test/ssl-tests/17-renegotiate.conf.in

   1 # -*- mode: perl; -*-
   2 # Copyright 2016-2016 The OpenSSL Project Authors. All Rights Reserved.
   3 #
   4 # Licensed under the OpenSSL license (the "License").  You may not use
   5 # this file except in compliance with the License.  You can obtain a copy
   6 # in the file LICENSE in the source distribution or at
   7 # https://www.openssl.org/source/license.html
   8
   9
  10 ## Test Renegotiation
  11
  12 use strict;
  13 use warnings;
  14
  15 package ssltests;
  16 use OpenSSL::Test::Utils;
  17
  18 my $dir_sep = $^O ne "VMS" ? "/" : "";
  19
  20 our @tests = (
  21     {
  22         name => "renegotiate-client-no-resume",
  23         server => {
  24             "Options" => "NoResumptionOnRenegotiation"
  25         },
  26         client => {},
  27         test => {
  28             "Method" => "TLS",
  29             "HandshakeMode" => "RenegotiateClient",
  30             "ResumptionExpected" => "No",
  31             "ExpectedResult" => "Success"
  32         }
  33     },
  34     {
  35         name => "renegotiate-client-resume",
  36         server => {},
  37         client => {},
  38         test => {
  39             "Method" => "TLS",
  40             "HandshakeMode" => "RenegotiateClient",
  41             "ResumptionExpected" => "Yes",
  42             "ExpectedResult" => "Success"
  43         }
  44     },
  45     {
  46         name => "renegotiate-server-no-resume",
  47         server => {
  48             "Options" => "NoResumptionOnRenegotiation"
  49         },
  50         client => {},
  51         test => {
  52             "Method" => "TLS",
  53             "HandshakeMode" => "RenegotiateServer",
  54             "ResumptionExpected" => "No",
  55             "ExpectedResult" => "Success"
  56         }
  57     },
  58     {
  59         name => "renegotiate-server-resume",
  60         server => {},
  61         client => {},
  62         test => {
  63             "Method" => "TLS",
  64             "HandshakeMode" => "RenegotiateServer",
  65             "ResumptionExpected" => "Yes",
  66             "ExpectedResult" => "Success"
  67         }
  68     },
  69     {
  70         name => "renegotiate-client-auth-require",
  71         server => {
  72             "Options" => "NoResumptionOnRenegotiation",
  73             "MaxProtocol" => "TLSv1.2",
  74             "VerifyCAFile" => "\${ENV::TEST_CERTS_DIR}${dir_sep}root-cert.pem",
  75             "VerifyMode" => "Require",
  76         },
  77         client => {
  78             "Certificate" => "\${ENV::TEST_CERTS_DIR}${dir_sep}ee-client-chain.pem",
  79             "PrivateKey"  => "\${ENV::TEST_CERTS_DIR}${dir_sep}ee-key.pem"
  80         },
  81         test => {
  82             "Method" => "TLS",
  83             "HandshakeMode" => "RenegotiateServer",
  84             "ResumptionExpected" => "No",
  85             "ExpectedResult" => "Success"
  86         }
  87     },
  88     {
  89         name => "renegotiate-client-auth-once",
  90         server => {
  91             "Options" => "NoResumptionOnRenegotiation",
  92             "MaxProtocol" => "TLSv1.2",
  93             "VerifyCAFile" => "\${ENV::TEST_CERTS_DIR}${dir_sep}root-cert.pem",
  94             "VerifyMode" => "Once",
  95         },
  96         client => {
  97             "Certificate" => "\${ENV::TEST_CERTS_DIR}${dir_sep}ee-client-chain.pem",
  98             "PrivateKey"  => "\${ENV::TEST_CERTS_DIR}${dir_sep}ee-key.pem"
  99         },
 100         test => {
 101             "Method" => "TLS",
 102             "HandshakeMode" => "RenegotiateServer",
 103             "ResumptionExpected" => "No",
 104             "ExpectedResult" => "Success"
 105         }
 106     }
 107 );
 108 our @tests_tls1_2 = (
 109     {
 110         name => "renegotiate-aead-to-non-aead",
 111         server => {
 112             "Options" => "NoResumptionOnRenegotiation",
 113             "MaxProtocol" => "TLSv1.2"
 114         },
 115         client => {
 116             "CipherString" => "AES128-GCM-SHA256",
 117             extra => {
 118                 "RenegotiateCiphers" => "AES128-SHA"
 119             }
 120         },
 121         test => {
 122             "Method" => "TLS",
 123             "HandshakeMode" => "RenegotiateClient",
 124             "ResumptionExpected" => "No",
 125             "ExpectedResult" => "Success"
 126         }
 127     },
 128     {
 129         name => "renegotiate-non-aead-to-aead",
 130         server => {
 131             "Options" => "NoResumptionOnRenegotiation",
 132             "MaxProtocol" => "TLSv1.2"
 133         },
 134         client => {
 135             "CipherString" => "AES128-SHA",
 136             extra => {
 137                 "RenegotiateCiphers" => "AES128-GCM-SHA256"
 138             }
 139         },
 140         test => {
 141             "Method" => "TLS",
 142             "HandshakeMode" => "RenegotiateClient",
 143             "ResumptionExpected" => "No",
 144             "ExpectedResult" => "Success"
 145         }
 146     },
 147     {
 148         name => "renegotiate-non-aead-to-non-aead",
 149         server => {
 150             "Options" => "NoResumptionOnRenegotiation",
 151             "MaxProtocol" => "TLSv1.2"
 152         },
 153         client => {
 154             "CipherString" => "AES128-SHA",
 155             extra => {
 156                 "RenegotiateCiphers" => "AES256-SHA"
 157             }
 158         },
 159         test => {
 160             "Method" => "TLS",
 161             "HandshakeMode" => "RenegotiateClient",
 162             "ResumptionExpected" => "No",
 163             "ExpectedResult" => "Success"
 164         }
 165     },
 166     {
 167         name => "renegotiate-aead-to-aead",
 168         server => {
 169             "Options" => "NoResumptionOnRenegotiation",
 170             "MaxProtocol" => "TLSv1.2"
 171         },
 172         client => {
 173             "CipherString" => "AES128-GCM-SHA256",
 174             extra => {
 175                 "RenegotiateCiphers" => "AES256-GCM-SHA384"
 176             }
 177         },
 178         test => {
 179             "Method" => "TLS",
 180             "HandshakeMode" => "RenegotiateClient",
 181             "ResumptionExpected" => "No",
 182             "ExpectedResult" => "Success"
 183         }
 184     }
 185 );
 186
 187 push @tests, @tests_tls1_2 unless disabled("tls1_2");