1e1051a39Sopenharmony_ci# Generated with generate_ssl_tests.pl
2e1051a39Sopenharmony_ci
3e1051a39Sopenharmony_cinum_tests = 14
4e1051a39Sopenharmony_ci
5e1051a39Sopenharmony_citest-0 = 0-server-auth-TLSv1.3
6e1051a39Sopenharmony_citest-1 = 1-client-auth-TLSv1.3-request
7e1051a39Sopenharmony_citest-2 = 2-client-auth-TLSv1.3-require-fail
8e1051a39Sopenharmony_citest-3 = 3-client-auth-TLSv1.3-require
9e1051a39Sopenharmony_citest-4 = 4-client-auth-TLSv1.3-require-non-empty-names
10e1051a39Sopenharmony_citest-5 = 5-client-auth-TLSv1.3-noroot
11e1051a39Sopenharmony_citest-6 = 6-client-auth-TLSv1.3-request-post-handshake
12e1051a39Sopenharmony_citest-7 = 7-client-auth-TLSv1.3-require-fail-post-handshake
13e1051a39Sopenharmony_citest-8 = 8-client-auth-TLSv1.3-require-post-handshake
14e1051a39Sopenharmony_citest-9 = 9-client-auth-TLSv1.3-require-non-empty-names-post-handshake
15e1051a39Sopenharmony_citest-10 = 10-client-auth-TLSv1.3-noroot-post-handshake
16e1051a39Sopenharmony_citest-11 = 11-client-auth-TLSv1.3-request-force-client-post-handshake
17e1051a39Sopenharmony_citest-12 = 12-client-auth-TLSv1.3-request-force-server-post-handshake
18e1051a39Sopenharmony_citest-13 = 13-client-auth-TLSv1.3-request-force-both-post-handshake
19e1051a39Sopenharmony_ci# ===========================================================
20e1051a39Sopenharmony_ci
21e1051a39Sopenharmony_ci[0-server-auth-TLSv1.3]
22e1051a39Sopenharmony_cissl_conf = 0-server-auth-TLSv1.3-ssl
23e1051a39Sopenharmony_ci
24e1051a39Sopenharmony_ci[0-server-auth-TLSv1.3-ssl]
25e1051a39Sopenharmony_ciserver = 0-server-auth-TLSv1.3-server
26e1051a39Sopenharmony_ciclient = 0-server-auth-TLSv1.3-client
27e1051a39Sopenharmony_ci
28e1051a39Sopenharmony_ci[0-server-auth-TLSv1.3-server]
29e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
30e1051a39Sopenharmony_ciCipherString = DEFAULT
31e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
32e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
33e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
34e1051a39Sopenharmony_ci
35e1051a39Sopenharmony_ci[0-server-auth-TLSv1.3-client]
36e1051a39Sopenharmony_ciCipherString = DEFAULT
37e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
38e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
39e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
40e1051a39Sopenharmony_ciVerifyMode = Peer
41e1051a39Sopenharmony_ci
42e1051a39Sopenharmony_ci[test-0]
43e1051a39Sopenharmony_ciExpectedResult = Success
44e1051a39Sopenharmony_ci
45e1051a39Sopenharmony_ci
46e1051a39Sopenharmony_ci# ===========================================================
47e1051a39Sopenharmony_ci
48e1051a39Sopenharmony_ci[1-client-auth-TLSv1.3-request]
49e1051a39Sopenharmony_cissl_conf = 1-client-auth-TLSv1.3-request-ssl
50e1051a39Sopenharmony_ci
51e1051a39Sopenharmony_ci[1-client-auth-TLSv1.3-request-ssl]
52e1051a39Sopenharmony_ciserver = 1-client-auth-TLSv1.3-request-server
53e1051a39Sopenharmony_ciclient = 1-client-auth-TLSv1.3-request-client
54e1051a39Sopenharmony_ci
55e1051a39Sopenharmony_ci[1-client-auth-TLSv1.3-request-server]
56e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
57e1051a39Sopenharmony_ciCipherString = DEFAULT
58e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
59e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
60e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
61e1051a39Sopenharmony_ciVerifyMode = Request
62e1051a39Sopenharmony_ci
63e1051a39Sopenharmony_ci[1-client-auth-TLSv1.3-request-client]
64e1051a39Sopenharmony_ciCipherString = DEFAULT
65e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
66e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
67e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
68e1051a39Sopenharmony_ciVerifyMode = Peer
69e1051a39Sopenharmony_ci
70e1051a39Sopenharmony_ci[test-1]
71e1051a39Sopenharmony_ciExpectedResult = Success
72e1051a39Sopenharmony_ci
73e1051a39Sopenharmony_ci
74e1051a39Sopenharmony_ci# ===========================================================
75e1051a39Sopenharmony_ci
76e1051a39Sopenharmony_ci[2-client-auth-TLSv1.3-require-fail]
77e1051a39Sopenharmony_cissl_conf = 2-client-auth-TLSv1.3-require-fail-ssl
78e1051a39Sopenharmony_ci
79e1051a39Sopenharmony_ci[2-client-auth-TLSv1.3-require-fail-ssl]
80e1051a39Sopenharmony_ciserver = 2-client-auth-TLSv1.3-require-fail-server
81e1051a39Sopenharmony_ciclient = 2-client-auth-TLSv1.3-require-fail-client
82e1051a39Sopenharmony_ci
83e1051a39Sopenharmony_ci[2-client-auth-TLSv1.3-require-fail-server]
84e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
85e1051a39Sopenharmony_ciCipherString = DEFAULT
86e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
87e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
88e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
89e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
90e1051a39Sopenharmony_ciVerifyMode = Require
91e1051a39Sopenharmony_ci
92e1051a39Sopenharmony_ci[2-client-auth-TLSv1.3-require-fail-client]
93e1051a39Sopenharmony_ciCipherString = DEFAULT
94e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
95e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
96e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
97e1051a39Sopenharmony_ciVerifyMode = Peer
98e1051a39Sopenharmony_ci
99e1051a39Sopenharmony_ci[test-2]
100e1051a39Sopenharmony_ciExpectedResult = ServerFail
101e1051a39Sopenharmony_ciExpectedServerAlert = CertificateRequired
102e1051a39Sopenharmony_ci
103e1051a39Sopenharmony_ci
104e1051a39Sopenharmony_ci# ===========================================================
105e1051a39Sopenharmony_ci
106e1051a39Sopenharmony_ci[3-client-auth-TLSv1.3-require]
107e1051a39Sopenharmony_cissl_conf = 3-client-auth-TLSv1.3-require-ssl
108e1051a39Sopenharmony_ci
109e1051a39Sopenharmony_ci[3-client-auth-TLSv1.3-require-ssl]
110e1051a39Sopenharmony_ciserver = 3-client-auth-TLSv1.3-require-server
111e1051a39Sopenharmony_ciclient = 3-client-auth-TLSv1.3-require-client
112e1051a39Sopenharmony_ci
113e1051a39Sopenharmony_ci[3-client-auth-TLSv1.3-require-server]
114e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
115e1051a39Sopenharmony_ciCipherString = DEFAULT
116e1051a39Sopenharmony_ciClientSignatureAlgorithms = PSS+SHA256
117e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
118e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
119e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
120e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
121e1051a39Sopenharmony_ciVerifyMode = Request
122e1051a39Sopenharmony_ci
123e1051a39Sopenharmony_ci[3-client-auth-TLSv1.3-require-client]
124e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
125e1051a39Sopenharmony_ciCipherString = DEFAULT
126e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
127e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
128e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
129e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
130e1051a39Sopenharmony_ciVerifyMode = Peer
131e1051a39Sopenharmony_ci
132e1051a39Sopenharmony_ci[test-3]
133e1051a39Sopenharmony_ciExpectedClientCANames = empty
134e1051a39Sopenharmony_ciExpectedClientCertType = RSA
135e1051a39Sopenharmony_ciExpectedClientSignHash = SHA256
136e1051a39Sopenharmony_ciExpectedClientSignType = RSA-PSS
137e1051a39Sopenharmony_ciExpectedResult = Success
138e1051a39Sopenharmony_ci
139e1051a39Sopenharmony_ci
140e1051a39Sopenharmony_ci# ===========================================================
141e1051a39Sopenharmony_ci
142e1051a39Sopenharmony_ci[4-client-auth-TLSv1.3-require-non-empty-names]
143e1051a39Sopenharmony_cissl_conf = 4-client-auth-TLSv1.3-require-non-empty-names-ssl
144e1051a39Sopenharmony_ci
145e1051a39Sopenharmony_ci[4-client-auth-TLSv1.3-require-non-empty-names-ssl]
146e1051a39Sopenharmony_ciserver = 4-client-auth-TLSv1.3-require-non-empty-names-server
147e1051a39Sopenharmony_ciclient = 4-client-auth-TLSv1.3-require-non-empty-names-client
148e1051a39Sopenharmony_ci
149e1051a39Sopenharmony_ci[4-client-auth-TLSv1.3-require-non-empty-names-server]
150e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
151e1051a39Sopenharmony_ciCipherString = DEFAULT
152e1051a39Sopenharmony_ciClientCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
153e1051a39Sopenharmony_ciClientSignatureAlgorithms = PSS+SHA256
154e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
155e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
156e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
157e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
158e1051a39Sopenharmony_ciVerifyMode = Request
159e1051a39Sopenharmony_ci
160e1051a39Sopenharmony_ci[4-client-auth-TLSv1.3-require-non-empty-names-client]
161e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
162e1051a39Sopenharmony_ciCipherString = DEFAULT
163e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
164e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
165e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
166e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
167e1051a39Sopenharmony_ciVerifyMode = Peer
168e1051a39Sopenharmony_ci
169e1051a39Sopenharmony_ci[test-4]
170e1051a39Sopenharmony_ciExpectedClientCANames = ${ENV::TEST_CERTS_DIR}/root-cert.pem
171e1051a39Sopenharmony_ciExpectedClientCertType = RSA
172e1051a39Sopenharmony_ciExpectedClientSignHash = SHA256
173e1051a39Sopenharmony_ciExpectedClientSignType = RSA-PSS
174e1051a39Sopenharmony_ciExpectedResult = Success
175e1051a39Sopenharmony_ci
176e1051a39Sopenharmony_ci
177e1051a39Sopenharmony_ci# ===========================================================
178e1051a39Sopenharmony_ci
179e1051a39Sopenharmony_ci[5-client-auth-TLSv1.3-noroot]
180e1051a39Sopenharmony_cissl_conf = 5-client-auth-TLSv1.3-noroot-ssl
181e1051a39Sopenharmony_ci
182e1051a39Sopenharmony_ci[5-client-auth-TLSv1.3-noroot-ssl]
183e1051a39Sopenharmony_ciserver = 5-client-auth-TLSv1.3-noroot-server
184e1051a39Sopenharmony_ciclient = 5-client-auth-TLSv1.3-noroot-client
185e1051a39Sopenharmony_ci
186e1051a39Sopenharmony_ci[5-client-auth-TLSv1.3-noroot-server]
187e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
188e1051a39Sopenharmony_ciCipherString = DEFAULT
189e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
190e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
191e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
192e1051a39Sopenharmony_ciVerifyMode = Require
193e1051a39Sopenharmony_ci
194e1051a39Sopenharmony_ci[5-client-auth-TLSv1.3-noroot-client]
195e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
196e1051a39Sopenharmony_ciCipherString = DEFAULT
197e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
198e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
199e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
200e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
201e1051a39Sopenharmony_ciVerifyMode = Peer
202e1051a39Sopenharmony_ci
203e1051a39Sopenharmony_ci[test-5]
204e1051a39Sopenharmony_ciExpectedResult = ServerFail
205e1051a39Sopenharmony_ciExpectedServerAlert = UnknownCA
206e1051a39Sopenharmony_ci
207e1051a39Sopenharmony_ci
208e1051a39Sopenharmony_ci# ===========================================================
209e1051a39Sopenharmony_ci
210e1051a39Sopenharmony_ci[6-client-auth-TLSv1.3-request-post-handshake]
211e1051a39Sopenharmony_cissl_conf = 6-client-auth-TLSv1.3-request-post-handshake-ssl
212e1051a39Sopenharmony_ci
213e1051a39Sopenharmony_ci[6-client-auth-TLSv1.3-request-post-handshake-ssl]
214e1051a39Sopenharmony_ciserver = 6-client-auth-TLSv1.3-request-post-handshake-server
215e1051a39Sopenharmony_ciclient = 6-client-auth-TLSv1.3-request-post-handshake-client
216e1051a39Sopenharmony_ci
217e1051a39Sopenharmony_ci[6-client-auth-TLSv1.3-request-post-handshake-server]
218e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
219e1051a39Sopenharmony_ciCipherString = DEFAULT
220e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
221e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
222e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
223e1051a39Sopenharmony_ciVerifyMode = RequestPostHandshake
224e1051a39Sopenharmony_ci
225e1051a39Sopenharmony_ci[6-client-auth-TLSv1.3-request-post-handshake-client]
226e1051a39Sopenharmony_ciCipherString = DEFAULT
227e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
228e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
229e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
230e1051a39Sopenharmony_ciVerifyMode = Peer
231e1051a39Sopenharmony_ci
232e1051a39Sopenharmony_ci[test-6]
233e1051a39Sopenharmony_ciExpectedResult = ServerFail
234e1051a39Sopenharmony_ciHandshakeMode = PostHandshakeAuth
235e1051a39Sopenharmony_ci
236e1051a39Sopenharmony_ci
237e1051a39Sopenharmony_ci# ===========================================================
238e1051a39Sopenharmony_ci
239e1051a39Sopenharmony_ci[7-client-auth-TLSv1.3-require-fail-post-handshake]
240e1051a39Sopenharmony_cissl_conf = 7-client-auth-TLSv1.3-require-fail-post-handshake-ssl
241e1051a39Sopenharmony_ci
242e1051a39Sopenharmony_ci[7-client-auth-TLSv1.3-require-fail-post-handshake-ssl]
243e1051a39Sopenharmony_ciserver = 7-client-auth-TLSv1.3-require-fail-post-handshake-server
244e1051a39Sopenharmony_ciclient = 7-client-auth-TLSv1.3-require-fail-post-handshake-client
245e1051a39Sopenharmony_ci
246e1051a39Sopenharmony_ci[7-client-auth-TLSv1.3-require-fail-post-handshake-server]
247e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
248e1051a39Sopenharmony_ciCipherString = DEFAULT
249e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
250e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
251e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
252e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
253e1051a39Sopenharmony_ciVerifyMode = RequirePostHandshake
254e1051a39Sopenharmony_ci
255e1051a39Sopenharmony_ci[7-client-auth-TLSv1.3-require-fail-post-handshake-client]
256e1051a39Sopenharmony_ciCipherString = DEFAULT
257e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
258e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
259e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
260e1051a39Sopenharmony_ciVerifyMode = Peer
261e1051a39Sopenharmony_ci
262e1051a39Sopenharmony_ci[test-7]
263e1051a39Sopenharmony_ciExpectedResult = ServerFail
264e1051a39Sopenharmony_ciHandshakeMode = PostHandshakeAuth
265e1051a39Sopenharmony_ci
266e1051a39Sopenharmony_ci
267e1051a39Sopenharmony_ci# ===========================================================
268e1051a39Sopenharmony_ci
269e1051a39Sopenharmony_ci[8-client-auth-TLSv1.3-require-post-handshake]
270e1051a39Sopenharmony_cissl_conf = 8-client-auth-TLSv1.3-require-post-handshake-ssl
271e1051a39Sopenharmony_ci
272e1051a39Sopenharmony_ci[8-client-auth-TLSv1.3-require-post-handshake-ssl]
273e1051a39Sopenharmony_ciserver = 8-client-auth-TLSv1.3-require-post-handshake-server
274e1051a39Sopenharmony_ciclient = 8-client-auth-TLSv1.3-require-post-handshake-client
275e1051a39Sopenharmony_ci
276e1051a39Sopenharmony_ci[8-client-auth-TLSv1.3-require-post-handshake-server]
277e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
278e1051a39Sopenharmony_ciCipherString = DEFAULT
279e1051a39Sopenharmony_ciClientSignatureAlgorithms = PSS+SHA256
280e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
281e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
282e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
283e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
284e1051a39Sopenharmony_ciVerifyMode = RequestPostHandshake
285e1051a39Sopenharmony_ci
286e1051a39Sopenharmony_ci[8-client-auth-TLSv1.3-require-post-handshake-client]
287e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
288e1051a39Sopenharmony_ciCipherString = DEFAULT
289e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
290e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
291e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
292e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
293e1051a39Sopenharmony_ciVerifyMode = Peer
294e1051a39Sopenharmony_ci
295e1051a39Sopenharmony_ci[test-8]
296e1051a39Sopenharmony_ciExpectedClientCANames = empty
297e1051a39Sopenharmony_ciExpectedClientCertType = RSA
298e1051a39Sopenharmony_ciExpectedClientSignHash = SHA256
299e1051a39Sopenharmony_ciExpectedClientSignType = RSA-PSS
300e1051a39Sopenharmony_ciExpectedResult = Success
301e1051a39Sopenharmony_ciHandshakeMode = PostHandshakeAuth
302e1051a39Sopenharmony_ciclient = 8-client-auth-TLSv1.3-require-post-handshake-client-extra
303e1051a39Sopenharmony_ci
304e1051a39Sopenharmony_ci[8-client-auth-TLSv1.3-require-post-handshake-client-extra]
305e1051a39Sopenharmony_ciEnablePHA = Yes
306e1051a39Sopenharmony_ci
307e1051a39Sopenharmony_ci
308e1051a39Sopenharmony_ci# ===========================================================
309e1051a39Sopenharmony_ci
310e1051a39Sopenharmony_ci[9-client-auth-TLSv1.3-require-non-empty-names-post-handshake]
311e1051a39Sopenharmony_cissl_conf = 9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-ssl
312e1051a39Sopenharmony_ci
313e1051a39Sopenharmony_ci[9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-ssl]
314e1051a39Sopenharmony_ciserver = 9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-server
315e1051a39Sopenharmony_ciclient = 9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-client
316e1051a39Sopenharmony_ci
317e1051a39Sopenharmony_ci[9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-server]
318e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
319e1051a39Sopenharmony_ciCipherString = DEFAULT
320e1051a39Sopenharmony_ciClientCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
321e1051a39Sopenharmony_ciClientSignatureAlgorithms = PSS+SHA256
322e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
323e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
324e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
325e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
326e1051a39Sopenharmony_ciVerifyMode = RequestPostHandshake
327e1051a39Sopenharmony_ci
328e1051a39Sopenharmony_ci[9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-client]
329e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
330e1051a39Sopenharmony_ciCipherString = DEFAULT
331e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
332e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
333e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
334e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
335e1051a39Sopenharmony_ciVerifyMode = Peer
336e1051a39Sopenharmony_ci
337e1051a39Sopenharmony_ci[test-9]
338e1051a39Sopenharmony_ciExpectedClientCANames = ${ENV::TEST_CERTS_DIR}/root-cert.pem
339e1051a39Sopenharmony_ciExpectedClientCertType = RSA
340e1051a39Sopenharmony_ciExpectedClientSignHash = SHA256
341e1051a39Sopenharmony_ciExpectedClientSignType = RSA-PSS
342e1051a39Sopenharmony_ciExpectedResult = Success
343e1051a39Sopenharmony_ciHandshakeMode = PostHandshakeAuth
344e1051a39Sopenharmony_ciclient = 9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-client-extra
345e1051a39Sopenharmony_ci
346e1051a39Sopenharmony_ci[9-client-auth-TLSv1.3-require-non-empty-names-post-handshake-client-extra]
347e1051a39Sopenharmony_ciEnablePHA = Yes
348e1051a39Sopenharmony_ci
349e1051a39Sopenharmony_ci
350e1051a39Sopenharmony_ci# ===========================================================
351e1051a39Sopenharmony_ci
352e1051a39Sopenharmony_ci[10-client-auth-TLSv1.3-noroot-post-handshake]
353e1051a39Sopenharmony_cissl_conf = 10-client-auth-TLSv1.3-noroot-post-handshake-ssl
354e1051a39Sopenharmony_ci
355e1051a39Sopenharmony_ci[10-client-auth-TLSv1.3-noroot-post-handshake-ssl]
356e1051a39Sopenharmony_ciserver = 10-client-auth-TLSv1.3-noroot-post-handshake-server
357e1051a39Sopenharmony_ciclient = 10-client-auth-TLSv1.3-noroot-post-handshake-client
358e1051a39Sopenharmony_ci
359e1051a39Sopenharmony_ci[10-client-auth-TLSv1.3-noroot-post-handshake-server]
360e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
361e1051a39Sopenharmony_ciCipherString = DEFAULT
362e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
363e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
364e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
365e1051a39Sopenharmony_ciVerifyMode = RequirePostHandshake
366e1051a39Sopenharmony_ci
367e1051a39Sopenharmony_ci[10-client-auth-TLSv1.3-noroot-post-handshake-client]
368e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/ee-client-chain.pem
369e1051a39Sopenharmony_ciCipherString = DEFAULT
370e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
371e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
372e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/ee-key.pem
373e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
374e1051a39Sopenharmony_ciVerifyMode = Peer
375e1051a39Sopenharmony_ci
376e1051a39Sopenharmony_ci[test-10]
377e1051a39Sopenharmony_ciExpectedResult = ServerFail
378e1051a39Sopenharmony_ciExpectedServerAlert = UnknownCA
379e1051a39Sopenharmony_ciHandshakeMode = PostHandshakeAuth
380e1051a39Sopenharmony_ciclient = 10-client-auth-TLSv1.3-noroot-post-handshake-client-extra
381e1051a39Sopenharmony_ci
382e1051a39Sopenharmony_ci[10-client-auth-TLSv1.3-noroot-post-handshake-client-extra]
383e1051a39Sopenharmony_ciEnablePHA = Yes
384e1051a39Sopenharmony_ci
385e1051a39Sopenharmony_ci
386e1051a39Sopenharmony_ci# ===========================================================
387e1051a39Sopenharmony_ci
388e1051a39Sopenharmony_ci[11-client-auth-TLSv1.3-request-force-client-post-handshake]
389e1051a39Sopenharmony_cissl_conf = 11-client-auth-TLSv1.3-request-force-client-post-handshake-ssl
390e1051a39Sopenharmony_ci
391e1051a39Sopenharmony_ci[11-client-auth-TLSv1.3-request-force-client-post-handshake-ssl]
392e1051a39Sopenharmony_ciserver = 11-client-auth-TLSv1.3-request-force-client-post-handshake-server
393e1051a39Sopenharmony_ciclient = 11-client-auth-TLSv1.3-request-force-client-post-handshake-client
394e1051a39Sopenharmony_ci
395e1051a39Sopenharmony_ci[11-client-auth-TLSv1.3-request-force-client-post-handshake-server]
396e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
397e1051a39Sopenharmony_ciCipherString = DEFAULT
398e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
399e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
400e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
401e1051a39Sopenharmony_ciVerifyMode = RequestPostHandshake
402e1051a39Sopenharmony_ci
403e1051a39Sopenharmony_ci[11-client-auth-TLSv1.3-request-force-client-post-handshake-client]
404e1051a39Sopenharmony_ciCipherString = DEFAULT
405e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
406e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
407e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
408e1051a39Sopenharmony_ciVerifyMode = Peer
409e1051a39Sopenharmony_ci
410e1051a39Sopenharmony_ci[test-11]
411e1051a39Sopenharmony_ciExpectedResult = Success
412e1051a39Sopenharmony_ciHandshakeMode = PostHandshakeAuth
413e1051a39Sopenharmony_ciclient = 11-client-auth-TLSv1.3-request-force-client-post-handshake-client-extra
414e1051a39Sopenharmony_ci
415e1051a39Sopenharmony_ci[11-client-auth-TLSv1.3-request-force-client-post-handshake-client-extra]
416e1051a39Sopenharmony_ciEnablePHA = Yes
417e1051a39Sopenharmony_ci
418e1051a39Sopenharmony_ci
419e1051a39Sopenharmony_ci# ===========================================================
420e1051a39Sopenharmony_ci
421e1051a39Sopenharmony_ci[12-client-auth-TLSv1.3-request-force-server-post-handshake]
422e1051a39Sopenharmony_cissl_conf = 12-client-auth-TLSv1.3-request-force-server-post-handshake-ssl
423e1051a39Sopenharmony_ci
424e1051a39Sopenharmony_ci[12-client-auth-TLSv1.3-request-force-server-post-handshake-ssl]
425e1051a39Sopenharmony_ciserver = 12-client-auth-TLSv1.3-request-force-server-post-handshake-server
426e1051a39Sopenharmony_ciclient = 12-client-auth-TLSv1.3-request-force-server-post-handshake-client
427e1051a39Sopenharmony_ci
428e1051a39Sopenharmony_ci[12-client-auth-TLSv1.3-request-force-server-post-handshake-server]
429e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
430e1051a39Sopenharmony_ciCipherString = DEFAULT
431e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
432e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
433e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
434e1051a39Sopenharmony_ciVerifyMode = RequestPostHandshake
435e1051a39Sopenharmony_ci
436e1051a39Sopenharmony_ci[12-client-auth-TLSv1.3-request-force-server-post-handshake-client]
437e1051a39Sopenharmony_ciCipherString = DEFAULT
438e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
439e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
440e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
441e1051a39Sopenharmony_ciVerifyMode = Peer
442e1051a39Sopenharmony_ci
443e1051a39Sopenharmony_ci[test-12]
444e1051a39Sopenharmony_ciExpectedResult = ClientFail
445e1051a39Sopenharmony_ciHandshakeMode = PostHandshakeAuth
446e1051a39Sopenharmony_ciserver = 12-client-auth-TLSv1.3-request-force-server-post-handshake-server-extra
447e1051a39Sopenharmony_ci
448e1051a39Sopenharmony_ci[12-client-auth-TLSv1.3-request-force-server-post-handshake-server-extra]
449e1051a39Sopenharmony_ciForcePHA = Yes
450e1051a39Sopenharmony_ci
451e1051a39Sopenharmony_ci
452e1051a39Sopenharmony_ci# ===========================================================
453e1051a39Sopenharmony_ci
454e1051a39Sopenharmony_ci[13-client-auth-TLSv1.3-request-force-both-post-handshake]
455e1051a39Sopenharmony_cissl_conf = 13-client-auth-TLSv1.3-request-force-both-post-handshake-ssl
456e1051a39Sopenharmony_ci
457e1051a39Sopenharmony_ci[13-client-auth-TLSv1.3-request-force-both-post-handshake-ssl]
458e1051a39Sopenharmony_ciserver = 13-client-auth-TLSv1.3-request-force-both-post-handshake-server
459e1051a39Sopenharmony_ciclient = 13-client-auth-TLSv1.3-request-force-both-post-handshake-client
460e1051a39Sopenharmony_ci
461e1051a39Sopenharmony_ci[13-client-auth-TLSv1.3-request-force-both-post-handshake-server]
462e1051a39Sopenharmony_ciCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
463e1051a39Sopenharmony_ciCipherString = DEFAULT
464e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
465e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
466e1051a39Sopenharmony_ciPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
467e1051a39Sopenharmony_ciVerifyMode = RequestPostHandshake
468e1051a39Sopenharmony_ci
469e1051a39Sopenharmony_ci[13-client-auth-TLSv1.3-request-force-both-post-handshake-client]
470e1051a39Sopenharmony_ciCipherString = DEFAULT
471e1051a39Sopenharmony_ciMaxProtocol = TLSv1.3
472e1051a39Sopenharmony_ciMinProtocol = TLSv1.3
473e1051a39Sopenharmony_ciVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
474e1051a39Sopenharmony_ciVerifyMode = Peer
475e1051a39Sopenharmony_ci
476e1051a39Sopenharmony_ci[test-13]
477e1051a39Sopenharmony_ciExpectedResult = Success
478e1051a39Sopenharmony_ciHandshakeMode = PostHandshakeAuth
479e1051a39Sopenharmony_ciserver = 13-client-auth-TLSv1.3-request-force-both-post-handshake-server-extra
480e1051a39Sopenharmony_ciclient = 13-client-auth-TLSv1.3-request-force-both-post-handshake-client-extra
481e1051a39Sopenharmony_ci
482e1051a39Sopenharmony_ci[13-client-auth-TLSv1.3-request-force-both-post-handshake-server-extra]
483e1051a39Sopenharmony_ciForcePHA = Yes
484e1051a39Sopenharmony_ci
485e1051a39Sopenharmony_ci[13-client-auth-TLSv1.3-request-force-both-post-handshake-client-extra]
486e1051a39Sopenharmony_ciEnablePHA = Yes
487e1051a39Sopenharmony_ci
488e1051a39Sopenharmony_ci
489