1 # Generated with generate_ssl_tests.pl
6 test-1 = 1-alpn-server-finds-match
7 test-2 = 2-alpn-server-honours-server-pref
8 test-3 = 3-alpn-alert-on-mismatch
9 test-4 = 4-alpn-no-server-support
10 test-5 = 5-alpn-no-client-support
11 test-6 = 6-alpn-with-sni-no-context-switch
12 test-7 = 7-alpn-with-sni-context-switch
13 test-8 = 8-alpn-selected-sni-server-supports-alpn
14 test-9 = 9-alpn-selected-sni-server-does-not-support-alpn
15 test-10 = 10-alpn-simple-resumption
16 test-11 = 11-alpn-server-switch-resumption
17 test-12 = 12-alpn-client-switch-resumption
18 test-13 = 13-alpn-alert-on-mismatch-resumption
19 test-14 = 14-alpn-no-server-support-resumption
20 test-15 = 15-alpn-no-client-support-resumption
21 # ===========================================================
24 ssl_conf = 0-alpn-simple-ssl
27 server = 0-alpn-simple-server
28 client = 0-alpn-simple-client
30 [0-alpn-simple-server]
31 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
32 CipherString = DEFAULT
33 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
35 [0-alpn-simple-client]
36 CipherString = DEFAULT
37 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
41 ExpectedALPNProtocol = foo
42 server = 0-alpn-simple-server-extra
43 client = 0-alpn-simple-client-extra
45 [0-alpn-simple-server-extra]
48 [0-alpn-simple-client-extra]
52 # ===========================================================
54 [1-alpn-server-finds-match]
55 ssl_conf = 1-alpn-server-finds-match-ssl
57 [1-alpn-server-finds-match-ssl]
58 server = 1-alpn-server-finds-match-server
59 client = 1-alpn-server-finds-match-client
61 [1-alpn-server-finds-match-server]
62 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
63 CipherString = DEFAULT
64 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
66 [1-alpn-server-finds-match-client]
67 CipherString = DEFAULT
68 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
72 ExpectedALPNProtocol = bar
73 server = 1-alpn-server-finds-match-server-extra
74 client = 1-alpn-server-finds-match-client-extra
76 [1-alpn-server-finds-match-server-extra]
77 ALPNProtocols = baz,bar
79 [1-alpn-server-finds-match-client-extra]
80 ALPNProtocols = foo,bar
83 # ===========================================================
85 [2-alpn-server-honours-server-pref]
86 ssl_conf = 2-alpn-server-honours-server-pref-ssl
88 [2-alpn-server-honours-server-pref-ssl]
89 server = 2-alpn-server-honours-server-pref-server
90 client = 2-alpn-server-honours-server-pref-client
92 [2-alpn-server-honours-server-pref-server]
93 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
94 CipherString = DEFAULT
95 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
97 [2-alpn-server-honours-server-pref-client]
98 CipherString = DEFAULT
99 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
103 ExpectedALPNProtocol = bar
104 server = 2-alpn-server-honours-server-pref-server-extra
105 client = 2-alpn-server-honours-server-pref-client-extra
107 [2-alpn-server-honours-server-pref-server-extra]
108 ALPNProtocols = bar,foo
110 [2-alpn-server-honours-server-pref-client-extra]
111 ALPNProtocols = foo,bar
114 # ===========================================================
116 [3-alpn-alert-on-mismatch]
117 ssl_conf = 3-alpn-alert-on-mismatch-ssl
119 [3-alpn-alert-on-mismatch-ssl]
120 server = 3-alpn-alert-on-mismatch-server
121 client = 3-alpn-alert-on-mismatch-client
123 [3-alpn-alert-on-mismatch-server]
124 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
125 CipherString = DEFAULT
126 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
128 [3-alpn-alert-on-mismatch-client]
129 CipherString = DEFAULT
130 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
134 ExpectedResult = ServerFail
135 ExpectedServerAlert = NoApplicationProtocol
136 server = 3-alpn-alert-on-mismatch-server-extra
137 client = 3-alpn-alert-on-mismatch-client-extra
139 [3-alpn-alert-on-mismatch-server-extra]
142 [3-alpn-alert-on-mismatch-client-extra]
143 ALPNProtocols = foo,bar
146 # ===========================================================
148 [4-alpn-no-server-support]
149 ssl_conf = 4-alpn-no-server-support-ssl
151 [4-alpn-no-server-support-ssl]
152 server = 4-alpn-no-server-support-server
153 client = 4-alpn-no-server-support-client
155 [4-alpn-no-server-support-server]
156 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
157 CipherString = DEFAULT
158 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
160 [4-alpn-no-server-support-client]
161 CipherString = DEFAULT
162 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
166 client = 4-alpn-no-server-support-client-extra
168 [4-alpn-no-server-support-client-extra]
172 # ===========================================================
174 [5-alpn-no-client-support]
175 ssl_conf = 5-alpn-no-client-support-ssl
177 [5-alpn-no-client-support-ssl]
178 server = 5-alpn-no-client-support-server
179 client = 5-alpn-no-client-support-client
181 [5-alpn-no-client-support-server]
182 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
183 CipherString = DEFAULT
184 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
186 [5-alpn-no-client-support-client]
187 CipherString = DEFAULT
188 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
192 server = 5-alpn-no-client-support-server-extra
194 [5-alpn-no-client-support-server-extra]
198 # ===========================================================
200 [6-alpn-with-sni-no-context-switch]
201 ssl_conf = 6-alpn-with-sni-no-context-switch-ssl
203 [6-alpn-with-sni-no-context-switch-ssl]
204 server = 6-alpn-with-sni-no-context-switch-server
205 client = 6-alpn-with-sni-no-context-switch-client
206 server2 = 6-alpn-with-sni-no-context-switch-server2
208 [6-alpn-with-sni-no-context-switch-server]
209 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
210 CipherString = DEFAULT
211 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
213 [6-alpn-with-sni-no-context-switch-server2]
214 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
215 CipherString = DEFAULT
216 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
218 [6-alpn-with-sni-no-context-switch-client]
219 CipherString = DEFAULT
220 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
224 ExpectedALPNProtocol = foo
225 ExpectedServerName = server1
226 server = 6-alpn-with-sni-no-context-switch-server-extra
227 server2 = 6-alpn-with-sni-no-context-switch-server2-extra
228 client = 6-alpn-with-sni-no-context-switch-client-extra
230 [6-alpn-with-sni-no-context-switch-server-extra]
232 ServerNameCallback = IgnoreMismatch
234 [6-alpn-with-sni-no-context-switch-server2-extra]
237 [6-alpn-with-sni-no-context-switch-client-extra]
238 ALPNProtocols = foo,bar
242 # ===========================================================
244 [7-alpn-with-sni-context-switch]
245 ssl_conf = 7-alpn-with-sni-context-switch-ssl
247 [7-alpn-with-sni-context-switch-ssl]
248 server = 7-alpn-with-sni-context-switch-server
249 client = 7-alpn-with-sni-context-switch-client
250 server2 = 7-alpn-with-sni-context-switch-server2
252 [7-alpn-with-sni-context-switch-server]
253 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
254 CipherString = DEFAULT
255 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
257 [7-alpn-with-sni-context-switch-server2]
258 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
259 CipherString = DEFAULT
260 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
262 [7-alpn-with-sni-context-switch-client]
263 CipherString = DEFAULT
264 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
268 ExpectedALPNProtocol = bar
269 ExpectedServerName = server2
270 server = 7-alpn-with-sni-context-switch-server-extra
271 server2 = 7-alpn-with-sni-context-switch-server2-extra
272 client = 7-alpn-with-sni-context-switch-client-extra
274 [7-alpn-with-sni-context-switch-server-extra]
276 ServerNameCallback = IgnoreMismatch
278 [7-alpn-with-sni-context-switch-server2-extra]
281 [7-alpn-with-sni-context-switch-client-extra]
282 ALPNProtocols = foo,bar
286 # ===========================================================
288 [8-alpn-selected-sni-server-supports-alpn]
289 ssl_conf = 8-alpn-selected-sni-server-supports-alpn-ssl
291 [8-alpn-selected-sni-server-supports-alpn-ssl]
292 server = 8-alpn-selected-sni-server-supports-alpn-server
293 client = 8-alpn-selected-sni-server-supports-alpn-client
294 server2 = 8-alpn-selected-sni-server-supports-alpn-server2
296 [8-alpn-selected-sni-server-supports-alpn-server]
297 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
298 CipherString = DEFAULT
299 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
301 [8-alpn-selected-sni-server-supports-alpn-server2]
302 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
303 CipherString = DEFAULT
304 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
306 [8-alpn-selected-sni-server-supports-alpn-client]
307 CipherString = DEFAULT
308 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
312 ExpectedALPNProtocol = bar
313 ExpectedServerName = server2
314 server = 8-alpn-selected-sni-server-supports-alpn-server-extra
315 server2 = 8-alpn-selected-sni-server-supports-alpn-server2-extra
316 client = 8-alpn-selected-sni-server-supports-alpn-client-extra
318 [8-alpn-selected-sni-server-supports-alpn-server-extra]
319 ServerNameCallback = IgnoreMismatch
321 [8-alpn-selected-sni-server-supports-alpn-server2-extra]
324 [8-alpn-selected-sni-server-supports-alpn-client-extra]
325 ALPNProtocols = foo,bar
329 # ===========================================================
331 [9-alpn-selected-sni-server-does-not-support-alpn]
332 ssl_conf = 9-alpn-selected-sni-server-does-not-support-alpn-ssl
334 [9-alpn-selected-sni-server-does-not-support-alpn-ssl]
335 server = 9-alpn-selected-sni-server-does-not-support-alpn-server
336 client = 9-alpn-selected-sni-server-does-not-support-alpn-client
337 server2 = 9-alpn-selected-sni-server-does-not-support-alpn-server2
339 [9-alpn-selected-sni-server-does-not-support-alpn-server]
340 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
341 CipherString = DEFAULT
342 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
344 [9-alpn-selected-sni-server-does-not-support-alpn-server2]
345 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
346 CipherString = DEFAULT
347 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
349 [9-alpn-selected-sni-server-does-not-support-alpn-client]
350 CipherString = DEFAULT
351 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
355 ExpectedServerName = server2
356 server = 9-alpn-selected-sni-server-does-not-support-alpn-server-extra
357 client = 9-alpn-selected-sni-server-does-not-support-alpn-client-extra
359 [9-alpn-selected-sni-server-does-not-support-alpn-server-extra]
361 ServerNameCallback = IgnoreMismatch
363 [9-alpn-selected-sni-server-does-not-support-alpn-client-extra]
364 ALPNProtocols = foo,bar
368 # ===========================================================
370 [10-alpn-simple-resumption]
371 ssl_conf = 10-alpn-simple-resumption-ssl
373 [10-alpn-simple-resumption-ssl]
374 server = 10-alpn-simple-resumption-server
375 client = 10-alpn-simple-resumption-client
376 resume-server = 10-alpn-simple-resumption-server
377 resume-client = 10-alpn-simple-resumption-client
379 [10-alpn-simple-resumption-server]
380 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
381 CipherString = DEFAULT
382 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
384 [10-alpn-simple-resumption-client]
385 CipherString = DEFAULT
386 MaxProtocol = TLSv1.2
387 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
391 ExpectedALPNProtocol = foo
392 HandshakeMode = Resume
393 ResumptionExpected = Yes
394 server = 10-alpn-simple-resumption-server-extra
395 resume-server = 10-alpn-simple-resumption-server-extra
396 client = 10-alpn-simple-resumption-client-extra
397 resume-client = 10-alpn-simple-resumption-client-extra
399 [10-alpn-simple-resumption-server-extra]
402 [10-alpn-simple-resumption-client-extra]
406 # ===========================================================
408 [11-alpn-server-switch-resumption]
409 ssl_conf = 11-alpn-server-switch-resumption-ssl
411 [11-alpn-server-switch-resumption-ssl]
412 server = 11-alpn-server-switch-resumption-server
413 client = 11-alpn-server-switch-resumption-client
414 resume-server = 11-alpn-server-switch-resumption-resume-server
415 resume-client = 11-alpn-server-switch-resumption-client
417 [11-alpn-server-switch-resumption-server]
418 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
419 CipherString = DEFAULT
420 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
422 [11-alpn-server-switch-resumption-resume-server]
423 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
424 CipherString = DEFAULT
425 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
427 [11-alpn-server-switch-resumption-client]
428 CipherString = DEFAULT
429 MaxProtocol = TLSv1.2
430 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
434 ExpectedALPNProtocol = baz
435 HandshakeMode = Resume
436 ResumptionExpected = Yes
437 server = 11-alpn-server-switch-resumption-server-extra
438 resume-server = 11-alpn-server-switch-resumption-resume-server-extra
439 client = 11-alpn-server-switch-resumption-client-extra
440 resume-client = 11-alpn-server-switch-resumption-client-extra
442 [11-alpn-server-switch-resumption-server-extra]
443 ALPNProtocols = bar,foo
445 [11-alpn-server-switch-resumption-resume-server-extra]
446 ALPNProtocols = baz,foo
448 [11-alpn-server-switch-resumption-client-extra]
449 ALPNProtocols = foo,bar,baz
452 # ===========================================================
454 [12-alpn-client-switch-resumption]
455 ssl_conf = 12-alpn-client-switch-resumption-ssl
457 [12-alpn-client-switch-resumption-ssl]
458 server = 12-alpn-client-switch-resumption-server
459 client = 12-alpn-client-switch-resumption-client
460 resume-server = 12-alpn-client-switch-resumption-server
461 resume-client = 12-alpn-client-switch-resumption-resume-client
463 [12-alpn-client-switch-resumption-server]
464 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
465 CipherString = DEFAULT
466 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
468 [12-alpn-client-switch-resumption-client]
469 CipherString = DEFAULT
470 MaxProtocol = TLSv1.2
471 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
474 [12-alpn-client-switch-resumption-resume-client]
475 CipherString = DEFAULT
476 MaxProtocol = TLSv1.2
477 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
481 ExpectedALPNProtocol = bar
482 HandshakeMode = Resume
483 ResumptionExpected = Yes
484 server = 12-alpn-client-switch-resumption-server-extra
485 resume-server = 12-alpn-client-switch-resumption-server-extra
486 client = 12-alpn-client-switch-resumption-client-extra
487 resume-client = 12-alpn-client-switch-resumption-resume-client-extra
489 [12-alpn-client-switch-resumption-server-extra]
490 ALPNProtocols = foo,bar,baz
492 [12-alpn-client-switch-resumption-client-extra]
493 ALPNProtocols = foo,baz
495 [12-alpn-client-switch-resumption-resume-client-extra]
496 ALPNProtocols = bar,baz
499 # ===========================================================
501 [13-alpn-alert-on-mismatch-resumption]
502 ssl_conf = 13-alpn-alert-on-mismatch-resumption-ssl
504 [13-alpn-alert-on-mismatch-resumption-ssl]
505 server = 13-alpn-alert-on-mismatch-resumption-server
506 client = 13-alpn-alert-on-mismatch-resumption-client
507 resume-server = 13-alpn-alert-on-mismatch-resumption-resume-server
508 resume-client = 13-alpn-alert-on-mismatch-resumption-client
510 [13-alpn-alert-on-mismatch-resumption-server]
511 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
512 CipherString = DEFAULT
513 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
515 [13-alpn-alert-on-mismatch-resumption-resume-server]
516 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
517 CipherString = DEFAULT
518 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
520 [13-alpn-alert-on-mismatch-resumption-client]
521 CipherString = DEFAULT
522 MaxProtocol = TLSv1.2
523 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
527 ExpectedResult = ServerFail
528 ExpectedServerAlert = NoApplicationProtocol
529 HandshakeMode = Resume
530 server = 13-alpn-alert-on-mismatch-resumption-server-extra
531 resume-server = 13-alpn-alert-on-mismatch-resumption-resume-server-extra
532 client = 13-alpn-alert-on-mismatch-resumption-client-extra
533 resume-client = 13-alpn-alert-on-mismatch-resumption-client-extra
535 [13-alpn-alert-on-mismatch-resumption-server-extra]
538 [13-alpn-alert-on-mismatch-resumption-resume-server-extra]
541 [13-alpn-alert-on-mismatch-resumption-client-extra]
542 ALPNProtocols = foo,bar
545 # ===========================================================
547 [14-alpn-no-server-support-resumption]
548 ssl_conf = 14-alpn-no-server-support-resumption-ssl
550 [14-alpn-no-server-support-resumption-ssl]
551 server = 14-alpn-no-server-support-resumption-server
552 client = 14-alpn-no-server-support-resumption-client
553 resume-server = 14-alpn-no-server-support-resumption-resume-server
554 resume-client = 14-alpn-no-server-support-resumption-client
556 [14-alpn-no-server-support-resumption-server]
557 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
558 CipherString = DEFAULT
559 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
561 [14-alpn-no-server-support-resumption-resume-server]
562 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
563 CipherString = DEFAULT
564 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
566 [14-alpn-no-server-support-resumption-client]
567 CipherString = DEFAULT
568 MaxProtocol = TLSv1.2
569 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
573 HandshakeMode = Resume
574 ResumptionExpected = Yes
575 server = 14-alpn-no-server-support-resumption-server-extra
576 client = 14-alpn-no-server-support-resumption-client-extra
577 resume-client = 14-alpn-no-server-support-resumption-client-extra
579 [14-alpn-no-server-support-resumption-server-extra]
582 [14-alpn-no-server-support-resumption-client-extra]
586 # ===========================================================
588 [15-alpn-no-client-support-resumption]
589 ssl_conf = 15-alpn-no-client-support-resumption-ssl
591 [15-alpn-no-client-support-resumption-ssl]
592 server = 15-alpn-no-client-support-resumption-server
593 client = 15-alpn-no-client-support-resumption-client
594 resume-server = 15-alpn-no-client-support-resumption-server
595 resume-client = 15-alpn-no-client-support-resumption-resume-client
597 [15-alpn-no-client-support-resumption-server]
598 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
599 CipherString = DEFAULT
600 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
602 [15-alpn-no-client-support-resumption-client]
603 CipherString = DEFAULT
604 MaxProtocol = TLSv1.2
605 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
608 [15-alpn-no-client-support-resumption-resume-client]
609 CipherString = DEFAULT
610 MaxProtocol = TLSv1.2
611 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
615 HandshakeMode = Resume
616 ResumptionExpected = Yes
617 server = 15-alpn-no-client-support-resumption-server-extra
618 resume-server = 15-alpn-no-client-support-resumption-server-extra
619 client = 15-alpn-no-client-support-resumption-client-extra
621 [15-alpn-no-client-support-resumption-server-extra]
624 [15-alpn-no-client-support-resumption-client-extra]