openssl/test/ssl-tests
Pauli 4454c20f02 test: update ssl_new tests in line with pedantic FIPS policy
Add a new option to the `test' section of SSL test data structure.
This contains a space separated list of version checks, all of which must
pass.

Note that the version checks are as they as because:

- 3.1.0 doesn't have mandatory EMS support, so it can run the old tests.
- 3.1.1 (& later) will have mandatory EMS support, so they can't run them.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/20762)
2023-04-21 17:01:38 +01:00
..
01-simple.cnf
01-simple.cnf.in
02-protocol-version.cnf
02-protocol-version.cnf.in
03-custom_verify.cnf
03-custom_verify.cnf.in
04-client_auth.cnf Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl config 2022-06-03 13:22:42 +10:00
04-client_auth.cnf.in Enable setting SSL_CERT_FLAG_TLS_STRICT with ssl config 2022-06-03 13:22:42 +10:00
05-sni.cnf
05-sni.cnf.in
06-sni-ticket.cnf
06-sni-ticket.cnf.in
07-dtls-protocol-version.cnf
07-dtls-protocol-version.cnf.in
08-npn.cnf
08-npn.cnf.in
09-alpn.cnf
09-alpn.cnf.in
10-resumption.cnf
10-resumption.cnf.in
11-dtls_resumption.cnf
11-dtls_resumption.cnf.in
12-ct.cnf Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
12-ct.cnf.in Change the SCT issuer key to RSA 2048 2022-06-03 17:17:08 +02:00
13-fragmentation.cnf
13-fragmentation.cnf.in
14-curves.cnf Add a test for TLSv1.3 only client sending a correct key_share 2022-10-12 15:55:58 +01:00
14-curves.cnf.in Add a test for TLSv1.3 only client sending a correct key_share 2022-10-12 15:55:58 +01:00
15-certstatus.cnf
15-certstatus.cnf.in
16-dtls-certstatus.cnf
16-dtls-certstatus.cnf.in
17-renegotiate.cnf Check that UnsafeLegacyServerConnect option exists 2022-05-27 08:47:31 +02:00
17-renegotiate.cnf.in Check that UnsafeLegacyServerConnect option exists 2022-05-27 08:47:31 +02:00
18-dtls-renegotiate.cnf
18-dtls-renegotiate.cnf.in
19-mac-then-encrypt.cnf
19-mac-then-encrypt.cnf.in
20-cert-select.cnf Reimplement brainpool TLSv1.3 support group support 2022-10-07 10:01:48 +01:00
20-cert-select.cnf.in Reimplement brainpool TLSv1.3 support group support 2022-10-07 10:01:48 +01:00
21-key-update.cnf
21-key-update.cnf.in
22-compression.cnf
22-compression.cnf.in
23-srp.cnf
23-srp.cnf.in
24-padding.cnf
24-padding.cnf.in
25-cipher.cnf
25-cipher.cnf.in
26-tls13_client_auth.cnf
26-tls13_client_auth.cnf.in
27-ticket-appdata.cnf
27-ticket-appdata.cnf.in
28-seclevel.cnf
28-seclevel.cnf.in
29-dtls-sctp-label-bug.cnf
29-dtls-sctp-label-bug.cnf.in
30-extended-master-secret.cnf test: update ssl_new tests in line with pedantic FIPS policy 2023-04-21 17:01:38 +01:00
30-extended-master-secret.cnf.in test: update ssl_new tests in line with pedantic FIPS policy 2023-04-21 17:01:38 +01:00
31-quic.cnf Add a test_ssl_new testcase 2022-06-03 12:07:18 +10:00
31-quic.cnf.in Add a test_ssl_new testcase 2022-06-03 12:07:18 +10:00
32-compressed-certificate.cnf Add support for compressed certificates (RFC8879) 2022-10-18 09:30:22 -04:00
32-compressed-certificate.cnf.in Add support for compressed certificates (RFC8879) 2022-10-18 09:30:22 -04:00
protocol_version.pm
ssltests_base.pm