1 # Generated with generate_ssl_tests.pl
5 test-0 = 0-SNI-switch-context
6 test-1 = 1-SNI-keep-context
7 test-2 = 2-SNI-no-server-support
8 test-3 = 3-SNI-no-client-support
9 test-4 = 4-SNI-bad-sni-ignore-mismatch
10 test-5 = 5-SNI-bad-sni-reject-mismatch
11 test-6 = 6-SNI-bad-clienthello-sni-ignore-mismatch
12 test-7 = 7-SNI-bad-clienthello-sni-reject-mismatch
13 test-8 = 8-SNI-clienthello-disable-v12
14 # ===========================================================
16 [0-SNI-switch-context]
17 ssl_conf = 0-SNI-switch-context-ssl
19 [0-SNI-switch-context-ssl]
20 server = 0-SNI-switch-context-server
21 client = 0-SNI-switch-context-client
22 server2 = 0-SNI-switch-context-server
24 [0-SNI-switch-context-server]
25 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
26 CipherString = DEFAULT
27 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
29 [0-SNI-switch-context-client]
30 CipherString = DEFAULT
31 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
35 ExpectedResult = Success
36 ExpectedServerName = server2
37 server = 0-SNI-switch-context-server-extra
38 server2 = 0-SNI-switch-context-server-extra
39 client = 0-SNI-switch-context-client-extra
41 [0-SNI-switch-context-server-extra]
42 ServerNameCallback = IgnoreMismatch
44 [0-SNI-switch-context-client-extra]
48 # ===========================================================
51 ssl_conf = 1-SNI-keep-context-ssl
53 [1-SNI-keep-context-ssl]
54 server = 1-SNI-keep-context-server
55 client = 1-SNI-keep-context-client
56 server2 = 1-SNI-keep-context-server
58 [1-SNI-keep-context-server]
59 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
60 CipherString = DEFAULT
61 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
63 [1-SNI-keep-context-client]
64 CipherString = DEFAULT
65 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
69 ExpectedResult = Success
70 ExpectedServerName = server1
71 server = 1-SNI-keep-context-server-extra
72 server2 = 1-SNI-keep-context-server-extra
73 client = 1-SNI-keep-context-client-extra
75 [1-SNI-keep-context-server-extra]
76 ServerNameCallback = IgnoreMismatch
78 [1-SNI-keep-context-client-extra]
82 # ===========================================================
84 [2-SNI-no-server-support]
85 ssl_conf = 2-SNI-no-server-support-ssl
87 [2-SNI-no-server-support-ssl]
88 server = 2-SNI-no-server-support-server
89 client = 2-SNI-no-server-support-client
91 [2-SNI-no-server-support-server]
92 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
93 CipherString = DEFAULT
94 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
96 [2-SNI-no-server-support-client]
97 CipherString = DEFAULT
98 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
102 ExpectedResult = Success
103 client = 2-SNI-no-server-support-client-extra
105 [2-SNI-no-server-support-client-extra]
109 # ===========================================================
111 [3-SNI-no-client-support]
112 ssl_conf = 3-SNI-no-client-support-ssl
114 [3-SNI-no-client-support-ssl]
115 server = 3-SNI-no-client-support-server
116 client = 3-SNI-no-client-support-client
117 server2 = 3-SNI-no-client-support-server
119 [3-SNI-no-client-support-server]
120 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
121 CipherString = DEFAULT
122 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
124 [3-SNI-no-client-support-client]
125 CipherString = DEFAULT
126 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
130 ExpectedResult = Success
131 ExpectedServerName = server1
132 server = 3-SNI-no-client-support-server-extra
133 server2 = 3-SNI-no-client-support-server-extra
135 [3-SNI-no-client-support-server-extra]
136 ServerNameCallback = IgnoreMismatch
139 # ===========================================================
141 [4-SNI-bad-sni-ignore-mismatch]
142 ssl_conf = 4-SNI-bad-sni-ignore-mismatch-ssl
144 [4-SNI-bad-sni-ignore-mismatch-ssl]
145 server = 4-SNI-bad-sni-ignore-mismatch-server
146 client = 4-SNI-bad-sni-ignore-mismatch-client
147 server2 = 4-SNI-bad-sni-ignore-mismatch-server
149 [4-SNI-bad-sni-ignore-mismatch-server]
150 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
151 CipherString = DEFAULT
152 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
154 [4-SNI-bad-sni-ignore-mismatch-client]
155 CipherString = DEFAULT
156 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
160 ExpectedResult = Success
161 ExpectedServerName = server1
162 server = 4-SNI-bad-sni-ignore-mismatch-server-extra
163 server2 = 4-SNI-bad-sni-ignore-mismatch-server-extra
164 client = 4-SNI-bad-sni-ignore-mismatch-client-extra
166 [4-SNI-bad-sni-ignore-mismatch-server-extra]
167 ServerNameCallback = IgnoreMismatch
169 [4-SNI-bad-sni-ignore-mismatch-client-extra]
173 # ===========================================================
175 [5-SNI-bad-sni-reject-mismatch]
176 ssl_conf = 5-SNI-bad-sni-reject-mismatch-ssl
178 [5-SNI-bad-sni-reject-mismatch-ssl]
179 server = 5-SNI-bad-sni-reject-mismatch-server
180 client = 5-SNI-bad-sni-reject-mismatch-client
181 server2 = 5-SNI-bad-sni-reject-mismatch-server
183 [5-SNI-bad-sni-reject-mismatch-server]
184 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
185 CipherString = DEFAULT
186 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
188 [5-SNI-bad-sni-reject-mismatch-client]
189 CipherString = DEFAULT
190 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
194 ExpectedResult = ServerFail
195 ExpectedServerAlert = UnrecognizedName
196 server = 5-SNI-bad-sni-reject-mismatch-server-extra
197 server2 = 5-SNI-bad-sni-reject-mismatch-server-extra
198 client = 5-SNI-bad-sni-reject-mismatch-client-extra
200 [5-SNI-bad-sni-reject-mismatch-server-extra]
201 ServerNameCallback = RejectMismatch
203 [5-SNI-bad-sni-reject-mismatch-client-extra]
207 # ===========================================================
209 [6-SNI-bad-clienthello-sni-ignore-mismatch]
210 ssl_conf = 6-SNI-bad-clienthello-sni-ignore-mismatch-ssl
212 [6-SNI-bad-clienthello-sni-ignore-mismatch-ssl]
213 server = 6-SNI-bad-clienthello-sni-ignore-mismatch-server
214 client = 6-SNI-bad-clienthello-sni-ignore-mismatch-client
215 server2 = 6-SNI-bad-clienthello-sni-ignore-mismatch-server
217 [6-SNI-bad-clienthello-sni-ignore-mismatch-server]
218 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
219 CipherString = DEFAULT
220 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
222 [6-SNI-bad-clienthello-sni-ignore-mismatch-client]
223 CipherString = DEFAULT
224 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
228 ExpectedResult = Success
229 ExpectedServerName = server1
230 server = 6-SNI-bad-clienthello-sni-ignore-mismatch-server-extra
231 server2 = 6-SNI-bad-clienthello-sni-ignore-mismatch-server-extra
232 client = 6-SNI-bad-clienthello-sni-ignore-mismatch-client-extra
234 [6-SNI-bad-clienthello-sni-ignore-mismatch-server-extra]
235 ServerNameCallback = ClientHelloIgnoreMismatch
237 [6-SNI-bad-clienthello-sni-ignore-mismatch-client-extra]
241 # ===========================================================
243 [7-SNI-bad-clienthello-sni-reject-mismatch]
244 ssl_conf = 7-SNI-bad-clienthello-sni-reject-mismatch-ssl
246 [7-SNI-bad-clienthello-sni-reject-mismatch-ssl]
247 server = 7-SNI-bad-clienthello-sni-reject-mismatch-server
248 client = 7-SNI-bad-clienthello-sni-reject-mismatch-client
249 server2 = 7-SNI-bad-clienthello-sni-reject-mismatch-server
251 [7-SNI-bad-clienthello-sni-reject-mismatch-server]
252 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
253 CipherString = DEFAULT
254 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
256 [7-SNI-bad-clienthello-sni-reject-mismatch-client]
257 CipherString = DEFAULT
258 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
262 ExpectedResult = ServerFail
263 ExpectedServerAlert = UnrecognizedName
264 server = 7-SNI-bad-clienthello-sni-reject-mismatch-server-extra
265 server2 = 7-SNI-bad-clienthello-sni-reject-mismatch-server-extra
266 client = 7-SNI-bad-clienthello-sni-reject-mismatch-client-extra
268 [7-SNI-bad-clienthello-sni-reject-mismatch-server-extra]
269 ServerNameCallback = ClientHelloRejectMismatch
271 [7-SNI-bad-clienthello-sni-reject-mismatch-client-extra]
275 # ===========================================================
277 [8-SNI-clienthello-disable-v12]
278 ssl_conf = 8-SNI-clienthello-disable-v12-ssl
280 [8-SNI-clienthello-disable-v12-ssl]
281 server = 8-SNI-clienthello-disable-v12-server
282 client = 8-SNI-clienthello-disable-v12-client
283 server2 = 8-SNI-clienthello-disable-v12-server
285 [8-SNI-clienthello-disable-v12-server]
286 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
287 CipherString = DEFAULT
288 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
290 [8-SNI-clienthello-disable-v12-client]
291 CipherString = DEFAULT
292 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
296 ExpectedProtocol = TLSv1.1
297 ExpectedServerName = server2
298 server = 8-SNI-clienthello-disable-v12-server-extra
299 server2 = 8-SNI-clienthello-disable-v12-server-extra
300 client = 8-SNI-clienthello-disable-v12-client-extra
302 [8-SNI-clienthello-disable-v12-server-extra]
303 ServerNameCallback = ClientHelloNoV12
305 [8-SNI-clienthello-disable-v12-client-extra]