25-cipher.cnf 6.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244
  1. # Generated with generate_ssl_tests.pl
  2. num_tests = 9
  3. test-0 = 0-cipher-server-1
  4. test-1 = 1-cipher-server-2
  5. test-2 = 2-cipher-server-client-list
  6. test-3 = 3-cipher-server-pref-1
  7. test-4 = 4-cipher-server-pref-2
  8. test-5 = 5-cipher-server-pref-client-list
  9. test-6 = 6-cipher-server-pref-not-mobile
  10. test-7 = 7-cipher-server-pref-mobile
  11. test-8 = 8-cipher-server-pref-mobile2
  12. # ===========================================================
  13. [0-cipher-server-1]
  14. ssl_conf = 0-cipher-server-1-ssl
  15. [0-cipher-server-1-ssl]
  16. server = 0-cipher-server-1-server
  17. client = 0-cipher-server-1-client
  18. [0-cipher-server-1-server]
  19. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  20. CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
  21. MaxProtocol = TLSv1.2
  22. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  23. [0-cipher-server-1-client]
  24. CipherString = ECDHE-RSA-AES256-SHA384
  25. MaxProtocol = TLSv1.2
  26. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  27. VerifyMode = Peer
  28. [test-0]
  29. ExpectedCipher = ECDHE-RSA-AES256-SHA384
  30. # ===========================================================
  31. [1-cipher-server-2]
  32. ssl_conf = 1-cipher-server-2-ssl
  33. [1-cipher-server-2-ssl]
  34. server = 1-cipher-server-2-server
  35. client = 1-cipher-server-2-client
  36. [1-cipher-server-2-server]
  37. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  38. CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
  39. MaxProtocol = TLSv1.2
  40. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  41. [1-cipher-server-2-client]
  42. CipherString = ECDHE-RSA-AES128-SHA256
  43. MaxProtocol = TLSv1.2
  44. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  45. VerifyMode = Peer
  46. [test-1]
  47. ExpectedCipher = ECDHE-RSA-AES128-SHA256
  48. # ===========================================================
  49. [2-cipher-server-client-list]
  50. ssl_conf = 2-cipher-server-client-list-ssl
  51. [2-cipher-server-client-list-ssl]
  52. server = 2-cipher-server-client-list-server
  53. client = 2-cipher-server-client-list-client
  54. [2-cipher-server-client-list-server]
  55. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  56. CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
  57. MaxProtocol = TLSv1.2
  58. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  59. [2-cipher-server-client-list-client]
  60. CipherString = ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384
  61. MaxProtocol = TLSv1.2
  62. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  63. VerifyMode = Peer
  64. [test-2]
  65. ExpectedCipher = ECDHE-RSA-AES128-SHA256
  66. # ===========================================================
  67. [3-cipher-server-pref-1]
  68. ssl_conf = 3-cipher-server-pref-1-ssl
  69. [3-cipher-server-pref-1-ssl]
  70. server = 3-cipher-server-pref-1-server
  71. client = 3-cipher-server-pref-1-client
  72. [3-cipher-server-pref-1-server]
  73. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  74. CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
  75. MaxProtocol = TLSv1.2
  76. Options = ServerPreference
  77. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  78. [3-cipher-server-pref-1-client]
  79. CipherString = ECDHE-RSA-AES256-SHA384
  80. MaxProtocol = TLSv1.2
  81. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  82. VerifyMode = Peer
  83. [test-3]
  84. ExpectedCipher = ECDHE-RSA-AES256-SHA384
  85. # ===========================================================
  86. [4-cipher-server-pref-2]
  87. ssl_conf = 4-cipher-server-pref-2-ssl
  88. [4-cipher-server-pref-2-ssl]
  89. server = 4-cipher-server-pref-2-server
  90. client = 4-cipher-server-pref-2-client
  91. [4-cipher-server-pref-2-server]
  92. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  93. CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
  94. MaxProtocol = TLSv1.2
  95. Options = ServerPreference
  96. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  97. [4-cipher-server-pref-2-client]
  98. CipherString = ECDHE-RSA-AES128-SHA256
  99. MaxProtocol = TLSv1.2
  100. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  101. VerifyMode = Peer
  102. [test-4]
  103. ExpectedCipher = ECDHE-RSA-AES128-SHA256
  104. # ===========================================================
  105. [5-cipher-server-pref-client-list]
  106. ssl_conf = 5-cipher-server-pref-client-list-ssl
  107. [5-cipher-server-pref-client-list-ssl]
  108. server = 5-cipher-server-pref-client-list-server
  109. client = 5-cipher-server-pref-client-list-client
  110. [5-cipher-server-pref-client-list-server]
  111. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  112. CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256
  113. MaxProtocol = TLSv1.2
  114. Options = ServerPreference
  115. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  116. [5-cipher-server-pref-client-list-client]
  117. CipherString = ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384
  118. MaxProtocol = TLSv1.2
  119. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  120. VerifyMode = Peer
  121. [test-5]
  122. ExpectedCipher = ECDHE-RSA-AES256-SHA384
  123. # ===========================================================
  124. [6-cipher-server-pref-not-mobile]
  125. ssl_conf = 6-cipher-server-pref-not-mobile-ssl
  126. [6-cipher-server-pref-not-mobile-ssl]
  127. server = 6-cipher-server-pref-not-mobile-server
  128. client = 6-cipher-server-pref-not-mobile-client
  129. [6-cipher-server-pref-not-mobile-server]
  130. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  131. CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-CHACHA20-POLY1305
  132. MaxProtocol = TLSv1.2
  133. Options = ServerPreference
  134. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  135. [6-cipher-server-pref-not-mobile-client]
  136. CipherString = ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384
  137. MaxProtocol = TLSv1.2
  138. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  139. VerifyMode = Peer
  140. [test-6]
  141. ExpectedCipher = ECDHE-RSA-AES256-SHA384
  142. # ===========================================================
  143. [7-cipher-server-pref-mobile]
  144. ssl_conf = 7-cipher-server-pref-mobile-ssl
  145. [7-cipher-server-pref-mobile-ssl]
  146. server = 7-cipher-server-pref-mobile-server
  147. client = 7-cipher-server-pref-mobile-client
  148. [7-cipher-server-pref-mobile-server]
  149. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  150. CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-CHACHA20-POLY1305
  151. MaxProtocol = TLSv1.2
  152. Options = ServerPreference,PrioritizeChaCha
  153. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  154. [7-cipher-server-pref-mobile-client]
  155. CipherString = ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-CHACHA20-POLY1305
  156. MaxProtocol = TLSv1.2
  157. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  158. VerifyMode = Peer
  159. [test-7]
  160. ExpectedCipher = ECDHE-RSA-AES256-SHA384
  161. # ===========================================================
  162. [8-cipher-server-pref-mobile2]
  163. ssl_conf = 8-cipher-server-pref-mobile2-ssl
  164. [8-cipher-server-pref-mobile2-ssl]
  165. server = 8-cipher-server-pref-mobile2-server
  166. client = 8-cipher-server-pref-mobile2-client
  167. [8-cipher-server-pref-mobile2-server]
  168. Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
  169. CipherString = ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-CHACHA20-POLY1305
  170. MaxProtocol = TLSv1.2
  171. Options = ServerPreference,PrioritizeChaCha
  172. PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
  173. [8-cipher-server-pref-mobile2-client]
  174. CipherString = ECDHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA384
  175. MaxProtocol = TLSv1.2
  176. VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
  177. VerifyMode = Peer
  178. [test-8]
  179. ExpectedCipher = ECDHE-RSA-CHACHA20-POLY1305