1# Generated with generate_ssl_tests.pl 2 3num_tests = 20 4 5test-0 = 0-npn-simple 6test-1 = 1-npn-client-finds-match 7test-2 = 2-npn-client-honours-server-pref 8test-3 = 3-npn-client-first-pref-on-mismatch 9test-4 = 4-npn-no-server-support 10test-5 = 5-npn-no-client-support 11test-6 = 6-npn-with-sni-no-context-switch 12test-7 = 7-npn-with-sni-context-switch 13test-8 = 8-npn-selected-sni-server-supports-npn 14test-9 = 9-npn-selected-sni-server-does-not-support-npn 15test-10 = 10-alpn-preferred-over-npn 16test-11 = 11-sni-npn-preferred-over-alpn 17test-12 = 12-npn-simple-resumption 18test-13 = 13-npn-server-switch-resumption 19test-14 = 14-npn-client-switch-resumption 20test-15 = 15-npn-client-first-pref-on-mismatch-resumption 21test-16 = 16-npn-no-server-support-resumption 22test-17 = 17-npn-no-client-support-resumption 23test-18 = 18-alpn-preferred-over-npn-resumption 24test-19 = 19-npn-used-if-alpn-not-supported-resumption 25# =========================================================== 26 27[0-npn-simple] 28ssl_conf = 0-npn-simple-ssl 29 30[0-npn-simple-ssl] 31server = 0-npn-simple-server 32client = 0-npn-simple-client 33 34[0-npn-simple-server] 35Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 36CipherString = DEFAULT 37PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 38 39[0-npn-simple-client] 40CipherString = DEFAULT 41MaxProtocol = TLSv1.2 42VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 43VerifyMode = Peer 44 45[test-0] 46ExpectedNPNProtocol = foo 47server = 0-npn-simple-server-extra 48client = 0-npn-simple-client-extra 49 50[0-npn-simple-server-extra] 51NPNProtocols = foo 52 53[0-npn-simple-client-extra] 54NPNProtocols = foo 55 56 57# =========================================================== 58 59[1-npn-client-finds-match] 60ssl_conf = 1-npn-client-finds-match-ssl 61 62[1-npn-client-finds-match-ssl] 63server = 1-npn-client-finds-match-server 64client = 1-npn-client-finds-match-client 65 66[1-npn-client-finds-match-server] 67Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 68CipherString = DEFAULT 69PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 70 71[1-npn-client-finds-match-client] 72CipherString = DEFAULT 73MaxProtocol = TLSv1.2 74VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 75VerifyMode = Peer 76 77[test-1] 78ExpectedNPNProtocol = bar 79server = 1-npn-client-finds-match-server-extra 80client = 1-npn-client-finds-match-client-extra 81 82[1-npn-client-finds-match-server-extra] 83NPNProtocols = baz,bar 84 85[1-npn-client-finds-match-client-extra] 86NPNProtocols = foo,bar 87 88 89# =========================================================== 90 91[2-npn-client-honours-server-pref] 92ssl_conf = 2-npn-client-honours-server-pref-ssl 93 94[2-npn-client-honours-server-pref-ssl] 95server = 2-npn-client-honours-server-pref-server 96client = 2-npn-client-honours-server-pref-client 97 98[2-npn-client-honours-server-pref-server] 99Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 100CipherString = DEFAULT 101PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 102 103[2-npn-client-honours-server-pref-client] 104CipherString = DEFAULT 105MaxProtocol = TLSv1.2 106VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 107VerifyMode = Peer 108 109[test-2] 110ExpectedNPNProtocol = bar 111server = 2-npn-client-honours-server-pref-server-extra 112client = 2-npn-client-honours-server-pref-client-extra 113 114[2-npn-client-honours-server-pref-server-extra] 115NPNProtocols = bar,foo 116 117[2-npn-client-honours-server-pref-client-extra] 118NPNProtocols = foo,bar 119 120 121# =========================================================== 122 123[3-npn-client-first-pref-on-mismatch] 124ssl_conf = 3-npn-client-first-pref-on-mismatch-ssl 125 126[3-npn-client-first-pref-on-mismatch-ssl] 127server = 3-npn-client-first-pref-on-mismatch-server 128client = 3-npn-client-first-pref-on-mismatch-client 129 130[3-npn-client-first-pref-on-mismatch-server] 131Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 132CipherString = DEFAULT 133PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 134 135[3-npn-client-first-pref-on-mismatch-client] 136CipherString = DEFAULT 137MaxProtocol = TLSv1.2 138VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 139VerifyMode = Peer 140 141[test-3] 142ExpectedNPNProtocol = foo 143server = 3-npn-client-first-pref-on-mismatch-server-extra 144client = 3-npn-client-first-pref-on-mismatch-client-extra 145 146[3-npn-client-first-pref-on-mismatch-server-extra] 147NPNProtocols = baz 148 149[3-npn-client-first-pref-on-mismatch-client-extra] 150NPNProtocols = foo,bar 151 152 153# =========================================================== 154 155[4-npn-no-server-support] 156ssl_conf = 4-npn-no-server-support-ssl 157 158[4-npn-no-server-support-ssl] 159server = 4-npn-no-server-support-server 160client = 4-npn-no-server-support-client 161 162[4-npn-no-server-support-server] 163Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 164CipherString = DEFAULT 165PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 166 167[4-npn-no-server-support-client] 168CipherString = DEFAULT 169MaxProtocol = TLSv1.2 170VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 171VerifyMode = Peer 172 173[test-4] 174client = 4-npn-no-server-support-client-extra 175 176[4-npn-no-server-support-client-extra] 177NPNProtocols = foo 178 179 180# =========================================================== 181 182[5-npn-no-client-support] 183ssl_conf = 5-npn-no-client-support-ssl 184 185[5-npn-no-client-support-ssl] 186server = 5-npn-no-client-support-server 187client = 5-npn-no-client-support-client 188 189[5-npn-no-client-support-server] 190Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 191CipherString = DEFAULT 192PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 193 194[5-npn-no-client-support-client] 195CipherString = DEFAULT 196MaxProtocol = TLSv1.2 197VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 198VerifyMode = Peer 199 200[test-5] 201server = 5-npn-no-client-support-server-extra 202 203[5-npn-no-client-support-server-extra] 204NPNProtocols = foo 205 206 207# =========================================================== 208 209[6-npn-with-sni-no-context-switch] 210ssl_conf = 6-npn-with-sni-no-context-switch-ssl 211 212[6-npn-with-sni-no-context-switch-ssl] 213server = 6-npn-with-sni-no-context-switch-server 214client = 6-npn-with-sni-no-context-switch-client 215server2 = 6-npn-with-sni-no-context-switch-server2 216 217[6-npn-with-sni-no-context-switch-server] 218Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 219CipherString = DEFAULT 220PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 221 222[6-npn-with-sni-no-context-switch-server2] 223Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 224CipherString = DEFAULT 225PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 226 227[6-npn-with-sni-no-context-switch-client] 228CipherString = DEFAULT 229MaxProtocol = TLSv1.2 230VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 231VerifyMode = Peer 232 233[test-6] 234ExpectedNPNProtocol = foo 235ExpectedServerName = server1 236server = 6-npn-with-sni-no-context-switch-server-extra 237server2 = 6-npn-with-sni-no-context-switch-server2-extra 238client = 6-npn-with-sni-no-context-switch-client-extra 239 240[6-npn-with-sni-no-context-switch-server-extra] 241NPNProtocols = foo 242ServerNameCallback = IgnoreMismatch 243 244[6-npn-with-sni-no-context-switch-server2-extra] 245NPNProtocols = bar 246 247[6-npn-with-sni-no-context-switch-client-extra] 248NPNProtocols = foo,bar 249ServerName = server1 250 251 252# =========================================================== 253 254[7-npn-with-sni-context-switch] 255ssl_conf = 7-npn-with-sni-context-switch-ssl 256 257[7-npn-with-sni-context-switch-ssl] 258server = 7-npn-with-sni-context-switch-server 259client = 7-npn-with-sni-context-switch-client 260server2 = 7-npn-with-sni-context-switch-server2 261 262[7-npn-with-sni-context-switch-server] 263Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 264CipherString = DEFAULT 265PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 266 267[7-npn-with-sni-context-switch-server2] 268Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 269CipherString = DEFAULT 270PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 271 272[7-npn-with-sni-context-switch-client] 273CipherString = DEFAULT 274MaxProtocol = TLSv1.2 275VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 276VerifyMode = Peer 277 278[test-7] 279ExpectedNPNProtocol = bar 280ExpectedServerName = server2 281server = 7-npn-with-sni-context-switch-server-extra 282server2 = 7-npn-with-sni-context-switch-server2-extra 283client = 7-npn-with-sni-context-switch-client-extra 284 285[7-npn-with-sni-context-switch-server-extra] 286NPNProtocols = foo 287ServerNameCallback = IgnoreMismatch 288 289[7-npn-with-sni-context-switch-server2-extra] 290NPNProtocols = bar 291 292[7-npn-with-sni-context-switch-client-extra] 293NPNProtocols = foo,bar 294ServerName = server2 295 296 297# =========================================================== 298 299[8-npn-selected-sni-server-supports-npn] 300ssl_conf = 8-npn-selected-sni-server-supports-npn-ssl 301 302[8-npn-selected-sni-server-supports-npn-ssl] 303server = 8-npn-selected-sni-server-supports-npn-server 304client = 8-npn-selected-sni-server-supports-npn-client 305server2 = 8-npn-selected-sni-server-supports-npn-server2 306 307[8-npn-selected-sni-server-supports-npn-server] 308Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 309CipherString = DEFAULT 310PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 311 312[8-npn-selected-sni-server-supports-npn-server2] 313Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 314CipherString = DEFAULT 315PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 316 317[8-npn-selected-sni-server-supports-npn-client] 318CipherString = DEFAULT 319MaxProtocol = TLSv1.2 320VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 321VerifyMode = Peer 322 323[test-8] 324ExpectedNPNProtocol = bar 325ExpectedServerName = server2 326server = 8-npn-selected-sni-server-supports-npn-server-extra 327server2 = 8-npn-selected-sni-server-supports-npn-server2-extra 328client = 8-npn-selected-sni-server-supports-npn-client-extra 329 330[8-npn-selected-sni-server-supports-npn-server-extra] 331ServerNameCallback = IgnoreMismatch 332 333[8-npn-selected-sni-server-supports-npn-server2-extra] 334NPNProtocols = bar 335 336[8-npn-selected-sni-server-supports-npn-client-extra] 337NPNProtocols = foo,bar 338ServerName = server2 339 340 341# =========================================================== 342 343[9-npn-selected-sni-server-does-not-support-npn] 344ssl_conf = 9-npn-selected-sni-server-does-not-support-npn-ssl 345 346[9-npn-selected-sni-server-does-not-support-npn-ssl] 347server = 9-npn-selected-sni-server-does-not-support-npn-server 348client = 9-npn-selected-sni-server-does-not-support-npn-client 349server2 = 9-npn-selected-sni-server-does-not-support-npn-server2 350 351[9-npn-selected-sni-server-does-not-support-npn-server] 352Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 353CipherString = DEFAULT 354PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 355 356[9-npn-selected-sni-server-does-not-support-npn-server2] 357Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 358CipherString = DEFAULT 359PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 360 361[9-npn-selected-sni-server-does-not-support-npn-client] 362CipherString = DEFAULT 363MaxProtocol = TLSv1.2 364VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 365VerifyMode = Peer 366 367[test-9] 368ExpectedServerName = server2 369server = 9-npn-selected-sni-server-does-not-support-npn-server-extra 370client = 9-npn-selected-sni-server-does-not-support-npn-client-extra 371 372[9-npn-selected-sni-server-does-not-support-npn-server-extra] 373NPNProtocols = bar 374ServerNameCallback = IgnoreMismatch 375 376[9-npn-selected-sni-server-does-not-support-npn-client-extra] 377NPNProtocols = foo,bar 378ServerName = server2 379 380 381# =========================================================== 382 383[10-alpn-preferred-over-npn] 384ssl_conf = 10-alpn-preferred-over-npn-ssl 385 386[10-alpn-preferred-over-npn-ssl] 387server = 10-alpn-preferred-over-npn-server 388client = 10-alpn-preferred-over-npn-client 389 390[10-alpn-preferred-over-npn-server] 391Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 392CipherString = DEFAULT 393PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 394 395[10-alpn-preferred-over-npn-client] 396CipherString = DEFAULT 397MaxProtocol = TLSv1.2 398VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 399VerifyMode = Peer 400 401[test-10] 402ExpectedALPNProtocol = foo 403server = 10-alpn-preferred-over-npn-server-extra 404client = 10-alpn-preferred-over-npn-client-extra 405 406[10-alpn-preferred-over-npn-server-extra] 407ALPNProtocols = foo 408NPNProtocols = bar 409 410[10-alpn-preferred-over-npn-client-extra] 411ALPNProtocols = foo 412NPNProtocols = bar 413 414 415# =========================================================== 416 417[11-sni-npn-preferred-over-alpn] 418ssl_conf = 11-sni-npn-preferred-over-alpn-ssl 419 420[11-sni-npn-preferred-over-alpn-ssl] 421server = 11-sni-npn-preferred-over-alpn-server 422client = 11-sni-npn-preferred-over-alpn-client 423server2 = 11-sni-npn-preferred-over-alpn-server2 424 425[11-sni-npn-preferred-over-alpn-server] 426Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 427CipherString = DEFAULT 428PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 429 430[11-sni-npn-preferred-over-alpn-server2] 431Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 432CipherString = DEFAULT 433PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 434 435[11-sni-npn-preferred-over-alpn-client] 436CipherString = DEFAULT 437MaxProtocol = TLSv1.2 438VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 439VerifyMode = Peer 440 441[test-11] 442ExpectedNPNProtocol = bar 443ExpectedServerName = server2 444server = 11-sni-npn-preferred-over-alpn-server-extra 445server2 = 11-sni-npn-preferred-over-alpn-server2-extra 446client = 11-sni-npn-preferred-over-alpn-client-extra 447 448[11-sni-npn-preferred-over-alpn-server-extra] 449ALPNProtocols = foo 450ServerNameCallback = IgnoreMismatch 451 452[11-sni-npn-preferred-over-alpn-server2-extra] 453NPNProtocols = bar 454 455[11-sni-npn-preferred-over-alpn-client-extra] 456ALPNProtocols = foo 457NPNProtocols = bar 458ServerName = server2 459 460 461# =========================================================== 462 463[12-npn-simple-resumption] 464ssl_conf = 12-npn-simple-resumption-ssl 465 466[12-npn-simple-resumption-ssl] 467server = 12-npn-simple-resumption-server 468client = 12-npn-simple-resumption-client 469resume-server = 12-npn-simple-resumption-server 470resume-client = 12-npn-simple-resumption-client 471 472[12-npn-simple-resumption-server] 473Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 474CipherString = DEFAULT 475PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 476 477[12-npn-simple-resumption-client] 478CipherString = DEFAULT 479MaxProtocol = TLSv1.2 480VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 481VerifyMode = Peer 482 483[test-12] 484ExpectedNPNProtocol = foo 485HandshakeMode = Resume 486ResumptionExpected = Yes 487server = 12-npn-simple-resumption-server-extra 488resume-server = 12-npn-simple-resumption-server-extra 489client = 12-npn-simple-resumption-client-extra 490resume-client = 12-npn-simple-resumption-client-extra 491 492[12-npn-simple-resumption-server-extra] 493NPNProtocols = foo 494 495[12-npn-simple-resumption-client-extra] 496NPNProtocols = foo 497 498 499# =========================================================== 500 501[13-npn-server-switch-resumption] 502ssl_conf = 13-npn-server-switch-resumption-ssl 503 504[13-npn-server-switch-resumption-ssl] 505server = 13-npn-server-switch-resumption-server 506client = 13-npn-server-switch-resumption-client 507resume-server = 13-npn-server-switch-resumption-resume-server 508resume-client = 13-npn-server-switch-resumption-client 509 510[13-npn-server-switch-resumption-server] 511Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 512CipherString = DEFAULT 513PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 514 515[13-npn-server-switch-resumption-resume-server] 516Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 517CipherString = DEFAULT 518PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 519 520[13-npn-server-switch-resumption-client] 521CipherString = DEFAULT 522MaxProtocol = TLSv1.2 523VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 524VerifyMode = Peer 525 526[test-13] 527ExpectedNPNProtocol = baz 528HandshakeMode = Resume 529ResumptionExpected = Yes 530server = 13-npn-server-switch-resumption-server-extra 531resume-server = 13-npn-server-switch-resumption-resume-server-extra 532client = 13-npn-server-switch-resumption-client-extra 533resume-client = 13-npn-server-switch-resumption-client-extra 534 535[13-npn-server-switch-resumption-server-extra] 536NPNProtocols = bar,foo 537 538[13-npn-server-switch-resumption-resume-server-extra] 539NPNProtocols = baz,foo 540 541[13-npn-server-switch-resumption-client-extra] 542NPNProtocols = foo,bar,baz 543 544 545# =========================================================== 546 547[14-npn-client-switch-resumption] 548ssl_conf = 14-npn-client-switch-resumption-ssl 549 550[14-npn-client-switch-resumption-ssl] 551server = 14-npn-client-switch-resumption-server 552client = 14-npn-client-switch-resumption-client 553resume-server = 14-npn-client-switch-resumption-server 554resume-client = 14-npn-client-switch-resumption-resume-client 555 556[14-npn-client-switch-resumption-server] 557Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 558CipherString = DEFAULT 559PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 560 561[14-npn-client-switch-resumption-client] 562CipherString = DEFAULT 563MaxProtocol = TLSv1.2 564VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 565VerifyMode = Peer 566 567[14-npn-client-switch-resumption-resume-client] 568CipherString = DEFAULT 569MaxProtocol = TLSv1.2 570VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 571VerifyMode = Peer 572 573[test-14] 574ExpectedNPNProtocol = bar 575HandshakeMode = Resume 576ResumptionExpected = Yes 577server = 14-npn-client-switch-resumption-server-extra 578resume-server = 14-npn-client-switch-resumption-server-extra 579client = 14-npn-client-switch-resumption-client-extra 580resume-client = 14-npn-client-switch-resumption-resume-client-extra 581 582[14-npn-client-switch-resumption-server-extra] 583NPNProtocols = foo,bar,baz 584 585[14-npn-client-switch-resumption-client-extra] 586NPNProtocols = foo,baz 587 588[14-npn-client-switch-resumption-resume-client-extra] 589NPNProtocols = bar,baz 590 591 592# =========================================================== 593 594[15-npn-client-first-pref-on-mismatch-resumption] 595ssl_conf = 15-npn-client-first-pref-on-mismatch-resumption-ssl 596 597[15-npn-client-first-pref-on-mismatch-resumption-ssl] 598server = 15-npn-client-first-pref-on-mismatch-resumption-server 599client = 15-npn-client-first-pref-on-mismatch-resumption-client 600resume-server = 15-npn-client-first-pref-on-mismatch-resumption-resume-server 601resume-client = 15-npn-client-first-pref-on-mismatch-resumption-client 602 603[15-npn-client-first-pref-on-mismatch-resumption-server] 604Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 605CipherString = DEFAULT 606PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 607 608[15-npn-client-first-pref-on-mismatch-resumption-resume-server] 609Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 610CipherString = DEFAULT 611PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 612 613[15-npn-client-first-pref-on-mismatch-resumption-client] 614CipherString = DEFAULT 615MaxProtocol = TLSv1.2 616VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 617VerifyMode = Peer 618 619[test-15] 620ExpectedNPNProtocol = foo 621HandshakeMode = Resume 622ResumptionExpected = Yes 623server = 15-npn-client-first-pref-on-mismatch-resumption-server-extra 624resume-server = 15-npn-client-first-pref-on-mismatch-resumption-resume-server-extra 625client = 15-npn-client-first-pref-on-mismatch-resumption-client-extra 626resume-client = 15-npn-client-first-pref-on-mismatch-resumption-client-extra 627 628[15-npn-client-first-pref-on-mismatch-resumption-server-extra] 629NPNProtocols = bar 630 631[15-npn-client-first-pref-on-mismatch-resumption-resume-server-extra] 632NPNProtocols = baz 633 634[15-npn-client-first-pref-on-mismatch-resumption-client-extra] 635NPNProtocols = foo,bar 636 637 638# =========================================================== 639 640[16-npn-no-server-support-resumption] 641ssl_conf = 16-npn-no-server-support-resumption-ssl 642 643[16-npn-no-server-support-resumption-ssl] 644server = 16-npn-no-server-support-resumption-server 645client = 16-npn-no-server-support-resumption-client 646resume-server = 16-npn-no-server-support-resumption-resume-server 647resume-client = 16-npn-no-server-support-resumption-client 648 649[16-npn-no-server-support-resumption-server] 650Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 651CipherString = DEFAULT 652PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 653 654[16-npn-no-server-support-resumption-resume-server] 655Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 656CipherString = DEFAULT 657PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 658 659[16-npn-no-server-support-resumption-client] 660CipherString = DEFAULT 661MaxProtocol = TLSv1.2 662VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 663VerifyMode = Peer 664 665[test-16] 666HandshakeMode = Resume 667ResumptionExpected = Yes 668server = 16-npn-no-server-support-resumption-server-extra 669client = 16-npn-no-server-support-resumption-client-extra 670resume-client = 16-npn-no-server-support-resumption-client-extra 671 672[16-npn-no-server-support-resumption-server-extra] 673NPNProtocols = foo 674 675[16-npn-no-server-support-resumption-client-extra] 676NPNProtocols = foo 677 678 679# =========================================================== 680 681[17-npn-no-client-support-resumption] 682ssl_conf = 17-npn-no-client-support-resumption-ssl 683 684[17-npn-no-client-support-resumption-ssl] 685server = 17-npn-no-client-support-resumption-server 686client = 17-npn-no-client-support-resumption-client 687resume-server = 17-npn-no-client-support-resumption-server 688resume-client = 17-npn-no-client-support-resumption-resume-client 689 690[17-npn-no-client-support-resumption-server] 691Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 692CipherString = DEFAULT 693PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 694 695[17-npn-no-client-support-resumption-client] 696CipherString = DEFAULT 697MaxProtocol = TLSv1.2 698VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 699VerifyMode = Peer 700 701[17-npn-no-client-support-resumption-resume-client] 702CipherString = DEFAULT 703MaxProtocol = TLSv1.2 704VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 705VerifyMode = Peer 706 707[test-17] 708HandshakeMode = Resume 709ResumptionExpected = Yes 710server = 17-npn-no-client-support-resumption-server-extra 711resume-server = 17-npn-no-client-support-resumption-server-extra 712client = 17-npn-no-client-support-resumption-client-extra 713 714[17-npn-no-client-support-resumption-server-extra] 715NPNProtocols = foo 716 717[17-npn-no-client-support-resumption-client-extra] 718NPNProtocols = foo 719 720 721# =========================================================== 722 723[18-alpn-preferred-over-npn-resumption] 724ssl_conf = 18-alpn-preferred-over-npn-resumption-ssl 725 726[18-alpn-preferred-over-npn-resumption-ssl] 727server = 18-alpn-preferred-over-npn-resumption-server 728client = 18-alpn-preferred-over-npn-resumption-client 729resume-server = 18-alpn-preferred-over-npn-resumption-resume-server 730resume-client = 18-alpn-preferred-over-npn-resumption-client 731 732[18-alpn-preferred-over-npn-resumption-server] 733Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 734CipherString = DEFAULT 735PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 736 737[18-alpn-preferred-over-npn-resumption-resume-server] 738Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 739CipherString = DEFAULT 740PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 741 742[18-alpn-preferred-over-npn-resumption-client] 743CipherString = DEFAULT 744MaxProtocol = TLSv1.2 745VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 746VerifyMode = Peer 747 748[test-18] 749ExpectedALPNProtocol = foo 750HandshakeMode = Resume 751ResumptionExpected = Yes 752server = 18-alpn-preferred-over-npn-resumption-server-extra 753resume-server = 18-alpn-preferred-over-npn-resumption-resume-server-extra 754client = 18-alpn-preferred-over-npn-resumption-client-extra 755resume-client = 18-alpn-preferred-over-npn-resumption-client-extra 756 757[18-alpn-preferred-over-npn-resumption-server-extra] 758NPNProtocols = bar 759 760[18-alpn-preferred-over-npn-resumption-resume-server-extra] 761ALPNProtocols = foo 762NPNProtocols = baz 763 764[18-alpn-preferred-over-npn-resumption-client-extra] 765ALPNProtocols = foo 766NPNProtocols = bar,baz 767 768 769# =========================================================== 770 771[19-npn-used-if-alpn-not-supported-resumption] 772ssl_conf = 19-npn-used-if-alpn-not-supported-resumption-ssl 773 774[19-npn-used-if-alpn-not-supported-resumption-ssl] 775server = 19-npn-used-if-alpn-not-supported-resumption-server 776client = 19-npn-used-if-alpn-not-supported-resumption-client 777resume-server = 19-npn-used-if-alpn-not-supported-resumption-resume-server 778resume-client = 19-npn-used-if-alpn-not-supported-resumption-client 779 780[19-npn-used-if-alpn-not-supported-resumption-server] 781Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 782CipherString = DEFAULT 783PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 784 785[19-npn-used-if-alpn-not-supported-resumption-resume-server] 786Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem 787CipherString = DEFAULT 788PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem 789 790[19-npn-used-if-alpn-not-supported-resumption-client] 791CipherString = DEFAULT 792MaxProtocol = TLSv1.2 793VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem 794VerifyMode = Peer 795 796[test-19] 797ExpectedNPNProtocol = baz 798HandshakeMode = Resume 799ResumptionExpected = Yes 800server = 19-npn-used-if-alpn-not-supported-resumption-server-extra 801resume-server = 19-npn-used-if-alpn-not-supported-resumption-resume-server-extra 802client = 19-npn-used-if-alpn-not-supported-resumption-client-extra 803resume-client = 19-npn-used-if-alpn-not-supported-resumption-client-extra 804 805[19-npn-used-if-alpn-not-supported-resumption-server-extra] 806ALPNProtocols = foo 807NPNProtocols = bar 808 809[19-npn-used-if-alpn-not-supported-resumption-resume-server-extra] 810NPNProtocols = baz 811 812[19-npn-used-if-alpn-not-supported-resumption-client-extra] 813ALPNProtocols = foo 814NPNProtocols = bar,baz 815 816 817
