[thirdparty/openssl.git] / test / ssl-tests / 12-ct.cnf

# Generated with generate_ssl_tests.pl

num_tests = 6

test-0 = 0-ct-permissive-without-scts
test-1 = 1-ct-permissive-with-scts
test-2 = 2-ct-strict-without-scts
test-3 = 3-ct-strict-with-scts
test-4 = 4-ct-permissive-resumption
test-5 = 5-ct-strict-resumption
# ===========================================================

[0-ct-permissive-without-scts]
ssl_conf = 0-ct-permissive-without-scts-ssl

[0-ct-permissive-without-scts-ssl]
server = 0-ct-permissive-without-scts-server
client = 0-ct-permissive-without-scts-client

[0-ct-permissive-without-scts-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[0-ct-permissive-without-scts-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer

[test-0]
ExpectedResult = Success
client = 0-ct-permissive-without-scts-client-extra

[0-ct-permissive-without-scts-client-extra]
CTValidation = Permissive


# ===========================================================

[1-ct-permissive-with-scts]
ssl_conf = 1-ct-permissive-with-scts-ssl

[1-ct-permissive-with-scts-ssl]
server = 1-ct-permissive-with-scts-server
client = 1-ct-permissive-with-scts-client

[1-ct-permissive-with-scts-server]
Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem

[1-ct-permissive-with-scts-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
VerifyMode = Peer

[test-1]
ExpectedResult = Success
client = 1-ct-permissive-with-scts-client-extra

[1-ct-permissive-with-scts-client-extra]
CTValidation = Permissive


# ===========================================================

[2-ct-strict-without-scts]
ssl_conf = 2-ct-strict-without-scts-ssl

[2-ct-strict-without-scts-ssl]
server = 2-ct-strict-without-scts-server
client = 2-ct-strict-without-scts-client

[2-ct-strict-without-scts-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[2-ct-strict-without-scts-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer

[test-2]
ExpectedClientAlert = HandshakeFailure
ExpectedResult = ClientFail
client = 2-ct-strict-without-scts-client-extra

[2-ct-strict-without-scts-client-extra]
CTValidation = Strict


# ===========================================================

[3-ct-strict-with-scts]
ssl_conf = 3-ct-strict-with-scts-ssl

[3-ct-strict-with-scts-ssl]
server = 3-ct-strict-with-scts-server
client = 3-ct-strict-with-scts-client

[3-ct-strict-with-scts-server]
Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem

[3-ct-strict-with-scts-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
VerifyMode = Peer

[test-3]
ExpectedResult = Success
client = 3-ct-strict-with-scts-client-extra

[3-ct-strict-with-scts-client-extra]
CTValidation = Strict


# ===========================================================

[4-ct-permissive-resumption]
ssl_conf = 4-ct-permissive-resumption-ssl

[4-ct-permissive-resumption-ssl]
server = 4-ct-permissive-resumption-server
client = 4-ct-permissive-resumption-client
resume-server = 4-ct-permissive-resumption-server
resume-client = 4-ct-permissive-resumption-client

[4-ct-permissive-resumption-server]
Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem

[4-ct-permissive-resumption-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
VerifyMode = Peer

[test-4]
ExpectedResult = Success
HandshakeMode = Resume
ResumptionExpected = Yes
client = 4-ct-permissive-resumption-client-extra
resume-client = 4-ct-permissive-resumption-client-extra

[4-ct-permissive-resumption-client-extra]
CTValidation = Permissive


# ===========================================================

[5-ct-strict-resumption]
ssl_conf = 5-ct-strict-resumption-ssl

[5-ct-strict-resumption-ssl]
server = 5-ct-strict-resumption-server
client = 5-ct-strict-resumption-client
resume-server = 5-ct-strict-resumption-server
resume-client = 5-ct-strict-resumption-resume-client

[5-ct-strict-resumption-server]
Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem

[5-ct-strict-resumption-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
VerifyMode = Peer

[5-ct-strict-resumption-resume-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer

[test-5]
ExpectedResult = Success
HandshakeMode = Resume
ResumptionExpected = Yes
client = 5-ct-strict-resumption-client-extra
resume-client = 5-ct-strict-resumption-resume-client-extra

[5-ct-strict-resumption-client-extra]
CTValidation = Strict

[5-ct-strict-resumption-resume-client-extra]
CTValidation = Strict
Commit	Line	Data
da085d27 EK	1	# Generated with generate_ssl_tests.pl
da085d27 EK	2
2094ea07 RP	3	num_tests = 6
	4
	5	test-0 = 0-ct-permissive-without-scts
	6	test-1 = 1-ct-permissive-with-scts
	7	test-2 = 2-ct-strict-without-scts
	8	test-3 = 3-ct-strict-with-scts
	9	test-4 = 4-ct-permissive-resumption
	10	test-5 = 5-ct-strict-resumption
da085d27 EK	11	# ===========================================================
da085d27 EK	12
2094ea07 RP	13	[0-ct-permissive-without-scts]
2094ea07 RP	14	ssl_conf = 0-ct-permissive-without-scts-ssl
da085d27	15
2094ea07 RP	16	[0-ct-permissive-without-scts-ssl]
	17	server = 0-ct-permissive-without-scts-server
	18	client = 0-ct-permissive-without-scts-client
da085d27	19
2094ea07	20	[0-ct-permissive-without-scts-server]
da085d27 EK	21	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	22	CipherString = DEFAULT
	23	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	24
2094ea07	25	[0-ct-permissive-without-scts-client]
da085d27 EK	26	CipherString = DEFAULT
	27	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
	28	VerifyMode = Peer
	29
	30	[test-0]
	31	ExpectedResult = Success
2094ea07 RP	32	client = 0-ct-permissive-without-scts-client-extra
	33
	34	[0-ct-permissive-without-scts-client-extra]
	35	CTValidation = Permissive
	36
	37
	38	# ===========================================================
	39
	40	[1-ct-permissive-with-scts]
	41	ssl_conf = 1-ct-permissive-with-scts-ssl
	42
	43	[1-ct-permissive-with-scts-ssl]
	44	server = 1-ct-permissive-with-scts-server
	45	client = 1-ct-permissive-with-scts-client
	46
	47	[1-ct-permissive-with-scts-server]
	48	Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
	49	CipherString = DEFAULT
	50	PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
	51
	52	[1-ct-permissive-with-scts-client]
	53	CipherString = DEFAULT
	54	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
	55	VerifyMode = Peer
	56
	57	[test-1]
	58	ExpectedResult = Success
	59	client = 1-ct-permissive-with-scts-client-extra
da085d27	60
2094ea07	61	[1-ct-permissive-with-scts-client-extra]
da085d27 EK	62	CTValidation = Permissive
	63
	64
	65	# ===========================================================
	66
2094ea07 RP	67	[2-ct-strict-without-scts]
2094ea07 RP	68	ssl_conf = 2-ct-strict-without-scts-ssl
da085d27	69
2094ea07 RP	70	[2-ct-strict-without-scts-ssl]
	71	server = 2-ct-strict-without-scts-server
	72	client = 2-ct-strict-without-scts-client
da085d27	73
2094ea07	74	[2-ct-strict-without-scts-server]
da085d27 EK	75	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	76	CipherString = DEFAULT
	77	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	78
2094ea07	79	[2-ct-strict-without-scts-client]
da085d27 EK	80	CipherString = DEFAULT
	81	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
	82	VerifyMode = Peer
	83
2094ea07	84	[test-2]
da085d27 EK	85	ExpectedClientAlert = HandshakeFailure
da085d27 EK	86	ExpectedResult = ClientFail
2094ea07	87	client = 2-ct-strict-without-scts-client-extra
da085d27	88
2094ea07	89	[2-ct-strict-without-scts-client-extra]
da085d27 EK	90	CTValidation = Strict
	91
	92
	93	# ===========================================================
	94
2094ea07 RP	95	[3-ct-strict-with-scts]
2094ea07 RP	96	ssl_conf = 3-ct-strict-with-scts-ssl
da085d27	97
2094ea07 RP	98	[3-ct-strict-with-scts-ssl]
	99	server = 3-ct-strict-with-scts-server
	100	client = 3-ct-strict-with-scts-client
da085d27	101
2094ea07 RP	102	[3-ct-strict-with-scts-server]
2094ea07 RP	103	Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
da085d27	104	CipherString = DEFAULT
2094ea07	105	PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
da085d27	106
2094ea07	107	[3-ct-strict-with-scts-client]
da085d27	108	CipherString = DEFAULT
2094ea07	109	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
da085d27 EK	110	VerifyMode = Peer
da085d27 EK	111
2094ea07 RP	112	[test-3]
	113	ExpectedResult = Success
	114	client = 3-ct-strict-with-scts-client-extra
	115
	116	[3-ct-strict-with-scts-client-extra]
	117	CTValidation = Strict
	118
	119
	120	# ===========================================================
	121
	122	[4-ct-permissive-resumption]
	123	ssl_conf = 4-ct-permissive-resumption-ssl
	124
	125	[4-ct-permissive-resumption-ssl]
	126	server = 4-ct-permissive-resumption-server
	127	client = 4-ct-permissive-resumption-client
	128	resume-server = 4-ct-permissive-resumption-server
	129	resume-client = 4-ct-permissive-resumption-client
	130
	131	[4-ct-permissive-resumption-server]
	132	Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
	133	CipherString = DEFAULT
	134	PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
	135
	136	[4-ct-permissive-resumption-client]
	137	CipherString = DEFAULT
	138	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
	139	VerifyMode = Peer
	140
	141	[test-4]
da085d27 EK	142	ExpectedResult = Success
	143	HandshakeMode = Resume
	144	ResumptionExpected = Yes
2094ea07 RP	145	client = 4-ct-permissive-resumption-client-extra
2094ea07 RP	146	resume-client = 4-ct-permissive-resumption-client-extra
da085d27	147
2094ea07	148	[4-ct-permissive-resumption-client-extra]
da085d27 EK	149	CTValidation = Permissive
	150
	151
	152	# ===========================================================
	153
2094ea07 RP	154	[5-ct-strict-resumption]
2094ea07 RP	155	ssl_conf = 5-ct-strict-resumption-ssl
da085d27	156
2094ea07 RP	157	[5-ct-strict-resumption-ssl]
	158	server = 5-ct-strict-resumption-server
	159	client = 5-ct-strict-resumption-client
	160	resume-server = 5-ct-strict-resumption-server
	161	resume-client = 5-ct-strict-resumption-resume-client
da085d27	162
2094ea07 RP	163	[5-ct-strict-resumption-server]
2094ea07 RP	164	Certificate = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1.pem
da085d27	165	CipherString = DEFAULT
2094ea07	166	PrivateKey = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1-key.pem
da085d27	167
2094ea07	168	[5-ct-strict-resumption-client]
da085d27	169	CipherString = DEFAULT
2094ea07	170	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/embeddedSCTs1_issuer.pem
da085d27 EK	171	VerifyMode = Peer
da085d27 EK	172
2094ea07	173	[5-ct-strict-resumption-resume-client]
da085d27 EK	174	CipherString = DEFAULT
	175	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
	176	VerifyMode = Peer
	177
2094ea07	178	[test-5]
da085d27 EK	179	ExpectedResult = Success
	180	HandshakeMode = Resume
	181	ResumptionExpected = Yes
2094ea07 RP	182	client = 5-ct-strict-resumption-client-extra
2094ea07 RP	183	resume-client = 5-ct-strict-resumption-resume-client-extra
da085d27	184
2094ea07 RP	185	[5-ct-strict-resumption-client-extra]
2094ea07 RP	186	CTValidation = Strict
da085d27	187
2094ea07	188	[5-ct-strict-resumption-resume-client-extra]
da085d27 EK	189	CTValidation = Strict
	190
	191