Domů Procházet Nápověda
Přihlásit se
OWEALs
/
wolfssl
zrcadlo https://github.com/wolfSSL/wolfssl.git
2
0
Rozštěpit 0
Soubory Úkoly 8 Wiki
Strom: 9e68de0fb7
Větve Značky
wolfssl
/
tests
/
test-altchains.conf

test-altchains.conf 6.2 KB
Historie Surový

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245 
  1. # Tests will use complete chain with intermediate CA for testing
    2. 

  2. # The tests with chains have the CRL checking disabled
    3. 

  3. # CRL's only load for trusted CA's, for a chain you must load the root and intermediate as trusted
    4. 

  4. # For these tests we are loading root and sending intermediate and peer certs
    5. 

  5. # server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Chain
    6. 

  6. -v 3
    7. 

  7. -l DHE-RSA-AES128-GCM-SHA256
    8. 

  8. -A ./certs/ca-cert.pem
    9. 

  9. -k ./certs/server-key.pem
    10. 

  10. -c ./certs/intermediate/server-chain.pem
    11. 

  11. -V
    12. 

  12. 

  13. # client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Chain
    14. 

  14. -v 3
    15. 

  15. -l DHE-RSA-AES128-GCM-SHA256
    16. 

  16. -A ./certs/ca-cert.pem
    17. 

  17. -k ./certs/client-key.pem
    18. 

  18. -c ./certs/intermediate/client-chain.pem
    19. 

  19. -C
    20. 

  20. 

  21. # server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Chain
    22. 

  22. -v 3
    23. 

  23. -l ECDHE-RSA-AES128-GCM-SHA256
    24. 

  24. -A ./certs/ca-cert.pem
    25. 

  25. -k ./certs/server-key.pem
    26. 

  26. -c ./certs/intermediate/server-chain.pem
    27. 

  27. -V
    28. 

  28. 

  29. # client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Chain
    30. 

  30. -v 3
    31. 

  31. -l ECDHE-RSA-AES128-GCM-SHA256
    32. 

  32. -A ./certs/ca-cert.pem
    33. 

  33. -k ./certs/client-key.pem
    34. 

  34. -c ./certs/intermediate/client-chain.pem
    35. 

  35. -C
    36. 

  36. 

  37. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Chain
    38. 

  38. -v 3
    39. 

  39. -l ECDHE-ECDSA-AES128-GCM-SHA256
    40. 

  40. -A ./certs/ca-ecc-cert.pem
    41. 

  41. -k ./certs/ecc-key.pem
    42. 

  42. -c ./certs/intermediate/server-chain-ecc.pem
    43. 

  43. -V
    44. 

  44. 

  45. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Chain
    46. 

  46. -v 3
    47. 

  47. -l ECDHE-ECDSA-AES128-GCM-SHA256
    48. 

  48. -A ./certs/ca-ecc-cert.pem
    49. 

  49. -k ./certs/ecc-client-key.pem
    50. 

  50. -c ./certs/intermediate/client-chain-ecc.pem
    51. 

  51. -C
    52. 

  52. 

  53. # server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Chain
    54. 

  54. -v 4
    55. 

  55. -l TLS13-AES128-GCM-SHA256
    56. 

  56. -A ./certs/ca-cert.pem
    57. 

  57. -k ./certs/server-key.pem
    58. 

  58. -c ./certs/intermediate/server-chain.pem
    59. 

  59. -V
    60. 

  60. 

  61. # client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Chain
    62. 

  62. -v 4
    63. 

  63. -l TLS13-AES128-GCM-SHA256
    64. 

  64. -A ./certs/ca-cert.pem
    65. 

  65. -k ./certs/client-key.pem
    66. 

  66. -c ./certs/intermediate/client-chain.pem
    67. 

  67. -C
    68. 

  68. 

  69. # server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Chain
    70. 

  70. -v 4
    71. 

  71. -l TLS13-AES128-GCM-SHA256
    72. 

  72. -A ./certs/ca-ecc-cert.pem
    73. 

  73. -k ./certs/ecc-key.pem
    74. 

  74. -c ./certs/intermediate/server-chain-ecc.pem
    75. 

  75. -V
    76. 

  76. 

  77. # client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Chain
    78. 

  78. -v 4
    79. 

  79. -l TLS13-AES128-GCM-SHA256
    80. 

  80. -A ./certs/ca-ecc-cert.pem
    81. 

  81. -k ./certs/ecc-client-key.pem
    82. 

  82. -c ./certs/intermediate/client-chain-ecc.pem
    83. 

  83. -C
    84. 

  84. 

  85. # Test will load intermediate CA as trusted and only present the peer cert (partial chain)
    86. 

  86. # server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
    87. 

  87. -v 3
    88. 

  88. -l DHE-RSA-AES128-GCM-SHA256
    89. 

  89. -A ./certs/intermediate/ca-int-cert.pem
    90. 

  90. -k ./certs/server-key.pem
    91. 

  91. -c ./certs/intermediate/server-int-cert.pem
    92. 

  92. -V
    93. 

  93. 

  94. # client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
    95. 

  95. -v 3
    96. 

  96. -l DHE-RSA-AES128-GCM-SHA256
    97. 

  97. -A ./certs/intermediate/ca-int-cert.pem
    98. 

  98. -k ./certs/client-key.pem
    99. 

  99. -c ./certs/intermediate/client-int-cert.pem
    100. 

  100. -C
    101. 

  101. 

  102. # server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
    103. 

  103. -v 3
    104. 

  104. -l ECDHE-RSA-AES128-GCM-SHA256
    105. 

  105. -A ./certs/intermediate/ca-int-cert.pem
    106. 

  106. -k ./certs/server-key.pem
    107. 

  107. -c ./certs/intermediate/server-int-cert.pem
    108. 

  108. -V
    109. 

  109. 

  110. # client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
    111. 

  111. -v 3
    112. 

  112. -l ECDHE-RSA-AES128-GCM-SHA256
    113. 

  113. -A ./certs/intermediate/ca-int-cert.pem
    114. 

  114. -k ./certs/client-key.pem
    115. 

  115. -c ./certs/intermediate/client-int-cert.pem
    116. 

  116. -C
    117. 

  117. 

  118. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Chain
    119. 

  119. -v 3
    120. 

  120. -l ECDHE-ECDSA-AES128-GCM-SHA256
    121. 

  121. -A ./certs/intermediate/ca-int-ecc-cert.pem
    122. 

  122. -k ./certs/ecc-key.pem
    123. 

  123. -c ./certs/intermediate/server-int-ecc-cert.pem
    124. 

  124. -V
    125. 

  125. 

  126. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Chain
    127. 

  127. -v 3
    128. 

  128. -l ECDHE-ECDSA-AES128-GCM-SHA256
    129. 

  129. -A ./certs/intermediate/ca-int-ecc-cert.pem
    130. 

  130. -k ./certs/ecc-client-key.pem
    131. 

  131. -c ./certs/intermediate/client-int-ecc-cert.pem
    132. 

  132. -C
    133. 

  133. 

  134. # server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Chain
    135. 

  135. -v 4
    136. 

  136. -l TLS13-AES128-GCM-SHA256
    137. 

  137. -A ./certs/intermediate/ca-int-cert.pem
    138. 

  138. -k ./certs/server-key.pem
    139. 

  139. -c ./certs/intermediate/server-int-cert.pem
    140. 

  140. -V
    141. 

  141. 

  142. # client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Chain
    143. 

  143. -v 4
    144. 

  144. -l TLS13-AES128-GCM-SHA256
    145. 

  145. -A ./certs/intermediate/ca-int-cert.pem
    146. 

  146. -k ./certs/client-key.pem
    147. 

  147. -c ./certs/intermediate/client-int-cert.pem
    148. 

  148. -C
    149. 

  149. 

  150. # server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Chain
    151. 

  151. -v 4
    152. 

  152. -l TLS13-AES128-GCM-SHA256
    153. 

  153. -A ./certs/intermediate/ca-int-ecc-cert.pem
    154. 

  154. -k ./certs/ecc-key.pem
    155. 

  155. -c ./certs/intermediate/server-int-ecc-cert.pem
    156. 

  156. -V
    157. 

  157. 

  158. # client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Chain
    159. 

  159. -v 4
    160. 

  160. -l TLS13-AES128-GCM-SHA256
    161. 

  161. -A ./certs/intermediate/ca-int-ecc-cert.pem
    162. 

  162. -k ./certs/ecc-client-key.pem
    163. 

  163. -c ./certs/intermediate/client-int-ecc-cert.pem
    164. 

  164. -C
    165. 

  165. 

  166. # Test will use alternate chain where chain contains extra cert
    167. 

  167. # server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
    168. 

  168. -v 3
    169. 

  169. -l DHE-RSA-AES128-GCM-SHA256
    170. 

  170. -A ./certs/ca-cert.pem
    171. 

  171. -k ./certs/server-key.pem
    172. 

  172. -c ./certs/intermediate/server-chain-alt.pem
    173. 

  173. -V
    174. 

  174. 

  175. # client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
    176. 

  176. -v 3
    177. 

  177. -l DHE-RSA-AES128-GCM-SHA256
    178. 

  178. -A ./certs/ca-cert.pem
    179. 

  179. -k ./certs/client-key.pem
    180. 

  180. -c ./certs/intermediate/client-chain-alt.pem
    181. 

  181. -C
    182. 

  182. 

  183. # server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
    184. 

  184. -v 3
    185. 

  185. -l ECDHE-RSA-AES128-GCM-SHA256
    186. 

  186. -A ./certs/ca-cert.pem
    187. 

  187. -k ./certs/server-key.pem
    188. 

  188. -c ./certs/intermediate/server-chain-alt.pem
    189. 

  189. -V
    190. 

  190. 

  191. # client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
    192. 

  192. -v 3
    193. 

  193. -l ECDHE-RSA-AES128-GCM-SHA256
    194. 

  194. -A ./certs/ca-cert.pem
    195. 

  195. -k ./certs/client-key.pem
    196. 

  196. -c ./certs/intermediate/client-chain-alt.pem
    197. 

  197. -C
    198. 

  198. 

  199. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Alt Chain
    200. 

  200. -v 3
    201. 

  201. -l ECDHE-ECDSA-AES128-GCM-SHA256
    202. 

  202. -A ./certs/ca-ecc-cert.pem
    203. 

  203. -k ./certs/ecc-key.pem
    204. 

  204. -c ./certs/intermediate/server-chain-alt-ecc.pem
    205. 

  205. -V
    206. 

  206. 

  207. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Alt Chain
    208. 

  208. -v 3
    209. 

  209. -l ECDHE-ECDSA-AES128-GCM-SHA256
    210. 

  210. -A ./certs/ca-ecc-cert.pem
    211. 

  211. -k ./certs/ecc-client-key.pem
    212. 

  212. -c ./certs/intermediate/client-chain-alt-ecc.pem
    213. 

  213. -C
    214. 

  214. 

  215. # server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Alt Chain
    216. 

  216. -v 4
    217. 

  217. -l TLS13-AES128-GCM-SHA256
    218. 

  218. -A ./certs/ca-cert.pem
    219. 

  219. -k ./certs/server-key.pem
    220. 

  220. -c ./certs/intermediate/server-chain-alt.pem
    221. 

  221. -V
    222. 

  222. 

  223. # client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Alt Chain
    224. 

  224. -v 4
    225. 

  225. -l TLS13-AES128-GCM-SHA256
    226. 

  226. -A ./certs/ca-cert.pem
    227. 

  227. -k ./certs/client-key.pem
    228. 

  228. -c ./certs/intermediate/client-chain-alt.pem
    229. 

  229. -C
    230. 

  230. 

  231. # server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Alt Chain
    232. 

  232. -v 4
    233. 

  233. -l TLS13-AES128-GCM-SHA256
    234. 

  234. -A ./certs/ca-ecc-cert.pem
    235. 

  235. -k ./certs/ecc-key.pem
    236. 

  236. -c ./certs/intermediate/server-chain-alt-ecc.pem
    237. 

  237. -V
    238. 

  238. 

  239. # client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Alt Chain
    240. 

  240. -v 4
    241. 

  241. -l TLS13-AES128-GCM-SHA256
    242. 

  242. -A ./certs/ca-ecc-cert.pem
    243. 

  243. -k ./certs/ecc-client-key.pem
    244. 

  244. -c ./certs/intermediate/client-chain-alt-ecc.pem
    245. 

  245. -C
    246.