123 lines
4.2 KiB
INI
123 lines
4.2 KiB
INI
# Generated with generate_ssl_tests.pl
|
|
|
|
num_tests = 3
|
|
|
|
test-0 = 0-test client can verify server by delegated credential
|
|
test-1 = 1-test client/server can do mtls by delegated credential
|
|
test-2 = 2-test depoly cert and dc at the same time, but do not open dc
|
|
# ===========================================================
|
|
|
|
[0-test client can verify server by delegated credential]
|
|
ssl_conf = 0-test client can verify server by delegated credential-ssl
|
|
|
|
[0-test client can verify server by delegated credential-ssl]
|
|
server = 0-test client can verify server by delegated credential-server
|
|
client = 0-test client can verify server by delegated credential-client
|
|
|
|
[0-test client can verify server by delegated credential-server]
|
|
Certificate = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-server.crt
|
|
CipherString = DEFAULT
|
|
DC = ${ENV::TEST_RUNS_DIR}/dc/dc-server.dc
|
|
DCKey = ${ENV::TEST_RUNS_DIR}/dc/dc-server.key
|
|
Enable_sign_by_dc = on
|
|
MaxProtocol = TLSv1.3
|
|
MinProtocol = TLSv1.3
|
|
PrivateKey = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-server.key
|
|
|
|
[0-test client can verify server by delegated credential-client]
|
|
CipherString = DEFAULT
|
|
Enable_verify_peer_by_dc = on
|
|
MaxProtocol = TLSv1.3
|
|
MinProtocol = TLSv1.3
|
|
VerifyCAFile = ${ENV::TEST_RUNS_DIR}/dc/dc-chain-ca.crt
|
|
VerifyMode = Peer
|
|
|
|
[test-0]
|
|
ExpectedResult = Success
|
|
ExpextClientDCusage = VerifyPeerByDCOnly
|
|
ExpextServerDCusage = SignByDCOnly
|
|
|
|
|
|
# ===========================================================
|
|
|
|
[1-test client/server can do mtls by delegated credential]
|
|
ssl_conf = 1-test client/server can do mtls by delegated credential-ssl
|
|
|
|
[1-test client/server can do mtls by delegated credential-ssl]
|
|
server = 1-test client/server can do mtls by delegated credential-server
|
|
client = 1-test client/server can do mtls by delegated credential-client
|
|
|
|
[1-test client/server can do mtls by delegated credential-server]
|
|
Certificate = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-server.crt
|
|
CipherString = DEFAULT
|
|
DC = ${ENV::TEST_RUNS_DIR}/dc/dc-server.dc
|
|
DCKey = ${ENV::TEST_RUNS_DIR}/dc/dc-server.key
|
|
Enable_sign_by_dc = on
|
|
Enable_verify_peer_by_dc = on
|
|
MaxProtocol = TLSv1.3
|
|
MinProtocol = TLSv1.3
|
|
PrivateKey = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-server.key
|
|
VerifyCAFile = ${ENV::TEST_RUNS_DIR}/dc/dc-chain-ca.crt
|
|
VerifyMode = Request
|
|
|
|
[1-test client/server can do mtls by delegated credential-client]
|
|
Certificate = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-client.crt
|
|
CipherString = DEFAULT
|
|
DC = ${ENV::TEST_RUNS_DIR}/dc/dc-client.dc
|
|
DCKey = ${ENV::TEST_RUNS_DIR}/dc/dc-client.key
|
|
Enable_sign_by_dc = on
|
|
Enable_verify_peer_by_dc = on
|
|
MaxProtocol = TLSv1.3
|
|
MinProtocol = TLSv1.3
|
|
PrivateKey = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-client.key
|
|
VerifyCAFile = ${ENV::TEST_RUNS_DIR}/dc/dc-chain-ca.crt
|
|
VerifyMode = Peer
|
|
|
|
[test-1]
|
|
ExpectedResult = Success
|
|
ExpextClientDCusage = VerifyPeerAndSignByDC
|
|
ExpextServerDCusage = VerifyPeerAndSignByDC
|
|
|
|
|
|
# ===========================================================
|
|
|
|
[2-test depoly cert and dc at the same time, but do not open dc ]
|
|
ssl_conf = 2-test depoly cert and dc at the same time, but do not open dc -ssl
|
|
|
|
[2-test depoly cert and dc at the same time, but do not open dc -ssl]
|
|
server = 2-test depoly cert and dc at the same time, but do not open dc -server
|
|
client = 2-test depoly cert and dc at the same time, but do not open dc -client
|
|
|
|
[2-test depoly cert and dc at the same time, but do not open dc -server]
|
|
Certificate = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-server.crt
|
|
CipherString = DEFAULT
|
|
DC = ${ENV::TEST_RUNS_DIR}/dc/dc-server.dc
|
|
DCKey = ${ENV::TEST_RUNS_DIR}/dc/dc-server.key
|
|
Enable_sign_by_dc = off
|
|
Enable_verify_peer_by_dc = off
|
|
MaxProtocol = TLSv1.3
|
|
MinProtocol = TLSv1.3
|
|
PrivateKey = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-server.key
|
|
VerifyCAFile = ${ENV::TEST_RUNS_DIR}/dc/dc-chain-ca.crt
|
|
VerifyMode = Request
|
|
|
|
[2-test depoly cert and dc at the same time, but do not open dc -client]
|
|
Certificate = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-client.crt
|
|
CipherString = DEFAULT
|
|
DC = ${ENV::TEST_RUNS_DIR}/dc/dc-client.dc
|
|
DCKey = ${ENV::TEST_RUNS_DIR}/dc/dc-client.key
|
|
Enable_sign_by_dc = off
|
|
Enable_verify_peer_by_dc = off
|
|
MaxProtocol = TLSv1.3
|
|
MinProtocol = TLSv1.3
|
|
PrivateKey = ${ENV::TEST_RUNS_DIR}/dc/dc-leaf-client.key
|
|
VerifyCAFile = ${ENV::TEST_RUNS_DIR}/dc/dc-chain-ca.crt
|
|
VerifyMode = Peer
|
|
|
|
[test-2]
|
|
ExpectedResult = Success
|
|
ExpextClientDCusage = NotUseDC
|
|
ExpextServerDCusage = NotUseDC
|
|
|
|
|