1# Generated with generate_ssl_tests.pl
2
3num_tests = 6
4
5test-0 = 0-SECLEVEL 3 with default key
6test-1 = 1-SECLEVEL 4 with ED448 key
7test-2 = 2-SECLEVEL 5 server with ED448 key
8test-3 = 3-SECLEVEL 5 client with ED448 key
9test-4 = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE
10test-5 = 5-SECLEVEL 3 with ED448 key, TLSv1.2
11# ===========================================================
12
13[0-SECLEVEL 3 with default key]
14ssl_conf = 0-SECLEVEL 3 with default key-ssl
15
16[0-SECLEVEL 3 with default key-ssl]
17server = 0-SECLEVEL 3 with default key-server
18client = 0-SECLEVEL 3 with default key-client
19
20[0-SECLEVEL 3 with default key-server]
21Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
22CipherString = DEFAULT:@SECLEVEL=3
23PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
24
25[0-SECLEVEL 3 with default key-client]
26CipherString = DEFAULT
27VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
28VerifyMode = Peer
29
30[test-0]
31ExpectedResult = ServerFail
32
33
34# ===========================================================
35
36[1-SECLEVEL 4 with ED448 key]
37ssl_conf = 1-SECLEVEL 4 with ED448 key-ssl
38
39[1-SECLEVEL 4 with ED448 key-ssl]
40server = 1-SECLEVEL 4 with ED448 key-server
41client = 1-SECLEVEL 4 with ED448 key-client
42
43[1-SECLEVEL 4 with ED448 key-server]
44Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
45CipherString = DEFAULT:@SECLEVEL=4
46Groups = ?X448:?secp521r1
47PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
48
49[1-SECLEVEL 4 with ED448 key-client]
50CipherString = DEFAULT:@SECLEVEL=4
51Groups = ?X448:?secp521r1
52VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
53VerifyMode = Peer
54
55[test-1]
56ExpectedResult = Success
57
58
59# ===========================================================
60
61[2-SECLEVEL 5 server with ED448 key]
62ssl_conf = 2-SECLEVEL 5 server with ED448 key-ssl
63
64[2-SECLEVEL 5 server with ED448 key-ssl]
65server = 2-SECLEVEL 5 server with ED448 key-server
66client = 2-SECLEVEL 5 server with ED448 key-client
67
68[2-SECLEVEL 5 server with ED448 key-server]
69Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
70CipherString = DEFAULT:@SECLEVEL=5
71Groups = ?X448:?secp521r1
72PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
73
74[2-SECLEVEL 5 server with ED448 key-client]
75CipherString = DEFAULT:@SECLEVEL=4
76Groups = ?X448:?secp521r1
77VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
78VerifyMode = Peer
79
80[test-2]
81ExpectedResult = ServerFail
82
83
84# ===========================================================
85
86[3-SECLEVEL 5 client with ED448 key]
87ssl_conf = 3-SECLEVEL 5 client with ED448 key-ssl
88
89[3-SECLEVEL 5 client with ED448 key-ssl]
90server = 3-SECLEVEL 5 client with ED448 key-server
91client = 3-SECLEVEL 5 client with ED448 key-client
92
93[3-SECLEVEL 5 client with ED448 key-server]
94Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
95CipherString = DEFAULT:@SECLEVEL=4
96Groups = ?X448:?secp521r1
97PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
98
99[3-SECLEVEL 5 client with ED448 key-client]
100CipherString = DEFAULT:@SECLEVEL=5
101Groups = ?X448:?secp521r1
102VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
103VerifyMode = Peer
104
105[test-3]
106ExpectedResult = ServerFail
107
108
109# ===========================================================
110
111[4-SECLEVEL 3 with P-384 key, X25519 ECDHE]
112ssl_conf = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl
113
114[4-SECLEVEL 3 with P-384 key, X25519 ECDHE-ssl]
115server = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server
116client = 4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client
117
118[4-SECLEVEL 3 with P-384 key, X25519 ECDHE-server]
119Certificate = ${ENV::TEST_CERTS_DIR}/p384-server-cert.pem
120CipherString = DEFAULT:@SECLEVEL=3
121Groups = X25519
122PrivateKey = ${ENV::TEST_CERTS_DIR}/p384-server-key.pem
123
124[4-SECLEVEL 3 with P-384 key, X25519 ECDHE-client]
125CipherString = ECDHE:@SECLEVEL=3
126VerifyCAFile = ${ENV::TEST_CERTS_DIR}/p384-root.pem
127VerifyMode = Peer
128
129[test-4]
130ExpectedResult = Success
131
132
133# ===========================================================
134
135[5-SECLEVEL 3 with ED448 key, TLSv1.2]
136ssl_conf = 5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl
137
138[5-SECLEVEL 3 with ED448 key, TLSv1.2-ssl]
139server = 5-SECLEVEL 3 with ED448 key, TLSv1.2-server
140client = 5-SECLEVEL 3 with ED448 key, TLSv1.2-client
141
142[5-SECLEVEL 3 with ED448 key, TLSv1.2-server]
143Certificate = ${ENV::TEST_CERTS_DIR}/server-ed448-cert.pem
144CipherString = DEFAULT:@SECLEVEL=3
145MaxProtocol = TLSv1.2
146PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ed448-key.pem
147
148[5-SECLEVEL 3 with ED448 key, TLSv1.2-client]
149CipherString = DEFAULT
150VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-ed448-cert.pem
151VerifyMode = Peer
152
153[test-5]
154ExpectedResult = Success
155
156
157