mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-11-27 05:21:51 +08:00
Code Issues Packages Projects Releases Wiki Activity
0e1d6ecf37
openssl/test/ssl-tests/14-curves.conf

846 lines
19 KiB
Plaintext
Raw Normal View History

Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# Generated with generate_ssl_tests.pl
num_tests = 29
test-0 = 0-curve-sect163k1
test-1 = 1-curve-sect163r1
test-2 = 2-curve-sect163r2
test-3 = 3-curve-sect193r1
test-4 = 4-curve-sect193r2
test-5 = 5-curve-sect233k1
test-6 = 6-curve-sect233r1
test-7 = 7-curve-sect239k1
test-8 = 8-curve-sect283k1
test-9 = 9-curve-sect283r1
test-10 = 10-curve-sect409k1
test-11 = 11-curve-sect409r1
test-12 = 12-curve-sect571k1
test-13 = 13-curve-sect571r1
test-14 = 14-curve-secp160k1
test-15 = 15-curve-secp160r1
test-16 = 16-curve-secp160r2
test-17 = 17-curve-secp192k1
test-18 = 18-curve-prime192v1
test-19 = 19-curve-secp224k1
test-20 = 20-curve-secp224r1
test-21 = 21-curve-secp256k1
test-22 = 22-curve-prime256v1
test-23 = 23-curve-secp384r1
test-24 = 24-curve-secp521r1
test-25 = 25-curve-brainpoolP256r1
test-26 = 26-curve-brainpoolP384r1
test-27 = 27-curve-brainpoolP512r1
test-28 = 28-curve-X25519
# ===========================================================
[0-curve-sect163k1]
ssl_conf = 0-curve-sect163k1-ssl
[0-curve-sect163k1-ssl]
server = 0-curve-sect163k1-server
client = 0-curve-sect163k1-client
[0-curve-sect163k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect163k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[0-curve-sect163k1-client]
CipherString = ECDHE
Curves = sect163k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-0]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect163k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[1-curve-sect163r1]
ssl_conf = 1-curve-sect163r1-ssl
[1-curve-sect163r1-ssl]
server = 1-curve-sect163r1-server
client = 1-curve-sect163r1-client
[1-curve-sect163r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect163r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[1-curve-sect163r1-client]
CipherString = ECDHE
Curves = sect163r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-1]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect163r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[2-curve-sect163r2]
ssl_conf = 2-curve-sect163r2-ssl
[2-curve-sect163r2-ssl]
server = 2-curve-sect163r2-server
client = 2-curve-sect163r2-client
[2-curve-sect163r2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect163r2
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[2-curve-sect163r2-client]
CipherString = ECDHE
Curves = sect163r2
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-2]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect163r2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[3-curve-sect193r1]
ssl_conf = 3-curve-sect193r1-ssl
[3-curve-sect193r1-ssl]
server = 3-curve-sect193r1-server
client = 3-curve-sect193r1-client
[3-curve-sect193r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect193r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[3-curve-sect193r1-client]
CipherString = ECDHE
Curves = sect193r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-3]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect193r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[4-curve-sect193r2]
ssl_conf = 4-curve-sect193r2-ssl
[4-curve-sect193r2-ssl]
server = 4-curve-sect193r2-server
client = 4-curve-sect193r2-client
[4-curve-sect193r2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect193r2
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[4-curve-sect193r2-client]
CipherString = ECDHE
Curves = sect193r2
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-4]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect193r2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[5-curve-sect233k1]
ssl_conf = 5-curve-sect233k1-ssl
[5-curve-sect233k1-ssl]
server = 5-curve-sect233k1-server
client = 5-curve-sect233k1-client
[5-curve-sect233k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect233k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[5-curve-sect233k1-client]
CipherString = ECDHE
Curves = sect233k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-5]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect233k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[6-curve-sect233r1]
ssl_conf = 6-curve-sect233r1-ssl
[6-curve-sect233r1-ssl]
server = 6-curve-sect233r1-server
client = 6-curve-sect233r1-client
[6-curve-sect233r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect233r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[6-curve-sect233r1-client]
CipherString = ECDHE
Curves = sect233r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-6]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect233r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[7-curve-sect239k1]
ssl_conf = 7-curve-sect239k1-ssl
[7-curve-sect239k1-ssl]
server = 7-curve-sect239k1-server
client = 7-curve-sect239k1-client
[7-curve-sect239k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect239k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[7-curve-sect239k1-client]
CipherString = ECDHE
Curves = sect239k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-7]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect239k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[8-curve-sect283k1]
ssl_conf = 8-curve-sect283k1-ssl
[8-curve-sect283k1-ssl]
server = 8-curve-sect283k1-server
client = 8-curve-sect283k1-client
[8-curve-sect283k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect283k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[8-curve-sect283k1-client]
CipherString = ECDHE
Curves = sect283k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-8]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect283k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[9-curve-sect283r1]
ssl_conf = 9-curve-sect283r1-ssl
[9-curve-sect283r1-ssl]
server = 9-curve-sect283r1-server
client = 9-curve-sect283r1-client
[9-curve-sect283r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect283r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[9-curve-sect283r1-client]
CipherString = ECDHE
Curves = sect283r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-9]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect283r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[10-curve-sect409k1]
ssl_conf = 10-curve-sect409k1-ssl
[10-curve-sect409k1-ssl]
server = 10-curve-sect409k1-server
client = 10-curve-sect409k1-client
[10-curve-sect409k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect409k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[10-curve-sect409k1-client]
CipherString = ECDHE
Curves = sect409k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-10]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect409k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[11-curve-sect409r1]
ssl_conf = 11-curve-sect409r1-ssl
[11-curve-sect409r1-ssl]
server = 11-curve-sect409r1-server
client = 11-curve-sect409r1-client
[11-curve-sect409r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect409r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[11-curve-sect409r1-client]
CipherString = ECDHE
Curves = sect409r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-11]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect409r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[12-curve-sect571k1]
ssl_conf = 12-curve-sect571k1-ssl
[12-curve-sect571k1-ssl]
server = 12-curve-sect571k1-server
client = 12-curve-sect571k1-client
[12-curve-sect571k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect571k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[12-curve-sect571k1-client]
CipherString = ECDHE
Curves = sect571k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-12]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect571k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[13-curve-sect571r1]
ssl_conf = 13-curve-sect571r1-ssl
[13-curve-sect571r1-ssl]
server = 13-curve-sect571r1-server
client = 13-curve-sect571r1-client
[13-curve-sect571r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = sect571r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[13-curve-sect571r1-client]
CipherString = ECDHE
Curves = sect571r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-13]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = sect571r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[14-curve-secp160k1]
ssl_conf = 14-curve-secp160k1-ssl
[14-curve-secp160k1-ssl]
server = 14-curve-secp160k1-server
client = 14-curve-secp160k1-client
[14-curve-secp160k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = secp160k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[14-curve-secp160k1-client]
CipherString = ECDHE
Curves = secp160k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-14]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = secp160k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[15-curve-secp160r1]
ssl_conf = 15-curve-secp160r1-ssl
[15-curve-secp160r1-ssl]
server = 15-curve-secp160r1-server
client = 15-curve-secp160r1-client
[15-curve-secp160r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = secp160r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[15-curve-secp160r1-client]
CipherString = ECDHE
Curves = secp160r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-15]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = secp160r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[16-curve-secp160r2]
ssl_conf = 16-curve-secp160r2-ssl
[16-curve-secp160r2-ssl]
server = 16-curve-secp160r2-server
client = 16-curve-secp160r2-client
[16-curve-secp160r2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = secp160r2
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[16-curve-secp160r2-client]
CipherString = ECDHE
Curves = secp160r2
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-16]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = secp160r2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[17-curve-secp192k1]
ssl_conf = 17-curve-secp192k1-ssl
[17-curve-secp192k1-ssl]
server = 17-curve-secp192k1-server
client = 17-curve-secp192k1-client
[17-curve-secp192k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = secp192k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[17-curve-secp192k1-client]
CipherString = ECDHE
Curves = secp192k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-17]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = secp192k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[18-curve-prime192v1]
ssl_conf = 18-curve-prime192v1-ssl
[18-curve-prime192v1-ssl]
server = 18-curve-prime192v1-server
client = 18-curve-prime192v1-client
[18-curve-prime192v1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = prime192v1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[18-curve-prime192v1-client]
CipherString = ECDHE
Curves = prime192v1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-18]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = prime192v1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[19-curve-secp224k1]
ssl_conf = 19-curve-secp224k1-ssl
[19-curve-secp224k1-ssl]
server = 19-curve-secp224k1-server
client = 19-curve-secp224k1-client
[19-curve-secp224k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = secp224k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[19-curve-secp224k1-client]
CipherString = ECDHE
Curves = secp224k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-19]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = secp224k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[20-curve-secp224r1]
ssl_conf = 20-curve-secp224r1-ssl
[20-curve-secp224r1-ssl]
server = 20-curve-secp224r1-server
client = 20-curve-secp224r1-client
[20-curve-secp224r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = secp224r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[20-curve-secp224r1-client]
CipherString = ECDHE
Curves = secp224r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-20]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = secp224r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[21-curve-secp256k1]
ssl_conf = 21-curve-secp256k1-ssl
[21-curve-secp256k1-ssl]
server = 21-curve-secp256k1-server
client = 21-curve-secp256k1-client
[21-curve-secp256k1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = secp256k1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[21-curve-secp256k1-client]
CipherString = ECDHE
Curves = secp256k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-21]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = secp256k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[22-curve-prime256v1]
ssl_conf = 22-curve-prime256v1-ssl
[22-curve-prime256v1-ssl]
server = 22-curve-prime256v1-server
client = 22-curve-prime256v1-client
[22-curve-prime256v1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = prime256v1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[22-curve-prime256v1-client]
CipherString = ECDHE
Curves = prime256v1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-22]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = prime256v1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[23-curve-secp384r1]
ssl_conf = 23-curve-secp384r1-ssl
[23-curve-secp384r1-ssl]
server = 23-curve-secp384r1-server
client = 23-curve-secp384r1-client
[23-curve-secp384r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = secp384r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[23-curve-secp384r1-client]
CipherString = ECDHE
Curves = secp384r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-23]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = secp384r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[24-curve-secp521r1]
ssl_conf = 24-curve-secp521r1-ssl
[24-curve-secp521r1-ssl]
server = 24-curve-secp521r1-server
client = 24-curve-secp521r1-client
[24-curve-secp521r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = secp521r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[24-curve-secp521r1-client]
CipherString = ECDHE
Curves = secp521r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-24]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = secp521r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[25-curve-brainpoolP256r1]
ssl_conf = 25-curve-brainpoolP256r1-ssl
[25-curve-brainpoolP256r1-ssl]
server = 25-curve-brainpoolP256r1-server
client = 25-curve-brainpoolP256r1-client
[25-curve-brainpoolP256r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = brainpoolP256r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[25-curve-brainpoolP256r1-client]
CipherString = ECDHE
Curves = brainpoolP256r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-25]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = brainpoolP256r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[26-curve-brainpoolP384r1]
ssl_conf = 26-curve-brainpoolP384r1-ssl
[26-curve-brainpoolP384r1-ssl]
server = 26-curve-brainpoolP384r1-server
client = 26-curve-brainpoolP384r1-client
[26-curve-brainpoolP384r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = brainpoolP384r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[26-curve-brainpoolP384r1-client]
CipherString = ECDHE
Curves = brainpoolP384r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-26]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = brainpoolP384r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[27-curve-brainpoolP512r1]
ssl_conf = 27-curve-brainpoolP512r1-ssl
[27-curve-brainpoolP512r1-ssl]
server = 27-curve-brainpoolP512r1-server
client = 27-curve-brainpoolP512r1-client
[27-curve-brainpoolP512r1-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = brainpoolP512r1
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[27-curve-brainpoolP512r1-client]
CipherString = ECDHE
Curves = brainpoolP512r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-27]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = brainpoolP512r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
[28-curve-X25519]
ssl_conf = 28-curve-X25519-ssl
[28-curve-X25519-ssl]
server = 28-curve-X25519-server
client = 28-curve-X25519-client
[28-curve-X25519-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT
Curves = X25519
Add the SSL_METHOD for TLSv1.3 and all other base changes required Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-22 00:39:33 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[28-curve-X25519-client]
CipherString = ECDHE
Curves = X25519
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-28]
ExpectedResult = Success
Add server temp key type checks Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2191)
2017-01-09 03:36:20 +08:00
ExpectedTmpKeyType = X25519
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Reference in New Issue Copy Permalink