openssl/test/ssl_test_ctx_test.conf
Emilia Kasper d2b23cd2b0 SSL test framework: port SNI tests
Observe that the old tests were partly ill-defined:
setting sn_server1 but not sn_server2 in ssltest_old.c does not enable
the SNI callback.

Fix this, and also explicitly test both flavours of SNI mismatch (ignore
/ fatal alert). Tests still pass.

Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-06-28 17:26:24 +02:00

40 lines
738 B
Plaintext

[ssltest_default]
[ssltest_good]
ExpectedResult = ServerFail
ClientAlert = UnknownCA
Protocol = TLSv1.1
ClientVerifyCallback = RejectAll
ServerName = server2
ExpectedServerName = server2
ServerNameCallback = IgnoreMismatch
SessionTicketExpected = Yes
Method = DTLS
[ssltest_unknown_option]
UnknownOption = Foo
[ssltest_unknown_expected_result]
ExpectedResult = Foo
[ssltest_unknown_alert]
ServerAlert = Foo
[ssltest_unknown_protocol]
Protocol = Foo
[ssltest_unknown_verify_callback]
ClientVerifyCallback = Foo
[ssltest_unknown_servername]
ServerName = Foo
[ssltest_unknown_servername_callback]
ServerNameCallback = Foo
[ssltest_unknown_session_ticket_expected]
SessionTicketExpected = Foo
[ssltest_unknown_method]
Method = TLS2