1# Generated with generate_ssl_tests.pl 2 3num_tests = 4 4 5test-0 = 0-default 6test-1 = 1-Server signature algorithms bug 7test-2 = 2-verify-cert 8test-3 = 3-name-constraints-no-san-in-ee 9# =========================================================== 10 11[0-default] 12ssl_conf = 0-default-ssl 13 14[0-default-ssl] 15server = 0-default-server 16client = 0-default-client 17 18[0-default-server] 19Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 20CipherString = DEFAULT 21PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 22 23[0-default-client] 24CipherString = DEFAULT 25VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 26VerifyMode = Peer 27 28[test-0] 29ExpectedResult = Success 30 31 32# =========================================================== 33 34[1-Server signature algorithms bug] 35ssl_conf = 1-Server signature algorithms bug-ssl 36 37[1-Server signature algorithms bug-ssl] 38server = 1-Server signature algorithms bug-server 39client = 1-Server signature algorithms bug-client 40 41[1-Server signature algorithms bug-server] 42Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 43CipherString = DEFAULT 44ClientSignatureAlgorithms = PSS+SHA512:RSA+SHA512 45PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 46 47[1-Server signature algorithms bug-client] 48CipherString = DEFAULT 49SignatureAlgorithms = PSS+SHA256:RSA+SHA256 50VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 51VerifyMode = Peer 52 53[test-1] 54ExpectedResult = Success 55 56 57# =========================================================== 58 59[2-verify-cert] 60ssl_conf = 2-verify-cert-ssl 61 62[2-verify-cert-ssl] 63server = 2-verify-cert-server 64client = 2-verify-cert-client 65 66[2-verify-cert-server] 67Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 68CipherString = DEFAULT 69PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 70 71[2-verify-cert-client] 72CipherString = DEFAULT 73VerifyMode = Peer 74 75[test-2] 76ExpectedClientAlert = UnknownCA 77ExpectedResult = ClientFail 78 79 80# =========================================================== 81 82[3-name-constraints-no-san-in-ee] 83ssl_conf = 3-name-constraints-no-san-in-ee-ssl 84 85[3-name-constraints-no-san-in-ee-ssl] 86server = 3-name-constraints-no-san-in-ee-server 87client = 3-name-constraints-no-san-in-ee-client 88 89[3-name-constraints-no-san-in-ee-server] 90Certificate = ${ENV::TEST_CERTS_DIR}/goodcn2-chain.pem 91CipherString = DEFAULT 92PrivateKey = ${ENV::TEST_CERTS_DIR}/goodcn2-key.pem 93 94[3-name-constraints-no-san-in-ee-client] 95CipherString = DEFAULT 96VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem 97VerifyMode = Peer 98 99[test-3] 100ExpectedResult = Success 101 102 103
