#define BLOCK_CIPHERS "+3DES-CBC:+AES-128-CBC:+CAMELLIA-128-CBC:+AES-256-CBC:+CAMELLIA-256-CBC"
#define ALL_COMP "+COMP-NULL"
#define ALL_MACS "+MAC-ALL:+MD5:+SHA1"
-#define ALL_CERTTYPES "+CTYPE-X509"
#define ALL_KX "+RSA:+DHE-RSA:+DHE-DSS:+ANON-DH:+ECDHE-RSA:+ECDHE-ECDSA:+ANON-ECDH"
#define INIT_STR "NONE:"
char rest[128] = "%UNSAFE_RENEGOTIATION:+SIGN-ALL:+GROUP-ALL";
buf[sizeof(buf) - 1] = 0;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":" ALL_KX ":" "%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":+DHE-RSA:+DHE-DSS:%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":+DHE-RSA:+DHE-DSS:+GROUP-ALL:%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":+ECDHE-RSA:+ECDHE-ECDSA:+CURVE-ALL:%s", protocol_all_str,
rest);
_gnutls_priority_set_direct(session, prio_str);
/* We always enable all the curves but set our selected as first. That is
* because list of curves may be also used by the server to select a cert. */
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":+ECDHE-RSA:+ECDHE-ECDSA:%s:%s", protocol_all_str, curve, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":" ALL_KX ":%s:%%SAFE_RENEGOTIATION", rest, protocol_str);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":" ALL_KX":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":%s:" ALL_KX, rest, protocol_str);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":%s:" ALL_KX, rest, protocol_str);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":+VERS-SSL3.0:"
+ ALL_CIPHERS ":" ALL_COMP ":+VERS-SSL3.0:"
ALL_MACS ":" ALL_KX ":%%SAFE_RENEGOTIATION");
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":+DHE-RSA:+DHE-DSS:%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
{
int ret;
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":+VERS-SSL3.0:"
+ ALL_CIPHERS ":" ALL_COMP ":+VERS-SSL3.0:"
ALL_MACS ":" ALL_KX ":%s", rest);
_gnutls_priority_set_direct(session, prio_str);
#endif
sprintf(prio_str, INIT_STR
- ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ ALL_CIPHERS ":" ALL_COMP ":%s:" ALL_MACS
":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str, INIT_STR
- "+AES-128-CBC:" ALL_COMP ":" ALL_CERTTYPES ":%s:" ALL_MACS
+ "+AES-128-CBC:" ALL_COMP ":%s:" ALL_MACS
":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str, INIT_STR
- "+AES-128-GCM:+AES-256-GCM:" ALL_COMP ":"
- ALL_CERTTYPES ":%s:" ALL_MACS ":" ALL_KX ":%s",
+ "+AES-128-GCM:+AES-256-GCM:" ALL_COMP
+ ":%s:" ALL_MACS ":" ALL_KX ":%s",
protocol_all_str, rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str, INIT_STR
- "+AES-128-CCM:+AES-256-CCM:" ALL_COMP ":"
- ALL_CERTTYPES ":%s:" ALL_MACS ":" ALL_KX ":%s",
+ "+AES-128-CCM:+AES-256-CCM:" ALL_COMP
+ ":%s:" ALL_MACS ":" ALL_KX ":%s",
protocol_all_str, rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str, INIT_STR
- "+AES-128-CCM-8:+AES-256-CCM-8:" ALL_COMP ":"
- ALL_CERTTYPES ":%s:" ALL_MACS ":" ALL_KX ":%s",
+ "+AES-128-CCM-8:+AES-256-CCM-8:" ALL_COMP
+ ":%s:" ALL_MACS ":" ALL_KX ":%s",
protocol_all_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR "+CAMELLIA-128-CBC:" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR "+CAMELLIA-128-CBC:" ALL_COMP
":%s:" ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR "+CAMELLIA-128-GCM:" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR "+CAMELLIA-128-GCM:" ALL_COMP
":%s:" ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return ret;
}
-test_code_t test_openpgp1(gnutls_session_t session)
-{
- int ret;
-
- if (tls_ext_ok == 0)
- return TEST_IGNORE;
-
- sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":+CTYPE-OPENPGP:%s:"
- ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
- _gnutls_priority_set_direct(session, prio_str);
-
- gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
-
- ret = do_handshake(session);
- if (ret == TEST_FAILED)
- return ret;
-
- if (gnutls_certificate_type_get(session) == GNUTLS_CRT_OPENPGP)
- return TEST_SUCCEED;
-
- return TEST_FAILED;
-}
-
test_code_t test_unknown_ciphersuites(gnutls_session_t session)
{
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":"
- ALL_CERTTYPES ":%s:" ALL_MACS ":" ALL_KX ":%s",
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
+ ":%s:" ALL_MACS ":" ALL_KX ":%s",
protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":"
- ALL_CERTTYPES ":%s:+MD5:" ALL_KX ":%s", protocol_str,
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
+ ":%s:+MD5:" ALL_KX ":%s", protocol_str,
rest);
_gnutls_priority_set_direct(session, prio_str);
return ret;
}
-#ifdef HAVE_LIBZ
-test_code_t test_zlib(gnutls_session_t session)
-{
- int ret;
-
- sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":+COMP-DEFLATE:" ALL_CERTTYPES ":%s:"
- ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
- _gnutls_priority_set_direct(session, prio_str);
-
- gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
-
- ret = do_handshake(session);
- return ret;
-}
-#endif
-
test_code_t test_sha(gnutls_session_t session)
{
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":"
- ALL_CERTTYPES ":%s:+SHA1:" ALL_KX ":%s", protocol_str,
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
+ ":%s:+SHA1:" ALL_KX ":%s", protocol_str,
rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":"
- ALL_CERTTYPES ":%s:+SHA256:" ALL_KX ":%s",
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
+ ":%s:+SHA256:" ALL_KX ":%s",
protocol_all_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
int ret;
sprintf(prio_str,
- INIT_STR "+3DES-CBC:" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR "+3DES-CBC:" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR "+ARCFOUR-128:" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR "+ARCFOUR-128:" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR "+CHACHA20-POLY1305:" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR "+CHACHA20-POLY1305:" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
":+VERS-TLS1.0:%%SSL3_RECORD_VERSION:" ALL_MACS ":" ALL_KX ":%s", rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
":+VERS-TLS1.0:%%LATEST_RECORD_VERSION:" ALL_MACS ":" ALL_KX ":%s", rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str,
- INIT_STR BLOCK_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR BLOCK_CIPHERS ":" ALL_COMP
":+VERS-TLS1.2:+VERS-TLS1.1:+VERS-TLS1.0:-VERS-SSL3.0:" ALL_MACS ":" ALL_KX ":%s", rest);
_gnutls_priority_set_direct(session, prio_str);
tls1_ok = 1;
} else {
sprintf(prio_str,
- INIT_STR BLOCK_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR BLOCK_CIPHERS ":" ALL_COMP
":+VERS-TLS1.2:+VERS-TLS1.1:+VERS-TLS1.0:-VERS-SSL3.0:" ALL_MACS ":" ALL_KX ":%%COMPAT:%s", rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
tls_ext_ok = 1;
} else {
sprintf(prio_str,
- INIT_STR BLOCK_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR BLOCK_CIPHERS ":" ALL_COMP
":+VERS-TLS1.2:+VERS-TLS1.1:+VERS-TLS1.0:-VERS-SSL3.0:" ALL_MACS ":" ALL_KX ":%%NO_EXTENSIONS:%s", rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
":+VERS-TLS1.2:" ALL_MACS ":" ALL_KX ":%s", rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
":+VERS-TLS1.3:" ALL_MACS ":" ALL_KX ":%s", rest);
_gnutls_priority_set_direct(session, prio_str);
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
":+VERS-TLS1.1:" ALL_MACS ":" ALL_KX ":%s", rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
":+VERS-TLS1.1:+VERS-TLS1.0:+VERS-SSL3.0:" ALL_MACS ":"
ALL_KX ":%s", rest);
_gnutls_priority_set_direct(session, prio_str);
/* we remove RSA as there is a version check in the key exchange
* message we do not properly set in this test */
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES
+ INIT_STR ALL_CIPHERS ":" ALL_COMP
":+VERS-TLS1.2:+VERS-TLS1.1:+VERS-TLS1.0:+VERS-SSL3.0:" ALL_MACS ":"
ALL_KX ":-RSA:%s", rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
* SSL 3.0 then the handshake will fail.
*/
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":+RSA:%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
* connection will fail.
*/
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
* and we connect using a 5.5 record version.
*/
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
* A normal server would abort this handshake.
*/
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
gnutls_credentials_set(session, GNUTLS_CRD_CERTIFICATE, xcred);
int ret;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":+ANON-DH:+ANON-ECDH:+CURVE-ALL:%s",
protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
char *p, *pos;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);
return TEST_IGNORE;
sprintf(prio_str,
- INIT_STR ALL_CIPHERS ":" ALL_COMP ":" ALL_CERTTYPES ":%s:"
+ INIT_STR ALL_CIPHERS ":" ALL_COMP ":%s:"
ALL_MACS ":" ALL_KX ":%s", protocol_str, rest);
_gnutls_priority_set_direct(session, prio_str);