Home Explore Help
Register Sign In
OWEALs
/
wolfssl
mirror of https://github.com/wolfSSL/wolfssl.git
2
0
Fork 0
Files Issues 8 Wiki
Branch: master
Branches Tags
wolfssl
/
tests
/
test-altchains.conf

test-altchains.conf 11 KB
Permalink History Raw

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418 
  1. # Tests using a longer certificate chain (with intermediate CA's)
    2. 

  2. # The tests with chains have the CRL checking disabled
    3. 

  3. # CRL's only load for trusted CA's, for a chain you must load the root and intermediate as trusted
    4. 

  4. 

  5. # For these tests we are loading root and sending intermediate and peer certs
    6. 

  6. # server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Chain
    7. 

  7. -v 3
    8. 

  8. -l DHE-RSA-AES128-GCM-SHA256
    9. 

  9. -A ./certs/ca-cert.pem
    10. 

  10. -k ./certs/server-key.pem
    11. 

  11. -c ./certs/intermediate/server-chain.pem
    12. 

  12. -V
    13. 

  13. 

  14. # client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Chain
    15. 

  15. -v 3
    16. 

  16. -l DHE-RSA-AES128-GCM-SHA256
    17. 

  17. -A ./certs/ca-cert.pem
    18. 

  18. -k ./certs/client-key.pem
    19. 

  19. -c ./certs/intermediate/client-chain.pem
    20. 

  20. -C
    21. 

  21. 

  22. # server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Chain
    23. 

  23. -v 3
    24. 

  24. -l ECDHE-RSA-AES128-GCM-SHA256
    25. 

  25. -A ./certs/ca-cert.pem
    26. 

  26. -k ./certs/server-key.pem
    27. 

  27. -c ./certs/intermediate/server-chain.pem
    28. 

  28. -V
    29. 

  29. 

  30. # client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Chain
    31. 

  31. -v 3
    32. 

  32. -l ECDHE-RSA-AES128-GCM-SHA256
    33. 

  33. -A ./certs/ca-cert.pem
    34. 

  34. -k ./certs/client-key.pem
    35. 

  35. -c ./certs/intermediate/client-chain.pem
    36. 

  36. -C
    37. 

  37. 

  38. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Chain
    39. 

  39. -v 3
    40. 

  40. -l ECDHE-ECDSA-AES128-GCM-SHA256
    41. 

  41. -A ./certs/ca-ecc-cert.pem
    42. 

  42. -k ./certs/ecc-key.pem
    43. 

  43. -c ./certs/intermediate/server-chain-ecc.pem
    44. 

  44. -V
    45. 

  45. 

  46. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Chain
    47. 

  47. -v 3
    48. 

  48. -l ECDHE-ECDSA-AES128-GCM-SHA256
    49. 

  49. -A ./certs/ca-ecc-cert.pem
    50. 

  50. -k ./certs/ecc-client-key.pem
    51. 

  51. -c ./certs/intermediate/client-chain-ecc.pem
    52. 

  52. -C
    53. 

  53. 

  54. # server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Chain
    55. 

  55. -v 4
    56. 

  56. -l TLS13-AES128-GCM-SHA256
    57. 

  57. -A ./certs/ca-cert.pem
    58. 

  58. -k ./certs/server-key.pem
    59. 

  59. -c ./certs/intermediate/server-chain.pem
    60. 

  60. -V
    61. 

  61. 

  62. # client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Chain
    63. 

  63. -v 4
    64. 

  64. -l TLS13-AES128-GCM-SHA256
    65. 

  65. -A ./certs/ca-cert.pem
    66. 

  66. -k ./certs/client-key.pem
    67. 

  67. -c ./certs/intermediate/client-chain.pem
    68. 

  68. -C
    69. 

  69. 

  70. # server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Chain
    71. 

  71. -v 4
    72. 

  72. -l TLS13-AES128-GCM-SHA256
    73. 

  73. -A ./certs/ca-ecc-cert.pem
    74. 

  74. -k ./certs/ecc-key.pem
    75. 

  75. -c ./certs/intermediate/server-chain-ecc.pem
    76. 

  76. -V
    77. 

  77. 

  78. # client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Chain
    79. 

  79. -v 4
    80. 

  80. -l TLS13-AES128-GCM-SHA256
    81. 

  81. -A ./certs/ca-ecc-cert.pem
    82. 

  82. -k ./certs/ecc-client-key.pem
    83. 

  83. -c ./certs/intermediate/client-chain-ecc.pem
    84. 

  84. -C
    85. 

  85. 

  86. 

  87. # Test will load intermediate CA as trusted and only present the peer cert (partial chain)
    88. 

  88. # server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
    89. 

  89. -v 3
    90. 

  90. -l DHE-RSA-AES128-GCM-SHA256
    91. 

  91. -A ./certs/intermediate/ca-int2-cert.pem
    92. 

  92. -k ./certs/server-key.pem
    93. 

  93. -c ./certs/intermediate/server-int-cert.pem
    94. 

  94. -V
    95. 

  95. 

  96. # client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
    97. 

  97. -v 3
    98. 

  98. -l DHE-RSA-AES128-GCM-SHA256
    99. 

  99. -A ./certs/intermediate/ca-int2-cert.pem
    100. 

  100. -k ./certs/client-key.pem
    101. 

  101. -c ./certs/intermediate/client-int-cert.pem
    102. 

  102. -C
    103. 

  103. 

  104. # server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
    105. 

  105. -v 3
    106. 

  106. -l ECDHE-RSA-AES128-GCM-SHA256
    107. 

  107. -A ./certs/intermediate/ca-int2-cert.pem
    108. 

  108. -k ./certs/server-key.pem
    109. 

  109. -c ./certs/intermediate/server-int-cert.pem
    110. 

  110. -V
    111. 

  111. 

  112. # client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Chain
    113. 

  113. -v 3
    114. 

  114. -l ECDHE-RSA-AES128-GCM-SHA256
    115. 

  115. -A ./certs/intermediate/ca-int2-cert.pem
    116. 

  116. -k ./certs/client-key.pem
    117. 

  117. -c ./certs/intermediate/client-int-cert.pem
    118. 

  118. -C
    119. 

  119. 

  120. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Chain
    121. 

  121. -v 3
    122. 

  122. -l ECDHE-ECDSA-AES128-GCM-SHA256
    123. 

  123. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    124. 

  124. -k ./certs/ecc-key.pem
    125. 

  125. -c ./certs/intermediate/server-int-ecc-cert.pem
    126. 

  126. -V
    127. 

  127. 

  128. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Chain
    129. 

  129. -v 3
    130. 

  130. -l ECDHE-ECDSA-AES128-GCM-SHA256
    131. 

  131. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    132. 

  132. -k ./certs/ecc-client-key.pem
    133. 

  133. -c ./certs/intermediate/client-int-ecc-cert.pem
    134. 

  134. -C
    135. 

  135. 

  136. # server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Chain
    137. 

  137. -v 4
    138. 

  138. -l TLS13-AES128-GCM-SHA256
    139. 

  139. -A ./certs/intermediate/ca-int2-cert.pem
    140. 

  140. -k ./certs/server-key.pem
    141. 

  141. -c ./certs/intermediate/server-int-cert.pem
    142. 

  142. -V
    143. 

  143. 

  144. # client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Chain
    145. 

  145. -v 4
    146. 

  146. -l TLS13-AES128-GCM-SHA256
    147. 

  147. -A ./certs/intermediate/ca-int2-cert.pem
    148. 

  148. -k ./certs/client-key.pem
    149. 

  149. -c ./certs/intermediate/client-int-cert.pem
    150. 

  150. -C
    151. 

  151. 

  152. # server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Chain
    153. 

  153. -v 4
    154. 

  154. -l TLS13-AES128-GCM-SHA256
    155. 

  155. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    156. 

  156. -k ./certs/ecc-key.pem
    157. 

  157. -c ./certs/intermediate/server-int-ecc-cert.pem
    158. 

  158. -V
    159. 

  159. 

  160. # client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Chain
    161. 

  161. -v 4
    162. 

  162. -l TLS13-AES128-GCM-SHA256
    163. 

  163. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    164. 

  164. -k ./certs/ecc-client-key.pem
    165. 

  165. -c ./certs/intermediate/client-int-ecc-cert.pem
    166. 

  166. -C
    167. 

  167. 

  168. 

  169. # Test will use alternate chain where chain contains extra cert
    170. 

  170. # server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
    171. 

  171. -v 3
    172. 

  172. -l DHE-RSA-AES128-GCM-SHA256
    173. 

  173. -A ./certs/ca-cert.pem
    174. 

  174. -k ./certs/server-key.pem
    175. 

  175. -c ./certs/intermediate/server-chain-alt.pem
    176. 

  176. -V
    177. 

  177. 

  178. # client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
    179. 

  179. -v 3
    180. 

  180. -l DHE-RSA-AES128-GCM-SHA256
    181. 

  181. -A ./certs/ca-cert.pem
    182. 

  182. -k ./certs/client-key.pem
    183. 

  183. -c ./certs/intermediate/client-chain-alt.pem
    184. 

  184. -C
    185. 

  185. 

  186. # server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
    187. 

  187. -v 3
    188. 

  188. -l ECDHE-RSA-AES128-GCM-SHA256
    189. 

  189. -A ./certs/ca-cert.pem
    190. 

  190. -k ./certs/server-key.pem
    191. 

  191. -c ./certs/intermediate/server-chain-alt.pem
    192. 

  192. -V
    193. 

  193. 

  194. # client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Alt Chain
    195. 

  195. -v 3
    196. 

  196. -l ECDHE-RSA-AES128-GCM-SHA256
    197. 

  197. -A ./certs/ca-cert.pem
    198. 

  198. -k ./certs/client-key.pem
    199. 

  199. -c ./certs/intermediate/client-chain-alt.pem
    200. 

  200. -C
    201. 

  201. 

  202. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Alt Chain
    203. 

  203. -v 3
    204. 

  204. -l ECDHE-ECDSA-AES128-GCM-SHA256
    205. 

  205. -A ./certs/ca-ecc-cert.pem
    206. 

  206. -k ./certs/ecc-key.pem
    207. 

  207. -c ./certs/intermediate/server-chain-alt-ecc.pem
    208. 

  208. -V
    209. 

  209. 

  210. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Alt Chain
    211. 

  211. -v 3
    212. 

  212. -l ECDHE-ECDSA-AES128-GCM-SHA256
    213. 

  213. -A ./certs/ca-ecc-cert.pem
    214. 

  214. -k ./certs/ecc-client-key.pem
    215. 

  215. -c ./certs/intermediate/client-chain-alt-ecc.pem
    216. 

  216. -C
    217. 

  217. 

  218. # server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Alt Chain
    219. 

  219. -v 4
    220. 

  220. -l TLS13-AES128-GCM-SHA256
    221. 

  221. -A ./certs/ca-cert.pem
    222. 

  222. -k ./certs/server-key.pem
    223. 

  223. -c ./certs/intermediate/server-chain-alt.pem
    224. 

  224. -V
    225. 

  225. 

  226. # client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Alt Chain
    227. 

  227. -v 4
    228. 

  228. -l TLS13-AES128-GCM-SHA256
    229. 

  229. -A ./certs/ca-cert.pem
    230. 

  230. -k ./certs/client-key.pem
    231. 

  231. -c ./certs/intermediate/client-chain-alt.pem
    232. 

  232. -C
    233. 

  233. 

  234. # server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Alt Chain
    235. 

  235. -v 4
    236. 

  236. -l TLS13-AES128-GCM-SHA256
    237. 

  237. -A ./certs/ca-ecc-cert.pem
    238. 

  238. -k ./certs/ecc-key.pem
    239. 

  239. -c ./certs/intermediate/server-chain-alt-ecc.pem
    240. 

  240. -V
    241. 

  241. 

  242. # client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Alt Chain
    243. 

  243. -v 4
    244. 

  244. -l TLS13-AES128-GCM-SHA256
    245. 

  245. -A ./certs/ca-ecc-cert.pem
    246. 

  246. -k ./certs/ecc-client-key.pem
    247. 

  247. -c ./certs/intermediate/client-chain-alt-ecc.pem
    248. 

  248. -C
    249. 

  249. 

  250. 

  251. # Test will load intermediate2 CA as trusted and present full chain (where intermediate CA is not trusted)
    252. 

  252. # server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
    253. 

  253. -v 3
    254. 

  254. -l DHE-RSA-AES128-GCM-SHA256
    255. 

  255. -A ./certs/intermediate/ca-int2-cert.pem
    256. 

  256. -k ./certs/server-key.pem
    257. 

  257. -c ./certs/intermediate/server-chain.pem
    258. 

  258. -V
    259. 

  259. 

  260. # client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
    261. 

  261. -v 3
    262. 

  262. -l DHE-RSA-AES128-GCM-SHA256
    263. 

  263. -A ./certs/intermediate/ca-int2-cert.pem
    264. 

  264. -k ./certs/client-key.pem
    265. 

  265. -c ./certs/intermediate/client-chain.pem
    266. 

  266. -C
    267. 

  267. 

  268. # server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
    269. 

  269. -v 3
    270. 

  270. -l ECDHE-RSA-AES128-GCM-SHA256
    271. 

  271. -A ./certs/intermediate/ca-int2-cert.pem
    272. 

  272. -k ./certs/server-key.pem
    273. 

  273. -c ./certs/intermediate/server-chain.pem
    274. 

  274. -V
    275. 

  275. 

  276. # client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
    277. 

  277. -v 3
    278. 

  278. -l ECDHE-RSA-AES128-GCM-SHA256
    279. 

  279. -A ./certs/intermediate/ca-int2-cert.pem
    280. 

  280. -k ./certs/client-key.pem
    281. 

  281. -c ./certs/intermediate/client-chain.pem
    282. 

  282. -C
    283. 

  283. 

  284. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Trusted Chain
    285. 

  285. -v 3
    286. 

  286. -l ECDHE-ECDSA-AES128-GCM-SHA256
    287. 

  287. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    288. 

  288. -k ./certs/ecc-key.pem
    289. 

  289. -c ./certs/intermediate/server-chain-ecc.pem
    290. 

  290. -V
    291. 

  291. 

  292. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Trusted Chain
    293. 

  293. -v 3
    294. 

  294. -l ECDHE-ECDSA-AES128-GCM-SHA256
    295. 

  295. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    296. 

  296. -k ./certs/ecc-client-key.pem
    297. 

  297. -c ./certs/intermediate/client-chain-ecc.pem
    298. 

  298. -C
    299. 

  299. 

  300. # server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Trusted Chain
    301. 

  301. -v 4
    302. 

  302. -l TLS13-AES128-GCM-SHA256
    303. 

  303. -A ./certs/intermediate/ca-int2-cert.pem
    304. 

  304. -k ./certs/server-key.pem
    305. 

  305. -c ./certs/intermediate/server-chain.pem
    306. 

  306. -V
    307. 

  307. 

  308. # client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Trusted Chain
    309. 

  309. -v 4
    310. 

  310. -l TLS13-AES128-GCM-SHA256
    311. 

  311. -A ./certs/intermediate/ca-int2-cert.pem
    312. 

  312. -k ./certs/client-key.pem
    313. 

  313. -c ./certs/intermediate/client-chain.pem
    314. 

  314. -C
    315. 

  315. 

  316. # server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Trusted Chain
    317. 

  317. -v 4
    318. 

  318. -l TLS13-AES128-GCM-SHA256
    319. 

  319. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    320. 

  320. -k ./certs/ecc-key.pem
    321. 

  321. -c ./certs/intermediate/server-chain-ecc.pem
    322. 

  322. -V
    323. 

  323. 

  324. # client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Trusted Chain
    325. 

  325. -v 4
    326. 

  326. -l TLS13-AES128-GCM-SHA256
    327. 

  327. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    328. 

  328. -k ./certs/ecc-client-key.pem
    329. 

  329. -c ./certs/intermediate/client-chain-ecc.pem
    330. 

  330. -C
    331. 

  331. 

  332. 

  333. # Test will load intermediate2 CA as trusted and present full chain (where intermediate CA is not trusted)
    334. 

  334. # These tests use the verify callback, but pass the preverify as result in myVerify callback
    335. 

  335. # server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
    336. 

  336. -v 3
    337. 

  337. -l DHE-RSA-AES128-GCM-SHA256
    338. 

  338. -A ./certs/intermediate/ca-int2-cert.pem
    339. 

  339. -k ./certs/server-key.pem
    340. 

  340. -c ./certs/intermediate/server-chain.pem
    341. 

  341. -V
    342. 

  342. 

  343. # client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
    344. 

  344. -v 3
    345. 

  345. -l DHE-RSA-AES128-GCM-SHA256
    346. 

  346. -A ./certs/intermediate/ca-int2-cert.pem
    347. 

  347. -k ./certs/client-key.pem
    348. 

  348. -c ./certs/intermediate/client-chain.pem
    349. 

  349. -C
    350. 

  350. -H verifyInfo
    351. 

  351. 

  352. # server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
    353. 

  353. -v 3
    354. 

  354. -l ECDHE-RSA-AES128-GCM-SHA256
    355. 

  355. -A ./certs/intermediate/ca-int2-cert.pem
    356. 

  356. -k ./certs/server-key.pem
    357. 

  357. -c ./certs/intermediate/server-chain.pem
    358. 

  358. -V
    359. 

  359. 

  360. # client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Partial Trusted Chain
    361. 

  361. -v 3
    362. 

  362. -l ECDHE-RSA-AES128-GCM-SHA256
    363. 

  363. -A ./certs/intermediate/ca-int2-cert.pem
    364. 

  364. -k ./certs/client-key.pem
    365. 

  365. -c ./certs/intermediate/client-chain.pem
    366. 

  366. -C
    367. 

  367. -H verifyInfo
    368. 

  368. 

  369. # server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Trusted Chain
    370. 

  370. -v 3
    371. 

  371. -l ECDHE-ECDSA-AES128-GCM-SHA256
    372. 

  372. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    373. 

  373. -k ./certs/ecc-key.pem
    374. 

  374. -c ./certs/intermediate/server-chain-ecc.pem
    375. 

  375. -V
    376. 

  376. 

  377. # client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Partial Trusted Chain
    378. 

  378. -v 3
    379. 

  379. -l ECDHE-ECDSA-AES128-GCM-SHA256
    380. 

  380. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    381. 

  381. -k ./certs/ecc-client-key.pem
    382. 

  382. -c ./certs/intermediate/client-chain-ecc.pem
    383. 

  383. -C
    384. 

  384. -H verifyInfo
    385. 

  385. 

  386. # server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Trusted Chain
    387. 

  387. -v 4
    388. 

  388. -l TLS13-AES128-GCM-SHA256
    389. 

  389. -A ./certs/intermediate/ca-int2-cert.pem
    390. 

  390. -k ./certs/server-key.pem
    391. 

  391. -c ./certs/intermediate/server-chain.pem
    392. 

  392. -V
    393. 

  393. 

  394. # client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Partial Trusted Chain
    395. 

  395. -v 4
    396. 

  396. -l TLS13-AES128-GCM-SHA256
    397. 

  397. -A ./certs/intermediate/ca-int2-cert.pem
    398. 

  398. -k ./certs/client-key.pem
    399. 

  399. -c ./certs/intermediate/client-chain.pem
    400. 

  400. -C
    401. 

  401. -H verifyInfo
    402. 

  402. 

  403. # server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Trusted Chain
    404. 

  404. -v 4
    405. 

  405. -l TLS13-AES128-GCM-SHA256
    406. 

  406. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    407. 

  407. -k ./certs/ecc-key.pem
    408. 

  408. -c ./certs/intermediate/server-chain-ecc.pem
    409. 

  409. -V
    410. 

  410. 

  411. # client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Partial Trusted Chain
    412. 

  412. -v 4
    413. 

  413. -l TLS13-AES128-GCM-SHA256
    414. 

  414. -A ./certs/intermediate/ca-int2-ecc-cert.pem
    415. 

  415. -k ./certs/ecc-client-key.pem
    416. 

  416. -c ./certs/intermediate/client-chain-ecc.pem
    417. 

  417. -C
    418. 

  418. -H verifyInfo
    419.