mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-11-27 05:21:51 +08:00
Code Issues Packages Projects Releases Wiki Activity
47a80fd203
openssl/test/ssl-tests/14-curves.cnf

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

3068 lines
79 KiB
Plaintext
Raw Normal View History

Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# Generated with generate_ssl_tests.pl
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
num_tests = 104
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
test-0 = 0-curve-prime256v1
test-1 = 1-curve-secp384r1
test-2 = 2-curve-secp521r1
test-3 = 3-curve-X25519
test-4 = 4-curve-X448
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
test-5 = 5-curve-ffdhe2048
test-6 = 6-curve-ffdhe3072
test-7 = 7-curve-ffdhe4096
test-8 = 8-curve-ffdhe6144
test-9 = 9-curve-ffdhe8192
test-10 = 10-curve-brainpoolP256r1tls13
test-11 = 11-curve-brainpoolP384r1tls13
test-12 = 12-curve-brainpoolP512r1tls13
test-13 = 13-curve-sect233k1
test-14 = 14-curve-sect233r1
test-15 = 15-curve-sect283k1
test-16 = 16-curve-sect283r1
test-17 = 17-curve-sect409k1
test-18 = 18-curve-sect409r1
test-19 = 19-curve-sect571k1
test-20 = 20-curve-sect571r1
test-21 = 21-curve-secp224r1
test-22 = 22-curve-sect163k1
test-23 = 23-curve-sect163r2
test-24 = 24-curve-prime192v1
test-25 = 25-curve-sect163r1
test-26 = 26-curve-sect193r1
test-27 = 27-curve-sect193r2
test-28 = 28-curve-sect239k1
test-29 = 29-curve-secp160k1
test-30 = 30-curve-secp160r1
test-31 = 31-curve-secp160r2
test-32 = 32-curve-secp192k1
test-33 = 33-curve-secp224k1
test-34 = 34-curve-secp256k1
test-35 = 35-curve-brainpoolP256r1
test-36 = 36-curve-brainpoolP384r1
test-37 = 37-curve-brainpoolP512r1
test-38 = 38-curve-sect233k1-tls12-in-tls13
test-39 = 39-curve-sect233r1-tls12-in-tls13
test-40 = 40-curve-sect283k1-tls12-in-tls13
test-41 = 41-curve-sect283r1-tls12-in-tls13
test-42 = 42-curve-sect409k1-tls12-in-tls13
test-43 = 43-curve-sect409r1-tls12-in-tls13
test-44 = 44-curve-sect571k1-tls12-in-tls13
test-45 = 45-curve-sect571r1-tls12-in-tls13
test-46 = 46-curve-secp224r1-tls12-in-tls13
test-47 = 47-curve-sect163k1-tls12-in-tls13
test-48 = 48-curve-sect163r2-tls12-in-tls13
test-49 = 49-curve-prime192v1-tls12-in-tls13
test-50 = 50-curve-sect163r1-tls12-in-tls13
test-51 = 51-curve-sect193r1-tls12-in-tls13
test-52 = 52-curve-sect193r2-tls12-in-tls13
test-53 = 53-curve-sect239k1-tls12-in-tls13
test-54 = 54-curve-secp160k1-tls12-in-tls13
test-55 = 55-curve-secp160r1-tls12-in-tls13
test-56 = 56-curve-secp160r2-tls12-in-tls13
test-57 = 57-curve-secp192k1-tls12-in-tls13
test-58 = 58-curve-secp224k1-tls12-in-tls13
test-59 = 59-curve-secp256k1-tls12-in-tls13
test-60 = 60-curve-brainpoolP256r1-tls12-in-tls13
test-61 = 61-curve-brainpoolP384r1-tls12-in-tls13
test-62 = 62-curve-brainpoolP512r1-tls12-in-tls13
test-63 = 63-curve-sect233k1-tls13
test-64 = 64-curve-sect233r1-tls13
test-65 = 65-curve-sect283k1-tls13
test-66 = 66-curve-sect283r1-tls13
test-67 = 67-curve-sect409k1-tls13
test-68 = 68-curve-sect409r1-tls13
test-69 = 69-curve-sect571k1-tls13
test-70 = 70-curve-sect571r1-tls13
test-71 = 71-curve-secp224r1-tls13
test-72 = 72-curve-sect163k1-tls13
test-73 = 73-curve-sect163r2-tls13
test-74 = 74-curve-prime192v1-tls13
test-75 = 75-curve-sect163r1-tls13
test-76 = 76-curve-sect193r1-tls13
test-77 = 77-curve-sect193r2-tls13
test-78 = 78-curve-sect239k1-tls13
test-79 = 79-curve-secp160k1-tls13
test-80 = 80-curve-secp160r1-tls13
test-81 = 81-curve-secp160r2-tls13
test-82 = 82-curve-secp192k1-tls13
test-83 = 83-curve-secp224k1-tls13
test-84 = 84-curve-secp256k1-tls13
test-85 = 85-curve-brainpoolP256r1-tls13
test-86 = 86-curve-brainpoolP384r1-tls13
test-87 = 87-curve-brainpoolP512r1-tls13
test-88 = 88-curve-ffdhe2048-tls13-in-tls12
test-89 = 89-curve-ffdhe2048-tls13-in-tls12-2
test-90 = 90-curve-ffdhe3072-tls13-in-tls12
test-91 = 91-curve-ffdhe3072-tls13-in-tls12-2
test-92 = 92-curve-ffdhe4096-tls13-in-tls12
test-93 = 93-curve-ffdhe4096-tls13-in-tls12-2
test-94 = 94-curve-ffdhe6144-tls13-in-tls12
test-95 = 95-curve-ffdhe6144-tls13-in-tls12-2
test-96 = 96-curve-ffdhe8192-tls13-in-tls12
test-97 = 97-curve-ffdhe8192-tls13-in-tls12-2
test-98 = 98-curve-brainpoolP256r1tls13-tls13-in-tls12
test-99 = 99-curve-brainpoolP256r1tls13-tls13-in-tls12-2
test-100 = 100-curve-brainpoolP384r1tls13-tls13-in-tls12
test-101 = 101-curve-brainpoolP384r1tls13-tls13-in-tls12-2
test-102 = 102-curve-brainpoolP512r1tls13-tls13-in-tls12
test-103 = 103-curve-brainpoolP512r1tls13-tls13-in-tls12-2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[0-curve-prime256v1]
ssl_conf = 0-curve-prime256v1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[0-curve-prime256v1-ssl]
server = 0-curve-prime256v1-server
client = 0-curve-prime256v1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[0-curve-prime256v1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = prime256v1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[0-curve-prime256v1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = prime256v1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-0]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = prime256v1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[1-curve-secp384r1]
ssl_conf = 1-curve-secp384r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[1-curve-secp384r1-ssl]
server = 1-curve-secp384r1-server
client = 1-curve-secp384r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[1-curve-secp384r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp384r1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[1-curve-secp384r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp384r1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-1]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = secp384r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[2-curve-secp521r1]
ssl_conf = 2-curve-secp521r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[2-curve-secp521r1-ssl]
server = 2-curve-secp521r1-server
client = 2-curve-secp521r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[2-curve-secp521r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp521r1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[2-curve-secp521r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp521r1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-2]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = secp521r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[3-curve-X25519]
ssl_conf = 3-curve-X25519-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[3-curve-X25519-ssl]
server = 3-curve-X25519-server
client = 3-curve-X25519-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[3-curve-X25519-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = X25519
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[3-curve-X25519-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = X25519
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-3]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = X25519
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[4-curve-X448]
ssl_conf = 4-curve-X448-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[4-curve-X448-ssl]
server = 4-curve-X448-server
client = 4-curve-X448-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[4-curve-X448-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = X448
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
[4-curve-X448-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = X448
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-4]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = X448
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[5-curve-ffdhe2048]
ssl_conf = 5-curve-ffdhe2048-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[5-curve-ffdhe2048-ssl]
server = 5-curve-ffdhe2048-server
client = 5-curve-ffdhe2048-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[5-curve-ffdhe2048-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe2048
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[5-curve-ffdhe2048-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe2048
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-5]
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = dhKeyAgreement
# ===========================================================
[6-curve-ffdhe3072]
ssl_conf = 6-curve-ffdhe3072-ssl
[6-curve-ffdhe3072-ssl]
server = 6-curve-ffdhe3072-server
client = 6-curve-ffdhe3072-client
[6-curve-ffdhe3072-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe3072
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[6-curve-ffdhe3072-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe3072
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-6]
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = dhKeyAgreement
# ===========================================================
[7-curve-ffdhe4096]
ssl_conf = 7-curve-ffdhe4096-ssl
[7-curve-ffdhe4096-ssl]
server = 7-curve-ffdhe4096-server
client = 7-curve-ffdhe4096-client
[7-curve-ffdhe4096-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe4096
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[7-curve-ffdhe4096-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe4096
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-7]
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = dhKeyAgreement
# ===========================================================
[8-curve-ffdhe6144]
ssl_conf = 8-curve-ffdhe6144-ssl
[8-curve-ffdhe6144-ssl]
server = 8-curve-ffdhe6144-server
client = 8-curve-ffdhe6144-client
[8-curve-ffdhe6144-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe6144
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[8-curve-ffdhe6144-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe6144
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-8]
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = dhKeyAgreement
# ===========================================================
[9-curve-ffdhe8192]
ssl_conf = 9-curve-ffdhe8192-ssl
[9-curve-ffdhe8192-ssl]
server = 9-curve-ffdhe8192-server
client = 9-curve-ffdhe8192-client
[9-curve-ffdhe8192-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe8192
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[9-curve-ffdhe8192-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe8192
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-9]
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = dhKeyAgreement
# ===========================================================
[10-curve-brainpoolP256r1tls13]
ssl_conf = 10-curve-brainpoolP256r1tls13-ssl
[10-curve-brainpoolP256r1tls13-ssl]
server = 10-curve-brainpoolP256r1tls13-server
client = 10-curve-brainpoolP256r1tls13-client
[10-curve-brainpoolP256r1tls13-server]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP256r1tls13
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[10-curve-brainpoolP256r1tls13-client]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = brainpoolP256r1tls13
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-10]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = brainpoolP256r1tls13
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[11-curve-brainpoolP384r1tls13]
ssl_conf = 11-curve-brainpoolP384r1tls13-ssl
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[11-curve-brainpoolP384r1tls13-ssl]
server = 11-curve-brainpoolP384r1tls13-server
client = 11-curve-brainpoolP384r1tls13-client
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[11-curve-brainpoolP384r1tls13-server]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP384r1tls13
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[11-curve-brainpoolP384r1tls13-client]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = brainpoolP384r1tls13
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-11]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = brainpoolP384r1tls13
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[12-curve-brainpoolP512r1tls13]
ssl_conf = 12-curve-brainpoolP512r1tls13-ssl
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[12-curve-brainpoolP512r1tls13-ssl]
server = 12-curve-brainpoolP512r1tls13-server
client = 12-curve-brainpoolP512r1tls13-client
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[12-curve-brainpoolP512r1tls13-server]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP512r1tls13
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[12-curve-brainpoolP512r1tls13-client]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = brainpoolP512r1tls13
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-12]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = brainpoolP512r1tls13
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[13-curve-sect233k1]
ssl_conf = 13-curve-sect233k1-ssl
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[13-curve-sect233k1-ssl]
server = 13-curve-sect233k1-server
client = 13-curve-sect233k1-client
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[13-curve-sect233k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect233k1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[13-curve-sect233k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect233k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-13]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = sect233k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[14-curve-sect233r1]
ssl_conf = 14-curve-sect233r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[14-curve-sect233r1-ssl]
server = 14-curve-sect233r1-server
client = 14-curve-sect233r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[14-curve-sect233r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect233r1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[14-curve-sect233r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect233r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-14]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = sect233r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[15-curve-sect283k1]
ssl_conf = 15-curve-sect283k1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[15-curve-sect283k1-ssl]
server = 15-curve-sect283k1-server
client = 15-curve-sect283k1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[15-curve-sect283k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect283k1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[15-curve-sect283k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect283k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-15]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = sect283k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[16-curve-sect283r1]
ssl_conf = 16-curve-sect283r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[16-curve-sect283r1-ssl]
server = 16-curve-sect283r1-server
client = 16-curve-sect283r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[16-curve-sect283r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect283r1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[16-curve-sect283r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect283r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-16]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = sect283r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[17-curve-sect409k1]
ssl_conf = 17-curve-sect409k1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[17-curve-sect409k1-ssl]
server = 17-curve-sect409k1-server
client = 17-curve-sect409k1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[17-curve-sect409k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect409k1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[17-curve-sect409k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect409k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-17]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = sect409k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[18-curve-sect409r1]
ssl_conf = 18-curve-sect409r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[18-curve-sect409r1-ssl]
server = 18-curve-sect409r1-server
client = 18-curve-sect409r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[18-curve-sect409r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect409r1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[18-curve-sect409r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect409r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-18]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = sect409r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[19-curve-sect571k1]
ssl_conf = 19-curve-sect571k1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[19-curve-sect571k1-ssl]
server = 19-curve-sect571k1-server
client = 19-curve-sect571k1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[19-curve-sect571k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect571k1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[19-curve-sect571k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect571k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-19]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = sect571k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[20-curve-sect571r1]
ssl_conf = 20-curve-sect571r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[20-curve-sect571r1-ssl]
server = 20-curve-sect571r1-server
client = 20-curve-sect571r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[20-curve-sect571r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect571r1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[20-curve-sect571r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect571r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-20]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = sect571r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[21-curve-secp224r1]
ssl_conf = 21-curve-secp224r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[21-curve-secp224r1-ssl]
server = 21-curve-secp224r1-server
client = 21-curve-secp224r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[21-curve-secp224r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp224r1
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[21-curve-secp224r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp224r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-21]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedTmpKeyType = secp224r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[22-curve-sect163k1]
ssl_conf = 22-curve-sect163k1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[22-curve-sect163k1-ssl]
server = 22-curve-sect163k1-server
client = 22-curve-sect163k1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[22-curve-sect163k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Add fips checks for ecdh key agreement For key agreement only NIST curves that have a security strength of 112 bits or more are allowed. Fixed tests so they obey these restrictions when testing in fips mode. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12745)
2020-08-29 10:59:04 +08:00
Curves = sect163k1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[22-curve-sect163k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Add fips checks for ecdh key agreement For key agreement only NIST curves that have a security strength of 112 bits or more are allowed. Fixed tests so they obey these restrictions when testing in fips mode. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12745)
2020-08-29 10:59:04 +08:00
Curves = sect163k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-22]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Add fips checks for ecdh key agreement For key agreement only NIST curves that have a security strength of 112 bits or more are allowed. Fixed tests so they obey these restrictions when testing in fips mode. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12745)
2020-08-29 10:59:04 +08:00
ExpectedTmpKeyType = sect163k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[23-curve-sect163r2]
ssl_conf = 23-curve-sect163r2-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[23-curve-sect163r2-ssl]
server = 23-curve-sect163r2-server
client = 23-curve-sect163r2-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[23-curve-sect163r2-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Add fips checks for ecdh key agreement For key agreement only NIST curves that have a security strength of 112 bits or more are allowed. Fixed tests so they obey these restrictions when testing in fips mode. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12745)
2020-08-29 10:59:04 +08:00
Curves = sect163r2
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[23-curve-sect163r2-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Add fips checks for ecdh key agreement For key agreement only NIST curves that have a security strength of 112 bits or more are allowed. Fixed tests so they obey these restrictions when testing in fips mode. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12745)
2020-08-29 10:59:04 +08:00
Curves = sect163r2
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-23]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Add fips checks for ecdh key agreement For key agreement only NIST curves that have a security strength of 112 bits or more are allowed. Fixed tests so they obey these restrictions when testing in fips mode. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12745)
2020-08-29 10:59:04 +08:00
ExpectedTmpKeyType = sect163r2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[24-curve-prime192v1]
ssl_conf = 24-curve-prime192v1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[24-curve-prime192v1-ssl]
server = 24-curve-prime192v1-server
client = 24-curve-prime192v1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[24-curve-prime192v1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Add fips checks for ecdh key agreement For key agreement only NIST curves that have a security strength of 112 bits or more are allowed. Fixed tests so they obey these restrictions when testing in fips mode. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12745)
2020-08-29 10:59:04 +08:00
Curves = prime192v1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[24-curve-prime192v1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Add fips checks for ecdh key agreement For key agreement only NIST curves that have a security strength of 112 bits or more are allowed. Fixed tests so they obey these restrictions when testing in fips mode. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12745)
2020-08-29 10:59:04 +08:00
Curves = prime192v1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-24]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Add fips checks for ecdh key agreement For key agreement only NIST curves that have a security strength of 112 bits or more are allowed. Fixed tests so they obey these restrictions when testing in fips mode. Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12745)
2020-08-29 10:59:04 +08:00
ExpectedTmpKeyType = prime192v1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[25-curve-sect163r1]
ssl_conf = 25-curve-sect163r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[25-curve-sect163r1-ssl]
server = 25-curve-sect163r1-server
client = 25-curve-sect163r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[25-curve-sect163r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = sect163r1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[25-curve-sect163r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = sect163r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-25]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = sect163r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[26-curve-sect193r1]
ssl_conf = 26-curve-sect193r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[26-curve-sect193r1-ssl]
server = 26-curve-sect193r1-server
client = 26-curve-sect193r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[26-curve-sect193r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = sect193r1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[26-curve-sect193r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = sect193r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-26]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = sect193r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[27-curve-sect193r2]
ssl_conf = 27-curve-sect193r2-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[27-curve-sect193r2-ssl]
server = 27-curve-sect193r2-server
client = 27-curve-sect193r2-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[27-curve-sect193r2-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = sect193r2
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[27-curve-sect193r2-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = sect193r2
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-27]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = sect193r2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[28-curve-sect239k1]
ssl_conf = 28-curve-sect239k1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[28-curve-sect239k1-ssl]
server = 28-curve-sect239k1-server
client = 28-curve-sect239k1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[28-curve-sect239k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = sect239k1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[28-curve-sect239k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = sect239k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-28]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = sect239k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[29-curve-secp160k1]
ssl_conf = 29-curve-secp160k1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[29-curve-secp160k1-ssl]
server = 29-curve-secp160k1-server
client = 29-curve-secp160k1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[29-curve-secp160k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp160k1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[29-curve-secp160k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp160k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-29]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = secp160k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[30-curve-secp160r1]
ssl_conf = 30-curve-secp160r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[30-curve-secp160r1-ssl]
server = 30-curve-secp160r1-server
client = 30-curve-secp160r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[30-curve-secp160r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp160r1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[30-curve-secp160r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp160r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-30]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = secp160r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[31-curve-secp160r2]
ssl_conf = 31-curve-secp160r2-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[31-curve-secp160r2-ssl]
server = 31-curve-secp160r2-server
client = 31-curve-secp160r2-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[31-curve-secp160r2-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp160r2
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[31-curve-secp160r2-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp160r2
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-31]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = secp160r2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[32-curve-secp192k1]
ssl_conf = 32-curve-secp192k1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[32-curve-secp192k1-ssl]
server = 32-curve-secp192k1-server
client = 32-curve-secp192k1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[32-curve-secp192k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp192k1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[32-curve-secp192k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp192k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-32]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = secp192k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[33-curve-secp224k1]
ssl_conf = 33-curve-secp224k1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[33-curve-secp224k1-ssl]
server = 33-curve-secp224k1-server
client = 33-curve-secp224k1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[33-curve-secp224k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp224k1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[33-curve-secp224k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp224k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-33]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = secp224k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[34-curve-secp256k1]
ssl_conf = 34-curve-secp256k1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[34-curve-secp256k1-ssl]
server = 34-curve-secp256k1-server
client = 34-curve-secp256k1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[34-curve-secp256k1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp256k1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[34-curve-secp256k1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = secp256k1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-34]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = secp256k1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[35-curve-brainpoolP256r1]
ssl_conf = 35-curve-brainpoolP256r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[35-curve-brainpoolP256r1-ssl]
server = 35-curve-brainpoolP256r1-server
client = 35-curve-brainpoolP256r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[35-curve-brainpoolP256r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = brainpoolP256r1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[35-curve-brainpoolP256r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = brainpoolP256r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-35]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = brainpoolP256r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[36-curve-brainpoolP384r1]
ssl_conf = 36-curve-brainpoolP384r1-ssl
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[36-curve-brainpoolP384r1-ssl]
server = 36-curve-brainpoolP384r1-server
client = 36-curve-brainpoolP384r1-client
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[36-curve-brainpoolP384r1-server]
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = brainpoolP384r1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[36-curve-brainpoolP384r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = brainpoolP384r1
Add a ciphersuite config sanity check for clients Ensure that there are ciphersuites enabled for the maximum supported version we are claiming in the ClientHello. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3316)
2017-04-26 17:38:32 +08:00
MaxProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-36]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = brainpoolP384r1
Test the support curves in tls Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1472
2016-08-21 01:51:14 +08:00
Update tests for TLS Ed448 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/5470)
2018-02-27 21:02:00 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[37-curve-brainpoolP512r1]
ssl_conf = 37-curve-brainpoolP512r1-ssl
Update tests for TLS Ed448 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/5470)
2018-02-27 21:02:00 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[37-curve-brainpoolP512r1-ssl]
server = 37-curve-brainpoolP512r1-server
client = 37-curve-brainpoolP512r1-client
Update tests for TLS Ed448 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/5470)
2018-02-27 21:02:00 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[37-curve-brainpoolP512r1-server]
Update tests for TLS Ed448 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/5470)
2018-02-27 21:02:00 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = brainpoolP512r1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
MaxProtocol = TLSv1.3
Update tests for TLS Ed448 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/5470)
2018-02-27 21:02:00 +08:00
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[37-curve-brainpoolP512r1-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
Curves = brainpoolP512r1
Update tests for TLS Ed448 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/5470)
2018-02-27 21:02:00 +08:00
MaxProtocol = TLSv1.2
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-37]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedProtocol = TLSv1.2
Update tests for TLS Ed448 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/5470)
2018-02-27 21:02:00 +08:00
ExpectedResult = Success
Teach ssl_test_new how to test the FIPS module We load the FIPS module and make sure it is configured before running the ssl_test_new tests. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/11511)
2020-04-08 00:03:19 +08:00
ExpectedTmpKeyType = brainpoolP512r1
Update tests for TLS Ed448 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/5470)
2018-02-27 21:02:00 +08:00
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[38-curve-sect233k1-tls12-in-tls13]
ssl_conf = 38-curve-sect233k1-tls12-in-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[38-curve-sect233k1-tls12-in-tls13-ssl]
server = 38-curve-sect233k1-tls12-in-tls13-server
client = 38-curve-sect233k1-tls12-in-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[38-curve-sect233k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect233k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[38-curve-sect233k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect233k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-38]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[39-curve-sect233r1-tls12-in-tls13]
ssl_conf = 39-curve-sect233r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[39-curve-sect233r1-tls12-in-tls13-ssl]
server = 39-curve-sect233r1-tls12-in-tls13-server
client = 39-curve-sect233r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[39-curve-sect233r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect233r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[39-curve-sect233r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect233r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-39]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[40-curve-sect283k1-tls12-in-tls13]
ssl_conf = 40-curve-sect283k1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[40-curve-sect283k1-tls12-in-tls13-ssl]
server = 40-curve-sect283k1-tls12-in-tls13-server
client = 40-curve-sect283k1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[40-curve-sect283k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect283k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[40-curve-sect283k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect283k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-40]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[41-curve-sect283r1-tls12-in-tls13]
ssl_conf = 41-curve-sect283r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[41-curve-sect283r1-tls12-in-tls13-ssl]
server = 41-curve-sect283r1-tls12-in-tls13-server
client = 41-curve-sect283r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[41-curve-sect283r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect283r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[41-curve-sect283r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect283r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-41]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[42-curve-sect409k1-tls12-in-tls13]
ssl_conf = 42-curve-sect409k1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[42-curve-sect409k1-tls12-in-tls13-ssl]
server = 42-curve-sect409k1-tls12-in-tls13-server
client = 42-curve-sect409k1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[42-curve-sect409k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect409k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[42-curve-sect409k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect409k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-42]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[43-curve-sect409r1-tls12-in-tls13]
ssl_conf = 43-curve-sect409r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[43-curve-sect409r1-tls12-in-tls13-ssl]
server = 43-curve-sect409r1-tls12-in-tls13-server
client = 43-curve-sect409r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[43-curve-sect409r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect409r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[43-curve-sect409r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect409r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-43]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[44-curve-sect571k1-tls12-in-tls13]
ssl_conf = 44-curve-sect571k1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[44-curve-sect571k1-tls12-in-tls13-ssl]
server = 44-curve-sect571k1-tls12-in-tls13-server
client = 44-curve-sect571k1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[44-curve-sect571k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect571k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[44-curve-sect571k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect571k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-44]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[45-curve-sect571r1-tls12-in-tls13]
ssl_conf = 45-curve-sect571r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[45-curve-sect571r1-tls12-in-tls13-ssl]
server = 45-curve-sect571r1-tls12-in-tls13-server
client = 45-curve-sect571r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[45-curve-sect571r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect571r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[45-curve-sect571r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect571r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-45]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[46-curve-secp224r1-tls12-in-tls13]
ssl_conf = 46-curve-secp224r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[46-curve-secp224r1-tls12-in-tls13-ssl]
server = 46-curve-secp224r1-tls12-in-tls13-server
client = 46-curve-secp224r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[46-curve-secp224r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = secp224r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[46-curve-secp224r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = secp224r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-46]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[47-curve-sect163k1-tls12-in-tls13]
ssl_conf = 47-curve-sect163k1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[47-curve-sect163k1-tls12-in-tls13-ssl]
server = 47-curve-sect163k1-tls12-in-tls13-server
client = 47-curve-sect163k1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[47-curve-sect163k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect163k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[47-curve-sect163k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect163k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-47]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[48-curve-sect163r2-tls12-in-tls13]
ssl_conf = 48-curve-sect163r2-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[48-curve-sect163r2-tls12-in-tls13-ssl]
server = 48-curve-sect163r2-tls12-in-tls13-server
client = 48-curve-sect163r2-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[48-curve-sect163r2-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect163r2:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[48-curve-sect163r2-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect163r2:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-48]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[49-curve-prime192v1-tls12-in-tls13]
ssl_conf = 49-curve-prime192v1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[49-curve-prime192v1-tls12-in-tls13-ssl]
server = 49-curve-prime192v1-tls12-in-tls13-server
client = 49-curve-prime192v1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[49-curve-prime192v1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = prime192v1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[49-curve-prime192v1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = prime192v1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-49]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[50-curve-sect163r1-tls12-in-tls13]
ssl_conf = 50-curve-sect163r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[50-curve-sect163r1-tls12-in-tls13-ssl]
server = 50-curve-sect163r1-tls12-in-tls13-server
client = 50-curve-sect163r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[50-curve-sect163r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect163r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[50-curve-sect163r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect163r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-50]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[51-curve-sect193r1-tls12-in-tls13]
ssl_conf = 51-curve-sect193r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[51-curve-sect193r1-tls12-in-tls13-ssl]
server = 51-curve-sect193r1-tls12-in-tls13-server
client = 51-curve-sect193r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[51-curve-sect193r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect193r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[51-curve-sect193r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect193r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-51]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[52-curve-sect193r2-tls12-in-tls13]
ssl_conf = 52-curve-sect193r2-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[52-curve-sect193r2-tls12-in-tls13-ssl]
server = 52-curve-sect193r2-tls12-in-tls13-server
client = 52-curve-sect193r2-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[52-curve-sect193r2-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect193r2:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[52-curve-sect193r2-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect193r2:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-52]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[53-curve-sect239k1-tls12-in-tls13]
ssl_conf = 53-curve-sect239k1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[53-curve-sect239k1-tls12-in-tls13-ssl]
server = 53-curve-sect239k1-tls12-in-tls13-server
client = 53-curve-sect239k1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[53-curve-sect239k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = sect239k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[53-curve-sect239k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = sect239k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-53]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[54-curve-secp160k1-tls12-in-tls13]
ssl_conf = 54-curve-secp160k1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[54-curve-secp160k1-tls12-in-tls13-ssl]
server = 54-curve-secp160k1-tls12-in-tls13-server
client = 54-curve-secp160k1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[54-curve-secp160k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = secp160k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[54-curve-secp160k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = secp160k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-54]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[55-curve-secp160r1-tls12-in-tls13]
ssl_conf = 55-curve-secp160r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[55-curve-secp160r1-tls12-in-tls13-ssl]
server = 55-curve-secp160r1-tls12-in-tls13-server
client = 55-curve-secp160r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[55-curve-secp160r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = secp160r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[55-curve-secp160r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = secp160r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-55]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[56-curve-secp160r2-tls12-in-tls13]
ssl_conf = 56-curve-secp160r2-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[56-curve-secp160r2-tls12-in-tls13-ssl]
server = 56-curve-secp160r2-tls12-in-tls13-server
client = 56-curve-secp160r2-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[56-curve-secp160r2-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = secp160r2:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[56-curve-secp160r2-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = secp160r2:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-56]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[57-curve-secp192k1-tls12-in-tls13]
ssl_conf = 57-curve-secp192k1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[57-curve-secp192k1-tls12-in-tls13-ssl]
server = 57-curve-secp192k1-tls12-in-tls13-server
client = 57-curve-secp192k1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[57-curve-secp192k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = secp192k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[57-curve-secp192k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = secp192k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-57]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[58-curve-secp224k1-tls12-in-tls13]
ssl_conf = 58-curve-secp224k1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[58-curve-secp224k1-tls12-in-tls13-ssl]
server = 58-curve-secp224k1-tls12-in-tls13-server
client = 58-curve-secp224k1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[58-curve-secp224k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = secp224k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[58-curve-secp224k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = secp224k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-58]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[59-curve-secp256k1-tls12-in-tls13]
ssl_conf = 59-curve-secp256k1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[59-curve-secp256k1-tls12-in-tls13-ssl]
server = 59-curve-secp256k1-tls12-in-tls13-server
client = 59-curve-secp256k1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[59-curve-secp256k1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = secp256k1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[59-curve-secp256k1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = secp256k1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-59]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[60-curve-brainpoolP256r1-tls12-in-tls13]
ssl_conf = 60-curve-brainpoolP256r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[60-curve-brainpoolP256r1-tls12-in-tls13-ssl]
server = 60-curve-brainpoolP256r1-tls12-in-tls13-server
client = 60-curve-brainpoolP256r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[60-curve-brainpoolP256r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP256r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[60-curve-brainpoolP256r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = brainpoolP256r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-60]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[61-curve-brainpoolP384r1-tls12-in-tls13]
ssl_conf = 61-curve-brainpoolP384r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[61-curve-brainpoolP384r1-tls12-in-tls13-ssl]
server = 61-curve-brainpoolP384r1-tls12-in-tls13-server
client = 61-curve-brainpoolP384r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[61-curve-brainpoolP384r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP384r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[61-curve-brainpoolP384r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = brainpoolP384r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-61]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[62-curve-brainpoolP512r1-tls12-in-tls13]
ssl_conf = 62-curve-brainpoolP512r1-tls12-in-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[62-curve-brainpoolP512r1-tls12-in-tls13-ssl]
server = 62-curve-brainpoolP512r1-tls12-in-tls13-server
client = 62-curve-brainpoolP512r1-tls12-in-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[62-curve-brainpoolP512r1-tls12-in-tls13-server]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP512r1:P-256
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[62-curve-brainpoolP512r1-tls12-in-tls13-client]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = brainpoolP512r1:P-256
MaxProtocol = TLSv1.3
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-62]
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
ExpectedProtocol = TLSv1.3
ExpectedResult = Success
ExpectedTmpKeyType = P-256
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[63-curve-sect233k1-tls13]
ssl_conf = 63-curve-sect233k1-tls13-ssl
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[63-curve-sect233k1-tls13-ssl]
server = 63-curve-sect233k1-tls13-server
client = 63-curve-sect233k1-tls13-client
Add a test for TLSv1.3 only client sending a correct key_share Make sure that a TLSv1.3 only client does not send a TLSv1.3 key_share. Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19317)
2022-09-30 23:59:05 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[63-curve-sect233k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect233k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[63-curve-sect233k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect233k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-63]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[64-curve-sect233r1-tls13]
ssl_conf = 64-curve-sect233r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[64-curve-sect233r1-tls13-ssl]
server = 64-curve-sect233r1-tls13-server
client = 64-curve-sect233r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[64-curve-sect233r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect233r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[64-curve-sect233r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect233r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-64]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[65-curve-sect283k1-tls13]
ssl_conf = 65-curve-sect283k1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[65-curve-sect283k1-tls13-ssl]
server = 65-curve-sect283k1-tls13-server
client = 65-curve-sect283k1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[65-curve-sect283k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect283k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[65-curve-sect283k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect283k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-65]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[66-curve-sect283r1-tls13]
ssl_conf = 66-curve-sect283r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[66-curve-sect283r1-tls13-ssl]
server = 66-curve-sect283r1-tls13-server
client = 66-curve-sect283r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[66-curve-sect283r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect283r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[66-curve-sect283r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect283r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-66]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[67-curve-sect409k1-tls13]
ssl_conf = 67-curve-sect409k1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[67-curve-sect409k1-tls13-ssl]
server = 67-curve-sect409k1-tls13-server
client = 67-curve-sect409k1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[67-curve-sect409k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect409k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[67-curve-sect409k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect409k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-67]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[68-curve-sect409r1-tls13]
ssl_conf = 68-curve-sect409r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[68-curve-sect409r1-tls13-ssl]
server = 68-curve-sect409r1-tls13-server
client = 68-curve-sect409r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[68-curve-sect409r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect409r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[68-curve-sect409r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect409r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-68]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[69-curve-sect571k1-tls13]
ssl_conf = 69-curve-sect571k1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[69-curve-sect571k1-tls13-ssl]
server = 69-curve-sect571k1-tls13-server
client = 69-curve-sect571k1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[69-curve-sect571k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect571k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[69-curve-sect571k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect571k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-69]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[70-curve-sect571r1-tls13]
ssl_conf = 70-curve-sect571r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[70-curve-sect571r1-tls13-ssl]
server = 70-curve-sect571r1-tls13-server
client = 70-curve-sect571r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[70-curve-sect571r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect571r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[70-curve-sect571r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect571r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-70]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[71-curve-secp224r1-tls13]
ssl_conf = 71-curve-secp224r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[71-curve-secp224r1-tls13-ssl]
server = 71-curve-secp224r1-tls13-server
client = 71-curve-secp224r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[71-curve-secp224r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp224r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[71-curve-secp224r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp224r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-71]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[72-curve-sect163k1-tls13]
ssl_conf = 72-curve-sect163k1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[72-curve-sect163k1-tls13-ssl]
server = 72-curve-sect163k1-tls13-server
client = 72-curve-sect163k1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[72-curve-sect163k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect163k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[72-curve-sect163k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect163k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-72]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[73-curve-sect163r2-tls13]
ssl_conf = 73-curve-sect163r2-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[73-curve-sect163r2-tls13-ssl]
server = 73-curve-sect163r2-tls13-server
client = 73-curve-sect163r2-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[73-curve-sect163r2-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect163r2
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[73-curve-sect163r2-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect163r2
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-73]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[74-curve-prime192v1-tls13]
ssl_conf = 74-curve-prime192v1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[74-curve-prime192v1-tls13-ssl]
server = 74-curve-prime192v1-tls13-server
client = 74-curve-prime192v1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[74-curve-prime192v1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = prime192v1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[74-curve-prime192v1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = prime192v1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-74]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[75-curve-sect163r1-tls13]
ssl_conf = 75-curve-sect163r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[75-curve-sect163r1-tls13-ssl]
server = 75-curve-sect163r1-tls13-server
client = 75-curve-sect163r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[75-curve-sect163r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect163r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[75-curve-sect163r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect163r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-75]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[76-curve-sect193r1-tls13]
ssl_conf = 76-curve-sect193r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[76-curve-sect193r1-tls13-ssl]
server = 76-curve-sect193r1-tls13-server
client = 76-curve-sect193r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[76-curve-sect193r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect193r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[76-curve-sect193r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect193r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-76]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[77-curve-sect193r2-tls13]
ssl_conf = 77-curve-sect193r2-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[77-curve-sect193r2-tls13-ssl]
server = 77-curve-sect193r2-tls13-server
client = 77-curve-sect193r2-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[77-curve-sect193r2-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect193r2
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[77-curve-sect193r2-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect193r2
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-77]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[78-curve-sect239k1-tls13]
ssl_conf = 78-curve-sect239k1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[78-curve-sect239k1-tls13-ssl]
server = 78-curve-sect239k1-tls13-server
client = 78-curve-sect239k1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[78-curve-sect239k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect239k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[78-curve-sect239k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = sect239k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-78]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[79-curve-secp160k1-tls13]
ssl_conf = 79-curve-secp160k1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[79-curve-secp160k1-tls13-ssl]
server = 79-curve-secp160k1-tls13-server
client = 79-curve-secp160k1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[79-curve-secp160k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp160k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[79-curve-secp160k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp160k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-79]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[80-curve-secp160r1-tls13]
ssl_conf = 80-curve-secp160r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[80-curve-secp160r1-tls13-ssl]
server = 80-curve-secp160r1-tls13-server
client = 80-curve-secp160r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[80-curve-secp160r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp160r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[80-curve-secp160r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp160r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-80]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[81-curve-secp160r2-tls13]
ssl_conf = 81-curve-secp160r2-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[81-curve-secp160r2-tls13-ssl]
server = 81-curve-secp160r2-tls13-server
client = 81-curve-secp160r2-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[81-curve-secp160r2-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp160r2
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[81-curve-secp160r2-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp160r2
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-81]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[82-curve-secp192k1-tls13]
ssl_conf = 82-curve-secp192k1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[82-curve-secp192k1-tls13-ssl]
server = 82-curve-secp192k1-tls13-server
client = 82-curve-secp192k1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[82-curve-secp192k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp192k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[82-curve-secp192k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp192k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-82]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[83-curve-secp224k1-tls13]
ssl_conf = 83-curve-secp224k1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[83-curve-secp224k1-tls13-ssl]
server = 83-curve-secp224k1-tls13-server
client = 83-curve-secp224k1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[83-curve-secp224k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp224k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[83-curve-secp224k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp224k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-83]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[84-curve-secp256k1-tls13]
ssl_conf = 84-curve-secp256k1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[84-curve-secp256k1-tls13-ssl]
server = 84-curve-secp256k1-tls13-server
client = 84-curve-secp256k1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[84-curve-secp256k1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp256k1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[84-curve-secp256k1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = secp256k1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-84]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[85-curve-brainpoolP256r1-tls13]
ssl_conf = 85-curve-brainpoolP256r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[85-curve-brainpoolP256r1-tls13-ssl]
server = 85-curve-brainpoolP256r1-tls13-server
client = 85-curve-brainpoolP256r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[85-curve-brainpoolP256r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = brainpoolP256r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[85-curve-brainpoolP256r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = brainpoolP256r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-85]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[86-curve-brainpoolP384r1-tls13]
ssl_conf = 86-curve-brainpoolP384r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[86-curve-brainpoolP384r1-tls13-ssl]
server = 86-curve-brainpoolP384r1-tls13-server
client = 86-curve-brainpoolP384r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[86-curve-brainpoolP384r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = brainpoolP384r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[86-curve-brainpoolP384r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = brainpoolP384r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-86]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[87-curve-brainpoolP512r1-tls13]
ssl_conf = 87-curve-brainpoolP512r1-tls13-ssl
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[87-curve-brainpoolP512r1-tls13-ssl]
server = 87-curve-brainpoolP512r1-tls13-server
client = 87-curve-brainpoolP512r1-tls13-client
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[87-curve-brainpoolP512r1-tls13-server]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = DEFAULT@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = brainpoolP512r1
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[87-curve-brainpoolP512r1-tls13-client]
Fix tests for new default security level Fix tests that were expecting a default security level of 1 to work with the new default of 2. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16760)
2021-10-06 00:30:09 +08:00
CipherString = ECDHE@SECLEVEL=1
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
Curves = brainpoolP512r1
MinProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-87]
ssl_test: Add testcases for disallowing non-TLS1.3 curves with TLS1.3 Also correctly mark max protocol version for some curves. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/14154)
2021-02-12 01:18:49 +08:00
ExpectedResult = ClientFail
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[88-curve-ffdhe2048-tls13-in-tls12]
ssl_conf = 88-curve-ffdhe2048-tls13-in-tls12-ssl
[88-curve-ffdhe2048-tls13-in-tls12-ssl]
server = 88-curve-ffdhe2048-tls13-in-tls12-server
client = 88-curve-ffdhe2048-tls13-in-tls12-client
[88-curve-ffdhe2048-tls13-in-tls12-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe2048
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[88-curve-ffdhe2048-tls13-in-tls12-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe2048
MaxProtocol = TLSv1.2
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-88]
ExpectedResult = ServerFail
# ===========================================================
[89-curve-ffdhe2048-tls13-in-tls12-2]
ssl_conf = 89-curve-ffdhe2048-tls13-in-tls12-2-ssl
[89-curve-ffdhe2048-tls13-in-tls12-2-ssl]
server = 89-curve-ffdhe2048-tls13-in-tls12-2-server
client = 89-curve-ffdhe2048-tls13-in-tls12-2-client
[89-curve-ffdhe2048-tls13-in-tls12-2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe2048
MaxProtocol = TLSv1.2
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[89-curve-ffdhe2048-tls13-in-tls12-2-client]
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe2048
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-89]
ExpectedResult = Success
# ===========================================================
[90-curve-ffdhe3072-tls13-in-tls12]
ssl_conf = 90-curve-ffdhe3072-tls13-in-tls12-ssl
[90-curve-ffdhe3072-tls13-in-tls12-ssl]
server = 90-curve-ffdhe3072-tls13-in-tls12-server
client = 90-curve-ffdhe3072-tls13-in-tls12-client
[90-curve-ffdhe3072-tls13-in-tls12-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe3072
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[90-curve-ffdhe3072-tls13-in-tls12-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe3072
MaxProtocol = TLSv1.2
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-90]
ExpectedResult = ServerFail
# ===========================================================
[91-curve-ffdhe3072-tls13-in-tls12-2]
ssl_conf = 91-curve-ffdhe3072-tls13-in-tls12-2-ssl
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[91-curve-ffdhe3072-tls13-in-tls12-2-ssl]
server = 91-curve-ffdhe3072-tls13-in-tls12-2-server
client = 91-curve-ffdhe3072-tls13-in-tls12-2-client
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[91-curve-ffdhe3072-tls13-in-tls12-2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe3072
MaxProtocol = TLSv1.2
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[91-curve-ffdhe3072-tls13-in-tls12-2-client]
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe3072
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-91]
ExpectedResult = Success
# ===========================================================
[92-curve-ffdhe4096-tls13-in-tls12]
ssl_conf = 92-curve-ffdhe4096-tls13-in-tls12-ssl
[92-curve-ffdhe4096-tls13-in-tls12-ssl]
server = 92-curve-ffdhe4096-tls13-in-tls12-server
client = 92-curve-ffdhe4096-tls13-in-tls12-client
[92-curve-ffdhe4096-tls13-in-tls12-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe4096
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[92-curve-ffdhe4096-tls13-in-tls12-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe4096
MaxProtocol = TLSv1.2
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-92]
ExpectedResult = ServerFail
# ===========================================================
[93-curve-ffdhe4096-tls13-in-tls12-2]
ssl_conf = 93-curve-ffdhe4096-tls13-in-tls12-2-ssl
[93-curve-ffdhe4096-tls13-in-tls12-2-ssl]
server = 93-curve-ffdhe4096-tls13-in-tls12-2-server
client = 93-curve-ffdhe4096-tls13-in-tls12-2-client
[93-curve-ffdhe4096-tls13-in-tls12-2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe4096
MaxProtocol = TLSv1.2
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[93-curve-ffdhe4096-tls13-in-tls12-2-client]
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe4096
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-93]
ExpectedResult = Success
# ===========================================================
[94-curve-ffdhe6144-tls13-in-tls12]
ssl_conf = 94-curve-ffdhe6144-tls13-in-tls12-ssl
[94-curve-ffdhe6144-tls13-in-tls12-ssl]
server = 94-curve-ffdhe6144-tls13-in-tls12-server
client = 94-curve-ffdhe6144-tls13-in-tls12-client
[94-curve-ffdhe6144-tls13-in-tls12-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe6144
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[94-curve-ffdhe6144-tls13-in-tls12-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe6144
MaxProtocol = TLSv1.2
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-94]
ExpectedResult = ServerFail
# ===========================================================
[95-curve-ffdhe6144-tls13-in-tls12-2]
ssl_conf = 95-curve-ffdhe6144-tls13-in-tls12-2-ssl
[95-curve-ffdhe6144-tls13-in-tls12-2-ssl]
server = 95-curve-ffdhe6144-tls13-in-tls12-2-server
client = 95-curve-ffdhe6144-tls13-in-tls12-2-client
[95-curve-ffdhe6144-tls13-in-tls12-2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe6144
MaxProtocol = TLSv1.2
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[95-curve-ffdhe6144-tls13-in-tls12-2-client]
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe6144
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-95]
ExpectedResult = Success
# ===========================================================
[96-curve-ffdhe8192-tls13-in-tls12]
ssl_conf = 96-curve-ffdhe8192-tls13-in-tls12-ssl
[96-curve-ffdhe8192-tls13-in-tls12-ssl]
server = 96-curve-ffdhe8192-tls13-in-tls12-server
client = 96-curve-ffdhe8192-tls13-in-tls12-client
[96-curve-ffdhe8192-tls13-in-tls12-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe8192
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[96-curve-ffdhe8192-tls13-in-tls12-client]
CipherString = ECDHE@SECLEVEL=1
Curves = ffdhe8192
MaxProtocol = TLSv1.2
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-96]
ExpectedResult = ServerFail
# ===========================================================
[97-curve-ffdhe8192-tls13-in-tls12-2]
ssl_conf = 97-curve-ffdhe8192-tls13-in-tls12-2-ssl
[97-curve-ffdhe8192-tls13-in-tls12-2-ssl]
server = 97-curve-ffdhe8192-tls13-in-tls12-2-server
client = 97-curve-ffdhe8192-tls13-in-tls12-2-client
[97-curve-ffdhe8192-tls13-in-tls12-2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe8192
MaxProtocol = TLSv1.2
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[97-curve-ffdhe8192-tls13-in-tls12-2-client]
CipherString = DEFAULT@SECLEVEL=1
Curves = ffdhe8192
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-97]
ExpectedResult = Success
# ===========================================================
[98-curve-brainpoolP256r1tls13-tls13-in-tls12]
ssl_conf = 98-curve-brainpoolP256r1tls13-tls13-in-tls12-ssl
[98-curve-brainpoolP256r1tls13-tls13-in-tls12-ssl]
server = 98-curve-brainpoolP256r1tls13-tls13-in-tls12-server
client = 98-curve-brainpoolP256r1tls13-tls13-in-tls12-client
[98-curve-brainpoolP256r1tls13-tls13-in-tls12-server]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP256r1tls13
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[98-curve-brainpoolP256r1tls13-tls13-in-tls12-client]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = brainpoolP256r1tls13
MaxProtocol = TLSv1.2
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-98]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
ExpectedResult = ServerFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[99-curve-brainpoolP256r1tls13-tls13-in-tls12-2]
ssl_conf = 99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-ssl
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-ssl]
server = 99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-server
client = 99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-client
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP256r1tls13
MaxProtocol = TLSv1.2
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[99-curve-brainpoolP256r1tls13-tls13-in-tls12-2-client]
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP256r1tls13
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-99]
ExpectedResult = Success
# ===========================================================
[100-curve-brainpoolP384r1tls13-tls13-in-tls12]
ssl_conf = 100-curve-brainpoolP384r1tls13-tls13-in-tls12-ssl
[100-curve-brainpoolP384r1tls13-tls13-in-tls12-ssl]
server = 100-curve-brainpoolP384r1tls13-tls13-in-tls12-server
client = 100-curve-brainpoolP384r1tls13-tls13-in-tls12-client
[100-curve-brainpoolP384r1tls13-tls13-in-tls12-server]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP384r1tls13
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[100-curve-brainpoolP384r1tls13-tls13-in-tls12-client]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = brainpoolP384r1tls13
MaxProtocol = TLSv1.2
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-100]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
ExpectedResult = ServerFail
# ===========================================================
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[101-curve-brainpoolP384r1tls13-tls13-in-tls12-2]
ssl_conf = 101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-ssl
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-ssl]
server = 101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-server
client = 101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-client
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP384r1tls13
MaxProtocol = TLSv1.2
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[101-curve-brainpoolP384r1tls13-tls13-in-tls12-2-client]
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP384r1tls13
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-101]
ExpectedResult = Success
# ===========================================================
[102-curve-brainpoolP512r1tls13-tls13-in-tls12]
ssl_conf = 102-curve-brainpoolP512r1tls13-tls13-in-tls12-ssl
[102-curve-brainpoolP512r1tls13-tls13-in-tls12-ssl]
server = 102-curve-brainpoolP512r1tls13-tls13-in-tls12-server
client = 102-curve-brainpoolP512r1tls13-tls13-in-tls12-client
[102-curve-brainpoolP512r1tls13-tls13-in-tls12-server]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP512r1tls13
MaxProtocol = TLSv1.3
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[102-curve-brainpoolP512r1tls13-tls13-in-tls12-client]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
CipherString = ECDHE@SECLEVEL=1
Curves = brainpoolP512r1tls13
MaxProtocol = TLSv1.2
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
[test-102]
Add some more brainpool tests for TLSv1.3 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/19315)
2022-09-30 20:35:28 +08:00
ExpectedResult = ServerFail
Add some test_ssl_new tests for the ffdhe groups Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21274)
2023-06-23 23:01:41 +08:00
# ===========================================================
[103-curve-brainpoolP512r1tls13-tls13-in-tls12-2]
ssl_conf = 103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-ssl
[103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-ssl]
server = 103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-server
client = 103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-client
[103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-server]
Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP512r1tls13
MaxProtocol = TLSv1.2
PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
[103-curve-brainpoolP512r1tls13-tls13-in-tls12-2-client]
CipherString = DEFAULT@SECLEVEL=1
Curves = brainpoolP512r1tls13
MaxProtocol = TLSv1.3
VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
VerifyMode = Peer
[test-103]
ExpectedResult = Success
Reference in New Issue Copy Permalink