]> git.ipfire.org Git - thirdparty/openssl.git/blame - test/ssl-tests/19-mac-then-encrypt.cnf
Reduce the security bits for MD5 and SHA1 based signatures in TLS
[thirdparty/openssl.git] / test / ssl-tests / 19-mac-then-encrypt.cnf
CommitLineData
b3618f44
EK
1# Generated with generate_ssl_tests.pl
2
3num_tests = 6
4
5test-0 = 0-disable-encrypt-then-mac-server-sha
6test-1 = 1-disable-encrypt-then-mac-client-sha
7test-2 = 2-disable-encrypt-then-mac-both-sha
8test-3 = 3-disable-encrypt-then-mac-server-sha2
9test-4 = 4-disable-encrypt-then-mac-client-sha2
10test-5 = 5-disable-encrypt-then-mac-both-sha2
11# ===========================================================
12
13[0-disable-encrypt-then-mac-server-sha]
14ssl_conf = 0-disable-encrypt-then-mac-server-sha-ssl
15
16[0-disable-encrypt-then-mac-server-sha-ssl]
17server = 0-disable-encrypt-then-mac-server-sha-server
18client = 0-disable-encrypt-then-mac-server-sha-client
19
20[0-disable-encrypt-then-mac-server-sha-server]
21Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
22CipherString = DEFAULT
23Options = -EncryptThenMac
24PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
25
26[0-disable-encrypt-then-mac-server-sha-client]
27CipherString = AES128-SHA
54d028aa 28MaxProtocol = TLSv1.2
b3618f44
EK
29VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
30VerifyMode = Peer
31
32[test-0]
33ExpectedResult = Success
34
35
36# ===========================================================
37
38[1-disable-encrypt-then-mac-client-sha]
39ssl_conf = 1-disable-encrypt-then-mac-client-sha-ssl
40
41[1-disable-encrypt-then-mac-client-sha-ssl]
42server = 1-disable-encrypt-then-mac-client-sha-server
43client = 1-disable-encrypt-then-mac-client-sha-client
44
45[1-disable-encrypt-then-mac-client-sha-server]
46Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
47CipherString = DEFAULT
48PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
49
50[1-disable-encrypt-then-mac-client-sha-client]
51CipherString = AES128-SHA
54d028aa 52MaxProtocol = TLSv1.2
b3618f44
EK
53Options = -EncryptThenMac
54VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
55VerifyMode = Peer
56
57[test-1]
58ExpectedResult = Success
59
60
61# ===========================================================
62
63[2-disable-encrypt-then-mac-both-sha]
64ssl_conf = 2-disable-encrypt-then-mac-both-sha-ssl
65
66[2-disable-encrypt-then-mac-both-sha-ssl]
67server = 2-disable-encrypt-then-mac-both-sha-server
68client = 2-disable-encrypt-then-mac-both-sha-client
69
70[2-disable-encrypt-then-mac-both-sha-server]
71Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
72CipherString = DEFAULT
73Options = -EncryptThenMac
74PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
75
76[2-disable-encrypt-then-mac-both-sha-client]
77CipherString = AES128-SHA
54d028aa 78MaxProtocol = TLSv1.2
b3618f44
EK
79Options = -EncryptThenMac
80VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
81VerifyMode = Peer
82
83[test-2]
84ExpectedResult = Success
85
86
87# ===========================================================
88
89[3-disable-encrypt-then-mac-server-sha2]
90ssl_conf = 3-disable-encrypt-then-mac-server-sha2-ssl
91
92[3-disable-encrypt-then-mac-server-sha2-ssl]
93server = 3-disable-encrypt-then-mac-server-sha2-server
94client = 3-disable-encrypt-then-mac-server-sha2-client
95
96[3-disable-encrypt-then-mac-server-sha2-server]
97Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
98CipherString = DEFAULT
99Options = -EncryptThenMac
100PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
101
102[3-disable-encrypt-then-mac-server-sha2-client]
103CipherString = AES128-SHA256
aafec89c 104MaxProtocol = TLSv1.2
b3618f44
EK
105VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
106VerifyMode = Peer
107
108[test-3]
109ExpectedResult = Success
110
111
112# ===========================================================
113
114[4-disable-encrypt-then-mac-client-sha2]
115ssl_conf = 4-disable-encrypt-then-mac-client-sha2-ssl
116
117[4-disable-encrypt-then-mac-client-sha2-ssl]
118server = 4-disable-encrypt-then-mac-client-sha2-server
119client = 4-disable-encrypt-then-mac-client-sha2-client
120
121[4-disable-encrypt-then-mac-client-sha2-server]
122Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
123CipherString = DEFAULT
124PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
125
126[4-disable-encrypt-then-mac-client-sha2-client]
127CipherString = AES128-SHA256
54d028aa 128MaxProtocol = TLSv1.2
b3618f44
EK
129Options = -EncryptThenMac
130VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
131VerifyMode = Peer
132
133[test-4]
134ExpectedResult = Success
135
136
137# ===========================================================
138
139[5-disable-encrypt-then-mac-both-sha2]
140ssl_conf = 5-disable-encrypt-then-mac-both-sha2-ssl
141
142[5-disable-encrypt-then-mac-both-sha2-ssl]
143server = 5-disable-encrypt-then-mac-both-sha2-server
144client = 5-disable-encrypt-then-mac-both-sha2-client
145
146[5-disable-encrypt-then-mac-both-sha2-server]
147Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
148CipherString = DEFAULT
149Options = -EncryptThenMac
150PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
151
152[5-disable-encrypt-then-mac-both-sha2-client]
153CipherString = AES128-SHA256
54d028aa 154MaxProtocol = TLSv1.2
b3618f44
EK
155Options = -EncryptThenMac
156VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
157VerifyMode = Peer
158
159[test-5]
160ExpectedResult = Success
161
162