test-tls-downgrade.conf 511 B

123456789101112131415161718192021222324252627282930
  1. # server TLSv1.3
  2. -v 4
  3. -l ECDHE-RSA-AES256-GCM-SHA384
  4. -H exitWithRet
  5. # client TLSv1.2, should fail
  6. -v 3
  7. -l ECDHE-RSA-AES256-GCM-SHA384
  8. -H exitWithRet
  9. # server TLSv1.2
  10. -v 3
  11. -l ECDHE-RSA-AES256-GCM-SHA384
  12. -H exitWithRet
  13. # client TLSv1.3, should fail
  14. -v 4
  15. -l ECDHE-RSA-AES256-GCM-SHA384
  16. -H exitWithRet
  17. # server TLSv1.2
  18. -v d 3
  19. -l ECDHE-RSA-AES256-GCM-SHA384
  20. -H exitWithRet
  21. # client TLSv1.3 with downgrade option, set downgrade to TLSv1.3, should fail
  22. -7 4
  23. -v d 4
  24. -l ECDHE-RSA-AES256-GCM-SHA384
  25. -H exitWithRet