[thirdparty/openssl.git] / test / ssl-tests / 03-custom_verify.conf

# Generated with generate_ssl_tests.pl

num_tests = 9

test-0 = 0-verify-success
test-1 = 1-verify-custom-reject
test-2 = 2-verify-custom-allow
test-3 = 3-noverify-success
test-4 = 4-noverify-ignore-custom-reject
test-5 = 5-noverify-accept-custom-allow
test-6 = 6-verify-fail-no-root
test-7 = 7-verify-custom-success-no-root
test-8 = 8-verify-custom-fail-no-root
# ===========================================================

[0-verify-success]
ssl_conf = 0-verify-success-ssl

[0-verify-success-ssl]
server = 0-verify-success-server
client = 0-verify-success-client

[0-verify-success-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[0-verify-success-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer

[test-0]
ExpectedResult = Success


# ===========================================================

[1-verify-custom-reject]
ssl_conf = 1-verify-custom-reject-ssl

[1-verify-custom-reject-ssl]
server = 1-verify-custom-reject-server
client = 1-verify-custom-reject-client

[1-verify-custom-reject-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[1-verify-custom-reject-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer

[test-1]
ExpectedClientAlert = HandshakeFailure
ExpectedResult = ClientFail
client = 1-verify-custom-reject-client-extra

[1-verify-custom-reject-client-extra]
VerifyCallback = RejectAll


# ===========================================================

[2-verify-custom-allow]
ssl_conf = 2-verify-custom-allow-ssl

[2-verify-custom-allow-ssl]
server = 2-verify-custom-allow-server
client = 2-verify-custom-allow-client

[2-verify-custom-allow-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[2-verify-custom-allow-client]
CipherString = DEFAULT
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer

[test-2]
ExpectedResult = Success
client = 2-verify-custom-allow-client-extra

[2-verify-custom-allow-client-extra]
VerifyCallback = AcceptAll


# ===========================================================

[3-noverify-success]
ssl_conf = 3-noverify-success-ssl

[3-noverify-success-ssl]
server = 3-noverify-success-server
client = 3-noverify-success-client

[3-noverify-success-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[3-noverify-success-client]
CipherString = DEFAULT

[test-3]
ExpectedResult = Success


# ===========================================================

[4-noverify-ignore-custom-reject]
ssl_conf = 4-noverify-ignore-custom-reject-ssl

[4-noverify-ignore-custom-reject-ssl]
server = 4-noverify-ignore-custom-reject-server
client = 4-noverify-ignore-custom-reject-client

[4-noverify-ignore-custom-reject-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[4-noverify-ignore-custom-reject-client]
CipherString = DEFAULT

[test-4]
ExpectedResult = Success
client = 4-noverify-ignore-custom-reject-client-extra

[4-noverify-ignore-custom-reject-client-extra]
VerifyCallback = RejectAll


# ===========================================================

[5-noverify-accept-custom-allow]
ssl_conf = 5-noverify-accept-custom-allow-ssl

[5-noverify-accept-custom-allow-ssl]
server = 5-noverify-accept-custom-allow-server
client = 5-noverify-accept-custom-allow-client

[5-noverify-accept-custom-allow-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[5-noverify-accept-custom-allow-client]
CipherString = DEFAULT

[test-5]
ExpectedResult = Success
client = 5-noverify-accept-custom-allow-client-extra

[5-noverify-accept-custom-allow-client-extra]
VerifyCallback = AcceptAll


# ===========================================================

[6-verify-fail-no-root]
ssl_conf = 6-verify-fail-no-root-ssl

[6-verify-fail-no-root-ssl]
server = 6-verify-fail-no-root-server
client = 6-verify-fail-no-root-client

[6-verify-fail-no-root-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[6-verify-fail-no-root-client]
CipherString = DEFAULT
VerifyMode = Peer

[test-6]
ExpectedClientAlert = UnknownCA
ExpectedResult = ClientFail


# ===========================================================

[7-verify-custom-success-no-root]
ssl_conf = 7-verify-custom-success-no-root-ssl

[7-verify-custom-success-no-root-ssl]
server = 7-verify-custom-success-no-root-server
client = 7-verify-custom-success-no-root-client

[7-verify-custom-success-no-root-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[7-verify-custom-success-no-root-client]
CipherString = DEFAULT
VerifyMode = Peer

[test-7]
ExpectedResult = Success
client = 7-verify-custom-success-no-root-client-extra

[7-verify-custom-success-no-root-client-extra]
VerifyCallback = AcceptAll


# ===========================================================

[8-verify-custom-fail-no-root]
ssl_conf = 8-verify-custom-fail-no-root-ssl

[8-verify-custom-fail-no-root-ssl]
server = 8-verify-custom-fail-no-root-server
client = 8-verify-custom-fail-no-root-client

[8-verify-custom-fail-no-root-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem

[8-verify-custom-fail-no-root-client]
CipherString = DEFAULT
VerifyMode = Peer

[test-8]
ExpectedClientAlert = HandshakeFailure
ExpectedResult = ClientFail
client = 8-verify-custom-fail-no-root-client-extra

[8-verify-custom-fail-no-root-client-extra]
VerifyCallback = RejectAll
Commit	Line	Data
a263f320 EK	1	# Generated with generate_ssl_tests.pl
	2
	3	num_tests = 9
	4
	5	test-0 = 0-verify-success
	6	test-1 = 1-verify-custom-reject
	7	test-2 = 2-verify-custom-allow
	8	test-3 = 3-noverify-success
	9	test-4 = 4-noverify-ignore-custom-reject
	10	test-5 = 5-noverify-accept-custom-allow
	11	test-6 = 6-verify-fail-no-root
	12	test-7 = 7-verify-custom-success-no-root
	13	test-8 = 8-verify-custom-fail-no-root
	14	# ===========================================================
	15
	16	[0-verify-success]
	17	ssl_conf = 0-verify-success-ssl
	18
	19	[0-verify-success-ssl]
	20	server = 0-verify-success-server
	21	client = 0-verify-success-client
	22
	23	[0-verify-success-server]
	24	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	25	CipherString = DEFAULT
	26	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	27
a263f320 EK	28	[0-verify-success-client]
	29	CipherString = DEFAULT
	30	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
	31	VerifyMode = Peer
	32
a263f320 EK	33	[test-0]
	34	ExpectedResult = Success
	35
	36
	37	# ===========================================================
	38
	39	[1-verify-custom-reject]
	40	ssl_conf = 1-verify-custom-reject-ssl
	41
	42	[1-verify-custom-reject-ssl]
	43	server = 1-verify-custom-reject-server
	44	client = 1-verify-custom-reject-client
	45
	46	[1-verify-custom-reject-server]
	47	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	48	CipherString = DEFAULT
	49	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	50
a263f320 EK	51	[1-verify-custom-reject-client]
	52	CipherString = DEFAULT
	53	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
	54	VerifyMode = Peer
	55
a263f320	56	[test-1]
9f48bbac	57	ExpectedClientAlert = HandshakeFailure
a263f320	58	ExpectedResult = ClientFail
9f48bbac EK	59	client = 1-verify-custom-reject-client-extra
	60
	61	[1-verify-custom-reject-client-extra]
	62	VerifyCallback = RejectAll
a263f320 EK	63
	64
	65	# ===========================================================
	66
	67	[2-verify-custom-allow]
	68	ssl_conf = 2-verify-custom-allow-ssl
	69
	70	[2-verify-custom-allow-ssl]
	71	server = 2-verify-custom-allow-server
	72	client = 2-verify-custom-allow-client
	73
	74	[2-verify-custom-allow-server]
	75	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	76	CipherString = DEFAULT
	77	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	78
a263f320 EK	79	[2-verify-custom-allow-client]
	80	CipherString = DEFAULT
	81	VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
	82	VerifyMode = Peer
	83
a263f320	84	[test-2]
a263f320	85	ExpectedResult = Success
9f48bbac EK	86	client = 2-verify-custom-allow-client-extra
	87
	88	[2-verify-custom-allow-client-extra]
	89	VerifyCallback = AcceptAll
a263f320 EK	90
	91
	92	# ===========================================================
	93
	94	[3-noverify-success]
	95	ssl_conf = 3-noverify-success-ssl
	96
	97	[3-noverify-success-ssl]
	98	server = 3-noverify-success-server
	99	client = 3-noverify-success-client
	100
	101	[3-noverify-success-server]
	102	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	103	CipherString = DEFAULT
	104	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	105
a263f320 EK	106	[3-noverify-success-client]
	107	CipherString = DEFAULT
	108
a263f320 EK	109	[test-3]
	110	ExpectedResult = Success
	111
	112
	113	# ===========================================================
	114
	115	[4-noverify-ignore-custom-reject]
	116	ssl_conf = 4-noverify-ignore-custom-reject-ssl
	117
	118	[4-noverify-ignore-custom-reject-ssl]
	119	server = 4-noverify-ignore-custom-reject-server
	120	client = 4-noverify-ignore-custom-reject-client
	121
	122	[4-noverify-ignore-custom-reject-server]
	123	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	124	CipherString = DEFAULT
	125	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	126
a263f320 EK	127	[4-noverify-ignore-custom-reject-client]
	128	CipherString = DEFAULT
	129
a263f320	130	[test-4]
a263f320	131	ExpectedResult = Success
9f48bbac EK	132	client = 4-noverify-ignore-custom-reject-client-extra
	133
	134	[4-noverify-ignore-custom-reject-client-extra]
	135	VerifyCallback = RejectAll
a263f320 EK	136
	137
	138	# ===========================================================
	139
	140	[5-noverify-accept-custom-allow]
	141	ssl_conf = 5-noverify-accept-custom-allow-ssl
	142
	143	[5-noverify-accept-custom-allow-ssl]
	144	server = 5-noverify-accept-custom-allow-server
	145	client = 5-noverify-accept-custom-allow-client
	146
	147	[5-noverify-accept-custom-allow-server]
	148	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	149	CipherString = DEFAULT
	150	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	151
a263f320 EK	152	[5-noverify-accept-custom-allow-client]
	153	CipherString = DEFAULT
	154
a263f320	155	[test-5]
a263f320	156	ExpectedResult = Success
9f48bbac EK	157	client = 5-noverify-accept-custom-allow-client-extra
	158
	159	[5-noverify-accept-custom-allow-client-extra]
	160	VerifyCallback = AcceptAll
a263f320 EK	161
	162
	163	# ===========================================================
	164
	165	[6-verify-fail-no-root]
	166	ssl_conf = 6-verify-fail-no-root-ssl
	167
	168	[6-verify-fail-no-root-ssl]
	169	server = 6-verify-fail-no-root-server
	170	client = 6-verify-fail-no-root-client
	171
	172	[6-verify-fail-no-root-server]
	173	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	174	CipherString = DEFAULT
	175	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	176
a263f320 EK	177	[6-verify-fail-no-root-client]
	178	CipherString = DEFAULT
	179	VerifyMode = Peer
	180
a263f320	181	[test-6]
9f48bbac	182	ExpectedClientAlert = UnknownCA
a263f320 EK	183	ExpectedResult = ClientFail
	184
	185
	186	# ===========================================================
	187
	188	[7-verify-custom-success-no-root]
	189	ssl_conf = 7-verify-custom-success-no-root-ssl
	190
	191	[7-verify-custom-success-no-root-ssl]
	192	server = 7-verify-custom-success-no-root-server
	193	client = 7-verify-custom-success-no-root-client
	194
	195	[7-verify-custom-success-no-root-server]
	196	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	197	CipherString = DEFAULT
	198	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	199
a263f320 EK	200	[7-verify-custom-success-no-root-client]
	201	CipherString = DEFAULT
	202	VerifyMode = Peer
	203
a263f320	204	[test-7]
a263f320	205	ExpectedResult = Success
9f48bbac EK	206	client = 7-verify-custom-success-no-root-client-extra
	207
	208	[7-verify-custom-success-no-root-client-extra]
	209	VerifyCallback = AcceptAll
a263f320 EK	210
	211
	212	# ===========================================================
	213
	214	[8-verify-custom-fail-no-root]
	215	ssl_conf = 8-verify-custom-fail-no-root-ssl
	216
	217	[8-verify-custom-fail-no-root-ssl]
	218	server = 8-verify-custom-fail-no-root-server
	219	client = 8-verify-custom-fail-no-root-client
	220
	221	[8-verify-custom-fail-no-root-server]
	222	Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
	223	CipherString = DEFAULT
	224	PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
	225
a263f320 EK	226	[8-verify-custom-fail-no-root-client]
	227	CipherString = DEFAULT
	228	VerifyMode = Peer
	229
a263f320	230	[test-8]
9f48bbac	231	ExpectedClientAlert = HandshakeFailure
a263f320	232	ExpectedResult = ClientFail
9f48bbac EK	233	client = 8-verify-custom-fail-no-root-client-extra
	234
	235	[8-verify-custom-fail-no-root-client-extra]
	236	VerifyCallback = RejectAll
a263f320 EK	237
a263f320 EK	238