16-dtls-certstatus.cnf.in 2.3 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061626364656667686970717273747576777879808182838485868788899091929394959697
  1. # -*- mode: perl; -*-
  2. # Copyright 2016-2021 The OpenSSL Project Authors. All Rights Reserved.
  3. #
  4. # Licensed under the Apache License 2.0 (the "License"). You may not use
  5. # this file except in compliance with the License. You can obtain a copy
  6. # in the file LICENSE in the source distribution or at
  7. # https://www.openssl.org/source/license.html
  8. ## Test DTLS CertStatus messages
  9. use strict;
  10. use warnings;
  11. package ssltests;
  12. use OpenSSL::Test::Utils;
  13. our $fips_mode;
  14. our @tests = ();
  15. our @tests_standard = (
  16. {
  17. name => "certstatus-good",
  18. server => {
  19. "CipherString" => "DEFAULT:\@SECLEVEL=0",
  20. extra => {
  21. "CertStatus" => "GoodResponse"
  22. },
  23. },
  24. client => {
  25. "CipherString" => "DEFAULT:\@SECLEVEL=0",
  26. },
  27. test => {
  28. "Method" => "DTLS",
  29. "ExpectedResult" => "Success"
  30. }
  31. },
  32. {
  33. name => "certstatus-bad",
  34. server => {
  35. "CipherString" => "DEFAULT:\@SECLEVEL=0",
  36. extra => {
  37. "CertStatus" => "BadResponse",
  38. },
  39. },
  40. client => {
  41. "CipherString" => "DEFAULT:\@SECLEVEL=0",
  42. },
  43. test => {
  44. "Method" => "DTLS",
  45. "ExpectedResult" => "ClientFail"
  46. }
  47. }
  48. );
  49. our @tests_sctp = (
  50. {
  51. name => "certstatus-good",
  52. server => {
  53. "CipherString" => "DEFAULT:\@SECLEVEL=0",
  54. extra => {
  55. "CertStatus" => "GoodResponse",
  56. },
  57. },
  58. client => {
  59. "CipherString" => "DEFAULT:\@SECLEVEL=0",
  60. },
  61. test => {
  62. "Method" => "DTLS",
  63. "UseSCTP" => "Yes",
  64. "ExpectedResult" => "Success"
  65. }
  66. },
  67. {
  68. name => "certstatus-bad",
  69. server => {
  70. "CipherString" => "DEFAULT:\@SECLEVEL=0",
  71. extra => {
  72. "CertStatus" => "BadResponse",
  73. },
  74. },
  75. client => {
  76. "CipherString" => "DEFAULT:\@SECLEVEL=0",
  77. },
  78. test => {
  79. "Method" => "DTLS",
  80. "UseSCTP" => "Yes",
  81. "ExpectedResult" => "ClientFail"
  82. }
  83. },
  84. );
  85. if (!$fips_mode || !disabled("dtls1_2")) {
  86. push @tests, @tests_standard;
  87. push @tests, @tests_sctp unless disabled("sctp") || disabled("sock");
  88. }