xref: /openssl/test/ssl-tests/14-curves.cnf (revision 2c59d54c)
1# Generated with generate_ssl_tests.pl
2
3num_tests = 104
4
5test-0 = 0-curve-prime256v1
6test-1 = 1-curve-secp384r1
7test-2 = 2-curve-secp521r1
8test-3 = 3-curve-X25519
9test-4 = 4-curve-X448
10test-5 = 5-curve-ffdhe2048
11test-6 = 6-curve-ffdhe3072
12test-7 = 7-curve-ffdhe4096
13test-8 = 8-curve-ffdhe6144
14test-9 = 9-curve-ffdhe8192
15test-10 = 10-curve-brainpoolP256r1tls13
16test-11 = 11-curve-brainpoolP384r1tls13
17test-12 = 12-curve-brainpoolP512r1tls13
18test-13 = 13-curve-sect233k1
19test-14 = 14-curve-sect233r1
20test-15 = 15-curve-sect283k1
21test-16 = 16-curve-sect283r1
22test-17 = 17-curve-sect409k1
23test-18 = 18-curve-sect409r1
24test-19 = 19-curve-sect571k1
25test-20 = 20-curve-sect571r1
26test-21 = 21-curve-secp224r1
27test-22 = 22-curve-sect163k1
28test-23 = 23-curve-sect163r2
29test-24 = 24-curve-prime192v1
30test-25 = 25-curve-sect163r1
31test-26 = 26-curve-sect193r1
32test-27 = 27-curve-sect193r2
33test-28 = 28-curve-sect239k1
34test-29 = 29-curve-secp160k1
35test-30 = 30-curve-secp160r1
36test-31 = 31-curve-secp160r2
37test-32 = 32-curve-secp192k1
38test-33 = 33-curve-secp224k1
39test-34 = 34-curve-secp256k1
40test-35 = 35-curve-brainpoolP256r1
41test-36 = 36-curve-brainpoolP384r1
42test-37 = 37-curve-brainpoolP512r1
43test-38 = 38-curve-sect233k1-tls12-in-tls13
44test-39 = 39-curve-sect233r1-tls12-in-tls13
45test-40 = 40-curve-sect283k1-tls12-in-tls13
46test-41 = 41-curve-sect283r1-tls12-in-tls13
47test-42 = 42-curve-sect409k1-tls12-in-tls13
48test-43 = 43-curve-sect409r1-tls12-in-tls13
49test-44 = 44-curve-sect571k1-tls12-in-tls13
50test-45 = 45-curve-sect571r1-tls12-in-tls13
51test-46 = 46-curve-secp224r1-tls12-in-tls13
52test-47 = 47-curve-sect163k1-tls12-in-tls13
53test-48 = 48-curve-sect163r2-tls12-in-tls13
54test-49 = 49-curve-prime192v1-tls12-in-tls13
55test-50 = 50-curve-sect163r1-tls12-in-tls13
56test-51 = 51-curve-sect193r1-tls12-in-tls13
57test-52 = 52-curve-sect193r2-tls12-in-tls13
58test-53 = 53-curve-sect239k1-tls12-in-tls13
59test-54 = 54-curve-secp160k1-tls12-in-tls13
60test-55 = 55-curve-secp160r1-tls12-in-tls13
61test-56 = 56-curve-secp160r2-tls12-in-tls13
62test-57 = 57-curve-secp192k1-tls12-in-tls13
63test-58 = 58-curve-secp224k1-tls12-in-tls13
64test-59 = 59-curve-secp256k1-tls12-in-tls13
65test-60 = 60-curve-brainpoolP256r1-tls12-in-tls13
66test-61 = 61-curve-brainpoolP384r1-tls12-in-tls13
67test-62 = 62-curve-brainpoolP512r1-tls12-in-tls13
68test-63 = 63-curve-sect233k1-tls13
69test-64 = 64-curve-sect233r1-tls13
70test-65 = 65-curve-sect283k1-tls13
71test-66 = 66-curve-sect283r1-tls13
72test-67 = 67-curve-sect409k1-tls13
73test-68 = 68-curve-sect409r1-tls13
74test-69 = 69-curve-sect571k1-tls13
75test-70 = 70-curve-sect571r1-tls13
76test-71 = 71-curve-secp224r1-tls13
77test-72 = 72-curve-sect163k1-tls13
78test-73 = 73-curve-sect163r2-tls13
79test-74 = 74-curve-prime192v1-tls13
80test-75 = 75-curve-sect163r1-tls13
81test-76 = 76-curve-sect193r1-tls13
82test-77 = 77-curve-sect193r2-tls13
83test-78 = 78-curve-sect239k1-tls13
84test-79 = 79-curve-secp160k1-tls13
85test-80 = 80-curve-secp160r1-tls13
86test-81 = 81-curve-secp160r2-tls13
87test-82 = 82-curve-secp192k1-tls13
88test-83 = 83-curve-secp224k1-tls13
89test-84 = 84-curve-secp256k1-tls13
90test-85 = 85-curve-brainpoolP256r1-tls13
91test-86 = 86-curve-brainpoolP384r1-tls13
92test-87 = 87-curve-brainpoolP512r1-tls13
93test-88 = 88-curve-ffdhe2048-tls13-in-tls12
94test-89 = 89-curve-ffdhe2048-tls13-in-tls12-2
95test-90 = 90-curve-ffdhe3072-tls13-in-tls12
96test-91 = 91-curve-ffdhe3072-tls13-in-tls12-2
97test-92 = 92-curve-ffdhe4096-tls13-in-tls12
98test-93 = 93-curve-ffdhe4096-tls13-in-tls12-2
99test-94 = 94-curve-ffdhe6144-tls13-in-tls12
100test-95 = 95-curve-ffdhe6144-tls13-in-tls12-2
101test-96 = 96-curve-ffdhe8192-tls13-in-tls12
102test-97 = 97-curve-ffdhe8192-tls13-in-tls12-2
103test-98 = 98-curve-brainpoolP256r1tls13-tls13-in-tls12
104test-99 = 99-curve-brainpoolP256r1tls13-tls13-in-tls12-2
105test-100 = 100-curve-brainpoolP384r1tls13-tls13-in-tls12
106test-101 = 101-curve-brainpoolP384r1tls13-tls13-in-tls12-2
107test-102 = 102-curve-brainpoolP512r1tls13-tls13-in-tls12
108test-103 = 103-curve-brainpoolP512r1tls13-tls13-in-tls12-2
109# ===========================================================
110
111[0-curve-prime256v1]
112ssl_conf = 0-curve-prime256v1-ssl
113
114[0-curve-prime256v1-ssl]
115server = 0-curve-prime256v1-server
116client = 0-curve-prime256v1-client
117
118[0-curve-prime256v1-server]
119Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
120CipherString = DEFAULT@SECLEVEL=1
121Curves = prime256v1
122MaxProtocol = TLSv1.3
123PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
124
125[0-curve-prime256v1-client]
126CipherString = ECDHE@SECLEVEL=1
127Curves = prime256v1
128MaxProtocol = TLSv1.3
129VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
130VerifyMode = Peer
131
132[test-0]
133ExpectedProtocol = TLSv1.3
134ExpectedResult = Success
135ExpectedTmpKeyType = prime256v1
136
137
138# ===========================================================
139
140[1-curve-secp384r1]
141ssl_conf = 1-curve-secp384r1-ssl
142
143[1-curve-secp384r1-ssl]
144server = 1-curve-secp384r1-server
145client = 1-curve-secp384r1-client
146
147[1-curve-secp384r1-server]
148Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
149CipherString = DEFAULT@SECLEVEL=1
150Curves = secp384r1
151MaxProtocol = TLSv1.3
152PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
153
154[1-curve-secp384r1-client]
155CipherString = ECDHE@SECLEVEL=1
156Curves = secp384r1
157MaxProtocol = TLSv1.3
158VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
159VerifyMode = Peer
160
161[test-1]
162ExpectedProtocol = TLSv1.3
163ExpectedResult = Success
164ExpectedTmpKeyType = secp384r1
165
166
167# ===========================================================
168
169[2-curve-secp521r1]
170ssl_conf = 2-curve-secp521r1-ssl
171
172[2-curve-secp521r1-ssl]
173server = 2-curve-secp521r1-server
174client = 2-curve-secp521r1-client
175
176[2-curve-secp521r1-server]
177Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
178CipherString = DEFAULT@SECLEVEL=1
179Curves = secp521r1
180MaxProtocol = TLSv1.3
181PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
182
183[2-curve-secp521r1-client]
184CipherString = ECDHE@SECLEVEL=1
185Curves = secp521r1
186MaxProtocol = TLSv1.3
187VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
188VerifyMode = Peer
189
190[test-2]
191ExpectedProtocol = TLSv1.3
192ExpectedResult = Success
193ExpectedTmpKeyType = secp521r1
194
195
196# ===========================================================
197
198[3-curve-X25519]
199ssl_conf = 3-curve-X25519-ssl
200
201[3-curve-X25519-ssl]
202server = 3-curve-X25519-server
203client = 3-curve-X25519-client
204
205[3-curve-X25519-server]
206Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
207CipherString = DEFAULT@SECLEVEL=1
208Curves = X25519
209MaxProtocol = TLSv1.3
210PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
211
212[3-curve-X25519-client]
213CipherString = ECDHE@SECLEVEL=1
214Curves = X25519
215MaxProtocol = TLSv1.3
216VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
217VerifyMode = Peer
218
219[test-3]
220ExpectedProtocol = TLSv1.3
221ExpectedResult = Success
222ExpectedTmpKeyType = X25519
223
224
225# ===========================================================
226
227[4-curve-X448]
228ssl_conf = 4-curve-X448-ssl
229
230[4-curve-X448-ssl]
231server = 4-curve-X448-server
232client = 4-curve-X448-client
233
234[4-curve-X448-server]
235Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
236CipherString = DEFAULT@SECLEVEL=1
237Curves = X448
238MaxProtocol = TLSv1.3
239PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
240
241[4-curve-X448-client]
242CipherString = ECDHE@SECLEVEL=1
243Curves = X448
244MaxProtocol = TLSv1.3
245VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
246VerifyMode = Peer
247
248[test-4]
249ExpectedProtocol = TLSv1.3
250ExpectedResult = Success
251ExpectedTmpKeyType = X448
252
253
254# ===========================================================
255
256[5-curve-ffdhe2048]
257ssl_conf = 5-curve-ffdhe2048-ssl
258
259[5-curve-ffdhe2048-ssl]
260server = 5-curve-ffdhe2048-server
261client = 5-curve-ffdhe2048-client
262
263[5-curve-ffdhe2048-server]
264Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
265CipherString = DEFAULT@SECLEVEL=1
266Curves = ffdhe2048
267MaxProtocol = TLSv1.3
268PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
269
270[5-curve-ffdhe2048-client]
271CipherString = ECDHE@SECLEVEL=1
272Curves = ffdhe2048
273MaxProtocol = TLSv1.3
274VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
275VerifyMode = Peer
276
277[test-5]
278ExpectedProtocol = TLSv1.3
279ExpectedResult = Success
280ExpectedTmpKeyType = dhKeyAgreement
281
282
283# ===========================================================
284
285[6-curve-ffdhe3072]
286ssl_conf = 6-curve-ffdhe3072-ssl
287
288[6-curve-ffdhe3072-ssl]
289server = 6-curve-ffdhe3072-server
290client = 6-curve-ffdhe3072-client
291
292[6-curve-ffdhe3072-server]
293Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
294CipherString = DEFAULT@SECLEVEL=1
295Curves = ffdhe3072
296MaxProtocol = TLSv1.3
297PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
298
299[6-curve-ffdhe3072-client]
300CipherString = ECDHE@SECLEVEL=1
301Curves = ffdhe3072
302MaxProtocol = TLSv1.3
303VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
304VerifyMode = Peer
305
306[test-6]
307ExpectedProtocol = TLSv1.3
308ExpectedResult = Success
309ExpectedTmpKeyType = dhKeyAgreement
310
311
312# ===========================================================
313
314[7-curve-ffdhe4096]
315ssl_conf = 7-curve-ffdhe4096-ssl
316
317[7-curve-ffdhe4096-ssl]
318server = 7-curve-ffdhe4096-server
319client = 7-curve-ffdhe4096-client
320
321[7-curve-ffdhe4096-server]
322Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
323CipherString = DEFAULT@SECLEVEL=1
324Curves = ffdhe4096
325MaxProtocol = TLSv1.3
326PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
327
328[7-curve-ffdhe4096-client]
329CipherString = ECDHE@SECLEVEL=1
330Curves = ffdhe4096
331MaxProtocol = TLSv1.3
332VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
333VerifyMode = Peer
334
335[test-7]
336ExpectedProtocol = TLSv1.3
337ExpectedResult = Success
338ExpectedTmpKeyType = dhKeyAgreement
339
340
341# ===========================================================
342
343[8-curve-ffdhe6144]
344ssl_conf = 8-curve-ffdhe6144-ssl
345
346[8-curve-ffdhe6144-ssl]
347server = 8-curve-ffdhe6144-server
348client = 8-curve-ffdhe6144-client
349
350[8-curve-ffdhe6144-server]
351Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
352CipherString = DEFAULT@SECLEVEL=1
353Curves = ffdhe6144
354MaxProtocol = TLSv1.3
355PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
356
357[8-curve-ffdhe6144-client]
358CipherString = ECDHE@SECLEVEL=1
359Curves = ffdhe6144
360MaxProtocol = TLSv1.3
361VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
362VerifyMode = Peer
363
364[test-8]
365ExpectedProtocol = TLSv1.3
366ExpectedResult = Success
367ExpectedTmpKeyType = dhKeyAgreement
368
369
370# ===========================================================
371
372[9-curve-ffdhe8192]
373ssl_conf = 9-curve-ffdhe8192-ssl
374
375[9-curve-ffdhe8192-ssl]
376server = 9-curve-ffdhe8192-server
377client = 9-curve-ffdhe8192-client
378
379[9-curve-ffdhe8192-server]
380Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
381CipherString = DEFAULT@SECLEVEL=1
382Curves = ffdhe8192
383MaxProtocol = TLSv1.3
384PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
385
386[9-curve-ffdhe8192-client]
387CipherString = ECDHE@SECLEVEL=1
388Curves = ffdhe8192
389MaxProtocol = TLSv1.3
390VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
391VerifyMode = Peer
392
393[test-9]
394ExpectedProtocol = TLSv1.3
395ExpectedResult = Success
396ExpectedTmpKeyType = dhKeyAgreement
397
398
399# ===========================================================
400
401[10-curve-brainpoolP256r1tls13]
402ssl_conf = 10-curve-brainpoolP256r1tls13-ssl
403
404[10-curve-brainpoolP256r1tls13-ssl]
405server = 10-curve-brainpoolP256r1tls13-server
406client = 10-curve-brainpoolP256r1tls13-client
407
408[10-curve-brainpoolP256r1tls13-server]
409Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
410CipherString = DEFAULT@SECLEVEL=1
411Curves = brainpoolP256r1tls13
412MaxProtocol = TLSv1.3
413PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
414
415[10-curve-brainpoolP256r1tls13-client]
416CipherString = ECDHE@SECLEVEL=1
417Curves = brainpoolP256r1tls13
418MaxProtocol = TLSv1.3
419VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
420VerifyMode = Peer
421
422[test-10]
423ExpectedProtocol = TLSv1.3
424ExpectedResult = Success
425ExpectedTmpKeyType = brainpoolP256r1tls13
426
427
428# ===========================================================
429
430[11-curve-brainpoolP384r1tls13]
431ssl_conf = 11-curve-brainpoolP384r1tls13-ssl
432
433[11-curve-brainpoolP384r1tls13-ssl]
434server = 11-curve-brainpoolP384r1tls13-server
435client = 11-curve-brainpoolP384r1tls13-client
436
437[11-curve-brainpoolP384r1tls13-server]
438Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
439CipherString = DEFAULT@SECLEVEL=1
440Curves = brainpoolP384r1tls13
441MaxProtocol = TLSv1.3
442PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
443
444[11-curve-brainpoolP384r1tls13-client]
445CipherString = ECDHE@SECLEVEL=1
446Curves = brainpoolP384r1tls13
447MaxProtocol = TLSv1.3
448VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
449VerifyMode = Peer
450
451[test-11]
452ExpectedProtocol = TLSv1.3
453ExpectedResult = Success
454ExpectedTmpKeyType = brainpoolP384r1tls13
455
456
457# ===========================================================
458
459[12-curve-brainpoolP512r1tls13]
460ssl_conf = 12-curve-brainpoolP512r1tls13-ssl
461
462[12-curve-brainpoolP512r1tls13-ssl]
463server = 12-curve-brainpoolP512r1tls13-server
464client = 12-curve-brainpoolP512r1tls13-client
465
466[12-curve-brainpoolP512r1tls13-server]
467Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
468CipherString = DEFAULT@SECLEVEL=1
469Curves = brainpoolP512r1tls13
470MaxProtocol = TLSv1.3
471PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
472
473[12-curve-brainpoolP512r1tls13-client]
474CipherString = ECDHE@SECLEVEL=1
475Curves = brainpoolP512r1tls13
476MaxProtocol = TLSv1.3
477VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
478VerifyMode = Peer
479
480[test-12]
481ExpectedProtocol = TLSv1.3
482ExpectedResult = Success
483ExpectedTmpKeyType = brainpoolP512r1tls13
484
485
486# ===========================================================
487
488[13-curve-sect233k1]
489ssl_conf = 13-curve-sect233k1-ssl
490
491[13-curve-sect233k1-ssl]
492server = 13-curve-sect233k1-server
493client = 13-curve-sect233k1-client
494
495[13-curve-sect233k1-server]
496Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
497CipherString = DEFAULT@SECLEVEL=1
498Curves = sect233k1
499MaxProtocol = TLSv1.3
500PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
501
502[13-curve-sect233k1-client]
503CipherString = ECDHE@SECLEVEL=1
504Curves = sect233k1
505MaxProtocol = TLSv1.2
506VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
507VerifyMode = Peer
508
509[test-13]
510ExpectedProtocol = TLSv1.2
511ExpectedResult = Success
512ExpectedTmpKeyType = sect233k1
513
514
515# ===========================================================
516
517[14-curve-sect233r1]
518ssl_conf = 14-curve-sect233r1-ssl
519
520[14-curve-sect233r1-ssl]
521server = 14-curve-sect233r1-server
522client = 14-curve-sect233r1-client
523
524[14-curve-sect233r1-server]
525Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
526CipherString = DEFAULT@SECLEVEL=1
527Curves = sect233r1
528MaxProtocol = TLSv1.3
529PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
530
531[14-curve-sect233r1-client]
532CipherString = ECDHE@SECLEVEL=1
533Curves = sect233r1
534MaxProtocol = TLSv1.2
535VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
536VerifyMode = Peer
537
538[test-14]
539ExpectedProtocol = TLSv1.2
540ExpectedResult = Success
541ExpectedTmpKeyType = sect233r1
542
543
544# ===========================================================
545
546[15-curve-sect283k1]
547ssl_conf = 15-curve-sect283k1-ssl
548
549[15-curve-sect283k1-ssl]
550server = 15-curve-sect283k1-server
551client = 15-curve-sect283k1-client
552
553[15-curve-sect283k1-server]
554Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
555CipherString = DEFAULT@SECLEVEL=1
556Curves = sect283k1
557MaxProtocol = TLSv1.3
558PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
559
560[15-curve-sect283k1-client]
561CipherString = ECDHE@SECLEVEL=1
562Curves = sect283k1
563MaxProtocol = TLSv1.2
564VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
565VerifyMode = Peer
566
567[test-15]
568ExpectedProtocol = TLSv1.2
569ExpectedResult = Success
570ExpectedTmpKeyType = sect283k1
571
572
573# ===========================================================
574
575[16-curve-sect283r1]
576ssl_conf = 16-curve-sect283r1-ssl
577
578[16-curve-sect283r1-ssl]
579server = 16-curve-sect283r1-server
580client = 16-curve-sect283r1-client
581
582[16-curve-sect283r1-server]
583Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
584CipherString = DEFAULT@SECLEVEL=1
585Curves = sect283r1
586MaxProtocol = TLSv1.3
587PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
588
589[16-curve-sect283r1-client]
590CipherString = ECDHE@SECLEVEL=1
591Curves = sect283r1
592MaxProtocol = TLSv1.2
593VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
594VerifyMode = Peer
595
596[test-16]
597ExpectedProtocol = TLSv1.2
598ExpectedResult = Success
599ExpectedTmpKeyType = sect283r1
600
601
602# ===========================================================
603
604[17-curve-sect409k1]
605ssl_conf = 17-curve-sect409k1-ssl
606
607[17-curve-sect409k1-ssl]
608server = 17-curve-sect409k1-server
609client = 17-curve-sect409k1-client
610
611[17-curve-sect409k1-server]
612Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
613CipherString = DEFAULT@SECLEVEL=1
614Curves = sect409k1
615MaxProtocol = TLSv1.3
616PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
617
618[17-curve-sect409k1-client]
619CipherString = ECDHE@SECLEVEL=1
620Curves = sect409k1
621MaxProtocol = TLSv1.2
622VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
623VerifyMode = Peer
624
625[test-17]
626ExpectedProtocol = TLSv1.2
627ExpectedResult = Success
628ExpectedTmpKeyType = sect409k1
629
630
631# ===========================================================
632
633[18-curve-sect409r1]
634ssl_conf = 18-curve-sect409r1-ssl
635
636[18-curve-sect409r1-ssl]
637server = 18-curve-sect409r1-server
638client = 18-curve-sect409r1-client
639
640[18-curve-sect409r1-server]
641Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
642CipherString = DEFAULT@SECLEVEL=1
643Curves = sect409r1
644MaxProtocol = TLSv1.3
645PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
646
647[18-curve-sect409r1-client]
648CipherString = ECDHE@SECLEVEL=1
649Curves = sect409r1
650MaxProtocol = TLSv1.2
651VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
652VerifyMode = Peer
653
654[test-18]
655ExpectedProtocol = TLSv1.2
656ExpectedResult = Success
657ExpectedTmpKeyType = sect409r1
658
659
660# ===========================================================
661
662[19-curve-sect571k1]
663ssl_conf = 19-curve-sect571k1-ssl
664
665[19-curve-sect571k1-ssl]
666server = 19-curve-sect571k1-server
667client = 19-curve-sect571k1-client
668
669[19-curve-sect571k1-server]
670Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
671CipherString = DEFAULT@SECLEVEL=1
672Curves = sect571k1
673MaxProtocol = TLSv1.3
674PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
675
676[19-curve-sect571k1-client]
677CipherString = ECDHE@SECLEVEL=1
678Curves = sect571k1
679MaxProtocol = TLSv1.2
680VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
681VerifyMode = Peer
682
683[test-19]
684ExpectedProtocol = TLSv1.2
685ExpectedResult = Success
686ExpectedTmpKeyType = sect571k1
687
688
689# ===========================================================
690
691[20-curve-sect571r1]
692ssl_conf = 20-curve-sect571r1-ssl
693
694[20-curve-sect571r1-ssl]
695server = 20-curve-sect571r1-server
696client = 20-curve-sect571r1-client
697
698[20-curve-sect571r1-server]
699Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
700CipherString = DEFAULT@SECLEVEL=1
701Curves = sect571r1
702MaxProtocol = TLSv1.3
703PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
704
705[20-curve-sect571r1-client]
706CipherString = ECDHE@SECLEVEL=1
707Curves = sect571r1
708MaxProtocol = TLSv1.2
709VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
710VerifyMode = Peer
711
712[test-20]
713ExpectedProtocol = TLSv1.2
714ExpectedResult = Success
715ExpectedTmpKeyType = sect571r1
716
717
718# ===========================================================
719
720[21-curve-secp224r1]
721ssl_conf = 21-curve-secp224r1-ssl
722
723[21-curve-secp224r1-ssl]
724server = 21-curve-secp224r1-server
725client = 21-curve-secp224r1-client
726
727[21-curve-secp224r1-server]
728Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
729CipherString = DEFAULT@SECLEVEL=1
730Curves = secp224r1
731MaxProtocol = TLSv1.3
732PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
733
734[21-curve-secp224r1-client]
735CipherString = ECDHE@SECLEVEL=1
736Curves = secp224r1
737MaxProtocol = TLSv1.2
738VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
739VerifyMode = Peer
740
741[test-21]
742ExpectedProtocol = TLSv1.2
743ExpectedResult = Success
744ExpectedTmpKeyType = secp224r1
745
746
747# ===========================================================
748
749[22-curve-sect163k1]
750ssl_conf = 22-curve-sect163k1-ssl
751
752[22-curve-sect163k1-ssl]
753server = 22-curve-sect163k1-server
754client = 22-curve-sect163k1-client
755
756[22-curve-sect163k1-server]
757Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
758CipherString = DEFAULT@SECLEVEL=1
759Curves = sect163k1
760MaxProtocol = TLSv1.3
761PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
762
763[22-curve-sect163k1-client]
764CipherString = ECDHE@SECLEVEL=1
765Curves = sect163k1
766MaxProtocol = TLSv1.2
767VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
768VerifyMode = Peer
769
770[test-22]
771ExpectedProtocol = TLSv1.2
772ExpectedResult = Success
773ExpectedTmpKeyType = sect163k1
774
775
776# ===========================================================
777
778[23-curve-sect163r2]
779ssl_conf = 23-curve-sect163r2-ssl
780
781[23-curve-sect163r2-ssl]
782server = 23-curve-sect163r2-server
783client = 23-curve-sect163r2-client
784
785[23-curve-sect163r2-server]
786Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
787CipherString = DEFAULT@SECLEVEL=1
788Curves = sect163r2
789MaxProtocol = TLSv1.3
790PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
791
792[23-curve-sect163r2-client]
793CipherString = ECDHE@SECLEVEL=1
794Curves = sect163r2
795MaxProtocol = TLSv1.2
796VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
797VerifyMode = Peer
798
799[test-23]
800ExpectedProtocol = TLSv1.2
801ExpectedResult = Success
802ExpectedTmpKeyType = sect163r2
803
804
805# ===========================================================
806
807[24-curve-prime192v1]
808ssl_conf = 24-curve-prime192v1-ssl
809
810[24-curve-prime192v1-ssl]
811server = 24-curve-prime192v1-server
812client = 24-curve-prime192v1-client
813
814[24-curve-prime192v1-server]
815Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
816CipherString = DEFAULT@SECLEVEL=1
817Curves = prime192v1
818MaxProtocol = TLSv1.3
819PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
820
821[24-curve-prime192v1-client]
822CipherString = ECDHE@SECLEVEL=1
823Curves = prime192v1
824MaxProtocol = TLSv1.2
825VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
826VerifyMode = Peer
827
828[test-24]
829ExpectedProtocol = TLSv1.2
830ExpectedResult = Success
831ExpectedTmpKeyType = prime192v1
832
833
834# ===========================================================
835
836[25-curve-sect163r1]
837ssl_conf = 25-curve-sect163r1-ssl
838
839[25-curve-sect163r1-ssl]
840server = 25-curve-sect163r1-server
841client = 25-curve-sect163r1-client
842
843[25-curve-sect163r1-server]
844Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
845CipherString = DEFAULT@SECLEVEL=1
846Curves = sect163r1
847MaxProtocol = TLSv1.3
848PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
849
850[25-curve-sect163r1-client]
851CipherString = ECDHE@SECLEVEL=1
852Curves = sect163r1
853MaxProtocol = TLSv1.2
854VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
855VerifyMode = Peer
856
857[test-25]
858ExpectedProtocol = TLSv1.2
859ExpectedResult = Success
860ExpectedTmpKeyType = sect163r1
861
862
863# ===========================================================
864
865[26-curve-sect193r1]
866ssl_conf = 26-curve-sect193r1-ssl
867
868[26-curve-sect193r1-ssl]
869server = 26-curve-sect193r1-server
870client = 26-curve-sect193r1-client
871
872[26-curve-sect193r1-server]
873Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
874CipherString = DEFAULT@SECLEVEL=1
875Curves = sect193r1
876MaxProtocol = TLSv1.3
877PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
878
879[26-curve-sect193r1-client]
880CipherString = ECDHE@SECLEVEL=1
881Curves = sect193r1
882MaxProtocol = TLSv1.2
883VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
884VerifyMode = Peer
885
886[test-26]
887ExpectedProtocol = TLSv1.2
888ExpectedResult = Success
889ExpectedTmpKeyType = sect193r1
890
891
892# ===========================================================
893
894[27-curve-sect193r2]
895ssl_conf = 27-curve-sect193r2-ssl
896
897[27-curve-sect193r2-ssl]
898server = 27-curve-sect193r2-server
899client = 27-curve-sect193r2-client
900
901[27-curve-sect193r2-server]
902Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
903CipherString = DEFAULT@SECLEVEL=1
904Curves = sect193r2
905MaxProtocol = TLSv1.3
906PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
907
908[27-curve-sect193r2-client]
909CipherString = ECDHE@SECLEVEL=1
910Curves = sect193r2
911MaxProtocol = TLSv1.2
912VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
913VerifyMode = Peer
914
915[test-27]
916ExpectedProtocol = TLSv1.2
917ExpectedResult = Success
918ExpectedTmpKeyType = sect193r2
919
920
921# ===========================================================
922
923[28-curve-sect239k1]
924ssl_conf = 28-curve-sect239k1-ssl
925
926[28-curve-sect239k1-ssl]
927server = 28-curve-sect239k1-server
928client = 28-curve-sect239k1-client
929
930[28-curve-sect239k1-server]
931Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
932CipherString = DEFAULT@SECLEVEL=1
933Curves = sect239k1
934MaxProtocol = TLSv1.3
935PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
936
937[28-curve-sect239k1-client]
938CipherString = ECDHE@SECLEVEL=1
939Curves = sect239k1
940MaxProtocol = TLSv1.2
941VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
942VerifyMode = Peer
943
944[test-28]
945ExpectedProtocol = TLSv1.2
946ExpectedResult = Success
947ExpectedTmpKeyType = sect239k1
948
949
950# ===========================================================
951
952[29-curve-secp160k1]
953ssl_conf = 29-curve-secp160k1-ssl
954
955[29-curve-secp160k1-ssl]
956server = 29-curve-secp160k1-server
957client = 29-curve-secp160k1-client
958
959[29-curve-secp160k1-server]
960Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
961CipherString = DEFAULT@SECLEVEL=1
962Curves = secp160k1
963MaxProtocol = TLSv1.3
964PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
965
966[29-curve-secp160k1-client]
967CipherString = ECDHE@SECLEVEL=1
968Curves = secp160k1
969MaxProtocol = TLSv1.2
970VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
971VerifyMode = Peer
972
973[test-29]
974ExpectedProtocol = TLSv1.2
975ExpectedResult = Success
976ExpectedTmpKeyType = secp160k1
977
978
979# ===========================================================
980
981[30-curve-secp160r1]
982ssl_conf = 30-curve-secp160r1-ssl
983
984[30-curve-secp160r1-ssl]
985server = 30-curve-secp160r1-server
986client = 30-curve-secp160r1-client
987
988[30-curve-secp160r1-server]
989Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
990CipherString = DEFAULT@SECLEVEL=1
991Curves = secp160r1
992MaxProtocol = TLSv1.3
993PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
994
995[30-curve-secp160r1-client]
996CipherString = ECDHE@SECLEVEL=1
997Curves = secp160r1
998MaxProtocol = TLSv1.2
999VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1000VerifyMode = Peer
1001
1002[test-30]
1003ExpectedProtocol = TLSv1.2
1004ExpectedResult = Success
1005ExpectedTmpKeyType = secp160r1
1006
1007
1008# ===========================================================
1009
1010[31-curve-secp160r2]
1011ssl_conf = 31-curve-secp160r2-ssl
1012
1013[31-curve-secp160r2-ssl]
1014server = 31-curve-secp160r2-server
1015client = 31-curve-secp160r2-client
1016
1017[31-curve-secp160r2-server]
1018Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1019CipherString = DEFAULT@SECLEVEL=1
1020Curves = secp160r2
1021MaxProtocol = TLSv1.3
1022PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1023
1024[31-curve-secp160r2-client]
1025CipherString = ECDHE@SECLEVEL=1
1026Curves = secp160r2
1027MaxProtocol = TLSv1.2
1028VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1029VerifyMode = Peer
1030
1031[test-31]
1032ExpectedProtocol = TLSv1.2
1033ExpectedResult = Success
1034ExpectedTmpKeyType = secp160r2
1035
1036
1037# ===========================================================
1038
1039[32-curve-secp192k1]
1040ssl_conf = 32-curve-secp192k1-ssl
1041
1042[32-curve-secp192k1-ssl]
1043server = 32-curve-secp192k1-server
1044client = 32-curve-secp192k1-client
1045
1046[32-curve-secp192k1-server]
1047Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1048CipherString = DEFAULT@SECLEVEL=1
1049Curves = secp192k1
1050MaxProtocol = TLSv1.3
1051PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1052
1053[32-curve-secp192k1-client]
1054CipherString = ECDHE@SECLEVEL=1
1055Curves = secp192k1
1056MaxProtocol = TLSv1.2
1057VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1058VerifyMode = Peer
1059
1060[test-32]
1061ExpectedProtocol = TLSv1.2
1062ExpectedResult = Success
1063ExpectedTmpKeyType = secp192k1
1064
1065
1066# ===========================================================
1067
1068[33-curve-secp224k1]
1069ssl_conf = 33-curve-secp224k1-ssl
1070
1071[33-curve-secp224k1-ssl]
1072server = 33-curve-secp224k1-server
1073client = 33-curve-secp224k1-client
1074
1075[33-curve-secp224k1-server]
1076Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1077CipherString = DEFAULT@SECLEVEL=1
1078Curves = secp224k1
1079MaxProtocol = TLSv1.3
1080PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1081
1082[33-curve-secp224k1-client]
1083CipherString = ECDHE@SECLEVEL=1
1084Curves = secp224k1
1085MaxProtocol = TLSv1.2
1086VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1087VerifyMode = Peer
1088
1089[test-33]
1090ExpectedProtocol = TLSv1.2
1091ExpectedResult = Success
1092ExpectedTmpKeyType = secp224k1
1093
1094
1095# ===========================================================
1096
1097[34-curve-secp256k1]
1098ssl_conf = 34-curve-secp256k1-ssl
1099
1100[34-curve-secp256k1-ssl]
1101server = 34-curve-secp256k1-server
1102client = 34-curve-secp256k1-client
1103
1104[34-curve-secp256k1-server]
1105Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1106CipherString = DEFAULT@SECLEVEL=1
1107Curves = secp256k1
1108MaxProtocol = TLSv1.3
1109PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1110
1111[34-curve-secp256k1-client]
1112CipherString = ECDHE@SECLEVEL=1
1113Curves = secp256k1
1114MaxProtocol = TLSv1.2
1115VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1116VerifyMode = Peer
1117
1118[test-34]
1119ExpectedProtocol = TLSv1.2
1120ExpectedResult = Success
1121ExpectedTmpKeyType = secp256k1
1122
1123
1124# ===========================================================
1125
1126[35-curve-brainpoolP256r1]
1127ssl_conf = 35-curve-brainpoolP256r1-ssl
1128
1129[35-curve-brainpoolP256r1-ssl]
1130server = 35-curve-brainpoolP256r1-server
1131client = 35-curve-brainpoolP256r1-client
1132
1133[35-curve-brainpoolP256r1-server]
1134Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1135CipherString = DEFAULT@SECLEVEL=1
1136Curves = brainpoolP256r1
1137MaxProtocol = TLSv1.3
1138PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1139
1140[35-curve-brainpoolP256r1-client]
1141CipherString = ECDHE@SECLEVEL=1
1142Curves = brainpoolP256r1
1143MaxProtocol = TLSv1.2
1144VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1145VerifyMode = Peer
1146
1147[test-35]
1148ExpectedProtocol = TLSv1.2
1149ExpectedResult = Success
1150ExpectedTmpKeyType = brainpoolP256r1
1151
1152
1153# ===========================================================
1154
1155[36-curve-brainpoolP384r1]
1156ssl_conf = 36-curve-brainpoolP384r1-ssl
1157
1158[36-curve-brainpoolP384r1-ssl]
1159server = 36-curve-brainpoolP384r1-server
1160client = 36-curve-brainpoolP384r1-client
1161
1162[36-curve-brainpoolP384r1-server]
1163Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1164CipherString = DEFAULT@SECLEVEL=1
1165Curves = brainpoolP384r1
1166MaxProtocol = TLSv1.3
1167PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1168
1169[36-curve-brainpoolP384r1-client]
1170CipherString = ECDHE@SECLEVEL=1
1171Curves = brainpoolP384r1
1172MaxProtocol = TLSv1.2
1173VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1174VerifyMode = Peer
1175
1176[test-36]
1177ExpectedProtocol = TLSv1.2
1178ExpectedResult = Success
1179ExpectedTmpKeyType = brainpoolP384r1
1180
1181
1182# ===========================================================
1183
1184[37-curve-brainpoolP512r1]
1185ssl_conf = 37-curve-brainpoolP512r1-ssl
1186
1187[37-curve-brainpoolP512r1-ssl]
1188server = 37-curve-brainpoolP512r1-server
1189client = 37-curve-brainpoolP512r1-client
1190
1191[37-curve-brainpoolP512r1-server]
1192Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1193CipherString = DEFAULT@SECLEVEL=1
1194Curves = brainpoolP512r1
1195MaxProtocol = TLSv1.3
1196PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1197
1198[37-curve-brainpoolP512r1-client]
1199CipherString = ECDHE@SECLEVEL=1
1200Curves = brainpoolP512r1
1201MaxProtocol = TLSv1.2
1202VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1203VerifyMode = Peer
1204
1205[test-37]
1206ExpectedProtocol = TLSv1.2
1207ExpectedResult = Success
1208ExpectedTmpKeyType = brainpoolP512r1
1209
1210
1211# ===========================================================
1212
1213[38-curve-sect233k1-tls12-in-tls13]
1214ssl_conf = 38-curve-sect233k1-tls12-in-tls13-ssl
1215
1216[38-curve-sect233k1-tls12-in-tls13-ssl]
1217server = 38-curve-sect233k1-tls12-in-tls13-server
1218client = 38-curve-sect233k1-tls12-in-tls13-client
1219
1220[38-curve-sect233k1-tls12-in-tls13-server]
1221Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1222CipherString = DEFAULT@SECLEVEL=1
1223Curves = sect233k1:P-256
1224MaxProtocol = TLSv1.3
1225PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1226
1227[38-curve-sect233k1-tls12-in-tls13-client]
1228CipherString = ECDHE@SECLEVEL=1
1229Curves = sect233k1:P-256
1230MaxProtocol = TLSv1.3
1231MinProtocol = TLSv1.3
1232VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1233VerifyMode = Peer
1234
1235[test-38]
1236ExpectedProtocol = TLSv1.3
1237ExpectedResult = Success
1238ExpectedTmpKeyType = P-256
1239
1240
1241# ===========================================================
1242
1243[39-curve-sect233r1-tls12-in-tls13]
1244ssl_conf = 39-curve-sect233r1-tls12-in-tls13-ssl
1245
1246[39-curve-sect233r1-tls12-in-tls13-ssl]
1247server = 39-curve-sect233r1-tls12-in-tls13-server
1248client = 39-curve-sect233r1-tls12-in-tls13-client
1249
1250[39-curve-sect233r1-tls12-in-tls13-server]
1251Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1252CipherString = DEFAULT@SECLEVEL=1
1253Curves = sect233r1:P-256
1254MaxProtocol = TLSv1.3
1255PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1256
1257[39-curve-sect233r1-tls12-in-tls13-client]
1258CipherString = ECDHE@SECLEVEL=1
1259Curves = sect233r1:P-256
1260MaxProtocol = TLSv1.3
1261MinProtocol = TLSv1.3
1262VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1263VerifyMode = Peer
1264
1265[test-39]
1266ExpectedProtocol = TLSv1.3
1267ExpectedResult = Success
1268ExpectedTmpKeyType = P-256
1269
1270
1271# ===========================================================
1272
1273[40-curve-sect283k1-tls12-in-tls13]
1274ssl_conf = 40-curve-sect283k1-tls12-in-tls13-ssl
1275
1276[40-curve-sect283k1-tls12-in-tls13-ssl]
1277server = 40-curve-sect283k1-tls12-in-tls13-server
1278client = 40-curve-sect283k1-tls12-in-tls13-client
1279
1280[40-curve-sect283k1-tls12-in-tls13-server]
1281Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1282CipherString = DEFAULT@SECLEVEL=1
1283Curves = sect283k1:P-256
1284MaxProtocol = TLSv1.3
1285PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1286
1287[40-curve-sect283k1-tls12-in-tls13-client]
1288CipherString = ECDHE@SECLEVEL=1
1289Curves = sect283k1:P-256
1290MaxProtocol = TLSv1.3
1291MinProtocol = TLSv1.3
1292VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1293VerifyMode = Peer
1294
1295[test-40]
1296ExpectedProtocol = TLSv1.3
1297ExpectedResult = Success
1298ExpectedTmpKeyType = P-256
1299
1300
1301# ===========================================================
1302
1303[41-curve-sect283r1-tls12-in-tls13]
1304ssl_conf = 41-curve-sect283r1-tls12-in-tls13-ssl
1305
1306[41-curve-sect283r1-tls12-in-tls13-ssl]
1307server = 41-curve-sect283r1-tls12-in-tls13-server
1308client = 41-curve-sect283r1-tls12-in-tls13-client
1309
1310[41-curve-sect283r1-tls12-in-tls13-server]
1311Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1312CipherString = DEFAULT@SECLEVEL=1
1313Curves = sect283r1:P-256
1314MaxProtocol = TLSv1.3
1315PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1316
1317[41-curve-sect283r1-tls12-in-tls13-client]
1318CipherString = ECDHE@SECLEVEL=1
1319Curves = sect283r1:P-256
1320MaxProtocol = TLSv1.3
1321MinProtocol = TLSv1.3
1322VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1323VerifyMode = Peer
1324
1325[test-41]
1326ExpectedProtocol = TLSv1.3
1327ExpectedResult = Success
1328ExpectedTmpKeyType = P-256
1329
1330
1331# ===========================================================
1332
1333[42-curve-sect409k1-tls12-in-tls13]
1334ssl_conf = 42-curve-sect409k1-tls12-in-tls13-ssl
1335
1336[42-curve-sect409k1-tls12-in-tls13-ssl]
1337server = 42-curve-sect409k1-tls12-in-tls13-server
1338client = 42-curve-sect409k1-tls12-in-tls13-client
1339
1340[42-curve-sect409k1-tls12-in-tls13-server]
1341Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1342CipherString = DEFAULT@SECLEVEL=1
1343Curves = sect409k1:P-256
1344MaxProtocol = TLSv1.3
1345PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1346
1347[42-curve-sect409k1-tls12-in-tls13-client]
1348CipherString = ECDHE@SECLEVEL=1
1349Curves = sect409k1:P-256
1350MaxProtocol = TLSv1.3
1351MinProtocol = TLSv1.3
1352VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1353VerifyMode = Peer
1354
1355[test-42]
1356ExpectedProtocol = TLSv1.3
1357ExpectedResult = Success
1358ExpectedTmpKeyType = P-256
1359
1360
1361# ===========================================================
1362
1363[43-curve-sect409r1-tls12-in-tls13]
1364ssl_conf = 43-curve-sect409r1-tls12-in-tls13-ssl
1365
1366[43-curve-sect409r1-tls12-in-tls13-ssl]
1367server = 43-curve-sect409r1-tls12-in-tls13-server
1368client = 43-curve-sect409r1-tls12-in-tls13-client
1369
1370[43-curve-sect409r1-tls12-in-tls13-server]
1371Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1372CipherString = DEFAULT@SECLEVEL=1
1373Curves = sect409r1:P-256
1374MaxProtocol = TLSv1.3
1375PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1376
1377[43-curve-sect409r1-tls12-in-tls13-client]
1378CipherString = ECDHE@SECLEVEL=1
1379Curves = sect409r1:P-256
1380MaxProtocol = TLSv1.3
1381MinProtocol = TLSv1.3
1382VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1383VerifyMode = Peer
1384
1385[test-43]
1386ExpectedProtocol = TLSv1.3
1387ExpectedResult = Success
1388ExpectedTmpKeyType = P-256
1389
1390
1391# ===========================================================
1392
1393[44-curve-sect571k1-tls12-in-tls13]
1394ssl_conf = 44-curve-sect571k1-tls12-in-tls13-ssl
1395
1396[44-curve-sect571k1-tls12-in-tls13-ssl]
1397server = 44-curve-sect571k1-tls12-in-tls13-server
1398client = 44-curve-sect571k1-tls12-in-tls13-client
1399
1400[44-curve-sect571k1-tls12-in-tls13-server]
1401Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1402CipherString = DEFAULT@SECLEVEL=1
1403Curves = sect571k1:P-256
1404MaxProtocol = TLSv1.3
1405PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1406
1407[44-curve-sect571k1-tls12-in-tls13-client]
1408CipherString = ECDHE@SECLEVEL=1
1409Curves = sect571k1:P-256
1410MaxProtocol = TLSv1.3
1411MinProtocol = TLSv1.3
1412VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1413VerifyMode = Peer
1414
1415[test-44]
1416ExpectedProtocol = TLSv1.3
1417ExpectedResult = Success
1418ExpectedTmpKeyType = P-256
1419
1420
1421# ===========================================================
1422
1423[45-curve-sect571r1-tls12-in-tls13]
1424ssl_conf = 45-curve-sect571r1-tls12-in-tls13-ssl
1425
1426[45-curve-sect571r1-tls12-in-tls13-ssl]
1427server = 45-curve-sect571r1-tls12-in-tls13-server
1428client = 45-curve-sect571r1-tls12-in-tls13-client
1429
1430[45-curve-sect571r1-tls12-in-tls13-server]
1431Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1432CipherString = DEFAULT@SECLEVEL=1
1433Curves = sect571r1:P-256
1434MaxProtocol = TLSv1.3
1435PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1436
1437[45-curve-sect571r1-tls12-in-tls13-client]
1438CipherString = ECDHE@SECLEVEL=1
1439Curves = sect571r1:P-256
1440MaxProtocol = TLSv1.3
1441MinProtocol = TLSv1.3
1442VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1443VerifyMode = Peer
1444
1445[test-45]
1446ExpectedProtocol = TLSv1.3
1447ExpectedResult = Success
1448ExpectedTmpKeyType = P-256
1449
1450
1451# ===========================================================
1452
1453[46-curve-secp224r1-tls12-in-tls13]
1454ssl_conf = 46-curve-secp224r1-tls12-in-tls13-ssl
1455
1456[46-curve-secp224r1-tls12-in-tls13-ssl]
1457server = 46-curve-secp224r1-tls12-in-tls13-server
1458client = 46-curve-secp224r1-tls12-in-tls13-client
1459
1460[46-curve-secp224r1-tls12-in-tls13-server]
1461Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1462CipherString = DEFAULT@SECLEVEL=1
1463Curves = secp224r1:P-256
1464MaxProtocol = TLSv1.3
1465PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1466
1467[46-curve-secp224r1-tls12-in-tls13-client]
1468CipherString = ECDHE@SECLEVEL=1
1469Curves = secp224r1:P-256
1470MaxProtocol = TLSv1.3
1471MinProtocol = TLSv1.3
1472VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1473VerifyMode = Peer
1474
1475[test-46]
1476ExpectedProtocol = TLSv1.3
1477ExpectedResult = Success
1478ExpectedTmpKeyType = P-256
1479
1480
1481# ===========================================================
1482
1483[47-curve-sect163k1-tls12-in-tls13]
1484ssl_conf = 47-curve-sect163k1-tls12-in-tls13-ssl
1485
1486[47-curve-sect163k1-tls12-in-tls13-ssl]
1487server = 47-curve-sect163k1-tls12-in-tls13-server
1488client = 47-curve-sect163k1-tls12-in-tls13-client
1489
1490[47-curve-sect163k1-tls12-in-tls13-server]
1491Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1492CipherString = DEFAULT@SECLEVEL=1
1493Curves = sect163k1:P-256
1494MaxProtocol = TLSv1.3
1495PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1496
1497[47-curve-sect163k1-tls12-in-tls13-client]
1498CipherString = ECDHE@SECLEVEL=1
1499Curves = sect163k1:P-256
1500MaxProtocol = TLSv1.3
1501MinProtocol = TLSv1.3
1502VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1503VerifyMode = Peer
1504
1505[test-47]
1506ExpectedProtocol = TLSv1.3
1507ExpectedResult = Success
1508ExpectedTmpKeyType = P-256
1509
1510
1511# ===========================================================
1512
1513[48-curve-sect163r2-tls12-in-tls13]
1514ssl_conf = 48-curve-sect163r2-tls12-in-tls13-ssl
1515
1516[48-curve-sect163r2-tls12-in-tls13-ssl]
1517server = 48-curve-sect163r2-tls12-in-tls13-server
1518client = 48-curve-sect163r2-tls12-in-tls13-client
1519
1520[48-curve-sect163r2-tls12-in-tls13-server]
1521Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1522CipherString = DEFAULT@SECLEVEL=1
1523Curves = sect163r2:P-256
1524MaxProtocol = TLSv1.3
1525PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1526
1527[48-curve-sect163r2-tls12-in-tls13-client]
1528CipherString = ECDHE@SECLEVEL=1
1529Curves = sect163r2:P-256
1530MaxProtocol = TLSv1.3
1531MinProtocol = TLSv1.3
1532VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1533VerifyMode = Peer
1534
1535[test-48]
1536ExpectedProtocol = TLSv1.3
1537ExpectedResult = Success
1538ExpectedTmpKeyType = P-256
1539
1540
1541# ===========================================================
1542
1543[49-curve-prime192v1-tls12-in-tls13]
1544ssl_conf = 49-curve-prime192v1-tls12-in-tls13-ssl
1545
1546[49-curve-prime192v1-tls12-in-tls13-ssl]
1547server = 49-curve-prime192v1-tls12-in-tls13-server
1548client = 49-curve-prime192v1-tls12-in-tls13-client
1549
1550[49-curve-prime192v1-tls12-in-tls13-server]
1551Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1552CipherString = DEFAULT@SECLEVEL=1
1553Curves = prime192v1:P-256
1554MaxProtocol = TLSv1.3
1555PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1556
1557[49-curve-prime192v1-tls12-in-tls13-client]
1558CipherString = ECDHE@SECLEVEL=1
1559Curves = prime192v1:P-256
1560MaxProtocol = TLSv1.3
1561MinProtocol = TLSv1.3
1562VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1563VerifyMode = Peer
1564
1565[test-49]
1566ExpectedProtocol = TLSv1.3
1567ExpectedResult = Success
1568ExpectedTmpKeyType = P-256
1569
1570
1571# ===========================================================
1572
1573[50-curve-sect163r1-tls12-in-tls13]
1574ssl_conf = 50-curve-sect163r1-tls12-in-tls13-ssl
1575
1576[50-curve-sect163r1-tls12-in-tls13-ssl]
1577server = 50-curve-sect163r1-tls12-in-tls13-server
1578client = 50-curve-sect163r1-tls12-in-tls13-client
1579
1580[50-curve-sect163r1-tls12-in-tls13-server]
1581Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1582CipherString = DEFAULT@SECLEVEL=1
1583Curves = sect163r1:P-256
1584MaxProtocol = TLSv1.3
1585PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1586
1587[50-curve-sect163r1-tls12-in-tls13-client]
1588CipherString = ECDHE@SECLEVEL=1
1589Curves = sect163r1:P-256
1590MaxProtocol = TLSv1.3
1591MinProtocol = TLSv1.3
1592VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1593VerifyMode = Peer
1594
1595[test-50]
1596ExpectedProtocol = TLSv1.3
1597ExpectedResult = Success
1598ExpectedTmpKeyType = P-256
1599
1600
1601# ===========================================================
1602
1603[51-curve-sect193r1-tls12-in-tls13]
1604ssl_conf = 51-curve-sect193r1-tls12-in-tls13-ssl
1605
1606[51-curve-sect193r1-tls12-in-tls13-ssl]
1607server = 51-curve-sect193r1-tls12-in-tls13-server
1608client = 51-curve-sect193r1-tls12-in-tls13-client
1609
1610[51-curve-sect193r1-tls12-in-tls13-server]
1611Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1612CipherString = DEFAULT@SECLEVEL=1
1613Curves = sect193r1:P-256
1614MaxProtocol = TLSv1.3
1615PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1616
1617[51-curve-sect193r1-tls12-in-tls13-client]
1618CipherString = ECDHE@SECLEVEL=1
1619Curves = sect193r1:P-256
1620MaxProtocol = TLSv1.3
1621MinProtocol = TLSv1.3
1622VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1623VerifyMode = Peer
1624
1625[test-51]
1626ExpectedProtocol = TLSv1.3
1627ExpectedResult = Success
1628ExpectedTmpKeyType = P-256
1629
1630
1631# ===========================================================
1632
1633[52-curve-sect193r2-tls12-in-tls13]
1634ssl_conf = 52-curve-sect193r2-tls12-in-tls13-ssl
1635
1636[52-curve-sect193r2-tls12-in-tls13-ssl]
1637server = 52-curve-sect193r2-tls12-in-tls13-server
1638client = 52-curve-sect193r2-tls12-in-tls13-client
1639
1640[52-curve-sect193r2-tls12-in-tls13-server]
1641Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1642CipherString = DEFAULT@SECLEVEL=1
1643Curves = sect193r2:P-256
1644MaxProtocol = TLSv1.3
1645PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1646
1647[52-curve-sect193r2-tls12-in-tls13-client]
1648CipherString = ECDHE@SECLEVEL=1
1649Curves = sect193r2:P-256
1650MaxProtocol = TLSv1.3
1651MinProtocol = TLSv1.3
1652VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1653VerifyMode = Peer
1654
1655[test-52]
1656ExpectedProtocol = TLSv1.3
1657ExpectedResult = Success
1658ExpectedTmpKeyType = P-256
1659
1660
1661# ===========================================================
1662
1663[53-curve-sect239k1-tls12-in-tls13]
1664ssl_conf = 53-curve-sect239k1-tls12-in-tls13-ssl
1665
1666[53-curve-sect239k1-tls12-in-tls13-ssl]
1667server = 53-curve-sect239k1-tls12-in-tls13-server
1668client = 53-curve-sect239k1-tls12-in-tls13-client
1669
1670[53-curve-sect239k1-tls12-in-tls13-server]
1671Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1672CipherString = DEFAULT@SECLEVEL=1
1673Curves = sect239k1:P-256
1674MaxProtocol = TLSv1.3
1675PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1676
1677[53-curve-sect239k1-tls12-in-tls13-client]
1678CipherString = ECDHE@SECLEVEL=1
1679Curves = sect239k1:P-256
1680MaxProtocol = TLSv1.3
1681MinProtocol = TLSv1.3
1682VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1683VerifyMode = Peer
1684
1685[test-53]
1686ExpectedProtocol = TLSv1.3
1687ExpectedResult = Success
1688ExpectedTmpKeyType = P-256
1689
1690
1691# ===========================================================
1692
1693[54-curve-secp160k1-tls12-in-tls13]
1694ssl_conf = 54-curve-secp160k1-tls12-in-tls13-ssl
1695
1696[54-curve-secp160k1-tls12-in-tls13-ssl]
1697server = 54-curve-secp160k1-tls12-in-tls13-server
1698client = 54-curve-secp160k1-tls12-in-tls13-client
1699
1700[54-curve-secp160k1-tls12-in-tls13-server]
1701Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1702CipherString = DEFAULT@SECLEVEL=1
1703Curves = secp160k1:P-256
1704MaxProtocol = TLSv1.3
1705PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1706
1707[54-curve-secp160k1-tls12-in-tls13-client]
1708CipherString = ECDHE@SECLEVEL=1
1709Curves = secp160k1:P-256
1710MaxProtocol = TLSv1.3
1711MinProtocol = TLSv1.3
1712VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1713VerifyMode = Peer
1714
1715[test-54]
1716ExpectedProtocol = TLSv1.3
1717ExpectedResult = Success
1718ExpectedTmpKeyType = P-256
1719
1720
1721# ===========================================================
1722
1723[55-curve-secp160r1-tls12-in-tls13]
1724ssl_conf = 55-curve-secp160r1-tls12-in-tls13-ssl
1725
1726[55-curve-secp160r1-tls12-in-tls13-ssl]
1727server = 55-curve-secp160r1-tls12-in-tls13-server
1728client = 55-curve-secp160r1-tls12-in-tls13-client
1729
1730[55-curve-secp160r1-tls12-in-tls13-server]
1731Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1732CipherString = DEFAULT@SECLEVEL=1
1733Curves = secp160r1:P-256
1734MaxProtocol = TLSv1.3
1735PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1736
1737[55-curve-secp160r1-tls12-in-tls13-client]
1738CipherString = ECDHE@SECLEVEL=1
1739Curves = secp160r1:P-256
1740MaxProtocol = TLSv1.3
1741MinProtocol = TLSv1.3
1742VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1743VerifyMode = Peer
1744
1745[test-55]
1746ExpectedProtocol = TLSv1.3
1747ExpectedResult = Success
1748ExpectedTmpKeyType = P-256
1749
1750
1751# ===========================================================
1752
1753[56-curve-secp160r2-tls12-in-tls13]
1754ssl_conf = 56-curve-secp160r2-tls12-in-tls13-ssl
1755
1756[56-curve-secp160r2-tls12-in-tls13-ssl]
1757server = 56-curve-secp160r2-tls12-in-tls13-server
1758client = 56-curve-secp160r2-tls12-in-tls13-client
1759
1760[56-curve-secp160r2-tls12-in-tls13-server]
1761Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1762CipherString = DEFAULT@SECLEVEL=1
1763Curves = secp160r2:P-256
1764MaxProtocol = TLSv1.3
1765PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1766
1767[56-curve-secp160r2-tls12-in-tls13-client]
1768CipherString = ECDHE@SECLEVEL=1
1769Curves = secp160r2:P-256
1770MaxProtocol = TLSv1.3
1771MinProtocol = TLSv1.3
1772VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1773VerifyMode = Peer
1774
1775[test-56]
1776ExpectedProtocol = TLSv1.3
1777ExpectedResult = Success
1778ExpectedTmpKeyType = P-256
1779
1780
1781# ===========================================================
1782
1783[57-curve-secp192k1-tls12-in-tls13]
1784ssl_conf = 57-curve-secp192k1-tls12-in-tls13-ssl
1785
1786[57-curve-secp192k1-tls12-in-tls13-ssl]
1787server = 57-curve-secp192k1-tls12-in-tls13-server
1788client = 57-curve-secp192k1-tls12-in-tls13-client
1789
1790[57-curve-secp192k1-tls12-in-tls13-server]
1791Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1792CipherString = DEFAULT@SECLEVEL=1
1793Curves = secp192k1:P-256
1794MaxProtocol = TLSv1.3
1795PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1796
1797[57-curve-secp192k1-tls12-in-tls13-client]
1798CipherString = ECDHE@SECLEVEL=1
1799Curves = secp192k1:P-256
1800MaxProtocol = TLSv1.3
1801MinProtocol = TLSv1.3
1802VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1803VerifyMode = Peer
1804
1805[test-57]
1806ExpectedProtocol = TLSv1.3
1807ExpectedResult = Success
1808ExpectedTmpKeyType = P-256
1809
1810
1811# ===========================================================
1812
1813[58-curve-secp224k1-tls12-in-tls13]
1814ssl_conf = 58-curve-secp224k1-tls12-in-tls13-ssl
1815
1816[58-curve-secp224k1-tls12-in-tls13-ssl]
1817server = 58-curve-secp224k1-tls12-in-tls13-server
1818client = 58-curve-secp224k1-tls12-in-tls13-client
1819
1820[58-curve-secp224k1-tls12-in-tls13-server]
1821Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1822CipherString = DEFAULT@SECLEVEL=1
1823Curves = secp224k1:P-256
1824MaxProtocol = TLSv1.3
1825PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1826
1827[58-curve-secp224k1-tls12-in-tls13-client]
1828CipherString = ECDHE@SECLEVEL=1
1829Curves = secp224k1:P-256
1830MaxProtocol = TLSv1.3
1831MinProtocol = TLSv1.3
1832VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1833VerifyMode = Peer
1834
1835[test-58]
1836ExpectedProtocol = TLSv1.3
1837ExpectedResult = Success
1838ExpectedTmpKeyType = P-256
1839
1840
1841# ===========================================================
1842
1843[59-curve-secp256k1-tls12-in-tls13]
1844ssl_conf = 59-curve-secp256k1-tls12-in-tls13-ssl
1845
1846[59-curve-secp256k1-tls12-in-tls13-ssl]
1847server = 59-curve-secp256k1-tls12-in-tls13-server
1848client = 59-curve-secp256k1-tls12-in-tls13-client
1849
1850[59-curve-secp256k1-tls12-in-tls13-server]
1851Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1852CipherString = DEFAULT@SECLEVEL=1
1853Curves = secp256k1:P-256
1854MaxProtocol = TLSv1.3
1855PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1856
1857[59-curve-secp256k1-tls12-in-tls13-client]
1858CipherString = ECDHE@SECLEVEL=1
1859Curves = secp256k1:P-256
1860MaxProtocol = TLSv1.3
1861MinProtocol = TLSv1.3
1862VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1863VerifyMode = Peer
1864
1865[test-59]
1866ExpectedProtocol = TLSv1.3
1867ExpectedResult = Success
1868ExpectedTmpKeyType = P-256
1869
1870
1871# ===========================================================
1872
1873[60-curve-brainpoolP256r1-tls12-in-tls13]
1874ssl_conf = 60-curve-brainpoolP256r1-tls12-in-tls13-ssl
1875
1876[60-curve-brainpoolP256r1-tls12-in-tls13-ssl]
1877server = 60-curve-brainpoolP256r1-tls12-in-tls13-server
1878client = 60-curve-brainpoolP256r1-tls12-in-tls13-client
1879
1880[60-curve-brainpoolP256r1-tls12-in-tls13-server]
1881Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1882CipherString = DEFAULT@SECLEVEL=1
1883Curves = brainpoolP256r1:P-256
1884MaxProtocol = TLSv1.3
1885PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1886
1887[60-curve-brainpoolP256r1-tls12-in-tls13-client]
1888CipherString = ECDHE@SECLEVEL=1
1889Curves = brainpoolP256r1:P-256
1890MaxProtocol = TLSv1.3
1891MinProtocol = TLSv1.3
1892VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1893VerifyMode = Peer
1894
1895[test-60]
1896ExpectedProtocol = TLSv1.3
1897ExpectedResult = Success
1898ExpectedTmpKeyType = P-256
1899
1900
1901# ===========================================================
1902
1903[61-curve-brainpoolP384r1-tls12-in-tls13]
1904ssl_conf = 61-curve-brainpoolP384r1-tls12-in-tls13-ssl
1905
1906[61-curve-brainpoolP384r1-tls12-in-tls13-ssl]
1907server = 61-curve-brainpoolP384r1-tls12-in-tls13-server
1908client = 61-curve-brainpoolP384r1-tls12-in-tls13-client
1909
1910[61-curve-brainpoolP384r1-tls12-in-tls13-server]
1911Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1912CipherString = DEFAULT@SECLEVEL=1
1913Curves = brainpoolP384r1:P-256
1914MaxProtocol = TLSv1.3
1915PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1916
1917[61-curve-brainpoolP384r1-tls12-in-tls13-client]
1918CipherString = ECDHE@SECLEVEL=1
1919Curves = brainpoolP384r1:P-256
1920MaxProtocol = TLSv1.3
1921MinProtocol = TLSv1.3
1922VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1923VerifyMode = Peer
1924
1925[test-61]
1926ExpectedProtocol = TLSv1.3
1927ExpectedResult = Success
1928ExpectedTmpKeyType = P-256
1929
1930
1931# ===========================================================
1932
1933[62-curve-brainpoolP512r1-tls12-in-tls13]
1934ssl_conf = 62-curve-brainpoolP512r1-tls12-in-tls13-ssl
1935
1936[62-curve-brainpoolP512r1-tls12-in-tls13-ssl]
1937server = 62-curve-brainpoolP512r1-tls12-in-tls13-server
1938client = 62-curve-brainpoolP512r1-tls12-in-tls13-client
1939
1940[62-curve-brainpoolP512r1-tls12-in-tls13-server]
1941Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1942CipherString = DEFAULT@SECLEVEL=1
1943Curves = brainpoolP512r1:P-256
1944MaxProtocol = TLSv1.3
1945PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1946
1947[62-curve-brainpoolP512r1-tls12-in-tls13-client]
1948CipherString = ECDHE@SECLEVEL=1
1949Curves = brainpoolP512r1:P-256
1950MaxProtocol = TLSv1.3
1951MinProtocol = TLSv1.3
1952VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1953VerifyMode = Peer
1954
1955[test-62]
1956ExpectedProtocol = TLSv1.3
1957ExpectedResult = Success
1958ExpectedTmpKeyType = P-256
1959
1960
1961# ===========================================================
1962
1963[63-curve-sect233k1-tls13]
1964ssl_conf = 63-curve-sect233k1-tls13-ssl
1965
1966[63-curve-sect233k1-tls13-ssl]
1967server = 63-curve-sect233k1-tls13-server
1968client = 63-curve-sect233k1-tls13-client
1969
1970[63-curve-sect233k1-tls13-server]
1971Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1972CipherString = DEFAULT@SECLEVEL=1
1973Curves = sect233k1
1974MaxProtocol = TLSv1.3
1975PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
1976
1977[63-curve-sect233k1-tls13-client]
1978CipherString = ECDHE@SECLEVEL=1
1979Curves = sect233k1
1980MinProtocol = TLSv1.3
1981VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
1982VerifyMode = Peer
1983
1984[test-63]
1985ExpectedResult = ClientFail
1986
1987
1988# ===========================================================
1989
1990[64-curve-sect233r1-tls13]
1991ssl_conf = 64-curve-sect233r1-tls13-ssl
1992
1993[64-curve-sect233r1-tls13-ssl]
1994server = 64-curve-sect233r1-tls13-server
1995client = 64-curve-sect233r1-tls13-client
1996
1997[64-curve-sect233r1-tls13-server]
1998Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
1999CipherString = DEFAULT@SECLEVEL=1
2000Curves = sect233r1
2001MaxProtocol = TLSv1.3
2002PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2003
2004[64-curve-sect233r1-tls13-client]
2005CipherString = ECDHE@SECLEVEL=1
2006Curves = sect233r1
2007MinProtocol = TLSv1.3
2008VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2009VerifyMode = Peer
2010
2011[test-64]
2012ExpectedResult = ClientFail
2013
2014
2015# ===========================================================
2016
2017[65-curve-sect283k1-tls13]
2018ssl_conf = 65-curve-sect283k1-tls13-ssl
2019
2020[65-curve-sect283k1-tls13-ssl]
2021server = 65-curve-sect283k1-tls13-server
2022client = 65-curve-sect283k1-tls13-client
2023
2024[65-curve-sect283k1-tls13-server]
2025Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2026CipherString = DEFAULT@SECLEVEL=1
2027Curves = sect283k1
2028MaxProtocol = TLSv1.3
2029PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2030
2031[65-curve-sect283k1-tls13-client]
2032CipherString = ECDHE@SECLEVEL=1
2033Curves = sect283k1
2034MinProtocol = TLSv1.3
2035VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2036VerifyMode = Peer
2037
2038[test-65]
2039ExpectedResult = ClientFail
2040
2041
2042# ===========================================================
2043
2044[66-curve-sect283r1-tls13]
2045ssl_conf = 66-curve-sect283r1-tls13-ssl
2046
2047[66-curve-sect283r1-tls13-ssl]
2048server = 66-curve-sect283r1-tls13-server
2049client = 66-curve-sect283r1-tls13-client
2050
2051[66-curve-sect283r1-tls13-server]
2052Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2053CipherString = DEFAULT@SECLEVEL=1
2054Curves = sect283r1
2055MaxProtocol = TLSv1.3
2056PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2057
2058[66-curve-sect283r1-tls13-client]
2059CipherString = ECDHE@SECLEVEL=1
2060Curves = sect283r1
2061MinProtocol = TLSv1.3
2062VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2063VerifyMode = Peer
2064
2065[test-66]
2066ExpectedResult = ClientFail
2067
2068
2069# ===========================================================
2070
2071[67-curve-sect409k1-tls13]
2072ssl_conf = 67-curve-sect409k1-tls13-ssl
2073
2074[67-curve-sect409k1-tls13-ssl]
2075server = 67-curve-sect409k1-tls13-server
2076client = 67-curve-sect409k1-tls13-client
2077
2078[67-curve-sect409k1-tls13-server]
2079Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2080CipherString = DEFAULT@SECLEVEL=1
2081Curves = sect409k1
2082MaxProtocol = TLSv1.3
2083PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2084
2085[67-curve-sect409k1-tls13-client]
2086CipherString = ECDHE@SECLEVEL=1
2087Curves = sect409k1
2088MinProtocol = TLSv1.3
2089VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2090VerifyMode = Peer
2091
2092[test-67]
2093ExpectedResult = ClientFail
2094
2095
2096# ===========================================================
2097
2098[68-curve-sect409r1-tls13]
2099ssl_conf = 68-curve-sect409r1-tls13-ssl
2100
2101[68-curve-sect409r1-tls13-ssl]
2102server = 68-curve-sect409r1-tls13-server
2103client = 68-curve-sect409r1-tls13-client
2104
2105[68-curve-sect409r1-tls13-server]
2106Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2107CipherString = DEFAULT@SECLEVEL=1
2108Curves = sect409r1
2109MaxProtocol = TLSv1.3
2110PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2111
2112[68-curve-sect409r1-tls13-client]
2113CipherString = ECDHE@SECLEVEL=1
2114Curves = sect409r1
2115MinProtocol = TLSv1.3
2116VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2117VerifyMode = Peer
2118
2119[test-68]
2120ExpectedResult = ClientFail
2121
2122
2123# ===========================================================
2124
2125[69-curve-sect571k1-tls13]
2126ssl_conf = 69-curve-sect571k1-tls13-ssl
2127
2128[69-curve-sect571k1-tls13-ssl]
2129server = 69-curve-sect571k1-tls13-server
2130client = 69-curve-sect571k1-tls13-client
2131
2132[69-curve-sect571k1-tls13-server]
2133Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2134CipherString = DEFAULT@SECLEVEL=1
2135Curves = sect571k1
2136MaxProtocol = TLSv1.3
2137PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2138
2139[69-curve-sect571k1-tls13-client]
2140CipherString = ECDHE@SECLEVEL=1
2141Curves = sect571k1
2142MinProtocol = TLSv1.3
2143VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2144VerifyMode = Peer
2145
2146[test-69]
2147ExpectedResult = ClientFail
2148
2149
2150# ===========================================================
2151
2152[70-curve-sect571r1-tls13]
2153ssl_conf = 70-curve-sect571r1-tls13-ssl
2154
2155[70-curve-sect571r1-tls13-ssl]
2156server = 70-curve-sect571r1-tls13-server
2157client = 70-curve-sect571r1-tls13-client
2158
2159[70-curve-sect571r1-tls13-server]
2160Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2161CipherString = DEFAULT@SECLEVEL=1
2162Curves = sect571r1
2163MaxProtocol = TLSv1.3
2164PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2165
2166[70-curve-sect571r1-tls13-client]
2167CipherString = ECDHE@SECLEVEL=1
2168Curves = sect571r1
2169MinProtocol = TLSv1.3
2170VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2171VerifyMode = Peer
2172
2173[test-70]
2174ExpectedResult = ClientFail
2175
2176
2177# ===========================================================
2178
2179[71-curve-secp224r1-tls13]
2180ssl_conf = 71-curve-secp224r1-tls13-ssl
2181
2182[71-curve-secp224r1-tls13-ssl]
2183server = 71-curve-secp224r1-tls13-server
2184client = 71-curve-secp224r1-tls13-client
2185
2186[71-curve-secp224r1-tls13-server]
2187Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2188CipherString = DEFAULT@SECLEVEL=1
2189Curves = secp224r1
2190MaxProtocol = TLSv1.3
2191PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2192
2193[71-curve-secp224r1-tls13-client]
2194CipherString = ECDHE@SECLEVEL=1
2195Curves = secp224r1
2196MinProtocol = TLSv1.3
2197VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2198VerifyMode = Peer
2199
2200[test-71]
2201ExpectedResult = ClientFail
2202
2203
2204# ===========================================================
2205
2206[72-curve-sect163k1-tls13]
2207ssl_conf = 72-curve-sect163k1-tls13-ssl
2208
2209[72-curve-sect163k1-tls13-ssl]
2210server = 72-curve-sect163k1-tls13-server
2211client = 72-curve-sect163k1-tls13-client
2212
2213[72-curve-sect163k1-tls13-server]
2214Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2215CipherString = DEFAULT@SECLEVEL=1
2216Curves = sect163k1
2217MaxProtocol = TLSv1.3
2218PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2219
2220[72-curve-sect163k1-tls13-client]
2221CipherString = ECDHE@SECLEVEL=1
2222Curves = sect163k1
2223MinProtocol = TLSv1.3
2224VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2225VerifyMode = Peer
2226
2227[test-72]
2228ExpectedResult = ClientFail
2229
2230
2231# ===========================================================
2232
2233[73-curve-sect163r2-tls13]
2234ssl_conf = 73-curve-sect163r2-tls13-ssl
2235
2236[73-curve-sect163r2-tls13-ssl]
2237server = 73-curve-sect163r2-tls13-server
2238client = 73-curve-sect163r2-tls13-client
2239
2240[73-curve-sect163r2-tls13-server]
2241Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2242CipherString = DEFAULT@SECLEVEL=1
2243Curves = sect163r2
2244MaxProtocol = TLSv1.3
2245PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2246
2247[73-curve-sect163r2-tls13-client]
2248CipherString = ECDHE@SECLEVEL=1
2249Curves = sect163r2
2250MinProtocol = TLSv1.3
2251VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2252VerifyMode = Peer
2253
2254[test-73]
2255ExpectedResult = ClientFail
2256
2257
2258# ===========================================================
2259
2260[74-curve-prime192v1-tls13]
2261ssl_conf = 74-curve-prime192v1-tls13-ssl
2262
2263[74-curve-prime192v1-tls13-ssl]
2264server = 74-curve-prime192v1-tls13-server
2265client = 74-curve-prime192v1-tls13-client
2266
2267[74-curve-prime192v1-tls13-server]
2268Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2269CipherString = DEFAULT@SECLEVEL=1
2270Curves = prime192v1
2271MaxProtocol = TLSv1.3
2272PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2273
2274[74-curve-prime192v1-tls13-client]
2275CipherString = ECDHE@SECLEVEL=1
2276Curves = prime192v1
2277MinProtocol = TLSv1.3
2278VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2279VerifyMode = Peer
2280
2281[test-74]
2282ExpectedResult = ClientFail
2283
2284
2285# ===========================================================
2286
2287[75-curve-sect163r1-tls13]
2288ssl_conf = 75-curve-sect163r1-tls13-ssl
2289
2290[75-curve-sect163r1-tls13-ssl]
2291server = 75-curve-sect163r1-tls13-server
2292client = 75-curve-sect163r1-tls13-client
2293
2294[75-curve-sect163r1-tls13-server]
2295Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2296CipherString = DEFAULT@SECLEVEL=1
2297Curves = sect163r1
2298MaxProtocol = TLSv1.3
2299PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2300
2301[75-curve-sect163r1-tls13-client]
2302CipherString = ECDHE@SECLEVEL=1
2303Curves = sect163r1
2304MinProtocol = TLSv1.3
2305VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2306VerifyMode = Peer
2307
2308[test-75]
2309ExpectedResult = ClientFail
2310
2311
2312# ===========================================================
2313
2314[76-curve-sect193r1-tls13]
2315ssl_conf = 76-curve-sect193r1-tls13-ssl
2316
2317[76-curve-sect193r1-tls13-ssl]
2318server = 76-curve-sect193r1-tls13-server
2319client = 76-curve-sect193r1-tls13-client
2320
2321[76-curve-sect193r1-tls13-server]
2322Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2323CipherString = DEFAULT@SECLEVEL=1
2324Curves = sect193r1
2325MaxProtocol = TLSv1.3
2326PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2327
2328[76-curve-sect193r1-tls13-client]
2329CipherString = ECDHE@SECLEVEL=1
2330Curves = sect193r1
2331MinProtocol = TLSv1.3
2332VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2333VerifyMode = Peer
2334
2335[test-76]
2336ExpectedResult = ClientFail
2337
2338
2339# ===========================================================
2340
2341[77-curve-sect193r2-tls13]
2342ssl_conf = 77-curve-sect193r2-tls13-ssl
2343
2344[77-curve-sect193r2-tls13-ssl]
2345server = 77-curve-sect193r2-tls13-server
2346client = 77-curve-sect193r2-tls13-client
2347
2348[77-curve-sect193r2-tls13-server]
2349Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2350CipherString = DEFAULT@SECLEVEL=1
2351Curves = sect193r2
2352MaxProtocol = TLSv1.3
2353PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2354
2355[77-curve-sect193r2-tls13-client]
2356CipherString = ECDHE@SECLEVEL=1
2357Curves = sect193r2
2358MinProtocol = TLSv1.3
2359VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2360VerifyMode = Peer
2361
2362[test-77]
2363ExpectedResult = ClientFail
2364
2365
2366# ===========================================================
2367
2368[78-curve-sect239k1-tls13]
2369ssl_conf = 78-curve-sect239k1-tls13-ssl
2370
2371[78-curve-sect239k1-tls13-ssl]
2372server = 78-curve-sect239k1-tls13-server
2373client = 78-curve-sect239k1-tls13-client
2374
2375[78-curve-sect239k1-tls13-server]
2376Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2377CipherString = DEFAULT@SECLEVEL=1
2378Curves = sect239k1
2379MaxProtocol = TLSv1.3
2380PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2381
2382[78-curve-sect239k1-tls13-client]
2383CipherString = ECDHE@SECLEVEL=1
2384Curves = sect239k1
2385MinProtocol = TLSv1.3
2386VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2387VerifyMode = Peer
2388
2389[test-78]
2390ExpectedResult = ClientFail
2391
2392
2393# ===========================================================
2394
2395[79-curve-secp160k1-tls13]
2396ssl_conf = 79-curve-secp160k1-tls13-ssl
2397
2398[79-curve-secp160k1-tls13-ssl]
2399server = 79-curve-secp160k1-tls13-server
2400client = 79-curve-secp160k1-tls13-client
2401
2402[79-curve-secp160k1-tls13-server]
2403Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2404CipherString = DEFAULT@SECLEVEL=1
2405Curves = secp160k1
2406MaxProtocol = TLSv1.3
2407PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2408
2409[79-curve-secp160k1-tls13-client]
2410CipherString = ECDHE@SECLEVEL=1
2411Curves = secp160k1
2412MinProtocol = TLSv1.3
2413VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2414VerifyMode = Peer
2415
2416[test-79]
2417ExpectedResult = ClientFail
2418
2419
2420# ===========================================================
2421
2422[80-curve-secp160r1-tls13]
2423ssl_conf = 80-curve-secp160r1-tls13-ssl
2424
2425[80-curve-secp160r1-tls13-ssl]
2426server = 80-curve-secp160r1-tls13-server
2427client = 80-curve-secp160r1-tls13-client
2428
2429[80-curve-secp160r1-tls13-server]
2430Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2431CipherString = DEFAULT@SECLEVEL=1
2432Curves = secp160r1
2433MaxProtocol = TLSv1.3
2434PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2435
2436[80-curve-secp160r1-tls13-client]
2437CipherString = ECDHE@SECLEVEL=1
2438Curves = secp160r1
2439MinProtocol = TLSv1.3
2440VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2441VerifyMode = Peer
2442
2443[test-80]
2444ExpectedResult = ClientFail
2445
2446
2447# ===========================================================
2448
2449[81-curve-secp160r2-tls13]
2450ssl_conf = 81-curve-secp160r2-tls13-ssl
2451
2452[81-curve-secp160r2-tls13-ssl]
2453server = 81-curve-secp160r2-tls13-server
2454client = 81-curve-secp160r2-tls13-client
2455
2456[81-curve-secp160r2-tls13-server]
2457Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2458CipherString = DEFAULT@SECLEVEL=1
2459Curves = secp160r2
2460MaxProtocol = TLSv1.3
2461PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2462
2463[81-curve-secp160r2-tls13-client]
2464CipherString = ECDHE@SECLEVEL=1
2465Curves = secp160r2
2466MinProtocol = TLSv1.3
2467VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2468VerifyMode = Peer
2469
2470[test-81]
2471ExpectedResult = ClientFail
2472
2473
2474# ===========================================================
2475
2476[82-curve-secp192k1-tls13]
2477ssl_conf = 82-curve-secp192k1-tls13-ssl
2478
2479[82-curve-secp192k1-tls13-ssl]
2480server = 82-curve-secp192k1-tls13-server
2481client = 82-curve-secp192k1-tls13-client
2482
2483[82-curve-secp192k1-tls13-server]
2484Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2485CipherString = DEFAULT@SECLEVEL=1
2486Curves = secp192k1
2487MaxProtocol = TLSv1.3
2488PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2489
2490[82-curve-secp192k1-tls13-client]
2491CipherString = ECDHE@SECLEVEL=1
2492Curves = secp192k1
2493MinProtocol = TLSv1.3
2494VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2495VerifyMode = Peer
2496
2497[test-82]
2498ExpectedResult = ClientFail
2499
2500
2501# ===========================================================
2502
2503[83-curve-secp224k1-tls13]
2504ssl_conf = 83-curve-secp224k1-tls13-ssl
2505
2506[83-curve-secp224k1-tls13-ssl]
2507server = 83-curve-secp224k1-tls13-server
2508client = 83-curve-secp224k1-tls13-client
2509
2510[83-curve-secp224k1-tls13-server]
2511Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2512CipherString = DEFAULT@SECLEVEL=1
2513Curves = secp224k1
2514MaxProtocol = TLSv1.3
2515PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2516
2517[83-curve-secp224k1-tls13-client]
2518CipherString = ECDHE@SECLEVEL=1
2519Curves = secp224k1
2520MinProtocol = TLSv1.3
2521VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2522VerifyMode = Peer
2523
2524[test-83]
2525ExpectedResult = ClientFail
2526
2527
2528# ===========================================================
2529
2530[84-curve-secp256k1-tls13]
2531ssl_conf = 84-curve-secp256k1-tls13-ssl
2532
2533[84-curve-secp256k1-tls13-ssl]
2534server = 84-curve-secp256k1-tls13-server
2535client = 84-curve-secp256k1-tls13-client
2536
2537[84-curve-secp256k1-tls13-server]
2538Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2539CipherString = DEFAULT@SECLEVEL=1
2540Curves = secp256k1
2541MaxProtocol = TLSv1.3
2542PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2543
2544[84-curve-secp256k1-tls13-client]
2545CipherString = ECDHE@SECLEVEL=1
2546Curves = secp256k1
2547MinProtocol = TLSv1.3
2548VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2549VerifyMode = Peer
2550
2551[test-84]
2552ExpectedResult = ClientFail
2553
2554
2555# ===========================================================
2556
2557[85-curve-brainpoolP256r1-tls13]
2558ssl_conf = 85-curve-brainpoolP256r1-tls13-ssl
2559
2560[85-curve-brainpoolP256r1-tls13-ssl]
2561server = 85-curve-brainpoolP256r1-tls13-server
2562client = 85-curve-brainpoolP256r1-tls13-client
2563
2564[85-curve-brainpoolP256r1-tls13-server]
2565Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2566CipherString = DEFAULT@SECLEVEL=1
2567Curves = brainpoolP256r1
2568MaxProtocol = TLSv1.3
2569PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2570
2571[85-curve-brainpoolP256r1-tls13-client]
2572CipherString = ECDHE@SECLEVEL=1
2573Curves = brainpoolP256r1
2574MinProtocol = TLSv1.3
2575VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2576VerifyMode = Peer
2577
2578[test-85]
2579ExpectedResult = ClientFail
2580
2581
2582# ===========================================================
2583
2584[86-curve-brainpoolP384r1-tls13]
2585ssl_conf = 86-curve-brainpoolP384r1-tls13-ssl
2586
2587[86-curve-brainpoolP384r1-tls13-ssl]
2588server = 86-curve-brainpoolP384r1-tls13-server
2589client = 86-curve-brainpoolP384r1-tls13-client
2590
2591[86-curve-brainpoolP384r1-tls13-server]
2592Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2593CipherString = DEFAULT@SECLEVEL=1
2594Curves = brainpoolP384r1
2595MaxProtocol = TLSv1.3
2596PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2597
2598[86-curve-brainpoolP384r1-tls13-client]
2599CipherString = ECDHE@SECLEVEL=1
2600Curves = brainpoolP384r1
2601MinProtocol = TLSv1.3
2602VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2603VerifyMode = Peer
2604
2605[test-86]
2606ExpectedResult = ClientFail
2607
2608
2609# ===========================================================
2610
2611[87-curve-brainpoolP512r1-tls13]
2612ssl_conf = 87-curve-brainpoolP512r1-tls13-ssl
2613
2614[87-curve-brainpoolP512r1-tls13-ssl]
2615server = 87-curve-brainpoolP512r1-tls13-server
2616client = 87-curve-brainpoolP512r1-tls13-client
2617
2618[87-curve-brainpoolP512r1-tls13-server]
2619Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2620CipherString = DEFAULT@SECLEVEL=1
2621Curves = brainpoolP512r1
2622MaxProtocol = TLSv1.3
2623PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2624
2625[87-curve-brainpoolP512r1-tls13-client]
2626CipherString = ECDHE@SECLEVEL=1
2627Curves = brainpoolP512r1
2628MinProtocol = TLSv1.3
2629VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2630VerifyMode = Peer
2631
2632[test-87]
2633ExpectedResult = ClientFail
2634
2635
2636# ===========================================================
2637
2638[88-curve-ffdhe2048-tls13-in-tls12]
2639ssl_conf = 88-curve-ffdhe2048-tls13-in-tls12-ssl
2640
2641[88-curve-ffdhe2048-tls13-in-tls12-ssl]
2642server = 88-curve-ffdhe2048-tls13-in-tls12-server
2643client = 88-curve-ffdhe2048-tls13-in-tls12-client
2644
2645[88-curve-ffdhe2048-tls13-in-tls12-server]
2646Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2647CipherString = DEFAULT@SECLEVEL=1
2648Curves = ffdhe2048
2649MaxProtocol = TLSv1.3
2650PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2651
2652[88-curve-ffdhe2048-tls13-in-tls12-client]
2653CipherString = ECDHE@SECLEVEL=1
2654Curves = ffdhe2048
2655MaxProtocol = TLSv1.2
2656VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2657VerifyMode = Peer
2658
2659[test-88]
2660ExpectedResult = ServerFail
2661
2662
2663# ===========================================================
2664
2665[89-curve-ffdhe2048-tls13-in-tls12-2]
2666ssl_conf = 89-curve-ffdhe2048-tls13-in-tls12-2-ssl
2667
2668[89-curve-ffdhe2048-tls13-in-tls12-2-ssl]
2669server = 89-curve-ffdhe2048-tls13-in-tls12-2-server
2670client = 89-curve-ffdhe2048-tls13-in-tls12-2-client
2671
2672[89-curve-ffdhe2048-tls13-in-tls12-2-server]
2673Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2674CipherString = DEFAULT@SECLEVEL=1
2675Curves = ffdhe2048
2676MaxProtocol = TLSv1.2
2677PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2678
2679[89-curve-ffdhe2048-tls13-in-tls12-2-client]
2680CipherString = DEFAULT@SECLEVEL=1
2681Curves = ffdhe2048
2682MaxProtocol = TLSv1.3
2683VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2684VerifyMode = Peer
2685
2686[test-89]
2687ExpectedResult = Success
2688
2689
2690# ===========================================================
2691
2692[90-curve-ffdhe3072-tls13-in-tls12]
2693ssl_conf = 90-curve-ffdhe3072-tls13-in-tls12-ssl
2694
2695[90-curve-ffdhe3072-tls13-in-tls12-ssl]
2696server = 90-curve-ffdhe3072-tls13-in-tls12-server
2697client = 90-curve-ffdhe3072-tls13-in-tls12-client
2698
2699[90-curve-ffdhe3072-tls13-in-tls12-server]
2700Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2701CipherString = DEFAULT@SECLEVEL=1
2702Curves = ffdhe3072
2703MaxProtocol = TLSv1.3
2704PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2705
2706[90-curve-ffdhe3072-tls13-in-tls12-client]
2707CipherString = ECDHE@SECLEVEL=1
2708Curves = ffdhe3072
2709MaxProtocol = TLSv1.2
2710VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2711VerifyMode = Peer
2712
2713[test-90]
2714ExpectedResult = ServerFail
2715
2716
2717# ===========================================================
2718
2719[91-curve-ffdhe3072-tls13-in-tls12-2]
2720ssl_conf = 91-curve-ffdhe3072-tls13-in-tls12-2-ssl
2721
2722[91-curve-ffdhe3072-tls13-in-tls12-2-ssl]
2723server = 91-curve-ffdhe3072-tls13-in-tls12-2-server
2724client = 91-curve-ffdhe3072-tls13-in-tls12-2-client
2725
2726[91-curve-ffdhe3072-tls13-in-tls12-2-server]
2727Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2728CipherString = DEFAULT@SECLEVEL=1
2729Curves = ffdhe3072
2730MaxProtocol = TLSv1.2
2731PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2732
2733[91-curve-ffdhe3072-tls13-in-tls12-2-client]
2734CipherString = DEFAULT@SECLEVEL=1
2735Curves = ffdhe3072
2736MaxProtocol = TLSv1.3
2737VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2738VerifyMode = Peer
2739
2740[test-91]
2741ExpectedResult = Success
2742
2743
2744# ===========================================================
2745
2746[92-curve-ffdhe4096-tls13-in-tls12]
2747ssl_conf = 92-curve-ffdhe4096-tls13-in-tls12-ssl
2748
2749[92-curve-ffdhe4096-tls13-in-tls12-ssl]
2750server = 92-curve-ffdhe4096-tls13-in-tls12-server
2751client = 92-curve-ffdhe4096-tls13-in-tls12-client
2752
2753[92-curve-ffdhe4096-tls13-in-tls12-server]
2754Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2755CipherString = DEFAULT@SECLEVEL=1
2756Curves = ffdhe4096
2757MaxProtocol = TLSv1.3
2758PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2759
2760[92-curve-ffdhe4096-tls13-in-tls12-client]
2761CipherString = ECDHE@SECLEVEL=1
2762Curves = ffdhe4096
2763MaxProtocol = TLSv1.2
2764VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2765VerifyMode = Peer
2766
2767[test-92]
2768ExpectedResult = ServerFail
2769
2770
2771# ===========================================================
2772
2773[93-curve-ffdhe4096-tls13-in-tls12-2]
2774ssl_conf = 93-curve-ffdhe4096-tls13-in-tls12-2-ssl
2775
2776[93-curve-ffdhe4096-tls13-in-tls12-2-ssl]
2777server = 93-curve-ffdhe4096-tls13-in-tls12-2-server
2778client = 93-curve-ffdhe4096-tls13-in-tls12-2-client
2779
2780[93-curve-ffdhe4096-tls13-in-tls12-2-server]
2781Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2782CipherString = DEFAULT@SECLEVEL=1
2783Curves = ffdhe4096
2784MaxProtocol = TLSv1.2
2785PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2786
2787[93-curve-ffdhe4096-tls13-in-tls12-2-client]
2788CipherString = DEFAULT@SECLEVEL=1
2789Curves = ffdhe4096
2790MaxProtocol = TLSv1.3
2791VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2792VerifyMode = Peer
2793
2794[test-93]
2795ExpectedResult = Success
2796
2797
2798# ===========================================================
2799
2800[94-curve-ffdhe6144-tls13-in-tls12]
2801ssl_conf = 94-curve-ffdhe6144-tls13-in-tls12-ssl
2802
2803[94-curve-ffdhe6144-tls13-in-tls12-ssl]
2804server = 94-curve-ffdhe6144-tls13-in-tls12-server
2805client = 94-curve-ffdhe6144-tls13-in-tls12-client
2806
2807[94-curve-ffdhe6144-tls13-in-tls12-server]
2808Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2809CipherString = DEFAULT@SECLEVEL=1
2810Curves = ffdhe6144
2811MaxProtocol = TLSv1.3
2812PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2813
2814[94-curve-ffdhe6144-tls13-in-tls12-client]
2815CipherString = ECDHE@SECLEVEL=1
2816Curves = ffdhe6144
2817MaxProtocol = TLSv1.2
2818VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2819VerifyMode = Peer
2820
2821[test-94]
2822ExpectedResult = ServerFail
2823
2824
2825# ===========================================================
2826
2827[95-curve-ffdhe6144-tls13-in-tls12-2]
2828ssl_conf = 95-curve-ffdhe6144-tls13-in-tls12-2-ssl
2829
2830[95-curve-ffdhe6144-tls13-in-tls12-2-ssl]
2831server = 95-curve-ffdhe6144-tls13-in-tls12-2-server
2832client = 95-curve-ffdhe6144-tls13-in-tls12-2-client
2833
2834[95-curve-ffdhe6144-tls13-in-tls12-2-server]
2835Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2836CipherString = DEFAULT@SECLEVEL=1
2837Curves = ffdhe6144
2838MaxProtocol = TLSv1.2
2839PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2840
2841[95-curve-ffdhe6144-tls13-in-tls12-2-client]
2842CipherString = DEFAULT@SECLEVEL=1
2843Curves = ffdhe6144
2844MaxProtocol = TLSv1.3
2845VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2846VerifyMode = Peer
2847
2848[test-95]
2849ExpectedResult = Success
2850
2851
2852# ===========================================================
2853
2854[96-curve-ffdhe8192-tls13-in-tls12]
2855ssl_conf = 96-curve-ffdhe8192-tls13-in-tls12-ssl
2856
2857[96-curve-ffdhe8192-tls13-in-tls12-ssl]
2858server = 96-curve-ffdhe8192-tls13-in-tls12-server
2859client = 96-curve-ffdhe8192-tls13-in-tls12-client
2860
2861[96-curve-ffdhe8192-tls13-in-tls12-server]
2862Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2863CipherString = DEFAULT@SECLEVEL=1
2864Curves = ffdhe8192
2865MaxProtocol = TLSv1.3
2866PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2867
2868[96-curve-ffdhe8192-tls13-in-tls12-client]
2869CipherString = ECDHE@SECLEVEL=1
2870Curves = ffdhe8192
2871MaxProtocol = TLSv1.2
2872VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2873VerifyMode = Peer
2874
2875[test-96]
2876ExpectedResult = ServerFail
2877
2878
2879# ===========================================================
2880
2881[97-curve-ffdhe8192-tls13-in-tls12-2]
2882ssl_conf = 97-curve-ffdhe8192-tls13-in-tls12-2-ssl
2883
2884[97-curve-ffdhe8192-tls13-in-tls12-2-ssl]
2885server = 97-curve-ffdhe8192-tls13-in-tls12-2-server
2886client = 97-curve-ffdhe8192-tls13-in-tls12-2-client
2887
2888[97-curve-ffdhe8192-tls13-in-tls12-2-server]
2889Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2890CipherString = DEFAULT@SECLEVEL=1
2891Curves = ffdhe8192
2892MaxProtocol = TLSv1.2
2893PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2894
2895[97-curve-ffdhe8192-tls13-in-tls12-2-client]
2896CipherString = DEFAULT@SECLEVEL=1
2897Curves = ffdhe8192
2898MaxProtocol = TLSv1.3
2899VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2900VerifyMode = Peer
2901
2902[test-97]
2903ExpectedResult = Success
2904
2905
2906# ===========================================================
2907
2908[98-curve-brainpoolP256r1tls13-tls13-in-tls12]
2909ssl_conf = 98-curve-brainpoolP256r1tls13-tls13-in-tls12-ssl
2910
2911[98-curve-brainpoolP256r1tls13-tls13-in-tls12-ssl]
2912server = 98-curve-brainpoolP256r1tls13-tls13-in-tls12-server
2913client = 98-curve-brainpoolP256r1tls13-tls13-in-tls12-client
2914
2915[98-curve-brainpoolP256r1tls13-tls13-in-tls12-server]
2916Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2917CipherString = DEFAULT@SECLEVEL=1
2918Curves = brainpoolP256r1tls13
2919MaxProtocol = TLSv1.3
2920PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2921
2922[98-curve-brainpoolP256r1tls13-tls13-in-tls12-client]
2923CipherString = ECDHE@SECLEVEL=1
2924Curves = brainpoolP256r1tls13
2925MaxProtocol = TLSv1.2
2926VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2927VerifyMode = Peer
2928
2929[test-98]
2930ExpectedResult = ServerFail
2931
2932
2933# ===========================================================
2934
2935[99-curve-brainpoolP256r1tls13-tls13-in-tls12-2]
2936ssl_conf = 99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-ssl
2937
2938[99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-ssl]
2939server = 99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-server
2940client = 99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-client
2941
2942[99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-server]
2943Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2944CipherString = DEFAULT@SECLEVEL=1
2945Curves = brainpoolP256r1tls13
2946MaxProtocol = TLSv1.2
2947PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2948
2949[99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-client]
2950CipherString = DEFAULT@SECLEVEL=1
2951Curves = brainpoolP256r1tls13
2952MaxProtocol = TLSv1.3
2953VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2954VerifyMode = Peer
2955
2956[test-99]
2957ExpectedResult = Success
2958
2959
2960# ===========================================================
2961
2962[100-curve-brainpoolP384r1tls13-tls13-in-tls12]
2963ssl_conf = 100-curve-brainpoolP384r1tls13-tls13-in-tls12-ssl
2964
2965[100-curve-brainpoolP384r1tls13-tls13-in-tls12-ssl]
2966server = 100-curve-brainpoolP384r1tls13-tls13-in-tls12-server
2967client = 100-curve-brainpoolP384r1tls13-tls13-in-tls12-client
2968
2969[100-curve-brainpoolP384r1tls13-tls13-in-tls12-server]
2970Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2971CipherString = DEFAULT@SECLEVEL=1
2972Curves = brainpoolP384r1tls13
2973MaxProtocol = TLSv1.3
2974PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
2975
2976[100-curve-brainpoolP384r1tls13-tls13-in-tls12-client]
2977CipherString = ECDHE@SECLEVEL=1
2978Curves = brainpoolP384r1tls13
2979MaxProtocol = TLSv1.2
2980VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
2981VerifyMode = Peer
2982
2983[test-100]
2984ExpectedResult = ServerFail
2985
2986
2987# ===========================================================
2988
2989[101-curve-brainpoolP384r1tls13-tls13-in-tls12-2]
2990ssl_conf = 101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-ssl
2991
2992[101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-ssl]
2993server = 101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-server
2994client = 101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-client
2995
2996[101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-server]
2997Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
2998CipherString = DEFAULT@SECLEVEL=1
2999Curves = brainpoolP384r1tls13
3000MaxProtocol = TLSv1.2
3001PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
3002
3003[101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-client]
3004CipherString = DEFAULT@SECLEVEL=1
3005Curves = brainpoolP384r1tls13
3006MaxProtocol = TLSv1.3
3007VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
3008VerifyMode = Peer
3009
3010[test-101]
3011ExpectedResult = Success
3012
3013
3014# ===========================================================
3015
3016[102-curve-brainpoolP512r1tls13-tls13-in-tls12]
3017ssl_conf = 102-curve-brainpoolP512r1tls13-tls13-in-tls12-ssl
3018
3019[102-curve-brainpoolP512r1tls13-tls13-in-tls12-ssl]
3020server = 102-curve-brainpoolP512r1tls13-tls13-in-tls12-server
3021client = 102-curve-brainpoolP512r1tls13-tls13-in-tls12-client
3022
3023[102-curve-brainpoolP512r1tls13-tls13-in-tls12-server]
3024Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
3025CipherString = DEFAULT@SECLEVEL=1
3026Curves = brainpoolP512r1tls13
3027MaxProtocol = TLSv1.3
3028PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
3029
3030[102-curve-brainpoolP512r1tls13-tls13-in-tls12-client]
3031CipherString = ECDHE@SECLEVEL=1
3032Curves = brainpoolP512r1tls13
3033MaxProtocol = TLSv1.2
3034VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
3035VerifyMode = Peer
3036
3037[test-102]
3038ExpectedResult = ServerFail
3039
3040
3041# ===========================================================
3042
3043[103-curve-brainpoolP512r1tls13-tls13-in-tls12-2]
3044ssl_conf = 103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-ssl
3045
3046[103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-ssl]
3047server = 103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-server
3048client = 103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-client
3049
3050[103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-server]
3051Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
3052CipherString = DEFAULT@SECLEVEL=1
3053Curves = brainpoolP512r1tls13
3054MaxProtocol = TLSv1.2
3055PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
3056
3057[103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-client]
3058CipherString = DEFAULT@SECLEVEL=1
3059Curves = brainpoolP512r1tls13
3060MaxProtocol = TLSv1.3
3061VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
3062VerifyMode = Peer
3063
3064[test-103]
3065ExpectedResult = Success
3066
3067
3068