resume-server
78client = 2-renegotiate-server-resume-client
79
80[2-renegotiate-server-resume-server]
81Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
82CipherString = DEFAULT:@SECLEVEL=0
83MaxProtocol = DTLSv1.2
84PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
85
86[2-renegotiate-server-resume-client]
87CipherString = DEFAULT:@SECLEVEL=0
88VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
89VerifyMode = Peer
90
91[test-2]
92ExpectedResult = Success
93HandshakeMode = RenegotiateServer
94Method = DTLS
95ResumptionExpected = No
96UseSCTP = No
97
98
99# ===========================================================
100
101[3-renegotiate-client-auth-require]
102ssl_conf = 3-renegotiate-client-auth-require-ssl
103
104[3-renegotiate-client-auth-require-ssl]
105server = 3-renegotiate-client-auth-require-server
106client = 3-renegotiate-client-auth-require-client
107
108[3-renegotiate-client-auth-require-server]
109Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
110CipherString = DEFAULT:@SECLEVEL=0
111MaxProtocol = DTLSv1.2
112PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
113VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
114VerifyMode = Require
115
116[3-renegotiate-client-auth-require-client]
117Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
118CipherString = DEFAULT:@SECLEVEL=0
119PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
120VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
121VerifyMode = Peer
122
123[test-3]
124ExpectedResult = Success
125HandshakeMode = RenegotiateServer
126Method = DTLS
127ResumptionExpected = No
128UseSCTP = No
129
130
131# ===========================================================
132
133[4-renegotiate-client-auth-once]
134ssl_conf = 4-renegotiate-client-auth-once-ssl
135
136[4-renegotiate-client-auth-once-ssl]
137server = 4-renegotiate-client-auth-once-server
138client = 4-renegotiate-client-auth-once-client
139
140[4-renegotiate-client-auth-once-server]
141Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
142CipherString = DEFAULT:@SECLEVEL=0
143MaxProtocol = DTLSv1.2
144PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
145VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
146VerifyMode = Once
147
148[4-renegotiate-client-auth-once-client]
149Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
150CipherString = DEFAULT:@SECLEVEL=0
151PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
152VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
153VerifyMode = Peer
154
155[test-4]
156ExpectedResult = Success
157HandshakeMode = RenegotiateServer
158Method = DTLS
159ResumptionExpected = No
160UseSCTP = No
161
162
163# ===========================================================
164
165[5-renegotiate-aead-to-non-aead]
166ssl_conf = 5-renegotiate-aead-to-non-aead-ssl
167
168[5-renegotiate-aead-to-non-aead-ssl]
169server = 5-renegotiate-aead-to-non-aead-server
170client = 5-renegotiate-aead-to-non-aead-client
171
172[5-renegotiate-aead-to-non-aead-server]
173Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
174CipherString = DEFAULT
175Options = NoResumptionOnRenegotiation
176PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
177
178[5-renegotiate-aead-to-non-aead-client]
179CipherString = AES128-GCM-SHA256
180MaxProtocol = DTLSv1.2
181VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
182VerifyMode = Peer
183
184[test-5]
185ExpectedResult = Success
186HandshakeMode = RenegotiateClient
187Method = DTLS
188ResumptionExpected = No
189UseSCTP = No
190client = 5-renegotiate-aead-to-non-aead-client-extra
191
192[5-renegotiate-aead-to-non-aead-client-extra]
193RenegotiateCiphers = AES128-SHA
194
195
196# ===========================================================
197
198[6-renegotiate-non-aead-to-aead]
199ssl_conf = 6-renegotiate-non-aead-to-aead-ssl
200
201[6-renegotiate-non-aead-to-aead-ssl]
202server = 6-renegotiate-non-aead-to-aead-server
203client = 6-renegotiate-non-aead-to-aead-client
204
205[6-renegotiate-non-aead-to-aead-server]
206Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
207CipherString = DEFAULT
208Options = NoResumptionOnRenegotiation
209PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
210
211[6-renegotiate-non-aead-to-aead-client]
212CipherString = AES128-SHA
213MaxProtocol = DTLSv1.2
214VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
215VerifyMode = Peer
216
217[test-6]
218ExpectedResult = Success
219HandshakeMode = RenegotiateClient
220Method = DTLS
221ResumptionExpected = No
222UseSCTP = No
223client = 6-renegotiate-non-aead-to-aead-client-extra
224
225[6-renegotiate-non-aead-to-aead-client-extra]
226RenegotiateCiphers = AES128-GCM-SHA256
227
228
229# ===========================================================
230
231[7-renegotiate-non-aead-to-non-aead]
232ssl_conf = 7-renegotiate-non-aead-to-non-aead-ssl
233
234[7-renegotiate-non-aead-to-non-aead-ssl]
235server = 7-renegotiate-non-aead-to-non-aead-server
236client = 7-renegotiate-non-aead-to-non-aead-client
237
238[7-renegotiate-non-aead-to-non-aead-server]
239Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
240CipherString = DEFAULT
241Options = NoResumptionOnRenegotiation
242PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
243
244[7-renegotiate-non-aead-to-non-aead-client]
245CipherString = AES128-SHA
246MaxProtocol = DTLSv1.2
247VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
248VerifyMode = Peer
249
250[test-7]
251ExpectedResult = Success
252HandshakeMode = RenegotiateClient
253Method = DTLS
254ResumptionExpected = No
255UseSCTP = No
256client = 7-renegotiate-non-aead-to-non-aead-client-extra
257
258[7-renegotiate-non-aead-to-non-aead-client-extra]
259RenegotiateCiphers = AES256-SHA
260
261
262# ===========================================================
263
264[8-renegotiate-aead-to-aead]
265ssl_conf = 8-renegotiate-aead-to-aead-ssl
266
267[8-renegotiate-aead-to-aead-ssl]
268server = 8-renegotiate-aead-to-aead-server
269client = 8-renegotiate-aead-to-aead-client
270
271[8-renegotiate-aead-to-aead-server]
272Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
273CipherString = DEFAULT
274Options = NoResumptionOnRenegotiation
275PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
276
277[8-renegotiate-aead-to-aead-client]
278CipherString = AES128-GCM-SHA256
279MaxProtocol = DTLSv1.2
280VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
281VerifyMode = Peer
282
283[test-8]
284ExpectedResult = Success
285HandshakeMode = RenegotiateClient
286Method = DTLS
287ResumptionExpected = No
288UseSCTP = No
289client = 8-renegotiate-aead-to-aead-client-extra
290
291[8-renegotiate-aead-to-aead-client-extra]
292RenegotiateCiphers = AES256-GCM-SHA384
293
294
295