# Generated with generate_ssl_tests.pl num_tests = 4 test-0 = 0-default test-1 = 1-Server signature algorithms bug test-2 = 2-verify-cert test-3 = 3-name-constraints-no-san-in-ee # =========================================================== [0-default] ssl_conf = 0-default-ssl [0-default-ssl] server = 0-default-server client = 0-default-client [0-default-server] Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem [0-default-client] CipherString = DEFAULT VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem VerifyMode = Peer [test-0] ExpectedResult = Success # =========================================================== [1-Server signature algorithms bug] ssl_conf = 1-Server signature algorithms bug-ssl [1-Server signature algorithms bug-ssl] server = 1-Server signature algorithms bug-server client = 1-Server signature algorithms bug-client [1-Server signature algorithms bug-server] Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem CipherString = DEFAULT ClientSignatureAlgorithms = PSS+SHA512:RSA+SHA512 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem [1-Server signature algorithms bug-client] CipherString = DEFAULT SignatureAlgorithms = PSS+SHA256:RSA+SHA256 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem VerifyMode = Peer [test-1] ExpectedResult = Success # =========================================================== [2-verify-cert] ssl_conf = 2-verify-cert-ssl [2-verify-cert-ssl] server = 2-verify-cert-server client = 2-verify-cert-client [2-verify-cert-server] Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem [2-verify-cert-client] CipherString = DEFAULT VerifyMode = Peer [test-2] ExpectedClientAlert = UnknownCA ExpectedResult = ClientFail # =========================================================== [3-name-constraints-no-san-in-ee] ssl_conf = 3-name-constraints-no-san-in-ee-ssl [3-name-constraints-no-san-in-ee-ssl] server = 3-name-constraints-no-san-in-ee-server client = 3-name-constraints-no-san-in-ee-client [3-name-constraints-no-san-in-ee-server] Certificate = ${ENV::TEST_CERTS_DIR}/goodcn2-chain.pem CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/goodcn2-key.pem [3-name-constraints-no-san-in-ee-client] CipherString = DEFAULT VerifyCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem VerifyMode = Peer [test-3] ExpectedResult = Success |