1 # Generated with generate_ssl_tests.pl
6 test-1 = 1-alpn-server-finds-match
7 test-2 = 2-alpn-server-honours-server-pref
8 test-3 = 3-alpn-alert-on-mismatch
9 test-4 = 4-alpn-no-server-support
10 test-5 = 5-alpn-no-client-support
11 test-6 = 6-alpn-with-sni-no-context-switch
12 test-7 = 7-alpn-with-sni-context-switch
13 test-8 = 8-alpn-selected-sni-server-supports-alpn
14 test-9 = 9-alpn-selected-sni-server-does-not-support-alpn
15 test-10 = 10-alpn-simple-resumption
16 test-11 = 11-alpn-server-switch-resumption
17 test-12 = 12-alpn-client-switch-resumption
18 test-13 = 13-alpn-alert-on-mismatch-resumption
19 test-14 = 14-alpn-no-server-support-resumption
20 test-15 = 15-alpn-no-client-support-resumption
21 # ===========================================================
24 ssl_conf = 0-alpn-simple-ssl
27 server = 0-alpn-simple-server
28 client = 0-alpn-simple-client
30 [0-alpn-simple-server]
31 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
32 CipherString = DEFAULT
33 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
35 [0-alpn-simple-client]
36 CipherString = DEFAULT
37 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
41 ExpectedALPNProtocol = foo
42 server = 0-alpn-simple-server-extra
43 client = 0-alpn-simple-client-extra
45 [0-alpn-simple-server-extra]
48 [0-alpn-simple-client-extra]
52 # ===========================================================
54 [1-alpn-server-finds-match]
55 ssl_conf = 1-alpn-server-finds-match-ssl
57 [1-alpn-server-finds-match-ssl]
58 server = 1-alpn-server-finds-match-server
59 client = 1-alpn-server-finds-match-client
61 [1-alpn-server-finds-match-server]
62 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
63 CipherString = DEFAULT
64 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
66 [1-alpn-server-finds-match-client]
67 CipherString = DEFAULT
68 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
72 ExpectedALPNProtocol = bar
73 server = 1-alpn-server-finds-match-server-extra
74 client = 1-alpn-server-finds-match-client-extra
76 [1-alpn-server-finds-match-server-extra]
77 ALPNProtocols = baz,bar
79 [1-alpn-server-finds-match-client-extra]
80 ALPNProtocols = foo,bar
83 # ===========================================================
85 [2-alpn-server-honours-server-pref]
86 ssl_conf = 2-alpn-server-honours-server-pref-ssl
88 [2-alpn-server-honours-server-pref-ssl]
89 server = 2-alpn-server-honours-server-pref-server
90 client = 2-alpn-server-honours-server-pref-client
92 [2-alpn-server-honours-server-pref-server]
93 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
94 CipherString = DEFAULT
95 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
97 [2-alpn-server-honours-server-pref-client]
98 CipherString = DEFAULT
99 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
103 ExpectedALPNProtocol = bar
104 server = 2-alpn-server-honours-server-pref-server-extra
105 client = 2-alpn-server-honours-server-pref-client-extra
107 [2-alpn-server-honours-server-pref-server-extra]
108 ALPNProtocols = bar,foo
110 [2-alpn-server-honours-server-pref-client-extra]
111 ALPNProtocols = foo,bar
114 # ===========================================================
116 [3-alpn-alert-on-mismatch]
117 ssl_conf = 3-alpn-alert-on-mismatch-ssl
119 [3-alpn-alert-on-mismatch-ssl]
120 server = 3-alpn-alert-on-mismatch-server
121 client = 3-alpn-alert-on-mismatch-client
123 [3-alpn-alert-on-mismatch-server]
124 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
125 CipherString = DEFAULT
126 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
128 [3-alpn-alert-on-mismatch-client]
129 CipherString = DEFAULT
130 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
134 ExpectedResult = ServerFail
135 ExpectedServerAlert = NoApplicationProtocol
136 server = 3-alpn-alert-on-mismatch-server-extra
137 client = 3-alpn-alert-on-mismatch-client-extra
139 [3-alpn-alert-on-mismatch-server-extra]
142 [3-alpn-alert-on-mismatch-client-extra]
143 ALPNProtocols = foo,bar
146 # ===========================================================
148 [4-alpn-no-server-support]
149 ssl_conf = 4-alpn-no-server-support-ssl
151 [4-alpn-no-server-support-ssl]
152 server = 4-alpn-no-server-support-server
153 client = 4-alpn-no-server-support-client
155 [4-alpn-no-server-support-server]
156 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
157 CipherString = DEFAULT
158 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
160 [4-alpn-no-server-support-client]
161 CipherString = DEFAULT
162 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
166 client = 4-alpn-no-server-support-client-extra
168 [4-alpn-no-server-support-client-extra]
172 # ===========================================================
174 [5-alpn-no-client-support]
175 ssl_conf = 5-alpn-no-client-support-ssl
177 [5-alpn-no-client-support-ssl]
178 server = 5-alpn-no-client-support-server
179 client = 5-alpn-no-client-support-client
181 [5-alpn-no-client-support-server]
182 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
183 CipherString = DEFAULT
184 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
186 [5-alpn-no-client-support-client]
187 CipherString = DEFAULT
188 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
192 server = 5-alpn-no-client-support-server-extra
194 [5-alpn-no-client-support-server-extra]
198 # ===========================================================
200 [6-alpn-with-sni-no-context-switch]
201 ssl_conf = 6-alpn-with-sni-no-context-switch-ssl
203 [6-alpn-with-sni-no-context-switch-ssl]
204 server = 6-alpn-with-sni-no-context-switch-server
205 client = 6-alpn-with-sni-no-context-switch-client
206 server2 = 6-alpn-with-sni-no-context-switch-server2
208 [6-alpn-with-sni-no-context-switch-server]
209 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
210 CipherString = DEFAULT
211 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
213 [6-alpn-with-sni-no-context-switch-server2]
214 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
215 CipherString = DEFAULT
216 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
218 [6-alpn-with-sni-no-context-switch-client]
219 CipherString = DEFAULT
220 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
224 ExpectedALPNProtocol = foo
225 ExpectedServerName = server1
226 server = 6-alpn-with-sni-no-context-switch-server-extra
227 server2 = 6-alpn-with-sni-no-context-switch-server2-extra
228 client = 6-alpn-with-sni-no-context-switch-client-extra
230 [6-alpn-with-sni-no-context-switch-server-extra]
232 ServerNameCallback = IgnoreMismatch
234 [6-alpn-with-sni-no-context-switch-server2-extra]
237 [6-alpn-with-sni-no-context-switch-client-extra]
238 ALPNProtocols = foo,bar
242 # ===========================================================
244 [7-alpn-with-sni-context-switch]
245 ssl_conf = 7-alpn-with-sni-context-switch-ssl
247 [7-alpn-with-sni-context-switch-ssl]
248 server = 7-alpn-with-sni-context-switch-server
249 client = 7-alpn-with-sni-context-switch-client
250 server2 = 7-alpn-with-sni-context-switch-server2
252 [7-alpn-with-sni-context-switch-server]
253 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
254 CipherString = DEFAULT
255 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
257 [7-alpn-with-sni-context-switch-server2]
258 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
259 CipherString = DEFAULT
260 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
262 [7-alpn-with-sni-context-switch-client]
263 CipherString = DEFAULT
264 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
268 ExpectedALPNProtocol = bar
269 ExpectedServerName = server2
270 server = 7-alpn-with-sni-context-switch-server-extra
271 server2 = 7-alpn-with-sni-context-switch-server2-extra
272 client = 7-alpn-with-sni-context-switch-client-extra
274 [7-alpn-with-sni-context-switch-server-extra]
276 ServerNameCallback = IgnoreMismatch
278 [7-alpn-with-sni-context-switch-server2-extra]
281 [7-alpn-with-sni-context-switch-client-extra]
282 ALPNProtocols = foo,bar
286 # ===========================================================
288 [8-alpn-selected-sni-server-supports-alpn]
289 ssl_conf = 8-alpn-selected-sni-server-supports-alpn-ssl
291 [8-alpn-selected-sni-server-supports-alpn-ssl]
292 server = 8-alpn-selected-sni-server-supports-alpn-server
293 client = 8-alpn-selected-sni-server-supports-alpn-client
294 server2 = 8-alpn-selected-sni-server-supports-alpn-server2
296 [8-alpn-selected-sni-server-supports-alpn-server]
297 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
298 CipherString = DEFAULT
299 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
301 [8-alpn-selected-sni-server-supports-alpn-server2]
302 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
303 CipherString = DEFAULT
304 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
306 [8-alpn-selected-sni-server-supports-alpn-client]
307 CipherString = DEFAULT
308 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
312 ExpectedALPNProtocol = bar
313 ExpectedServerName = server2
314 server = 8-alpn-selected-sni-server-supports-alpn-server-extra
315 server2 = 8-alpn-selected-sni-server-supports-alpn-server2-extra
316 client = 8-alpn-selected-sni-server-supports-alpn-client-extra
318 [8-alpn-selected-sni-server-supports-alpn-server-extra]
319 ServerNameCallback = IgnoreMismatch
321 [8-alpn-selected-sni-server-supports-alpn-server2-extra]
324 [8-alpn-selected-sni-server-supports-alpn-client-extra]
325 ALPNProtocols = foo,bar
329 # ===========================================================
331 [9-alpn-selected-sni-server-does-not-support-alpn]
332 ssl_conf = 9-alpn-selected-sni-server-does-not-support-alpn-ssl
334 [9-alpn-selected-sni-server-does-not-support-alpn-ssl]
335 server = 9-alpn-selected-sni-server-does-not-support-alpn-server
336 client = 9-alpn-selected-sni-server-does-not-support-alpn-client
337 server2 = 9-alpn-selected-sni-server-does-not-support-alpn-server2
339 [9-alpn-selected-sni-server-does-not-support-alpn-server]
340 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
341 CipherString = DEFAULT
342 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
344 [9-alpn-selected-sni-server-does-not-support-alpn-server2]
345 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
346 CipherString = DEFAULT
347 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
349 [9-alpn-selected-sni-server-does-not-support-alpn-client]
350 CipherString = DEFAULT
351 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
355 ExpectedServerName = server2
356 server = 9-alpn-selected-sni-server-does-not-support-alpn-server-extra
357 client = 9-alpn-selected-sni-server-does-not-support-alpn-client-extra
359 [9-alpn-selected-sni-server-does-not-support-alpn-server-extra]
361 ServerNameCallback = IgnoreMismatch
363 [9-alpn-selected-sni-server-does-not-support-alpn-client-extra]
364 ALPNProtocols = foo,bar
368 # ===========================================================
370 [10-alpn-simple-resumption]
371 ssl_conf = 10-alpn-simple-resumption-ssl
373 [10-alpn-simple-resumption-ssl]
374 server = 10-alpn-simple-resumption-server
375 client = 10-alpn-simple-resumption-client
376 resume-server = 10-alpn-simple-resumption-server
377 resume-client = 10-alpn-simple-resumption-client
379 [10-alpn-simple-resumption-server]
380 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
381 CipherString = DEFAULT
382 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
384 [10-alpn-simple-resumption-client]
385 CipherString = DEFAULT
386 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
390 ExpectedALPNProtocol = foo
391 HandshakeMode = Resume
392 ResumptionExpected = Yes
393 server = 10-alpn-simple-resumption-server-extra
394 resume-server = 10-alpn-simple-resumption-server-extra
395 client = 10-alpn-simple-resumption-client-extra
396 resume-client = 10-alpn-simple-resumption-client-extra
398 [10-alpn-simple-resumption-server-extra]
401 [10-alpn-simple-resumption-client-extra]
405 # ===========================================================
407 [11-alpn-server-switch-resumption]
408 ssl_conf = 11-alpn-server-switch-resumption-ssl
410 [11-alpn-server-switch-resumption-ssl]
411 server = 11-alpn-server-switch-resumption-server
412 client = 11-alpn-server-switch-resumption-client
413 resume-server = 11-alpn-server-switch-resumption-resume-server
414 resume-client = 11-alpn-server-switch-resumption-client
416 [11-alpn-server-switch-resumption-server]
417 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
418 CipherString = DEFAULT
419 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
421 [11-alpn-server-switch-resumption-resume-server]
422 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
423 CipherString = DEFAULT
424 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
426 [11-alpn-server-switch-resumption-client]
427 CipherString = DEFAULT
428 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
432 ExpectedALPNProtocol = baz
433 HandshakeMode = Resume
434 ResumptionExpected = Yes
435 server = 11-alpn-server-switch-resumption-server-extra
436 resume-server = 11-alpn-server-switch-resumption-resume-server-extra
437 client = 11-alpn-server-switch-resumption-client-extra
438 resume-client = 11-alpn-server-switch-resumption-client-extra
440 [11-alpn-server-switch-resumption-server-extra]
441 ALPNProtocols = bar,foo
443 [11-alpn-server-switch-resumption-resume-server-extra]
444 ALPNProtocols = baz,foo
446 [11-alpn-server-switch-resumption-client-extra]
447 ALPNProtocols = foo,bar,baz
450 # ===========================================================
452 [12-alpn-client-switch-resumption]
453 ssl_conf = 12-alpn-client-switch-resumption-ssl
455 [12-alpn-client-switch-resumption-ssl]
456 server = 12-alpn-client-switch-resumption-server
457 client = 12-alpn-client-switch-resumption-client
458 resume-server = 12-alpn-client-switch-resumption-server
459 resume-client = 12-alpn-client-switch-resumption-resume-client
461 [12-alpn-client-switch-resumption-server]
462 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
463 CipherString = DEFAULT
464 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
466 [12-alpn-client-switch-resumption-client]
467 CipherString = DEFAULT
468 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
471 [12-alpn-client-switch-resumption-resume-client]
472 CipherString = DEFAULT
473 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
477 ExpectedALPNProtocol = bar
478 HandshakeMode = Resume
479 ResumptionExpected = Yes
480 server = 12-alpn-client-switch-resumption-server-extra
481 resume-server = 12-alpn-client-switch-resumption-server-extra
482 client = 12-alpn-client-switch-resumption-client-extra
483 resume-client = 12-alpn-client-switch-resumption-resume-client-extra
485 [12-alpn-client-switch-resumption-server-extra]
486 ALPNProtocols = foo,bar,baz
488 [12-alpn-client-switch-resumption-client-extra]
489 ALPNProtocols = foo,baz
491 [12-alpn-client-switch-resumption-resume-client-extra]
492 ALPNProtocols = bar,baz
495 # ===========================================================
497 [13-alpn-alert-on-mismatch-resumption]
498 ssl_conf = 13-alpn-alert-on-mismatch-resumption-ssl
500 [13-alpn-alert-on-mismatch-resumption-ssl]
501 server = 13-alpn-alert-on-mismatch-resumption-server
502 client = 13-alpn-alert-on-mismatch-resumption-client
503 resume-server = 13-alpn-alert-on-mismatch-resumption-resume-server
504 resume-client = 13-alpn-alert-on-mismatch-resumption-client
506 [13-alpn-alert-on-mismatch-resumption-server]
507 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
508 CipherString = DEFAULT
509 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
511 [13-alpn-alert-on-mismatch-resumption-resume-server]
512 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
513 CipherString = DEFAULT
514 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
516 [13-alpn-alert-on-mismatch-resumption-client]
517 CipherString = DEFAULT
518 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
522 ExpectedResult = ServerFail
523 ExpectedServerAlert = NoApplicationProtocol
524 HandshakeMode = Resume
525 server = 13-alpn-alert-on-mismatch-resumption-server-extra
526 resume-server = 13-alpn-alert-on-mismatch-resumption-resume-server-extra
527 client = 13-alpn-alert-on-mismatch-resumption-client-extra
528 resume-client = 13-alpn-alert-on-mismatch-resumption-client-extra
530 [13-alpn-alert-on-mismatch-resumption-server-extra]
533 [13-alpn-alert-on-mismatch-resumption-resume-server-extra]
536 [13-alpn-alert-on-mismatch-resumption-client-extra]
537 ALPNProtocols = foo,bar
540 # ===========================================================
542 [14-alpn-no-server-support-resumption]
543 ssl_conf = 14-alpn-no-server-support-resumption-ssl
545 [14-alpn-no-server-support-resumption-ssl]
546 server = 14-alpn-no-server-support-resumption-server
547 client = 14-alpn-no-server-support-resumption-client
548 resume-server = 14-alpn-no-server-support-resumption-resume-server
549 resume-client = 14-alpn-no-server-support-resumption-client
551 [14-alpn-no-server-support-resumption-server]
552 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
553 CipherString = DEFAULT
554 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
556 [14-alpn-no-server-support-resumption-resume-server]
557 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
558 CipherString = DEFAULT
559 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
561 [14-alpn-no-server-support-resumption-client]
562 CipherString = DEFAULT
563 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
567 HandshakeMode = Resume
568 ResumptionExpected = Yes
569 server = 14-alpn-no-server-support-resumption-server-extra
570 client = 14-alpn-no-server-support-resumption-client-extra
571 resume-client = 14-alpn-no-server-support-resumption-client-extra
573 [14-alpn-no-server-support-resumption-server-extra]
576 [14-alpn-no-server-support-resumption-client-extra]
580 # ===========================================================
582 [15-alpn-no-client-support-resumption]
583 ssl_conf = 15-alpn-no-client-support-resumption-ssl
585 [15-alpn-no-client-support-resumption-ssl]
586 server = 15-alpn-no-client-support-resumption-server
587 client = 15-alpn-no-client-support-resumption-client
588 resume-server = 15-alpn-no-client-support-resumption-server
589 resume-client = 15-alpn-no-client-support-resumption-resume-client
591 [15-alpn-no-client-support-resumption-server]
592 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
593 CipherString = DEFAULT
594 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
596 [15-alpn-no-client-support-resumption-client]
597 CipherString = DEFAULT
598 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
601 [15-alpn-no-client-support-resumption-resume-client]
602 CipherString = DEFAULT
603 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
607 HandshakeMode = Resume
608 ResumptionExpected = Yes
609 server = 15-alpn-no-client-support-resumption-server-extra
610 resume-server = 15-alpn-no-client-support-resumption-server-extra
611 client = 15-alpn-no-client-support-resumption-client-extra
613 [15-alpn-no-client-support-resumption-server-extra]
616 [15-alpn-no-client-support-resumption-client-extra]