mirror of
https://github.com/openssl/openssl.git
synced 2025-01-30 14:01:55 +08:00
d2b23cd2b0
Observe that the old tests were partly ill-defined: setting sn_server1 but not sn_server2 in ssltest_old.c does not enable the SNI callback. Fix this, and also explicitly test both flavours of SNI mismatch (ignore / fatal alert). Tests still pass. Reviewed-by: Rich Salz <rsalz@openssl.org>
80 lines
2.4 KiB
Perl
80 lines
2.4 KiB
Perl
# -*- mode: perl; -*-
|
|
# Copyright 2016-2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
#
|
|
# Licensed under the OpenSSL license (the "License"). You may not use
|
|
# this file except in compliance with the License. You can obtain a copy
|
|
# in the file LICENSE in the source distribution or at
|
|
# https://www.openssl.org/source/license.html
|
|
|
|
|
|
## SSL test configurations
|
|
|
|
use strict;
|
|
use warnings;
|
|
|
|
package ssltests;
|
|
|
|
our @tests = (
|
|
{
|
|
name => "SNI-switch-context",
|
|
server => { },
|
|
server2 => { },
|
|
client => { },
|
|
test => { "ServerName" => "server2",
|
|
"ExpectedServerName" => "server2",
|
|
"ServerNameCallback" => "IgnoreMismatch",
|
|
"ExpectedResult" => "Success" },
|
|
},
|
|
{
|
|
name => "SNI-keep-context",
|
|
server => { },
|
|
server2 => { },
|
|
client => { },
|
|
test => { "ServerName" => "server1",
|
|
"ExpectedServerName" => "server1",
|
|
"ServerNameCallback" => "IgnoreMismatch",
|
|
"ExpectedResult" => "Success" },
|
|
},
|
|
{
|
|
name => "SNI-no-server-support",
|
|
server => { },
|
|
client => { },
|
|
test => { "ServerName" => "server1",
|
|
"ExpectedResult" => "Success" },
|
|
},
|
|
{
|
|
name => "SNI-no-client-support",
|
|
server => { },
|
|
server2 => { },
|
|
client => { },
|
|
test => {
|
|
# We expect that the callback is still called
|
|
# to let the application decide whether they tolerate
|
|
# missing SNI (as our test callback does).
|
|
"ExpectedServerName" => "server1",
|
|
"ServerNameCallback" => "IgnoreMismatch",
|
|
"ExpectedResult" => "Success"
|
|
},
|
|
},
|
|
{
|
|
name => "SNI-bad-sni-ignore-mismatch",
|
|
server => { },
|
|
server2 => { },
|
|
client => { },
|
|
test => { "ServerName" => "invalid",
|
|
"ExpectedServerName" => "server1",
|
|
"ServerNameCallback" => "IgnoreMismatch",
|
|
"ExpectedResult" => "Success" },
|
|
},
|
|
{
|
|
name => "SNI-bad-sni-reject-mismatch",
|
|
server => { },
|
|
server2 => { },
|
|
client => { },
|
|
test => { "ServerName" => "invalid",
|
|
"ServerNameCallback" => "RejectMismatch",
|
|
"ExpectedResult" => "ServerFail",
|
|
"ServerAlert" => "UnrecognizedName"},
|
|
},
|
|
);
|