test-ecc-cust-curves.conf 4.6 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197
  1. # ----- secp256k1 ------
  2. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
  3. -v 3
  4. -l ECDHE-ECDSA-AES128-GCM-SHA256
  5. -c ./certs/ecc/server-secp256k1-cert.pem
  6. -k ./certs/ecc/secp256k1-key.pem
  7. -d
  8. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
  9. -v 3
  10. -l ECDHE-ECDSA-AES128-GCM-SHA256
  11. -A ./certs/ecc/server-secp256k1-cert.pem
  12. -x
  13. -C
  14. # server TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256 (static)
  15. -v 3
  16. -l ECDH-ECDSA-AES128-GCM-SHA256
  17. -c ./certs/ecc/server-secp256k1-cert.pem
  18. -k ./certs/ecc/secp256k1-key.pem
  19. -d
  20. # client TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256 (static)
  21. -v 3
  22. -l ECDH-ECDSA-AES128-GCM-SHA256
  23. -A ./certs/ecc/server-secp256k1-cert.pem
  24. -x
  25. -C
  26. # server TLSv1.3 TLS13-AES128-GCM-SHA256
  27. -v 4
  28. -l TLS13-AES128-GCM-SHA256
  29. -c ./certs/ecc/server-secp256k1-cert.pem
  30. -k ./certs/ecc/secp256k1-key.pem
  31. -d
  32. # client TLSv1.3 TLS13-AES128-GCM-SHA256
  33. -v 4
  34. -l TLS13-AES128-GCM-SHA256
  35. -A ./certs/ecc/server-secp256k1-cert.pem
  36. -x
  37. -C
  38. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 (mutual auth)
  39. -v 3
  40. -l ECDHE-ECDSA-AES128-GCM-SHA256
  41. -c ./certs/ecc/server-secp256k1-cert.pem
  42. -k ./certs/ecc/secp256k1-key.pem
  43. -A ./certs/ecc/client-secp256k1-cert.pem
  44. -V
  45. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 (mutal auth)
  46. -v 3
  47. -l ECDHE-ECDSA-AES128-GCM-SHA256
  48. -c ./certs/ecc/client-secp256k1-cert.pem
  49. -k ./certs/ecc/secp256k1-key.pem
  50. -A ./certs/ecc/server-secp256k1-cert.pem
  51. -C
  52. # server TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256 (static - mutual auth)
  53. -v 3
  54. -l ECDH-ECDSA-AES128-GCM-SHA256
  55. -c ./certs/ecc/server-secp256k1-cert.pem
  56. -k ./certs/ecc/secp256k1-key.pem
  57. -A ./certs/ecc/client-secp256k1-cert.pem
  58. -V
  59. # client TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256 (static - mutal auth)
  60. -v 3
  61. -l ECDH-ECDSA-AES128-GCM-SHA256
  62. -c ./certs/ecc/client-secp256k1-cert.pem
  63. -k ./certs/ecc/secp256k1-key.pem
  64. -A ./certs/ecc/server-secp256k1-cert.pem
  65. -C
  66. # server TLSv1.3 TLS13-AES128-GCM-SHA256 (mutal auth)
  67. -v 4
  68. -l TLS13-AES128-GCM-SHA256
  69. -c ./certs/ecc/server-secp256k1-cert.pem
  70. -k ./certs/ecc/secp256k1-key.pem
  71. -A ./certs/ecc/client-secp256k1-cert.pem
  72. -V
  73. # client TLSv1.3 TLS13-AES128-GCM-SHA256 (mutal auth)
  74. -v 4
  75. -l TLS13-AES128-GCM-SHA256
  76. -c ./certs/ecc/client-secp256k1-cert.pem
  77. -k ./certs/ecc/secp256k1-key.pem
  78. -A ./certs/ecc/server-secp256k1-cert.pem
  79. -C
  80. # ----- bp256r1 ------
  81. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
  82. -v 3
  83. -l ECDHE-ECDSA-AES128-GCM-SHA256
  84. -c ./certs/ecc/server-bp256r1-cert.pem
  85. -k ./certs/ecc/bp256r1-key.pem
  86. -d
  87. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
  88. -v 3
  89. -l ECDHE-ECDSA-AES128-GCM-SHA256
  90. -A ./certs/ecc/server-bp256r1-cert.pem
  91. -x
  92. -C
  93. # server TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256 (static)
  94. -v 3
  95. -l ECDH-ECDSA-AES128-GCM-SHA256
  96. -c ./certs/ecc/server-bp256r1-cert.pem
  97. -k ./certs/ecc/bp256r1-key.pem
  98. -d
  99. # client TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256 (static)
  100. -v 3
  101. -l ECDH-ECDSA-AES128-GCM-SHA256
  102. -A ./certs/ecc/server-bp256r1-cert.pem
  103. -x
  104. -C
  105. # server TLSv1.3 TLS13-AES128-GCM-SHA256
  106. -v 4
  107. -l TLS13-AES128-GCM-SHA256
  108. -c ./certs/ecc/server-bp256r1-cert.pem
  109. -k ./certs/ecc/bp256r1-key.pem
  110. -d
  111. # client TLSv1.3 TLS13-AES128-GCM-SHA256
  112. -v 4
  113. -l TLS13-AES128-GCM-SHA256
  114. -A ./certs/ecc/server-bp256r1-cert.pem
  115. -x
  116. -C
  117. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 (mutual auth)
  118. -v 3
  119. -l ECDHE-ECDSA-AES128-GCM-SHA256
  120. -c ./certs/ecc/server-bp256r1-cert.pem
  121. -k ./certs/ecc/bp256r1-key.pem
  122. -A ./certs/ecc/client-bp256r1-cert.pem
  123. -V
  124. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 (mutal auth)
  125. -v 3
  126. -l ECDHE-ECDSA-AES128-GCM-SHA256
  127. -c ./certs/ecc/client-bp256r1-cert.pem
  128. -k ./certs/ecc/bp256r1-key.pem
  129. -A ./certs/ecc/server-bp256r1-cert.pem
  130. -C
  131. # server TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256 (static - mutual auth)
  132. -v 3
  133. -l ECDH-ECDSA-AES128-GCM-SHA256
  134. -c ./certs/ecc/server-bp256r1-cert.pem
  135. -k ./certs/ecc/bp256r1-key.pem
  136. -A ./certs/ecc/client-bp256r1-cert.pem
  137. -V
  138. # client TLSv1.2 ECDH-ECDSA-AES128-GCM-SHA256 (static - mutal auth)
  139. -v 3
  140. -l ECDH-ECDSA-AES128-GCM-SHA256
  141. -c ./certs/ecc/client-bp256r1-cert.pem
  142. -k ./certs/ecc/bp256r1-key.pem
  143. -A ./certs/ecc/server-bp256r1-cert.pem
  144. -C
  145. # server TLSv1.3 TLS13-AES128-GCM-SHA256 (mutal auth)
  146. -v 4
  147. -l TLS13-AES128-GCM-SHA256
  148. -c ./certs/ecc/server-bp256r1-cert.pem
  149. -k ./certs/ecc/bp256r1-key.pem
  150. -A ./certs/ecc/client-bp256r1-cert.pem
  151. -V
  152. # client TLSv1.3 TLS13-AES128-GCM-SHA256 (mutal auth)
  153. -v 4
  154. -l TLS13-AES128-GCM-SHA256
  155. -c ./certs/ecc/client-bp256r1-cert.pem
  156. -k ./certs/ecc/bp256r1-key.pem
  157. -A ./certs/ecc/server-bp256r1-cert.pem
  158. -C
  159. # -- SECP256K1 without OID inside PKCS#8 --
  160. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
  161. -v 3
  162. -l ECDHE-ECDSA-AES128-GCM-SHA256
  163. -c ./certs/ecc/server2-secp256k1-cert.pem
  164. -k ./certs/ecc/secp256k1-privkey.pem
  165. -d
  166. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
  167. -v 3
  168. -l ECDHE-ECDSA-AES128-GCM-SHA256
  169. -A ./certs/ecc/ca-secp256k1-cert.pem
  170. -x
  171. -C