]> git.ipfire.org Git - thirdparty/openssl.git/blob - test/ssl-tests/32-compressed-certificate.cnf
Add support for compressed certificates (RFC8879)
[thirdparty/openssl.git] / test / ssl-tests / 32-compressed-certificate.cnf
1 # Generated with generate_ssl_tests.pl
2
3 num_tests = 8
4
5 test-0 = 0-no-compressed-certificates
6 test-1 = 1-server-compressed-certificates
7 test-2 = 2-client-compressed-certificates
8 test-3 = 3-both-compressed-certificates
9 test-4 = 4-no-compressed-certificates-mtls
10 test-5 = 5-server-compressed-certificates-mtls
11 test-6 = 6-client-compressed-certificates-mtls
12 test-7 = 7-both-compressed-certificates-mtls
13 # ===========================================================
14
15 [0-no-compressed-certificates]
16 ssl_conf = 0-no-compressed-certificates-ssl
17
18 [0-no-compressed-certificates-ssl]
19 server = 0-no-compressed-certificates-server
20 client = 0-no-compressed-certificates-client
21
22 [0-no-compressed-certificates-server]
23 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
24 CipherString = DEFAULT
25 Options = -TxCertificateCompression,-RxCertificateCompression
26 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
27
28 [0-no-compressed-certificates-client]
29 CipherString = DEFAULT
30 MinProtocol = TLSv1.3
31 Options = -TxCertificateCompression,-RxCertificateCompression
32 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
33 VerifyMode = Peer
34
35 [test-0]
36 CompressCertificates = Yes
37 ExpectedResult = Success
38
39
40 # ===========================================================
41
42 [1-server-compressed-certificates]
43 ssl_conf = 1-server-compressed-certificates-ssl
44
45 [1-server-compressed-certificates-ssl]
46 server = 1-server-compressed-certificates-server
47 client = 1-server-compressed-certificates-client
48
49 [1-server-compressed-certificates-server]
50 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
51 CipherString = DEFAULT
52 Options = TxCertificateCompression,RxCertificateCompression
53 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
54
55 [1-server-compressed-certificates-client]
56 CipherString = DEFAULT
57 MinProtocol = TLSv1.3
58 Options = -TxCertificateCompression,-RxCertificateCompression
59 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
60 VerifyMode = Peer
61
62 [test-1]
63 CompressCertificates = Yes
64 ExpectedResult = Success
65
66
67 # ===========================================================
68
69 [2-client-compressed-certificates]
70 ssl_conf = 2-client-compressed-certificates-ssl
71
72 [2-client-compressed-certificates-ssl]
73 server = 2-client-compressed-certificates-server
74 client = 2-client-compressed-certificates-client
75
76 [2-client-compressed-certificates-server]
77 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
78 CipherString = DEFAULT
79 Options = -TxCertificateCompression,-RxCertificateCompression
80 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
81
82 [2-client-compressed-certificates-client]
83 CipherString = DEFAULT
84 MinProtocol = TLSv1.3
85 Options = TxCertificateCompression,RxCertificateCompression
86 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
87 VerifyMode = Peer
88
89 [test-2]
90 CompressCertificates = Yes
91 ExpectedResult = Success
92
93
94 # ===========================================================
95
96 [3-both-compressed-certificates]
97 ssl_conf = 3-both-compressed-certificates-ssl
98
99 [3-both-compressed-certificates-ssl]
100 server = 3-both-compressed-certificates-server
101 client = 3-both-compressed-certificates-client
102
103 [3-both-compressed-certificates-server]
104 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
105 CipherString = DEFAULT
106 Options = TxCertificateCompression,RxCertificateCompression
107 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
108
109 [3-both-compressed-certificates-client]
110 CipherString = DEFAULT
111 MinProtocol = TLSv1.3
112 Options = TxCertificateCompression,RxCertificateCompression
113 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
114 VerifyMode = Peer
115
116 [test-3]
117 CompressCertificates = Yes
118 ExpectedResult = Success
119
120
121 # ===========================================================
122
123 [4-no-compressed-certificates-mtls]
124 ssl_conf = 4-no-compressed-certificates-mtls-ssl
125
126 [4-no-compressed-certificates-mtls-ssl]
127 server = 4-no-compressed-certificates-mtls-server
128 client = 4-no-compressed-certificates-mtls-client
129
130 [4-no-compressed-certificates-mtls-server]
131 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
132 CipherString = DEFAULT
133 Options = -TxCertificateCompression,-RxCertificateCompression
134 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
135 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
136 VerifyMode = Request
137
138 [4-no-compressed-certificates-mtls-client]
139 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
140 CipherString = DEFAULT
141 MinProtocol = TLSv1.3
142 Options = -TxCertificateCompression,-RxCertificateCompression
143 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
144 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
145 VerifyMode = Peer
146
147 [test-4]
148 CompressCertificates = Yes
149 ExpectedResult = Success
150
151
152 # ===========================================================
153
154 [5-server-compressed-certificates-mtls]
155 ssl_conf = 5-server-compressed-certificates-mtls-ssl
156
157 [5-server-compressed-certificates-mtls-ssl]
158 server = 5-server-compressed-certificates-mtls-server
159 client = 5-server-compressed-certificates-mtls-client
160
161 [5-server-compressed-certificates-mtls-server]
162 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
163 CipherString = DEFAULT
164 Options = TxCertificateCompression,RxCertificateCompression
165 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
166 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
167 VerifyMode = Request
168
169 [5-server-compressed-certificates-mtls-client]
170 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
171 CipherString = DEFAULT
172 MinProtocol = TLSv1.3
173 Options = -TxCertificateCompression,-RxCertificateCompression
174 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
175 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
176 VerifyMode = Peer
177
178 [test-5]
179 CompressCertificates = Yes
180 ExpectedResult = Success
181
182
183 # ===========================================================
184
185 [6-client-compressed-certificates-mtls]
186 ssl_conf = 6-client-compressed-certificates-mtls-ssl
187
188 [6-client-compressed-certificates-mtls-ssl]
189 server = 6-client-compressed-certificates-mtls-server
190 client = 6-client-compressed-certificates-mtls-client
191
192 [6-client-compressed-certificates-mtls-server]
193 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
194 CipherString = DEFAULT
195 Options = -TxCertificateCompression,-RxCertificateCompression
196 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
197 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
198 VerifyMode = Request
199
200 [6-client-compressed-certificates-mtls-client]
201 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
202 CipherString = DEFAULT
203 MinProtocol = TLSv1.3
204 Options = TxCertificateCompression,RxCertificateCompression
205 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
206 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
207 VerifyMode = Peer
208
209 [test-6]
210 CompressCertificates = Yes
211 ExpectedResult = Success
212
213
214 # ===========================================================
215
216 [7-both-compressed-certificates-mtls]
217 ssl_conf = 7-both-compressed-certificates-mtls-ssl
218
219 [7-both-compressed-certificates-mtls-ssl]
220 server = 7-both-compressed-certificates-mtls-server
221 client = 7-both-compressed-certificates-mtls-client
222
223 [7-both-compressed-certificates-mtls-server]
224 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
225 CipherString = DEFAULT
226 Options = TxCertificateCompression,RxCertificateCompression
227 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
228 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
229 VerifyMode = Request
230
231 [7-both-compressed-certificates-mtls-client]
232 Certificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
233 CipherString = DEFAULT
234 MinProtocol = TLSv1.3
235 Options = TxCertificateCompression,RxCertificateCompression
236 PrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
237 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
238 VerifyMode = Peer
239
240 [test-7]
241 CompressCertificates = Yes
242 ExpectedResult = Success
243
244