1 # Generated with generate_ssl_tests.pl
5 test-0 = 0-SECLEVEL 3 with default key
6 test-1 = 1-SECLEVEL 4 with ED448 key
7 test-2 = 2-SECLEVEL 5 server with ED448 key
8 test-3 = 3-SECLEVEL 5 client with ED448 key
9 test-4 = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE
10 test-5 = 5-SECLEVEL 3 with ED448 key, TLSv1.2
11 # ===========================================================
13 [0-SECLEVEL 3 with default key]
14 ssl_conf = 0-SECLEVEL 3 with default key-ssl
16 [0-SECLEVEL 3 with default key-ssl]
17 server = 0-SECLEVEL 3 with default key-server
18 client = 0-SECLEVEL 3 with default key-client
20 [0-SECLEVEL 3 with default key-server]
21 Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
22 CipherString = DEFAULT:@SECLEVEL=3
23 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
25 [0-SECLEVEL 3 with default key-client]
26 CipherString = DEFAULT
27 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
31 ExpectedResult = ServerFail
34 # ===========================================================
36 [1-SECLEVEL 4 with ED448 key]
37 ssl_conf = 1-SECLEVEL 4 with ED448 key-ssl
39 [1-SECLEVEL 4 with ED448 key-ssl]
40 server = 1-SECLEVEL 4 with ED448 key-server
41 client = 1-SECLEVEL 4 with ED448 key-client
43 [1-SECLEVEL 4 with ED448 key-server]
44 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
45 CipherString = DEFAULT:@SECLEVEL=4
46 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
48 [1-SECLEVEL 4 with ED448 key-client]
49 CipherString = DEFAULT:@SECLEVEL=4
50 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
54 ExpectedResult = Success
57 # ===========================================================
59 [2-SECLEVEL 5 server with ED448 key]
60 ssl_conf = 2-SECLEVEL 5 server with ED448 key-ssl
62 [2-SECLEVEL 5 server with ED448 key-ssl]
63 server = 2-SECLEVEL 5 server with ED448 key-server
64 client = 2-SECLEVEL 5 server with ED448 key-client
66 [2-SECLEVEL 5 server with ED448 key-server]
67 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
68 CipherString = DEFAULT:@SECLEVEL=5
69 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
71 [2-SECLEVEL 5 server with ED448 key-client]
72 CipherString = DEFAULT:@SECLEVEL=4
73 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
77 ExpectedResult = ServerFail
80 # ===========================================================
82 [3-SECLEVEL 5 client with ED448 key]
83 ssl_conf = 3-SECLEVEL 5 client with ED448 key-ssl
85 [3-SECLEVEL 5 client with ED448 key-ssl]
86 server = 3-SECLEVEL 5 client with ED448 key-server
87 client = 3-SECLEVEL 5 client with ED448 key-client
89 [3-SECLEVEL 5 client with ED448 key-server]
90 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
91 CipherString = DEFAULT:@SECLEVEL=4
92 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
94 [3-SECLEVEL 5 client with ED448 key-client]
95 CipherString = DEFAULT:@SECLEVEL=5
96 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
100 ExpectedResult = ServerFail
103 # ===========================================================
105 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE]
106 ssl_conf = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl
108 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl]
109 server = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server
110 client = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client
112 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server]
113 Certificate = ${ENV::TEST_CERTS_DIR}/p384-server-cert.pem
114 CipherString = DEFAULT:@SECLEVEL=3
116 PrivateKey = ${ENV::TEST_CERTS_DIR}/p384-server-key.pem
118 [4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client]
119 CipherString = ECDHE:@SECLEVEL=3
120 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/p384-root.pem
124 ExpectedResult = Success
127 # ===========================================================
129 [5-SECLEVEL 3 with ED448 key, TLSv1.2]
130 ssl_conf = 5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl
132 [5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl]
133 server = 5-SECLEVEL 3 with ED448 key, TLSv1.2-server
134 client = 5-SECLEVEL 3 with ED448 key, TLSv1.2-client
136 [5-SECLEVEL 3 with ED448 key, TLSv1.2-server]
137 Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
138 CipherString = DEFAULT:@SECLEVEL=3
139 MaxProtocol = TLSv1.2
140 PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
142 [5-SECLEVEL 3 with ED448 key, TLSv1.2-client]
143 CipherString = DEFAULT
144 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
148 ExpectedResult = Success