14-curves.cnf 65 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553
  1. # Generated with generate_ssl_tests.pl
  2. num_tests = 86
  3. test-0 = 0-curve-prime256v1
  4. test-1 = 1-curve-secp384r1
  5. test-2 = 2-curve-secp521r1
  6. test-3 = 3-curve-X25519
  7. test-4 = 4-curve-X448
  8. test-5 = 5-curve-brainpoolP256r1tls13
  9. test-6 = 6-curve-brainpoolP384r1tls13
  10. test-7 = 7-curve-brainpoolP512r1tls13
  11. test-8 = 8-curve-sect233k1
  12. test-9 = 9-curve-sect233r1
  13. test-10 = 10-curve-sect283k1
  14. test-11 = 11-curve-sect283r1
  15. test-12 = 12-curve-sect409k1
  16. test-13 = 13-curve-sect409r1
  17. test-14 = 14-curve-sect571k1
  18. test-15 = 15-curve-sect571r1
  19. test-16 = 16-curve-secp224r1
  20. test-17 = 17-curve-sect163k1
  21. test-18 = 18-curve-sect163r2
  22. test-19 = 19-curve-prime192v1
  23. test-20 = 20-curve-sect163r1
  24. test-21 = 21-curve-sect193r1
  25. test-22 = 22-curve-sect193r2
  26. test-23 = 23-curve-sect239k1
  27. test-24 = 24-curve-secp160k1
  28. test-25 = 25-curve-secp160r1
  29. test-26 = 26-curve-secp160r2
  30. test-27 = 27-curve-secp192k1
  31. test-28 = 28-curve-secp224k1
  32. test-29 = 29-curve-secp256k1
  33. test-30 = 30-curve-brainpoolP256r1
  34. test-31 = 31-curve-brainpoolP384r1
  35. test-32 = 32-curve-brainpoolP512r1
  36. test-33 = 33-curve-sect233k1-tls12-in-tls13
  37. test-34 = 34-curve-sect233r1-tls12-in-tls13
  38. test-35 = 35-curve-sect283k1-tls12-in-tls13
  39. test-36 = 36-curve-sect283r1-tls12-in-tls13
  40. test-37 = 37-curve-sect409k1-tls12-in-tls13
  41. test-38 = 38-curve-sect409r1-tls12-in-tls13
  42. test-39 = 39-curve-sect571k1-tls12-in-tls13
  43. test-40 = 40-curve-sect571r1-tls12-in-tls13
  44. test-41 = 41-curve-secp224r1-tls12-in-tls13
  45. test-42 = 42-curve-sect163k1-tls12-in-tls13
  46. test-43 = 43-curve-sect163r2-tls12-in-tls13
  47. test-44 = 44-curve-prime192v1-tls12-in-tls13
  48. test-45 = 45-curve-sect163r1-tls12-in-tls13
  49. test-46 = 46-curve-sect193r1-tls12-in-tls13
  50. test-47 = 47-curve-sect193r2-tls12-in-tls13
  51. test-48 = 48-curve-sect239k1-tls12-in-tls13
  52. test-49 = 49-curve-secp160k1-tls12-in-tls13
  53. test-50 = 50-curve-secp160r1-tls12-in-tls13
  54. test-51 = 51-curve-secp160r2-tls12-in-tls13
  55. test-52 = 52-curve-secp192k1-tls12-in-tls13
  56. test-53 = 53-curve-secp224k1-tls12-in-tls13
  57. test-54 = 54-curve-secp256k1-tls12-in-tls13
  58. test-55 = 55-curve-brainpoolP256r1-tls12-in-tls13
  59. test-56 = 56-curve-brainpoolP384r1-tls12-in-tls13
  60. test-57 = 57-curve-brainpoolP512r1-tls12-in-tls13
  61. test-58 = 58-curve-sect233k1-tls13
  62. test-59 = 59-curve-sect233r1-tls13
  63. test-60 = 60-curve-sect283k1-tls13
  64. test-61 = 61-curve-sect283r1-tls13
  65. test-62 = 62-curve-sect409k1-tls13
  66. test-63 = 63-curve-sect409r1-tls13
  67. test-64 = 64-curve-sect571k1-tls13
  68. test-65 = 65-curve-sect571r1-tls13
  69. test-66 = 66-curve-secp224r1-tls13
  70. test-67 = 67-curve-sect163k1-tls13
  71. test-68 = 68-curve-sect163r2-tls13
  72. test-69 = 69-curve-prime192v1-tls13
  73. test-70 = 70-curve-sect163r1-tls13
  74. test-71 = 71-curve-sect193r1-tls13
  75. test-72 = 72-curve-sect193r2-tls13
  76. test-73 = 73-curve-sect239k1-tls13
  77. test-74 = 74-curve-secp160k1-tls13
  78. test-75 = 75-curve-secp160r1-tls13
  79. test-76 = 76-curve-secp160r2-tls13
  80. test-77 = 77-curve-secp192k1-tls13
  81. test-78 = 78-curve-secp224k1-tls13
  82. test-79 = 79-curve-secp256k1-tls13
  83. test-80 = 80-curve-brainpoolP256r1-tls13
  84. test-81 = 81-curve-brainpoolP384r1-tls13
  85. test-82 = 82-curve-brainpoolP512r1-tls13
  86. test-83 = 83-curve-brainpoolP256r1tls13-tls13-in-tls12
  87. test-84 = 84-curve-brainpoolP384r1tls13-tls13-in-tls12
  88. test-85 = 85-curve-brainpoolP512r1tls13-tls13-in-tls12
  89. # ===========================================================
  90. [0-curve-prime256v1]
  91. ssl_conf = 0-curve-prime256v1-ssl
  92. [0-curve-prime256v1-ssl]
  93. server = 0-curve-prime256v1-server
  94. client = 0-curve-prime256v1-client
  95. [0-curve-prime256v1-server]
  96. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  97. CipherString = DEFAULT@SECLEVEL=1
  98. Curves = prime256v1
  99. MaxProtocol = TLSv1.3
  100. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  101. [0-curve-prime256v1-client]
  102. CipherString = ECDHE@SECLEVEL=1
  103. Curves = prime256v1
  104. MaxProtocol = TLSv1.3
  105. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  106. VerifyMode = Peer
  107. [test-0]
  108. ExpectedProtocol = TLSv1.3
  109. ExpectedResult = Success
  110. ExpectedTmpKeyType = prime256v1
  111. # ===========================================================
  112. [1-curve-secp384r1]
  113. ssl_conf = 1-curve-secp384r1-ssl
  114. [1-curve-secp384r1-ssl]
  115. server = 1-curve-secp384r1-server
  116. client = 1-curve-secp384r1-client
  117. [1-curve-secp384r1-server]
  118. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  119. CipherString = DEFAULT@SECLEVEL=1
  120. Curves = secp384r1
  121. MaxProtocol = TLSv1.3
  122. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  123. [1-curve-secp384r1-client]
  124. CipherString = ECDHE@SECLEVEL=1
  125. Curves = secp384r1
  126. MaxProtocol = TLSv1.3
  127. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  128. VerifyMode = Peer
  129. [test-1]
  130. ExpectedProtocol = TLSv1.3
  131. ExpectedResult = Success
  132. ExpectedTmpKeyType = secp384r1
  133. # ===========================================================
  134. [2-curve-secp521r1]
  135. ssl_conf = 2-curve-secp521r1-ssl
  136. [2-curve-secp521r1-ssl]
  137. server = 2-curve-secp521r1-server
  138. client = 2-curve-secp521r1-client
  139. [2-curve-secp521r1-server]
  140. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  141. CipherString = DEFAULT@SECLEVEL=1
  142. Curves = secp521r1
  143. MaxProtocol = TLSv1.3
  144. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  145. [2-curve-secp521r1-client]
  146. CipherString = ECDHE@SECLEVEL=1
  147. Curves = secp521r1
  148. MaxProtocol = TLSv1.3
  149. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  150. VerifyMode = Peer
  151. [test-2]
  152. ExpectedProtocol = TLSv1.3
  153. ExpectedResult = Success
  154. ExpectedTmpKeyType = secp521r1
  155. # ===========================================================
  156. [3-curve-X25519]
  157. ssl_conf = 3-curve-X25519-ssl
  158. [3-curve-X25519-ssl]
  159. server = 3-curve-X25519-server
  160. client = 3-curve-X25519-client
  161. [3-curve-X25519-server]
  162. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  163. CipherString = DEFAULT@SECLEVEL=1
  164. Curves = X25519
  165. MaxProtocol = TLSv1.3
  166. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  167. [3-curve-X25519-client]
  168. CipherString = ECDHE@SECLEVEL=1
  169. Curves = X25519
  170. MaxProtocol = TLSv1.3
  171. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  172. VerifyMode = Peer
  173. [test-3]
  174. ExpectedProtocol = TLSv1.3
  175. ExpectedResult = Success
  176. ExpectedTmpKeyType = X25519
  177. # ===========================================================
  178. [4-curve-X448]
  179. ssl_conf = 4-curve-X448-ssl
  180. [4-curve-X448-ssl]
  181. server = 4-curve-X448-server
  182. client = 4-curve-X448-client
  183. [4-curve-X448-server]
  184. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  185. CipherString = DEFAULT@SECLEVEL=1
  186. Curves = X448
  187. MaxProtocol = TLSv1.3
  188. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  189. [4-curve-X448-client]
  190. CipherString = ECDHE@SECLEVEL=1
  191. Curves = X448
  192. MaxProtocol = TLSv1.3
  193. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  194. VerifyMode = Peer
  195. [test-4]
  196. ExpectedProtocol = TLSv1.3
  197. ExpectedResult = Success
  198. ExpectedTmpKeyType = X448
  199. # ===========================================================
  200. [5-curve-brainpoolP256r1tls13]
  201. ssl_conf = 5-curve-brainpoolP256r1tls13-ssl
  202. [5-curve-brainpoolP256r1tls13-ssl]
  203. server = 5-curve-brainpoolP256r1tls13-server
  204. client = 5-curve-brainpoolP256r1tls13-client
  205. [5-curve-brainpoolP256r1tls13-server]
  206. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  207. CipherString = DEFAULT@SECLEVEL=1
  208. Curves = brainpoolP256r1tls13
  209. MaxProtocol = TLSv1.3
  210. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  211. [5-curve-brainpoolP256r1tls13-client]
  212. CipherString = ECDHE@SECLEVEL=1
  213. Curves = brainpoolP256r1tls13
  214. MaxProtocol = TLSv1.3
  215. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  216. VerifyMode = Peer
  217. [test-5]
  218. ExpectedProtocol = TLSv1.3
  219. ExpectedResult = Success
  220. ExpectedTmpKeyType = brainpoolP256r1tls13
  221. # ===========================================================
  222. [6-curve-brainpoolP384r1tls13]
  223. ssl_conf = 6-curve-brainpoolP384r1tls13-ssl
  224. [6-curve-brainpoolP384r1tls13-ssl]
  225. server = 6-curve-brainpoolP384r1tls13-server
  226. client = 6-curve-brainpoolP384r1tls13-client
  227. [6-curve-brainpoolP384r1tls13-server]
  228. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  229. CipherString = DEFAULT@SECLEVEL=1
  230. Curves = brainpoolP384r1tls13
  231. MaxProtocol = TLSv1.3
  232. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  233. [6-curve-brainpoolP384r1tls13-client]
  234. CipherString = ECDHE@SECLEVEL=1
  235. Curves = brainpoolP384r1tls13
  236. MaxProtocol = TLSv1.3
  237. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  238. VerifyMode = Peer
  239. [test-6]
  240. ExpectedProtocol = TLSv1.3
  241. ExpectedResult = Success
  242. ExpectedTmpKeyType = brainpoolP384r1tls13
  243. # ===========================================================
  244. [7-curve-brainpoolP512r1tls13]
  245. ssl_conf = 7-curve-brainpoolP512r1tls13-ssl
  246. [7-curve-brainpoolP512r1tls13-ssl]
  247. server = 7-curve-brainpoolP512r1tls13-server
  248. client = 7-curve-brainpoolP512r1tls13-client
  249. [7-curve-brainpoolP512r1tls13-server]
  250. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  251. CipherString = DEFAULT@SECLEVEL=1
  252. Curves = brainpoolP512r1tls13
  253. MaxProtocol = TLSv1.3
  254. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  255. [7-curve-brainpoolP512r1tls13-client]
  256. CipherString = ECDHE@SECLEVEL=1
  257. Curves = brainpoolP512r1tls13
  258. MaxProtocol = TLSv1.3
  259. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  260. VerifyMode = Peer
  261. [test-7]
  262. ExpectedProtocol = TLSv1.3
  263. ExpectedResult = Success
  264. ExpectedTmpKeyType = brainpoolP512r1tls13
  265. # ===========================================================
  266. [8-curve-sect233k1]
  267. ssl_conf = 8-curve-sect233k1-ssl
  268. [8-curve-sect233k1-ssl]
  269. server = 8-curve-sect233k1-server
  270. client = 8-curve-sect233k1-client
  271. [8-curve-sect233k1-server]
  272. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  273. CipherString = DEFAULT@SECLEVEL=1
  274. Curves = sect233k1
  275. MaxProtocol = TLSv1.3
  276. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  277. [8-curve-sect233k1-client]
  278. CipherString = ECDHE@SECLEVEL=1
  279. Curves = sect233k1
  280. MaxProtocol = TLSv1.2
  281. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  282. VerifyMode = Peer
  283. [test-8]
  284. ExpectedProtocol = TLSv1.2
  285. ExpectedResult = Success
  286. ExpectedTmpKeyType = sect233k1
  287. # ===========================================================
  288. [9-curve-sect233r1]
  289. ssl_conf = 9-curve-sect233r1-ssl
  290. [9-curve-sect233r1-ssl]
  291. server = 9-curve-sect233r1-server
  292. client = 9-curve-sect233r1-client
  293. [9-curve-sect233r1-server]
  294. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  295. CipherString = DEFAULT@SECLEVEL=1
  296. Curves = sect233r1
  297. MaxProtocol = TLSv1.3
  298. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  299. [9-curve-sect233r1-client]
  300. CipherString = ECDHE@SECLEVEL=1
  301. Curves = sect233r1
  302. MaxProtocol = TLSv1.2
  303. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  304. VerifyMode = Peer
  305. [test-9]
  306. ExpectedProtocol = TLSv1.2
  307. ExpectedResult = Success
  308. ExpectedTmpKeyType = sect233r1
  309. # ===========================================================
  310. [10-curve-sect283k1]
  311. ssl_conf = 10-curve-sect283k1-ssl
  312. [10-curve-sect283k1-ssl]
  313. server = 10-curve-sect283k1-server
  314. client = 10-curve-sect283k1-client
  315. [10-curve-sect283k1-server]
  316. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  317. CipherString = DEFAULT@SECLEVEL=1
  318. Curves = sect283k1
  319. MaxProtocol = TLSv1.3
  320. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  321. [10-curve-sect283k1-client]
  322. CipherString = ECDHE@SECLEVEL=1
  323. Curves = sect283k1
  324. MaxProtocol = TLSv1.2
  325. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  326. VerifyMode = Peer
  327. [test-10]
  328. ExpectedProtocol = TLSv1.2
  329. ExpectedResult = Success
  330. ExpectedTmpKeyType = sect283k1
  331. # ===========================================================
  332. [11-curve-sect283r1]
  333. ssl_conf = 11-curve-sect283r1-ssl
  334. [11-curve-sect283r1-ssl]
  335. server = 11-curve-sect283r1-server
  336. client = 11-curve-sect283r1-client
  337. [11-curve-sect283r1-server]
  338. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  339. CipherString = DEFAULT@SECLEVEL=1
  340. Curves = sect283r1
  341. MaxProtocol = TLSv1.3
  342. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  343. [11-curve-sect283r1-client]
  344. CipherString = ECDHE@SECLEVEL=1
  345. Curves = sect283r1
  346. MaxProtocol = TLSv1.2
  347. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  348. VerifyMode = Peer
  349. [test-11]
  350. ExpectedProtocol = TLSv1.2
  351. ExpectedResult = Success
  352. ExpectedTmpKeyType = sect283r1
  353. # ===========================================================
  354. [12-curve-sect409k1]
  355. ssl_conf = 12-curve-sect409k1-ssl
  356. [12-curve-sect409k1-ssl]
  357. server = 12-curve-sect409k1-server
  358. client = 12-curve-sect409k1-client
  359. [12-curve-sect409k1-server]
  360. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  361. CipherString = DEFAULT@SECLEVEL=1
  362. Curves = sect409k1
  363. MaxProtocol = TLSv1.3
  364. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  365. [12-curve-sect409k1-client]
  366. CipherString = ECDHE@SECLEVEL=1
  367. Curves = sect409k1
  368. MaxProtocol = TLSv1.2
  369. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  370. VerifyMode = Peer
  371. [test-12]
  372. ExpectedProtocol = TLSv1.2
  373. ExpectedResult = Success
  374. ExpectedTmpKeyType = sect409k1
  375. # ===========================================================
  376. [13-curve-sect409r1]
  377. ssl_conf = 13-curve-sect409r1-ssl
  378. [13-curve-sect409r1-ssl]
  379. server = 13-curve-sect409r1-server
  380. client = 13-curve-sect409r1-client
  381. [13-curve-sect409r1-server]
  382. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  383. CipherString = DEFAULT@SECLEVEL=1
  384. Curves = sect409r1
  385. MaxProtocol = TLSv1.3
  386. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  387. [13-curve-sect409r1-client]
  388. CipherString = ECDHE@SECLEVEL=1
  389. Curves = sect409r1
  390. MaxProtocol = TLSv1.2
  391. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  392. VerifyMode = Peer
  393. [test-13]
  394. ExpectedProtocol = TLSv1.2
  395. ExpectedResult = Success
  396. ExpectedTmpKeyType = sect409r1
  397. # ===========================================================
  398. [14-curve-sect571k1]
  399. ssl_conf = 14-curve-sect571k1-ssl
  400. [14-curve-sect571k1-ssl]
  401. server = 14-curve-sect571k1-server
  402. client = 14-curve-sect571k1-client
  403. [14-curve-sect571k1-server]
  404. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  405. CipherString = DEFAULT@SECLEVEL=1
  406. Curves = sect571k1
  407. MaxProtocol = TLSv1.3
  408. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  409. [14-curve-sect571k1-client]
  410. CipherString = ECDHE@SECLEVEL=1
  411. Curves = sect571k1
  412. MaxProtocol = TLSv1.2
  413. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  414. VerifyMode = Peer
  415. [test-14]
  416. ExpectedProtocol = TLSv1.2
  417. ExpectedResult = Success
  418. ExpectedTmpKeyType = sect571k1
  419. # ===========================================================
  420. [15-curve-sect571r1]
  421. ssl_conf = 15-curve-sect571r1-ssl
  422. [15-curve-sect571r1-ssl]
  423. server = 15-curve-sect571r1-server
  424. client = 15-curve-sect571r1-client
  425. [15-curve-sect571r1-server]
  426. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  427. CipherString = DEFAULT@SECLEVEL=1
  428. Curves = sect571r1
  429. MaxProtocol = TLSv1.3
  430. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  431. [15-curve-sect571r1-client]
  432. CipherString = ECDHE@SECLEVEL=1
  433. Curves = sect571r1
  434. MaxProtocol = TLSv1.2
  435. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  436. VerifyMode = Peer
  437. [test-15]
  438. ExpectedProtocol = TLSv1.2
  439. ExpectedResult = Success
  440. ExpectedTmpKeyType = sect571r1
  441. # ===========================================================
  442. [16-curve-secp224r1]
  443. ssl_conf = 16-curve-secp224r1-ssl
  444. [16-curve-secp224r1-ssl]
  445. server = 16-curve-secp224r1-server
  446. client = 16-curve-secp224r1-client
  447. [16-curve-secp224r1-server]
  448. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  449. CipherString = DEFAULT@SECLEVEL=1
  450. Curves = secp224r1
  451. MaxProtocol = TLSv1.3
  452. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  453. [16-curve-secp224r1-client]
  454. CipherString = ECDHE@SECLEVEL=1
  455. Curves = secp224r1
  456. MaxProtocol = TLSv1.2
  457. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  458. VerifyMode = Peer
  459. [test-16]
  460. ExpectedProtocol = TLSv1.2
  461. ExpectedResult = Success
  462. ExpectedTmpKeyType = secp224r1
  463. # ===========================================================
  464. [17-curve-sect163k1]
  465. ssl_conf = 17-curve-sect163k1-ssl
  466. [17-curve-sect163k1-ssl]
  467. server = 17-curve-sect163k1-server
  468. client = 17-curve-sect163k1-client
  469. [17-curve-sect163k1-server]
  470. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  471. CipherString = DEFAULT@SECLEVEL=1
  472. Curves = sect163k1
  473. MaxProtocol = TLSv1.3
  474. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  475. [17-curve-sect163k1-client]
  476. CipherString = ECDHE@SECLEVEL=1
  477. Curves = sect163k1
  478. MaxProtocol = TLSv1.2
  479. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  480. VerifyMode = Peer
  481. [test-17]
  482. ExpectedProtocol = TLSv1.2
  483. ExpectedResult = Success
  484. ExpectedTmpKeyType = sect163k1
  485. # ===========================================================
  486. [18-curve-sect163r2]
  487. ssl_conf = 18-curve-sect163r2-ssl
  488. [18-curve-sect163r2-ssl]
  489. server = 18-curve-sect163r2-server
  490. client = 18-curve-sect163r2-client
  491. [18-curve-sect163r2-server]
  492. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  493. CipherString = DEFAULT@SECLEVEL=1
  494. Curves = sect163r2
  495. MaxProtocol = TLSv1.3
  496. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  497. [18-curve-sect163r2-client]
  498. CipherString = ECDHE@SECLEVEL=1
  499. Curves = sect163r2
  500. MaxProtocol = TLSv1.2
  501. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  502. VerifyMode = Peer
  503. [test-18]
  504. ExpectedProtocol = TLSv1.2
  505. ExpectedResult = Success
  506. ExpectedTmpKeyType = sect163r2
  507. # ===========================================================
  508. [19-curve-prime192v1]
  509. ssl_conf = 19-curve-prime192v1-ssl
  510. [19-curve-prime192v1-ssl]
  511. server = 19-curve-prime192v1-server
  512. client = 19-curve-prime192v1-client
  513. [19-curve-prime192v1-server]
  514. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  515. CipherString = DEFAULT@SECLEVEL=1
  516. Curves = prime192v1
  517. MaxProtocol = TLSv1.3
  518. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  519. [19-curve-prime192v1-client]
  520. CipherString = ECDHE@SECLEVEL=1
  521. Curves = prime192v1
  522. MaxProtocol = TLSv1.2
  523. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  524. VerifyMode = Peer
  525. [test-19]
  526. ExpectedProtocol = TLSv1.2
  527. ExpectedResult = Success
  528. ExpectedTmpKeyType = prime192v1
  529. # ===========================================================
  530. [20-curve-sect163r1]
  531. ssl_conf = 20-curve-sect163r1-ssl
  532. [20-curve-sect163r1-ssl]
  533. server = 20-curve-sect163r1-server
  534. client = 20-curve-sect163r1-client
  535. [20-curve-sect163r1-server]
  536. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  537. CipherString = DEFAULT@SECLEVEL=1
  538. Curves = sect163r1
  539. MaxProtocol = TLSv1.3
  540. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  541. [20-curve-sect163r1-client]
  542. CipherString = ECDHE@SECLEVEL=1
  543. Curves = sect163r1
  544. MaxProtocol = TLSv1.2
  545. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  546. VerifyMode = Peer
  547. [test-20]
  548. ExpectedProtocol = TLSv1.2
  549. ExpectedResult = Success
  550. ExpectedTmpKeyType = sect163r1
  551. # ===========================================================
  552. [21-curve-sect193r1]
  553. ssl_conf = 21-curve-sect193r1-ssl
  554. [21-curve-sect193r1-ssl]
  555. server = 21-curve-sect193r1-server
  556. client = 21-curve-sect193r1-client
  557. [21-curve-sect193r1-server]
  558. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  559. CipherString = DEFAULT@SECLEVEL=1
  560. Curves = sect193r1
  561. MaxProtocol = TLSv1.3
  562. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  563. [21-curve-sect193r1-client]
  564. CipherString = ECDHE@SECLEVEL=1
  565. Curves = sect193r1
  566. MaxProtocol = TLSv1.2
  567. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  568. VerifyMode = Peer
  569. [test-21]
  570. ExpectedProtocol = TLSv1.2
  571. ExpectedResult = Success
  572. ExpectedTmpKeyType = sect193r1
  573. # ===========================================================
  574. [22-curve-sect193r2]
  575. ssl_conf = 22-curve-sect193r2-ssl
  576. [22-curve-sect193r2-ssl]
  577. server = 22-curve-sect193r2-server
  578. client = 22-curve-sect193r2-client
  579. [22-curve-sect193r2-server]
  580. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  581. CipherString = DEFAULT@SECLEVEL=1
  582. Curves = sect193r2
  583. MaxProtocol = TLSv1.3
  584. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  585. [22-curve-sect193r2-client]
  586. CipherString = ECDHE@SECLEVEL=1
  587. Curves = sect193r2
  588. MaxProtocol = TLSv1.2
  589. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  590. VerifyMode = Peer
  591. [test-22]
  592. ExpectedProtocol = TLSv1.2
  593. ExpectedResult = Success
  594. ExpectedTmpKeyType = sect193r2
  595. # ===========================================================
  596. [23-curve-sect239k1]
  597. ssl_conf = 23-curve-sect239k1-ssl
  598. [23-curve-sect239k1-ssl]
  599. server = 23-curve-sect239k1-server
  600. client = 23-curve-sect239k1-client
  601. [23-curve-sect239k1-server]
  602. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  603. CipherString = DEFAULT@SECLEVEL=1
  604. Curves = sect239k1
  605. MaxProtocol = TLSv1.3
  606. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  607. [23-curve-sect239k1-client]
  608. CipherString = ECDHE@SECLEVEL=1
  609. Curves = sect239k1
  610. MaxProtocol = TLSv1.2
  611. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  612. VerifyMode = Peer
  613. [test-23]
  614. ExpectedProtocol = TLSv1.2
  615. ExpectedResult = Success
  616. ExpectedTmpKeyType = sect239k1
  617. # ===========================================================
  618. [24-curve-secp160k1]
  619. ssl_conf = 24-curve-secp160k1-ssl
  620. [24-curve-secp160k1-ssl]
  621. server = 24-curve-secp160k1-server
  622. client = 24-curve-secp160k1-client
  623. [24-curve-secp160k1-server]
  624. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  625. CipherString = DEFAULT@SECLEVEL=1
  626. Curves = secp160k1
  627. MaxProtocol = TLSv1.3
  628. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  629. [24-curve-secp160k1-client]
  630. CipherString = ECDHE@SECLEVEL=1
  631. Curves = secp160k1
  632. MaxProtocol = TLSv1.2
  633. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  634. VerifyMode = Peer
  635. [test-24]
  636. ExpectedProtocol = TLSv1.2
  637. ExpectedResult = Success
  638. ExpectedTmpKeyType = secp160k1
  639. # ===========================================================
  640. [25-curve-secp160r1]
  641. ssl_conf = 25-curve-secp160r1-ssl
  642. [25-curve-secp160r1-ssl]
  643. server = 25-curve-secp160r1-server
  644. client = 25-curve-secp160r1-client
  645. [25-curve-secp160r1-server]
  646. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  647. CipherString = DEFAULT@SECLEVEL=1
  648. Curves = secp160r1
  649. MaxProtocol = TLSv1.3
  650. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  651. [25-curve-secp160r1-client]
  652. CipherString = ECDHE@SECLEVEL=1
  653. Curves = secp160r1
  654. MaxProtocol = TLSv1.2
  655. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  656. VerifyMode = Peer
  657. [test-25]
  658. ExpectedProtocol = TLSv1.2
  659. ExpectedResult = Success
  660. ExpectedTmpKeyType = secp160r1
  661. # ===========================================================
  662. [26-curve-secp160r2]
  663. ssl_conf = 26-curve-secp160r2-ssl
  664. [26-curve-secp160r2-ssl]
  665. server = 26-curve-secp160r2-server
  666. client = 26-curve-secp160r2-client
  667. [26-curve-secp160r2-server]
  668. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  669. CipherString = DEFAULT@SECLEVEL=1
  670. Curves = secp160r2
  671. MaxProtocol = TLSv1.3
  672. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  673. [26-curve-secp160r2-client]
  674. CipherString = ECDHE@SECLEVEL=1
  675. Curves = secp160r2
  676. MaxProtocol = TLSv1.2
  677. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  678. VerifyMode = Peer
  679. [test-26]
  680. ExpectedProtocol = TLSv1.2
  681. ExpectedResult = Success
  682. ExpectedTmpKeyType = secp160r2
  683. # ===========================================================
  684. [27-curve-secp192k1]
  685. ssl_conf = 27-curve-secp192k1-ssl
  686. [27-curve-secp192k1-ssl]
  687. server = 27-curve-secp192k1-server
  688. client = 27-curve-secp192k1-client
  689. [27-curve-secp192k1-server]
  690. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  691. CipherString = DEFAULT@SECLEVEL=1
  692. Curves = secp192k1
  693. MaxProtocol = TLSv1.3
  694. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  695. [27-curve-secp192k1-client]
  696. CipherString = ECDHE@SECLEVEL=1
  697. Curves = secp192k1
  698. MaxProtocol = TLSv1.2
  699. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  700. VerifyMode = Peer
  701. [test-27]
  702. ExpectedProtocol = TLSv1.2
  703. ExpectedResult = Success
  704. ExpectedTmpKeyType = secp192k1
  705. # ===========================================================
  706. [28-curve-secp224k1]
  707. ssl_conf = 28-curve-secp224k1-ssl
  708. [28-curve-secp224k1-ssl]
  709. server = 28-curve-secp224k1-server
  710. client = 28-curve-secp224k1-client
  711. [28-curve-secp224k1-server]
  712. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  713. CipherString = DEFAULT@SECLEVEL=1
  714. Curves = secp224k1
  715. MaxProtocol = TLSv1.3
  716. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  717. [28-curve-secp224k1-client]
  718. CipherString = ECDHE@SECLEVEL=1
  719. Curves = secp224k1
  720. MaxProtocol = TLSv1.2
  721. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  722. VerifyMode = Peer
  723. [test-28]
  724. ExpectedProtocol = TLSv1.2
  725. ExpectedResult = Success
  726. ExpectedTmpKeyType = secp224k1
  727. # ===========================================================
  728. [29-curve-secp256k1]
  729. ssl_conf = 29-curve-secp256k1-ssl
  730. [29-curve-secp256k1-ssl]
  731. server = 29-curve-secp256k1-server
  732. client = 29-curve-secp256k1-client
  733. [29-curve-secp256k1-server]
  734. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  735. CipherString = DEFAULT@SECLEVEL=1
  736. Curves = secp256k1
  737. MaxProtocol = TLSv1.3
  738. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  739. [29-curve-secp256k1-client]
  740. CipherString = ECDHE@SECLEVEL=1
  741. Curves = secp256k1
  742. MaxProtocol = TLSv1.2
  743. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  744. VerifyMode = Peer
  745. [test-29]
  746. ExpectedProtocol = TLSv1.2
  747. ExpectedResult = Success
  748. ExpectedTmpKeyType = secp256k1
  749. # ===========================================================
  750. [30-curve-brainpoolP256r1]
  751. ssl_conf = 30-curve-brainpoolP256r1-ssl
  752. [30-curve-brainpoolP256r1-ssl]
  753. server = 30-curve-brainpoolP256r1-server
  754. client = 30-curve-brainpoolP256r1-client
  755. [30-curve-brainpoolP256r1-server]
  756. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  757. CipherString = DEFAULT@SECLEVEL=1
  758. Curves = brainpoolP256r1
  759. MaxProtocol = TLSv1.3
  760. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  761. [30-curve-brainpoolP256r1-client]
  762. CipherString = ECDHE@SECLEVEL=1
  763. Curves = brainpoolP256r1
  764. MaxProtocol = TLSv1.2
  765. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  766. VerifyMode = Peer
  767. [test-30]
  768. ExpectedProtocol = TLSv1.2
  769. ExpectedResult = Success
  770. ExpectedTmpKeyType = brainpoolP256r1
  771. # ===========================================================
  772. [31-curve-brainpoolP384r1]
  773. ssl_conf = 31-curve-brainpoolP384r1-ssl
  774. [31-curve-brainpoolP384r1-ssl]
  775. server = 31-curve-brainpoolP384r1-server
  776. client = 31-curve-brainpoolP384r1-client
  777. [31-curve-brainpoolP384r1-server]
  778. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  779. CipherString = DEFAULT@SECLEVEL=1
  780. Curves = brainpoolP384r1
  781. MaxProtocol = TLSv1.3
  782. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  783. [31-curve-brainpoolP384r1-client]
  784. CipherString = ECDHE@SECLEVEL=1
  785. Curves = brainpoolP384r1
  786. MaxProtocol = TLSv1.2
  787. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  788. VerifyMode = Peer
  789. [test-31]
  790. ExpectedProtocol = TLSv1.2
  791. ExpectedResult = Success
  792. ExpectedTmpKeyType = brainpoolP384r1
  793. # ===========================================================
  794. [32-curve-brainpoolP512r1]
  795. ssl_conf = 32-curve-brainpoolP512r1-ssl
  796. [32-curve-brainpoolP512r1-ssl]
  797. server = 32-curve-brainpoolP512r1-server
  798. client = 32-curve-brainpoolP512r1-client
  799. [32-curve-brainpoolP512r1-server]
  800. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  801. CipherString = DEFAULT@SECLEVEL=1
  802. Curves = brainpoolP512r1
  803. MaxProtocol = TLSv1.3
  804. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  805. [32-curve-brainpoolP512r1-client]
  806. CipherString = ECDHE@SECLEVEL=1
  807. Curves = brainpoolP512r1
  808. MaxProtocol = TLSv1.2
  809. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  810. VerifyMode = Peer
  811. [test-32]
  812. ExpectedProtocol = TLSv1.2
  813. ExpectedResult = Success
  814. ExpectedTmpKeyType = brainpoolP512r1
  815. # ===========================================================
  816. [33-curve-sect233k1-tls12-in-tls13]
  817. ssl_conf = 33-curve-sect233k1-tls12-in-tls13-ssl
  818. [33-curve-sect233k1-tls12-in-tls13-ssl]
  819. server = 33-curve-sect233k1-tls12-in-tls13-server
  820. client = 33-curve-sect233k1-tls12-in-tls13-client
  821. [33-curve-sect233k1-tls12-in-tls13-server]
  822. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  823. CipherString = DEFAULT@SECLEVEL=1
  824. Curves = sect233k1:P-256
  825. MaxProtocol = TLSv1.3
  826. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  827. [33-curve-sect233k1-tls12-in-tls13-client]
  828. CipherString = ECDHE@SECLEVEL=1
  829. Curves = sect233k1:P-256
  830. MaxProtocol = TLSv1.3
  831. MinProtocol = TLSv1.3
  832. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  833. VerifyMode = Peer
  834. [test-33]
  835. ExpectedProtocol = TLSv1.3
  836. ExpectedResult = Success
  837. ExpectedTmpKeyType = P-256
  838. # ===========================================================
  839. [34-curve-sect233r1-tls12-in-tls13]
  840. ssl_conf = 34-curve-sect233r1-tls12-in-tls13-ssl
  841. [34-curve-sect233r1-tls12-in-tls13-ssl]
  842. server = 34-curve-sect233r1-tls12-in-tls13-server
  843. client = 34-curve-sect233r1-tls12-in-tls13-client
  844. [34-curve-sect233r1-tls12-in-tls13-server]
  845. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  846. CipherString = DEFAULT@SECLEVEL=1
  847. Curves = sect233r1:P-256
  848. MaxProtocol = TLSv1.3
  849. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  850. [34-curve-sect233r1-tls12-in-tls13-client]
  851. CipherString = ECDHE@SECLEVEL=1
  852. Curves = sect233r1:P-256
  853. MaxProtocol = TLSv1.3
  854. MinProtocol = TLSv1.3
  855. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  856. VerifyMode = Peer
  857. [test-34]
  858. ExpectedProtocol = TLSv1.3
  859. ExpectedResult = Success
  860. ExpectedTmpKeyType = P-256
  861. # ===========================================================
  862. [35-curve-sect283k1-tls12-in-tls13]
  863. ssl_conf = 35-curve-sect283k1-tls12-in-tls13-ssl
  864. [35-curve-sect283k1-tls12-in-tls13-ssl]
  865. server = 35-curve-sect283k1-tls12-in-tls13-server
  866. client = 35-curve-sect283k1-tls12-in-tls13-client
  867. [35-curve-sect283k1-tls12-in-tls13-server]
  868. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  869. CipherString = DEFAULT@SECLEVEL=1
  870. Curves = sect283k1:P-256
  871. MaxProtocol = TLSv1.3
  872. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  873. [35-curve-sect283k1-tls12-in-tls13-client]
  874. CipherString = ECDHE@SECLEVEL=1
  875. Curves = sect283k1:P-256
  876. MaxProtocol = TLSv1.3
  877. MinProtocol = TLSv1.3
  878. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  879. VerifyMode = Peer
  880. [test-35]
  881. ExpectedProtocol = TLSv1.3
  882. ExpectedResult = Success
  883. ExpectedTmpKeyType = P-256
  884. # ===========================================================
  885. [36-curve-sect283r1-tls12-in-tls13]
  886. ssl_conf = 36-curve-sect283r1-tls12-in-tls13-ssl
  887. [36-curve-sect283r1-tls12-in-tls13-ssl]
  888. server = 36-curve-sect283r1-tls12-in-tls13-server
  889. client = 36-curve-sect283r1-tls12-in-tls13-client
  890. [36-curve-sect283r1-tls12-in-tls13-server]
  891. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  892. CipherString = DEFAULT@SECLEVEL=1
  893. Curves = sect283r1:P-256
  894. MaxProtocol = TLSv1.3
  895. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  896. [36-curve-sect283r1-tls12-in-tls13-client]
  897. CipherString = ECDHE@SECLEVEL=1
  898. Curves = sect283r1:P-256
  899. MaxProtocol = TLSv1.3
  900. MinProtocol = TLSv1.3
  901. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  902. VerifyMode = Peer
  903. [test-36]
  904. ExpectedProtocol = TLSv1.3
  905. ExpectedResult = Success
  906. ExpectedTmpKeyType = P-256
  907. # ===========================================================
  908. [37-curve-sect409k1-tls12-in-tls13]
  909. ssl_conf = 37-curve-sect409k1-tls12-in-tls13-ssl
  910. [37-curve-sect409k1-tls12-in-tls13-ssl]
  911. server = 37-curve-sect409k1-tls12-in-tls13-server
  912. client = 37-curve-sect409k1-tls12-in-tls13-client
  913. [37-curve-sect409k1-tls12-in-tls13-server]
  914. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  915. CipherString = DEFAULT@SECLEVEL=1
  916. Curves = sect409k1:P-256
  917. MaxProtocol = TLSv1.3
  918. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  919. [37-curve-sect409k1-tls12-in-tls13-client]
  920. CipherString = ECDHE@SECLEVEL=1
  921. Curves = sect409k1:P-256
  922. MaxProtocol = TLSv1.3
  923. MinProtocol = TLSv1.3
  924. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  925. VerifyMode = Peer
  926. [test-37]
  927. ExpectedProtocol = TLSv1.3
  928. ExpectedResult = Success
  929. ExpectedTmpKeyType = P-256
  930. # ===========================================================
  931. [38-curve-sect409r1-tls12-in-tls13]
  932. ssl_conf = 38-curve-sect409r1-tls12-in-tls13-ssl
  933. [38-curve-sect409r1-tls12-in-tls13-ssl]
  934. server = 38-curve-sect409r1-tls12-in-tls13-server
  935. client = 38-curve-sect409r1-tls12-in-tls13-client
  936. [38-curve-sect409r1-tls12-in-tls13-server]
  937. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  938. CipherString = DEFAULT@SECLEVEL=1
  939. Curves = sect409r1:P-256
  940. MaxProtocol = TLSv1.3
  941. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  942. [38-curve-sect409r1-tls12-in-tls13-client]
  943. CipherString = ECDHE@SECLEVEL=1
  944. Curves = sect409r1:P-256
  945. MaxProtocol = TLSv1.3
  946. MinProtocol = TLSv1.3
  947. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  948. VerifyMode = Peer
  949. [test-38]
  950. ExpectedProtocol = TLSv1.3
  951. ExpectedResult = Success
  952. ExpectedTmpKeyType = P-256
  953. # ===========================================================
  954. [39-curve-sect571k1-tls12-in-tls13]
  955. ssl_conf = 39-curve-sect571k1-tls12-in-tls13-ssl
  956. [39-curve-sect571k1-tls12-in-tls13-ssl]
  957. server = 39-curve-sect571k1-tls12-in-tls13-server
  958. client = 39-curve-sect571k1-tls12-in-tls13-client
  959. [39-curve-sect571k1-tls12-in-tls13-server]
  960. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  961. CipherString = DEFAULT@SECLEVEL=1
  962. Curves = sect571k1:P-256
  963. MaxProtocol = TLSv1.3
  964. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  965. [39-curve-sect571k1-tls12-in-tls13-client]
  966. CipherString = ECDHE@SECLEVEL=1
  967. Curves = sect571k1:P-256
  968. MaxProtocol = TLSv1.3
  969. MinProtocol = TLSv1.3
  970. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  971. VerifyMode = Peer
  972. [test-39]
  973. ExpectedProtocol = TLSv1.3
  974. ExpectedResult = Success
  975. ExpectedTmpKeyType = P-256
  976. # ===========================================================
  977. [40-curve-sect571r1-tls12-in-tls13]
  978. ssl_conf = 40-curve-sect571r1-tls12-in-tls13-ssl
  979. [40-curve-sect571r1-tls12-in-tls13-ssl]
  980. server = 40-curve-sect571r1-tls12-in-tls13-server
  981. client = 40-curve-sect571r1-tls12-in-tls13-client
  982. [40-curve-sect571r1-tls12-in-tls13-server]
  983. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  984. CipherString = DEFAULT@SECLEVEL=1
  985. Curves = sect571r1:P-256
  986. MaxProtocol = TLSv1.3
  987. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  988. [40-curve-sect571r1-tls12-in-tls13-client]
  989. CipherString = ECDHE@SECLEVEL=1
  990. Curves = sect571r1:P-256
  991. MaxProtocol = TLSv1.3
  992. MinProtocol = TLSv1.3
  993. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  994. VerifyMode = Peer
  995. [test-40]
  996. ExpectedProtocol = TLSv1.3
  997. ExpectedResult = Success
  998. ExpectedTmpKeyType = P-256
  999. # ===========================================================
  1000. [41-curve-secp224r1-tls12-in-tls13]
  1001. ssl_conf = 41-curve-secp224r1-tls12-in-tls13-ssl
  1002. [41-curve-secp224r1-tls12-in-tls13-ssl]
  1003. server = 41-curve-secp224r1-tls12-in-tls13-server
  1004. client = 41-curve-secp224r1-tls12-in-tls13-client
  1005. [41-curve-secp224r1-tls12-in-tls13-server]
  1006. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1007. CipherString = DEFAULT@SECLEVEL=1
  1008. Curves = secp224r1:P-256
  1009. MaxProtocol = TLSv1.3
  1010. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1011. [41-curve-secp224r1-tls12-in-tls13-client]
  1012. CipherString = ECDHE@SECLEVEL=1
  1013. Curves = secp224r1:P-256
  1014. MaxProtocol = TLSv1.3
  1015. MinProtocol = TLSv1.3
  1016. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1017. VerifyMode = Peer
  1018. [test-41]
  1019. ExpectedProtocol = TLSv1.3
  1020. ExpectedResult = Success
  1021. ExpectedTmpKeyType = P-256
  1022. # ===========================================================
  1023. [42-curve-sect163k1-tls12-in-tls13]
  1024. ssl_conf = 42-curve-sect163k1-tls12-in-tls13-ssl
  1025. [42-curve-sect163k1-tls12-in-tls13-ssl]
  1026. server = 42-curve-sect163k1-tls12-in-tls13-server
  1027. client = 42-curve-sect163k1-tls12-in-tls13-client
  1028. [42-curve-sect163k1-tls12-in-tls13-server]
  1029. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1030. CipherString = DEFAULT@SECLEVEL=1
  1031. Curves = sect163k1:P-256
  1032. MaxProtocol = TLSv1.3
  1033. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1034. [42-curve-sect163k1-tls12-in-tls13-client]
  1035. CipherString = ECDHE@SECLEVEL=1
  1036. Curves = sect163k1:P-256
  1037. MaxProtocol = TLSv1.3
  1038. MinProtocol = TLSv1.3
  1039. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1040. VerifyMode = Peer
  1041. [test-42]
  1042. ExpectedProtocol = TLSv1.3
  1043. ExpectedResult = Success
  1044. ExpectedTmpKeyType = P-256
  1045. # ===========================================================
  1046. [43-curve-sect163r2-tls12-in-tls13]
  1047. ssl_conf = 43-curve-sect163r2-tls12-in-tls13-ssl
  1048. [43-curve-sect163r2-tls12-in-tls13-ssl]
  1049. server = 43-curve-sect163r2-tls12-in-tls13-server
  1050. client = 43-curve-sect163r2-tls12-in-tls13-client
  1051. [43-curve-sect163r2-tls12-in-tls13-server]
  1052. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1053. CipherString = DEFAULT@SECLEVEL=1
  1054. Curves = sect163r2:P-256
  1055. MaxProtocol = TLSv1.3
  1056. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1057. [43-curve-sect163r2-tls12-in-tls13-client]
  1058. CipherString = ECDHE@SECLEVEL=1
  1059. Curves = sect163r2:P-256
  1060. MaxProtocol = TLSv1.3
  1061. MinProtocol = TLSv1.3
  1062. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1063. VerifyMode = Peer
  1064. [test-43]
  1065. ExpectedProtocol = TLSv1.3
  1066. ExpectedResult = Success
  1067. ExpectedTmpKeyType = P-256
  1068. # ===========================================================
  1069. [44-curve-prime192v1-tls12-in-tls13]
  1070. ssl_conf = 44-curve-prime192v1-tls12-in-tls13-ssl
  1071. [44-curve-prime192v1-tls12-in-tls13-ssl]
  1072. server = 44-curve-prime192v1-tls12-in-tls13-server
  1073. client = 44-curve-prime192v1-tls12-in-tls13-client
  1074. [44-curve-prime192v1-tls12-in-tls13-server]
  1075. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1076. CipherString = DEFAULT@SECLEVEL=1
  1077. Curves = prime192v1:P-256
  1078. MaxProtocol = TLSv1.3
  1079. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1080. [44-curve-prime192v1-tls12-in-tls13-client]
  1081. CipherString = ECDHE@SECLEVEL=1
  1082. Curves = prime192v1:P-256
  1083. MaxProtocol = TLSv1.3
  1084. MinProtocol = TLSv1.3
  1085. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1086. VerifyMode = Peer
  1087. [test-44]
  1088. ExpectedProtocol = TLSv1.3
  1089. ExpectedResult = Success
  1090. ExpectedTmpKeyType = P-256
  1091. # ===========================================================
  1092. [45-curve-sect163r1-tls12-in-tls13]
  1093. ssl_conf = 45-curve-sect163r1-tls12-in-tls13-ssl
  1094. [45-curve-sect163r1-tls12-in-tls13-ssl]
  1095. server = 45-curve-sect163r1-tls12-in-tls13-server
  1096. client = 45-curve-sect163r1-tls12-in-tls13-client
  1097. [45-curve-sect163r1-tls12-in-tls13-server]
  1098. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1099. CipherString = DEFAULT@SECLEVEL=1
  1100. Curves = sect163r1:P-256
  1101. MaxProtocol = TLSv1.3
  1102. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1103. [45-curve-sect163r1-tls12-in-tls13-client]
  1104. CipherString = ECDHE@SECLEVEL=1
  1105. Curves = sect163r1:P-256
  1106. MaxProtocol = TLSv1.3
  1107. MinProtocol = TLSv1.3
  1108. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1109. VerifyMode = Peer
  1110. [test-45]
  1111. ExpectedProtocol = TLSv1.3
  1112. ExpectedResult = Success
  1113. ExpectedTmpKeyType = P-256
  1114. # ===========================================================
  1115. [46-curve-sect193r1-tls12-in-tls13]
  1116. ssl_conf = 46-curve-sect193r1-tls12-in-tls13-ssl
  1117. [46-curve-sect193r1-tls12-in-tls13-ssl]
  1118. server = 46-curve-sect193r1-tls12-in-tls13-server
  1119. client = 46-curve-sect193r1-tls12-in-tls13-client
  1120. [46-curve-sect193r1-tls12-in-tls13-server]
  1121. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1122. CipherString = DEFAULT@SECLEVEL=1
  1123. Curves = sect193r1:P-256
  1124. MaxProtocol = TLSv1.3
  1125. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1126. [46-curve-sect193r1-tls12-in-tls13-client]
  1127. CipherString = ECDHE@SECLEVEL=1
  1128. Curves = sect193r1:P-256
  1129. MaxProtocol = TLSv1.3
  1130. MinProtocol = TLSv1.3
  1131. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1132. VerifyMode = Peer
  1133. [test-46]
  1134. ExpectedProtocol = TLSv1.3
  1135. ExpectedResult = Success
  1136. ExpectedTmpKeyType = P-256
  1137. # ===========================================================
  1138. [47-curve-sect193r2-tls12-in-tls13]
  1139. ssl_conf = 47-curve-sect193r2-tls12-in-tls13-ssl
  1140. [47-curve-sect193r2-tls12-in-tls13-ssl]
  1141. server = 47-curve-sect193r2-tls12-in-tls13-server
  1142. client = 47-curve-sect193r2-tls12-in-tls13-client
  1143. [47-curve-sect193r2-tls12-in-tls13-server]
  1144. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1145. CipherString = DEFAULT@SECLEVEL=1
  1146. Curves = sect193r2:P-256
  1147. MaxProtocol = TLSv1.3
  1148. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1149. [47-curve-sect193r2-tls12-in-tls13-client]
  1150. CipherString = ECDHE@SECLEVEL=1
  1151. Curves = sect193r2:P-256
  1152. MaxProtocol = TLSv1.3
  1153. MinProtocol = TLSv1.3
  1154. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1155. VerifyMode = Peer
  1156. [test-47]
  1157. ExpectedProtocol = TLSv1.3
  1158. ExpectedResult = Success
  1159. ExpectedTmpKeyType = P-256
  1160. # ===========================================================
  1161. [48-curve-sect239k1-tls12-in-tls13]
  1162. ssl_conf = 48-curve-sect239k1-tls12-in-tls13-ssl
  1163. [48-curve-sect239k1-tls12-in-tls13-ssl]
  1164. server = 48-curve-sect239k1-tls12-in-tls13-server
  1165. client = 48-curve-sect239k1-tls12-in-tls13-client
  1166. [48-curve-sect239k1-tls12-in-tls13-server]
  1167. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1168. CipherString = DEFAULT@SECLEVEL=1
  1169. Curves = sect239k1:P-256
  1170. MaxProtocol = TLSv1.3
  1171. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1172. [48-curve-sect239k1-tls12-in-tls13-client]
  1173. CipherString = ECDHE@SECLEVEL=1
  1174. Curves = sect239k1:P-256
  1175. MaxProtocol = TLSv1.3
  1176. MinProtocol = TLSv1.3
  1177. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1178. VerifyMode = Peer
  1179. [test-48]
  1180. ExpectedProtocol = TLSv1.3
  1181. ExpectedResult = Success
  1182. ExpectedTmpKeyType = P-256
  1183. # ===========================================================
  1184. [49-curve-secp160k1-tls12-in-tls13]
  1185. ssl_conf = 49-curve-secp160k1-tls12-in-tls13-ssl
  1186. [49-curve-secp160k1-tls12-in-tls13-ssl]
  1187. server = 49-curve-secp160k1-tls12-in-tls13-server
  1188. client = 49-curve-secp160k1-tls12-in-tls13-client
  1189. [49-curve-secp160k1-tls12-in-tls13-server]
  1190. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1191. CipherString = DEFAULT@SECLEVEL=1
  1192. Curves = secp160k1:P-256
  1193. MaxProtocol = TLSv1.3
  1194. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1195. [49-curve-secp160k1-tls12-in-tls13-client]
  1196. CipherString = ECDHE@SECLEVEL=1
  1197. Curves = secp160k1:P-256
  1198. MaxProtocol = TLSv1.3
  1199. MinProtocol = TLSv1.3
  1200. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1201. VerifyMode = Peer
  1202. [test-49]
  1203. ExpectedProtocol = TLSv1.3
  1204. ExpectedResult = Success
  1205. ExpectedTmpKeyType = P-256
  1206. # ===========================================================
  1207. [50-curve-secp160r1-tls12-in-tls13]
  1208. ssl_conf = 50-curve-secp160r1-tls12-in-tls13-ssl
  1209. [50-curve-secp160r1-tls12-in-tls13-ssl]
  1210. server = 50-curve-secp160r1-tls12-in-tls13-server
  1211. client = 50-curve-secp160r1-tls12-in-tls13-client
  1212. [50-curve-secp160r1-tls12-in-tls13-server]
  1213. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1214. CipherString = DEFAULT@SECLEVEL=1
  1215. Curves = secp160r1:P-256
  1216. MaxProtocol = TLSv1.3
  1217. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1218. [50-curve-secp160r1-tls12-in-tls13-client]
  1219. CipherString = ECDHE@SECLEVEL=1
  1220. Curves = secp160r1:P-256
  1221. MaxProtocol = TLSv1.3
  1222. MinProtocol = TLSv1.3
  1223. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1224. VerifyMode = Peer
  1225. [test-50]
  1226. ExpectedProtocol = TLSv1.3
  1227. ExpectedResult = Success
  1228. ExpectedTmpKeyType = P-256
  1229. # ===========================================================
  1230. [51-curve-secp160r2-tls12-in-tls13]
  1231. ssl_conf = 51-curve-secp160r2-tls12-in-tls13-ssl
  1232. [51-curve-secp160r2-tls12-in-tls13-ssl]
  1233. server = 51-curve-secp160r2-tls12-in-tls13-server
  1234. client = 51-curve-secp160r2-tls12-in-tls13-client
  1235. [51-curve-secp160r2-tls12-in-tls13-server]
  1236. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1237. CipherString = DEFAULT@SECLEVEL=1
  1238. Curves = secp160r2:P-256
  1239. MaxProtocol = TLSv1.3
  1240. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1241. [51-curve-secp160r2-tls12-in-tls13-client]
  1242. CipherString = ECDHE@SECLEVEL=1
  1243. Curves = secp160r2:P-256
  1244. MaxProtocol = TLSv1.3
  1245. MinProtocol = TLSv1.3
  1246. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1247. VerifyMode = Peer
  1248. [test-51]
  1249. ExpectedProtocol = TLSv1.3
  1250. ExpectedResult = Success
  1251. ExpectedTmpKeyType = P-256
  1252. # ===========================================================
  1253. [52-curve-secp192k1-tls12-in-tls13]
  1254. ssl_conf = 52-curve-secp192k1-tls12-in-tls13-ssl
  1255. [52-curve-secp192k1-tls12-in-tls13-ssl]
  1256. server = 52-curve-secp192k1-tls12-in-tls13-server
  1257. client = 52-curve-secp192k1-tls12-in-tls13-client
  1258. [52-curve-secp192k1-tls12-in-tls13-server]
  1259. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1260. CipherString = DEFAULT@SECLEVEL=1
  1261. Curves = secp192k1:P-256
  1262. MaxProtocol = TLSv1.3
  1263. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1264. [52-curve-secp192k1-tls12-in-tls13-client]
  1265. CipherString = ECDHE@SECLEVEL=1
  1266. Curves = secp192k1:P-256
  1267. MaxProtocol = TLSv1.3
  1268. MinProtocol = TLSv1.3
  1269. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1270. VerifyMode = Peer
  1271. [test-52]
  1272. ExpectedProtocol = TLSv1.3
  1273. ExpectedResult = Success
  1274. ExpectedTmpKeyType = P-256
  1275. # ===========================================================
  1276. [53-curve-secp224k1-tls12-in-tls13]
  1277. ssl_conf = 53-curve-secp224k1-tls12-in-tls13-ssl
  1278. [53-curve-secp224k1-tls12-in-tls13-ssl]
  1279. server = 53-curve-secp224k1-tls12-in-tls13-server
  1280. client = 53-curve-secp224k1-tls12-in-tls13-client
  1281. [53-curve-secp224k1-tls12-in-tls13-server]
  1282. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1283. CipherString = DEFAULT@SECLEVEL=1
  1284. Curves = secp224k1:P-256
  1285. MaxProtocol = TLSv1.3
  1286. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1287. [53-curve-secp224k1-tls12-in-tls13-client]
  1288. CipherString = ECDHE@SECLEVEL=1
  1289. Curves = secp224k1:P-256
  1290. MaxProtocol = TLSv1.3
  1291. MinProtocol = TLSv1.3
  1292. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1293. VerifyMode = Peer
  1294. [test-53]
  1295. ExpectedProtocol = TLSv1.3
  1296. ExpectedResult = Success
  1297. ExpectedTmpKeyType = P-256
  1298. # ===========================================================
  1299. [54-curve-secp256k1-tls12-in-tls13]
  1300. ssl_conf = 54-curve-secp256k1-tls12-in-tls13-ssl
  1301. [54-curve-secp256k1-tls12-in-tls13-ssl]
  1302. server = 54-curve-secp256k1-tls12-in-tls13-server
  1303. client = 54-curve-secp256k1-tls12-in-tls13-client
  1304. [54-curve-secp256k1-tls12-in-tls13-server]
  1305. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1306. CipherString = DEFAULT@SECLEVEL=1
  1307. Curves = secp256k1:P-256
  1308. MaxProtocol = TLSv1.3
  1309. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1310. [54-curve-secp256k1-tls12-in-tls13-client]
  1311. CipherString = ECDHE@SECLEVEL=1
  1312. Curves = secp256k1:P-256
  1313. MaxProtocol = TLSv1.3
  1314. MinProtocol = TLSv1.3
  1315. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1316. VerifyMode = Peer
  1317. [test-54]
  1318. ExpectedProtocol = TLSv1.3
  1319. ExpectedResult = Success
  1320. ExpectedTmpKeyType = P-256
  1321. # ===========================================================
  1322. [55-curve-brainpoolP256r1-tls12-in-tls13]
  1323. ssl_conf = 55-curve-brainpoolP256r1-tls12-in-tls13-ssl
  1324. [55-curve-brainpoolP256r1-tls12-in-tls13-ssl]
  1325. server = 55-curve-brainpoolP256r1-tls12-in-tls13-server
  1326. client = 55-curve-brainpoolP256r1-tls12-in-tls13-client
  1327. [55-curve-brainpoolP256r1-tls12-in-tls13-server]
  1328. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1329. CipherString = DEFAULT@SECLEVEL=1
  1330. Curves = brainpoolP256r1:P-256
  1331. MaxProtocol = TLSv1.3
  1332. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1333. [55-curve-brainpoolP256r1-tls12-in-tls13-client]
  1334. CipherString = ECDHE@SECLEVEL=1
  1335. Curves = brainpoolP256r1:P-256
  1336. MaxProtocol = TLSv1.3
  1337. MinProtocol = TLSv1.3
  1338. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1339. VerifyMode = Peer
  1340. [test-55]
  1341. ExpectedProtocol = TLSv1.3
  1342. ExpectedResult = Success
  1343. ExpectedTmpKeyType = P-256
  1344. # ===========================================================
  1345. [56-curve-brainpoolP384r1-tls12-in-tls13]
  1346. ssl_conf = 56-curve-brainpoolP384r1-tls12-in-tls13-ssl
  1347. [56-curve-brainpoolP384r1-tls12-in-tls13-ssl]
  1348. server = 56-curve-brainpoolP384r1-tls12-in-tls13-server
  1349. client = 56-curve-brainpoolP384r1-tls12-in-tls13-client
  1350. [56-curve-brainpoolP384r1-tls12-in-tls13-server]
  1351. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1352. CipherString = DEFAULT@SECLEVEL=1
  1353. Curves = brainpoolP384r1:P-256
  1354. MaxProtocol = TLSv1.3
  1355. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1356. [56-curve-brainpoolP384r1-tls12-in-tls13-client]
  1357. CipherString = ECDHE@SECLEVEL=1
  1358. Curves = brainpoolP384r1:P-256
  1359. MaxProtocol = TLSv1.3
  1360. MinProtocol = TLSv1.3
  1361. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1362. VerifyMode = Peer
  1363. [test-56]
  1364. ExpectedProtocol = TLSv1.3
  1365. ExpectedResult = Success
  1366. ExpectedTmpKeyType = P-256
  1367. # ===========================================================
  1368. [57-curve-brainpoolP512r1-tls12-in-tls13]
  1369. ssl_conf = 57-curve-brainpoolP512r1-tls12-in-tls13-ssl
  1370. [57-curve-brainpoolP512r1-tls12-in-tls13-ssl]
  1371. server = 57-curve-brainpoolP512r1-tls12-in-tls13-server
  1372. client = 57-curve-brainpoolP512r1-tls12-in-tls13-client
  1373. [57-curve-brainpoolP512r1-tls12-in-tls13-server]
  1374. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1375. CipherString = DEFAULT@SECLEVEL=1
  1376. Curves = brainpoolP512r1:P-256
  1377. MaxProtocol = TLSv1.3
  1378. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1379. [57-curve-brainpoolP512r1-tls12-in-tls13-client]
  1380. CipherString = ECDHE@SECLEVEL=1
  1381. Curves = brainpoolP512r1:P-256
  1382. MaxProtocol = TLSv1.3
  1383. MinProtocol = TLSv1.3
  1384. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1385. VerifyMode = Peer
  1386. [test-57]
  1387. ExpectedProtocol = TLSv1.3
  1388. ExpectedResult = Success
  1389. ExpectedTmpKeyType = P-256
  1390. # ===========================================================
  1391. [58-curve-sect233k1-tls13]
  1392. ssl_conf = 58-curve-sect233k1-tls13-ssl
  1393. [58-curve-sect233k1-tls13-ssl]
  1394. server = 58-curve-sect233k1-tls13-server
  1395. client = 58-curve-sect233k1-tls13-client
  1396. [58-curve-sect233k1-tls13-server]
  1397. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1398. CipherString = DEFAULT@SECLEVEL=1
  1399. Curves = sect233k1
  1400. MaxProtocol = TLSv1.3
  1401. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1402. [58-curve-sect233k1-tls13-client]
  1403. CipherString = ECDHE@SECLEVEL=1
  1404. Curves = sect233k1
  1405. MinProtocol = TLSv1.3
  1406. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1407. VerifyMode = Peer
  1408. [test-58]
  1409. ExpectedResult = ClientFail
  1410. # ===========================================================
  1411. [59-curve-sect233r1-tls13]
  1412. ssl_conf = 59-curve-sect233r1-tls13-ssl
  1413. [59-curve-sect233r1-tls13-ssl]
  1414. server = 59-curve-sect233r1-tls13-server
  1415. client = 59-curve-sect233r1-tls13-client
  1416. [59-curve-sect233r1-tls13-server]
  1417. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1418. CipherString = DEFAULT@SECLEVEL=1
  1419. Curves = sect233r1
  1420. MaxProtocol = TLSv1.3
  1421. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1422. [59-curve-sect233r1-tls13-client]
  1423. CipherString = ECDHE@SECLEVEL=1
  1424. Curves = sect233r1
  1425. MinProtocol = TLSv1.3
  1426. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1427. VerifyMode = Peer
  1428. [test-59]
  1429. ExpectedResult = ClientFail
  1430. # ===========================================================
  1431. [60-curve-sect283k1-tls13]
  1432. ssl_conf = 60-curve-sect283k1-tls13-ssl
  1433. [60-curve-sect283k1-tls13-ssl]
  1434. server = 60-curve-sect283k1-tls13-server
  1435. client = 60-curve-sect283k1-tls13-client
  1436. [60-curve-sect283k1-tls13-server]
  1437. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1438. CipherString = DEFAULT@SECLEVEL=1
  1439. Curves = sect283k1
  1440. MaxProtocol = TLSv1.3
  1441. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1442. [60-curve-sect283k1-tls13-client]
  1443. CipherString = ECDHE@SECLEVEL=1
  1444. Curves = sect283k1
  1445. MinProtocol = TLSv1.3
  1446. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1447. VerifyMode = Peer
  1448. [test-60]
  1449. ExpectedResult = ClientFail
  1450. # ===========================================================
  1451. [61-curve-sect283r1-tls13]
  1452. ssl_conf = 61-curve-sect283r1-tls13-ssl
  1453. [61-curve-sect283r1-tls13-ssl]
  1454. server = 61-curve-sect283r1-tls13-server
  1455. client = 61-curve-sect283r1-tls13-client
  1456. [61-curve-sect283r1-tls13-server]
  1457. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1458. CipherString = DEFAULT@SECLEVEL=1
  1459. Curves = sect283r1
  1460. MaxProtocol = TLSv1.3
  1461. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1462. [61-curve-sect283r1-tls13-client]
  1463. CipherString = ECDHE@SECLEVEL=1
  1464. Curves = sect283r1
  1465. MinProtocol = TLSv1.3
  1466. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1467. VerifyMode = Peer
  1468. [test-61]
  1469. ExpectedResult = ClientFail
  1470. # ===========================================================
  1471. [62-curve-sect409k1-tls13]
  1472. ssl_conf = 62-curve-sect409k1-tls13-ssl
  1473. [62-curve-sect409k1-tls13-ssl]
  1474. server = 62-curve-sect409k1-tls13-server
  1475. client = 62-curve-sect409k1-tls13-client
  1476. [62-curve-sect409k1-tls13-server]
  1477. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1478. CipherString = DEFAULT@SECLEVEL=1
  1479. Curves = sect409k1
  1480. MaxProtocol = TLSv1.3
  1481. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1482. [62-curve-sect409k1-tls13-client]
  1483. CipherString = ECDHE@SECLEVEL=1
  1484. Curves = sect409k1
  1485. MinProtocol = TLSv1.3
  1486. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1487. VerifyMode = Peer
  1488. [test-62]
  1489. ExpectedResult = ClientFail
  1490. # ===========================================================
  1491. [63-curve-sect409r1-tls13]
  1492. ssl_conf = 63-curve-sect409r1-tls13-ssl
  1493. [63-curve-sect409r1-tls13-ssl]
  1494. server = 63-curve-sect409r1-tls13-server
  1495. client = 63-curve-sect409r1-tls13-client
  1496. [63-curve-sect409r1-tls13-server]
  1497. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1498. CipherString = DEFAULT@SECLEVEL=1
  1499. Curves = sect409r1
  1500. MaxProtocol = TLSv1.3
  1501. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1502. [63-curve-sect409r1-tls13-client]
  1503. CipherString = ECDHE@SECLEVEL=1
  1504. Curves = sect409r1
  1505. MinProtocol = TLSv1.3
  1506. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1507. VerifyMode = Peer
  1508. [test-63]
  1509. ExpectedResult = ClientFail
  1510. # ===========================================================
  1511. [64-curve-sect571k1-tls13]
  1512. ssl_conf = 64-curve-sect571k1-tls13-ssl
  1513. [64-curve-sect571k1-tls13-ssl]
  1514. server = 64-curve-sect571k1-tls13-server
  1515. client = 64-curve-sect571k1-tls13-client
  1516. [64-curve-sect571k1-tls13-server]
  1517. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1518. CipherString = DEFAULT@SECLEVEL=1
  1519. Curves = sect571k1
  1520. MaxProtocol = TLSv1.3
  1521. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1522. [64-curve-sect571k1-tls13-client]
  1523. CipherString = ECDHE@SECLEVEL=1
  1524. Curves = sect571k1
  1525. MinProtocol = TLSv1.3
  1526. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1527. VerifyMode = Peer
  1528. [test-64]
  1529. ExpectedResult = ClientFail
  1530. # ===========================================================
  1531. [65-curve-sect571r1-tls13]
  1532. ssl_conf = 65-curve-sect571r1-tls13-ssl
  1533. [65-curve-sect571r1-tls13-ssl]
  1534. server = 65-curve-sect571r1-tls13-server
  1535. client = 65-curve-sect571r1-tls13-client
  1536. [65-curve-sect571r1-tls13-server]
  1537. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1538. CipherString = DEFAULT@SECLEVEL=1
  1539. Curves = sect571r1
  1540. MaxProtocol = TLSv1.3
  1541. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1542. [65-curve-sect571r1-tls13-client]
  1543. CipherString = ECDHE@SECLEVEL=1
  1544. Curves = sect571r1
  1545. MinProtocol = TLSv1.3
  1546. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1547. VerifyMode = Peer
  1548. [test-65]
  1549. ExpectedResult = ClientFail
  1550. # ===========================================================
  1551. [66-curve-secp224r1-tls13]
  1552. ssl_conf = 66-curve-secp224r1-tls13-ssl
  1553. [66-curve-secp224r1-tls13-ssl]
  1554. server = 66-curve-secp224r1-tls13-server
  1555. client = 66-curve-secp224r1-tls13-client
  1556. [66-curve-secp224r1-tls13-server]
  1557. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1558. CipherString = DEFAULT@SECLEVEL=1
  1559. Curves = secp224r1
  1560. MaxProtocol = TLSv1.3
  1561. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1562. [66-curve-secp224r1-tls13-client]
  1563. CipherString = ECDHE@SECLEVEL=1
  1564. Curves = secp224r1
  1565. MinProtocol = TLSv1.3
  1566. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1567. VerifyMode = Peer
  1568. [test-66]
  1569. ExpectedResult = ClientFail
  1570. # ===========================================================
  1571. [67-curve-sect163k1-tls13]
  1572. ssl_conf = 67-curve-sect163k1-tls13-ssl
  1573. [67-curve-sect163k1-tls13-ssl]
  1574. server = 67-curve-sect163k1-tls13-server
  1575. client = 67-curve-sect163k1-tls13-client
  1576. [67-curve-sect163k1-tls13-server]
  1577. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1578. CipherString = DEFAULT@SECLEVEL=1
  1579. Curves = sect163k1
  1580. MaxProtocol = TLSv1.3
  1581. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1582. [67-curve-sect163k1-tls13-client]
  1583. CipherString = ECDHE@SECLEVEL=1
  1584. Curves = sect163k1
  1585. MinProtocol = TLSv1.3
  1586. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1587. VerifyMode = Peer
  1588. [test-67]
  1589. ExpectedResult = ClientFail
  1590. # ===========================================================
  1591. [68-curve-sect163r2-tls13]
  1592. ssl_conf = 68-curve-sect163r2-tls13-ssl
  1593. [68-curve-sect163r2-tls13-ssl]
  1594. server = 68-curve-sect163r2-tls13-server
  1595. client = 68-curve-sect163r2-tls13-client
  1596. [68-curve-sect163r2-tls13-server]
  1597. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1598. CipherString = DEFAULT@SECLEVEL=1
  1599. Curves = sect163r2
  1600. MaxProtocol = TLSv1.3
  1601. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1602. [68-curve-sect163r2-tls13-client]
  1603. CipherString = ECDHE@SECLEVEL=1
  1604. Curves = sect163r2
  1605. MinProtocol = TLSv1.3
  1606. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1607. VerifyMode = Peer
  1608. [test-68]
  1609. ExpectedResult = ClientFail
  1610. # ===========================================================
  1611. [69-curve-prime192v1-tls13]
  1612. ssl_conf = 69-curve-prime192v1-tls13-ssl
  1613. [69-curve-prime192v1-tls13-ssl]
  1614. server = 69-curve-prime192v1-tls13-server
  1615. client = 69-curve-prime192v1-tls13-client
  1616. [69-curve-prime192v1-tls13-server]
  1617. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1618. CipherString = DEFAULT@SECLEVEL=1
  1619. Curves = prime192v1
  1620. MaxProtocol = TLSv1.3
  1621. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1622. [69-curve-prime192v1-tls13-client]
  1623. CipherString = ECDHE@SECLEVEL=1
  1624. Curves = prime192v1
  1625. MinProtocol = TLSv1.3
  1626. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1627. VerifyMode = Peer
  1628. [test-69]
  1629. ExpectedResult = ClientFail
  1630. # ===========================================================
  1631. [70-curve-sect163r1-tls13]
  1632. ssl_conf = 70-curve-sect163r1-tls13-ssl
  1633. [70-curve-sect163r1-tls13-ssl]
  1634. server = 70-curve-sect163r1-tls13-server
  1635. client = 70-curve-sect163r1-tls13-client
  1636. [70-curve-sect163r1-tls13-server]
  1637. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1638. CipherString = DEFAULT@SECLEVEL=1
  1639. Curves = sect163r1
  1640. MaxProtocol = TLSv1.3
  1641. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1642. [70-curve-sect163r1-tls13-client]
  1643. CipherString = ECDHE@SECLEVEL=1
  1644. Curves = sect163r1
  1645. MinProtocol = TLSv1.3
  1646. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1647. VerifyMode = Peer
  1648. [test-70]
  1649. ExpectedResult = ClientFail
  1650. # ===========================================================
  1651. [71-curve-sect193r1-tls13]
  1652. ssl_conf = 71-curve-sect193r1-tls13-ssl
  1653. [71-curve-sect193r1-tls13-ssl]
  1654. server = 71-curve-sect193r1-tls13-server
  1655. client = 71-curve-sect193r1-tls13-client
  1656. [71-curve-sect193r1-tls13-server]
  1657. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1658. CipherString = DEFAULT@SECLEVEL=1
  1659. Curves = sect193r1
  1660. MaxProtocol = TLSv1.3
  1661. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1662. [71-curve-sect193r1-tls13-client]
  1663. CipherString = ECDHE@SECLEVEL=1
  1664. Curves = sect193r1
  1665. MinProtocol = TLSv1.3
  1666. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1667. VerifyMode = Peer
  1668. [test-71]
  1669. ExpectedResult = ClientFail
  1670. # ===========================================================
  1671. [72-curve-sect193r2-tls13]
  1672. ssl_conf = 72-curve-sect193r2-tls13-ssl
  1673. [72-curve-sect193r2-tls13-ssl]
  1674. server = 72-curve-sect193r2-tls13-server
  1675. client = 72-curve-sect193r2-tls13-client
  1676. [72-curve-sect193r2-tls13-server]
  1677. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1678. CipherString = DEFAULT@SECLEVEL=1
  1679. Curves = sect193r2
  1680. MaxProtocol = TLSv1.3
  1681. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1682. [72-curve-sect193r2-tls13-client]
  1683. CipherString = ECDHE@SECLEVEL=1
  1684. Curves = sect193r2
  1685. MinProtocol = TLSv1.3
  1686. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1687. VerifyMode = Peer
  1688. [test-72]
  1689. ExpectedResult = ClientFail
  1690. # ===========================================================
  1691. [73-curve-sect239k1-tls13]
  1692. ssl_conf = 73-curve-sect239k1-tls13-ssl
  1693. [73-curve-sect239k1-tls13-ssl]
  1694. server = 73-curve-sect239k1-tls13-server
  1695. client = 73-curve-sect239k1-tls13-client
  1696. [73-curve-sect239k1-tls13-server]
  1697. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1698. CipherString = DEFAULT@SECLEVEL=1
  1699. Curves = sect239k1
  1700. MaxProtocol = TLSv1.3
  1701. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1702. [73-curve-sect239k1-tls13-client]
  1703. CipherString = ECDHE@SECLEVEL=1
  1704. Curves = sect239k1
  1705. MinProtocol = TLSv1.3
  1706. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1707. VerifyMode = Peer
  1708. [test-73]
  1709. ExpectedResult = ClientFail
  1710. # ===========================================================
  1711. [74-curve-secp160k1-tls13]
  1712. ssl_conf = 74-curve-secp160k1-tls13-ssl
  1713. [74-curve-secp160k1-tls13-ssl]
  1714. server = 74-curve-secp160k1-tls13-server
  1715. client = 74-curve-secp160k1-tls13-client
  1716. [74-curve-secp160k1-tls13-server]
  1717. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1718. CipherString = DEFAULT@SECLEVEL=1
  1719. Curves = secp160k1
  1720. MaxProtocol = TLSv1.3
  1721. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1722. [74-curve-secp160k1-tls13-client]
  1723. CipherString = ECDHE@SECLEVEL=1
  1724. Curves = secp160k1
  1725. MinProtocol = TLSv1.3
  1726. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1727. VerifyMode = Peer
  1728. [test-74]
  1729. ExpectedResult = ClientFail
  1730. # ===========================================================
  1731. [75-curve-secp160r1-tls13]
  1732. ssl_conf = 75-curve-secp160r1-tls13-ssl
  1733. [75-curve-secp160r1-tls13-ssl]
  1734. server = 75-curve-secp160r1-tls13-server
  1735. client = 75-curve-secp160r1-tls13-client
  1736. [75-curve-secp160r1-tls13-server]
  1737. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1738. CipherString = DEFAULT@SECLEVEL=1
  1739. Curves = secp160r1
  1740. MaxProtocol = TLSv1.3
  1741. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1742. [75-curve-secp160r1-tls13-client]
  1743. CipherString = ECDHE@SECLEVEL=1
  1744. Curves = secp160r1
  1745. MinProtocol = TLSv1.3
  1746. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1747. VerifyMode = Peer
  1748. [test-75]
  1749. ExpectedResult = ClientFail
  1750. # ===========================================================
  1751. [76-curve-secp160r2-tls13]
  1752. ssl_conf = 76-curve-secp160r2-tls13-ssl
  1753. [76-curve-secp160r2-tls13-ssl]
  1754. server = 76-curve-secp160r2-tls13-server
  1755. client = 76-curve-secp160r2-tls13-client
  1756. [76-curve-secp160r2-tls13-server]
  1757. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1758. CipherString = DEFAULT@SECLEVEL=1
  1759. Curves = secp160r2
  1760. MaxProtocol = TLSv1.3
  1761. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1762. [76-curve-secp160r2-tls13-client]
  1763. CipherString = ECDHE@SECLEVEL=1
  1764. Curves = secp160r2
  1765. MinProtocol = TLSv1.3
  1766. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1767. VerifyMode = Peer
  1768. [test-76]
  1769. ExpectedResult = ClientFail
  1770. # ===========================================================
  1771. [77-curve-secp192k1-tls13]
  1772. ssl_conf = 77-curve-secp192k1-tls13-ssl
  1773. [77-curve-secp192k1-tls13-ssl]
  1774. server = 77-curve-secp192k1-tls13-server
  1775. client = 77-curve-secp192k1-tls13-client
  1776. [77-curve-secp192k1-tls13-server]
  1777. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1778. CipherString = DEFAULT@SECLEVEL=1
  1779. Curves = secp192k1
  1780. MaxProtocol = TLSv1.3
  1781. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1782. [77-curve-secp192k1-tls13-client]
  1783. CipherString = ECDHE@SECLEVEL=1
  1784. Curves = secp192k1
  1785. MinProtocol = TLSv1.3
  1786. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1787. VerifyMode = Peer
  1788. [test-77]
  1789. ExpectedResult = ClientFail
  1790. # ===========================================================
  1791. [78-curve-secp224k1-tls13]
  1792. ssl_conf = 78-curve-secp224k1-tls13-ssl
  1793. [78-curve-secp224k1-tls13-ssl]
  1794. server = 78-curve-secp224k1-tls13-server
  1795. client = 78-curve-secp224k1-tls13-client
  1796. [78-curve-secp224k1-tls13-server]
  1797. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1798. CipherString = DEFAULT@SECLEVEL=1
  1799. Curves = secp224k1
  1800. MaxProtocol = TLSv1.3
  1801. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1802. [78-curve-secp224k1-tls13-client]
  1803. CipherString = ECDHE@SECLEVEL=1
  1804. Curves = secp224k1
  1805. MinProtocol = TLSv1.3
  1806. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1807. VerifyMode = Peer
  1808. [test-78]
  1809. ExpectedResult = ClientFail
  1810. # ===========================================================
  1811. [79-curve-secp256k1-tls13]
  1812. ssl_conf = 79-curve-secp256k1-tls13-ssl
  1813. [79-curve-secp256k1-tls13-ssl]
  1814. server = 79-curve-secp256k1-tls13-server
  1815. client = 79-curve-secp256k1-tls13-client
  1816. [79-curve-secp256k1-tls13-server]
  1817. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1818. CipherString = DEFAULT@SECLEVEL=1
  1819. Curves = secp256k1
  1820. MaxProtocol = TLSv1.3
  1821. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1822. [79-curve-secp256k1-tls13-client]
  1823. CipherString = ECDHE@SECLEVEL=1
  1824. Curves = secp256k1
  1825. MinProtocol = TLSv1.3
  1826. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1827. VerifyMode = Peer
  1828. [test-79]
  1829. ExpectedResult = ClientFail
  1830. # ===========================================================
  1831. [80-curve-brainpoolP256r1-tls13]
  1832. ssl_conf = 80-curve-brainpoolP256r1-tls13-ssl
  1833. [80-curve-brainpoolP256r1-tls13-ssl]
  1834. server = 80-curve-brainpoolP256r1-tls13-server
  1835. client = 80-curve-brainpoolP256r1-tls13-client
  1836. [80-curve-brainpoolP256r1-tls13-server]
  1837. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1838. CipherString = DEFAULT@SECLEVEL=1
  1839. Curves = brainpoolP256r1
  1840. MaxProtocol = TLSv1.3
  1841. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1842. [80-curve-brainpoolP256r1-tls13-client]
  1843. CipherString = ECDHE@SECLEVEL=1
  1844. Curves = brainpoolP256r1
  1845. MinProtocol = TLSv1.3
  1846. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1847. VerifyMode = Peer
  1848. [test-80]
  1849. ExpectedResult = ClientFail
  1850. # ===========================================================
  1851. [81-curve-brainpoolP384r1-tls13]
  1852. ssl_conf = 81-curve-brainpoolP384r1-tls13-ssl
  1853. [81-curve-brainpoolP384r1-tls13-ssl]
  1854. server = 81-curve-brainpoolP384r1-tls13-server
  1855. client = 81-curve-brainpoolP384r1-tls13-client
  1856. [81-curve-brainpoolP384r1-tls13-server]
  1857. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1858. CipherString = DEFAULT@SECLEVEL=1
  1859. Curves = brainpoolP384r1
  1860. MaxProtocol = TLSv1.3
  1861. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1862. [81-curve-brainpoolP384r1-tls13-client]
  1863. CipherString = ECDHE@SECLEVEL=1
  1864. Curves = brainpoolP384r1
  1865. MinProtocol = TLSv1.3
  1866. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1867. VerifyMode = Peer
  1868. [test-81]
  1869. ExpectedResult = ClientFail
  1870. # ===========================================================
  1871. [82-curve-brainpoolP512r1-tls13]
  1872. ssl_conf = 82-curve-brainpoolP512r1-tls13-ssl
  1873. [82-curve-brainpoolP512r1-tls13-ssl]
  1874. server = 82-curve-brainpoolP512r1-tls13-server
  1875. client = 82-curve-brainpoolP512r1-tls13-client
  1876. [82-curve-brainpoolP512r1-tls13-server]
  1877. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1878. CipherString = DEFAULT@SECLEVEL=1
  1879. Curves = brainpoolP512r1
  1880. MaxProtocol = TLSv1.3
  1881. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1882. [82-curve-brainpoolP512r1-tls13-client]
  1883. CipherString = ECDHE@SECLEVEL=1
  1884. Curves = brainpoolP512r1
  1885. MinProtocol = TLSv1.3
  1886. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1887. VerifyMode = Peer
  1888. [test-82]
  1889. ExpectedResult = ClientFail
  1890. # ===========================================================
  1891. [83-curve-brainpoolP256r1tls13-tls13-in-tls12]
  1892. ssl_conf = 83-curve-brainpoolP256r1tls13-tls13-in-tls12-ssl
  1893. [83-curve-brainpoolP256r1tls13-tls13-in-tls12-ssl]
  1894. server = 83-curve-brainpoolP256r1tls13-tls13-in-tls12-server
  1895. client = 83-curve-brainpoolP256r1tls13-tls13-in-tls12-client
  1896. [83-curve-brainpoolP256r1tls13-tls13-in-tls12-server]
  1897. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1898. CipherString = DEFAULT@SECLEVEL=1
  1899. Curves = brainpoolP256r1tls13
  1900. MaxProtocol = TLSv1.3
  1901. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1902. [83-curve-brainpoolP256r1tls13-tls13-in-tls12-client]
  1903. CipherString = ECDHE@SECLEVEL=1
  1904. Curves = brainpoolP256r1tls13
  1905. MaxProtocol = TLSv1.2
  1906. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1907. VerifyMode = Peer
  1908. [test-83]
  1909. ExpectedResult = ServerFail
  1910. # ===========================================================
  1911. [84-curve-brainpoolP384r1tls13-tls13-in-tls12]
  1912. ssl_conf = 84-curve-brainpoolP384r1tls13-tls13-in-tls12-ssl
  1913. [84-curve-brainpoolP384r1tls13-tls13-in-tls12-ssl]
  1914. server = 84-curve-brainpoolP384r1tls13-tls13-in-tls12-server
  1915. client = 84-curve-brainpoolP384r1tls13-tls13-in-tls12-client
  1916. [84-curve-brainpoolP384r1tls13-tls13-in-tls12-server]
  1917. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1918. CipherString = DEFAULT@SECLEVEL=1
  1919. Curves = brainpoolP384r1tls13
  1920. MaxProtocol = TLSv1.3
  1921. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1922. [84-curve-brainpoolP384r1tls13-tls13-in-tls12-client]
  1923. CipherString = ECDHE@SECLEVEL=1
  1924. Curves = brainpoolP384r1tls13
  1925. MaxProtocol = TLSv1.2
  1926. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1927. VerifyMode = Peer
  1928. [test-84]
  1929. ExpectedResult = ServerFail
  1930. # ===========================================================
  1931. [85-curve-brainpoolP512r1tls13-tls13-in-tls12]
  1932. ssl_conf = 85-curve-brainpoolP512r1tls13-tls13-in-tls12-ssl
  1933. [85-curve-brainpoolP512r1tls13-tls13-in-tls12-ssl]
  1934. server = 85-curve-brainpoolP512r1tls13-tls13-in-tls12-server
  1935. client = 85-curve-brainpoolP512r1tls13-tls13-in-tls12-client
  1936. [85-curve-brainpoolP512r1tls13-tls13-in-tls12-server]
  1937. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  1938. CipherString = DEFAULT@SECLEVEL=1
  1939. Curves = brainpoolP512r1tls13
  1940. MaxProtocol = TLSv1.3
  1941. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  1942. [85-curve-brainpoolP512r1tls13-tls13-in-tls12-client]
  1943. CipherString = ECDHE@SECLEVEL=1
  1944. Curves = brainpoolP512r1tls13
  1945. MaxProtocol = TLSv1.2
  1946. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  1947. VerifyMode = Peer
  1948. [test-85]
  1949. ExpectedResult = ServerFail