Blob Blame History Raw
#
# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
[General]
cTemplate       =   sslt.htp
makeTemplate    =   ssl.mtp
path            =   .
testPrefix	=   sslt
testSuffix	=   .h
regressSpecfile =   ssl.reg
regressOutput   =   ssl.html
mut             =   SSL
mutversion      =   1.0
timeout         =   6
makefileOutput  =   Makefile
reporterOutput  =   ssl.rpt
singleSource    =   TRUE



# The names given for the Client and Server Certificates are
# nicknames from the database

[ClientCert]
IMPORTANCE = HIGH
TYPE = int
ClientCert_none   = NO_CERT
ClientCert_one    = CLIENT_CERT_HARDCOREII_1024
#ClientCert_oneb   = CLIENT_CERT_HARDCOREII_512
#ClientCert_two    = CLIENT_CERT_SPARK
#ClientCert_three  = SERVER_CERT_HARDCOREII_1024
#ClientCert_four   = CLIENT_CERT_VERISIGN

[ServerCert]
IMPORTANCE = HIGH
TYPE = int
#ServerCert_none   = NO_CERT
ServerCert_one    = SERVER_CERT_HARDCOREII_512
#ServerCert_two    = CLIENT_CERT_HARDCOREII_512
#ServerCert_three  = SERVER_CERT_SPARK
#ServerCert_four   = SERVER_CERT_VERISIGN_REGULAR
#ServerCert_five   = SERVER_CERT_VERISIGN_STEPUP


#####  POLICY  ####
#
# (right now, policy can only be set globally. When bug #102853 is
#  fixed, I'll be able to bring ClientPolicy and ServerPolicy back)
#

[Policy]
IMPORTANCE = HIGH
TYPE = int
ExportPolicy   = POLICY_EXPORT
DomesticPolicy = POLICY_DOMESTIC

#[ClientPolicy]
#IMPORTANCE = HIGH
#TYPE = int
#ExportPolicy   = POLICY_EXPORT
#DomesticPolicy = POLICY_DOMESTIC

#[ServerPolicy]
#IMPORTANCE = HIGH
#TYPE = int
#ServerExportPolicy   = POLICY_EXPORT
#ServerDomesticPolicy = POLICY_DOMESTIC

# Which SSL version to enable. Like the policy, this is a global
# setting, affecting both client and server sockets

[SSLVersion2]
IMPORTANCE = HIGH
TYPE = int
SSLVersion2    = PR_TRUE
NO_SSLVersion2 = PR_FALSE

[SSLVersion3]
IMPORTANCE = HIGH
TYPE = int
SSLVersion3     = PR_TRUE
NO_SSLVersion3  = PR_FALSE

#[ClientIOModel]
#IMPORTANCE = LOW
#TYPE = int
#ClientIOBlocking = 0
#ClientIONonBlocking = 1

#[ServerIOModel]
#IMPORTANCE = LOW
#TYPE = int
#ServerIOBlocking = BLOCKING
#ServerIONonBlocking = NON_BLOCKING

[ClientIOSessionLength]
IMPORTANCE = LOW
TYPE = int
ClientIOLength0 = 0
ClientIOLength1K = 1024
#ClientIOLength256K = 262144
#ClientIOLength5M = 5242880

[ServerIOSessionLength]
IMPORTANCE = LOW
TYPE = int
ServerIOLength0 = 0
ServerIOLength1K = 1024
#ServerIOLength256K = 262144
#ServerIOLength5M = 5242880

[ServerDoClientAuth]
IMPORTANCE = LOW
TYPE = int
#ClientAuthOnInitial = SSLT_CLIENTAUTH_INITIAL
#ClientAuthOnRedo    = SSLT_CLIENTAUTH_REDO
ClientAuthOff       = SSLT_CLIENTAUTH_OFF

[ClientForceHandshake]
IMPORTANCE = LOW
TYPE = PRBool
#ClientForceHandshake = PR_TRUE
ClientNoForceHandshake = PR_FALSE

[ServerForceHandshake]
IMPORTANCE = LOW
TYPE = PRBool
ServerForceHandshake = PR_TRUE
#ServerNoForceHandshake = PR_FALSE

[ClientRedoHandshake]
IMPORTANCE = LOW
TYPE = PRBool
#ClientRedoHandshake = PR_TRUE
ClientNoRedoHandshake = PR_FALSE

[ServerRedoHandshake]
IMPORTANCE = LOW
TYPE = PRBool
#ServerRedoHandshake = PR_TRUE
ServerNoRedoHandshake = PR_FALSE



###########################################################################
#
#              C i p h e r     S p e c s
#
###########################################################################


[Cipher_EN_RC4_128_WITH_MD5]
IMPORTANCE = HIGH
TYPE = PRBool
Cipher_EN_RC4_128_WITH_MD5 = PR_TRUE
No_Cipher_EN_RC4_128_WITH_MD5 = PR_FALSE

[Cipher_EN_RC4_128_EXPORT40_WITH_MD5]
IMPORTANCE = HIGH
TYPE = PRBool
Cipher_EN_RC4_128_EXPORT40_WITH_MD5 = PR_TRUE
No_Cipher_EN_RC4_128_EXPORT40_WITH_MD5 = PR_FALSE

[Cipher_EN_RC2_128_CBC_WITH_MD5]
IMPORTANCE = HIGH
TYPE = PRBool
Cipher_EN_RC2_128_CBC_WITH_MD5 = PR_TRUE
No_Cipher_EN_RC2_128_CBC_WITH_MD5 = PR_FALSE

#[Cipher_EN_RC2_128_CBC_EXPORT40_WITH_MD5]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_EN_RC2_128_CBC_EXPORT40_WITH_MD5 = PR_TRUE
#No_Cipher_EN_RC2_128_CBC_EXPORT40_WITH_MD5 = PR_FALSE

#[Cipher_EN_IDEA_128_CBC_WITH_MD5]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_EN_IDEA_128_CBC_WITH_MD5 = PR_TRUE
#No_Cipher_EN_IDEA_128_CBC_WITH_MD5 = PR_FALSE

#[Cipher_EN_DES_64_CBC_WITH_MD5]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_EN_DES_64_CBC_WITH_MD5 = PR_TRUE
#No_Cipher_EN_DES_64_CBC_WITH_MD5 = PR_FALSE

[Cipher_EN_DES_192_EDE3_CBC_WITH_MD5]
IMPORTANCE = HIGH
TYPE = PRBool
Cipher_EN_DES_192_EDE3_CBC_WITH_MD5 = PR_TRUE
No_Cipher_EN_DES_192_EDE3_CBC_WITH_MD5 = PR_FALSE

# SSL v3 Cipher Suites
#[Cipher_NULL_WITH_NULL_NULL]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_NULL_WITH_NULL_NULL = PR_TRUE
#No_Cipher_NULL_WITH_NULL_NULL = PR_FALSE

#[Cipher_RSA_WITH_NULL_MD5]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_RSA_WITH_NULL_MD5 = PR_TRUE
#No_Cipher_RSA_WITH_NULL_MD5 = PR_FALSE

#[Cipher_RSA_WITH_NULL_SHA]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_RSA_WITH_NULL_SHA = PR_TRUE
#No_Cipher_RSA_WITH_NULL_SHA = PR_FALSE

[Cipher_RSA_EXPORT_WITH_RC4_40_MD5]
IMPORTANCE = HIGH
TYPE = PRBool
Cipher_RSA_EXPORT_WITH_RC4_40_MD5 = PR_TRUE
No_Cipher_RSA_EXPORT_WITH_RC4_40_MD5 = PR_FALSE

[Cipher_RSA_WITH_RC4_128_MD5]
IMPORTANCE = HIGH
TYPE = PRBool
Cipher_RSA_WITH_RC4_128_MD5 = PR_TRUE
No_Cipher_RSA_WITH_RC4_128_MD5 = PR_FALSE

#[Cipher_RSA_WITH_RC4_128_SHA]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_RSA_WITH_RC4_128_SHA = PR_TRUE
#No_Cipher_RSA_WITH_RC4_128_SHA = PR_FALSE

[Cipher_RSA_EXPORT_WITH_RC2_CBC_40_MD5]
IMPORTANCE = HIGH
TYPE = PRBool
Cipher_RSA_EXPORT_WITH_RC2_CBC_40_MD5 = PR_TRUE
No_Cipher_RSA_EXPORT_WITH_RC2_CBC_40_MD5 = PR_FALSE

#[Cipher_RSA_WITH_IDEA_CBC_SHA]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_RSA_WITH_IDEA_CBC_SHA = PR_TRUE
#No_Cipher_RSA_WITH_IDEA_CBC_SHA = PR_FALSE

#[Cipher_RSA_EXPORT_WITH_DES40_CBC_SHA]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_RSA_EXPORT_WITH_DES40_CBC_SHA = PR_TRUE
#No_Cipher_RSA_EXPORT_WITH_DES40_CBC_SHA = PR_FALSE

[Cipher_RSA_WITH_DES_CBC_SHA]
IMPORTANCE = HIGH
TYPE = PRBool
Cipher_RSA_WITH_DES_CBC_SHA = PR_TRUE
No_Cipher_RSA_WITH_DES_CBC_SHA = PR_FALSE

[Cipher_RSA_WITH_3DES_EDE_CBC_SHA]
IMPORTANCE = HIGH
TYPE = PRBool
Cipher_RSA_WITH_3DES_EDE_CBC_SHA = PR_TRUE
No_Cipher_RSA_WITH_3DES_EDE_CBC_SHA = PR_FALSE

                                                       
#[Cipher_DH_DSS_EXPORT_WITH_DES40_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_DSS_EXPORT_WITH_DES40_CBC_SHA = PR_TRUE
#No_Cipher_DH_DSS_EXPORT_WITH_DES40_CBC_SHA = PR_FALSE

#[Cipher_DH_DSS_WITH_DES_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_DSS_WITH_DES_CBC_SHA = PR_TRUE
#No_Cipher_DH_DSS_WITH_DES_CBC_SHA = PR_FALSE

#[Cipher_DH_DSS_WITH_3DES_EDE_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_DSS_WITH_3DES_EDE_CBC_SHA = PR_TRUE
#No_Cipher_DH_DSS_WITH_3DES_EDE_CBC_SHA = PR_FALSE

#[Cipher_DH_RSA_EXPORT_WITH_DES40_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_RSA_EXPORT_WITH_DES40_CBC_SHA = PR_TRUE
#No_Cipher_DH_RSA_EXPORT_WITH_DES40_CBC_SHA = PR_FALSE

#[Cipher_DH_RSA_WITH_DES_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_RSA_WITH_DES_CBC_SHA = PR_TRUE
#No_Cipher_DH_RSA_WITH_DES_CBC_SHA = PR_FALSE

#[Cipher_DH_RSA_WITH_3DES_EDE_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_RSA_WITH_3DES_EDE_CBC_SHA = PR_TRUE
#No_Cipher_DH_RSA_WITH_3DES_EDE_CBC_SHA = PR_FALSE

                                                       
#[Cipher_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA = PR_TRUE
#No_Cipher_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA = PR_FALSE

#[Cipher_DHE_DSS_WITH_DES_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DHE_DSS_WITH_DES_CBC_SHA = PR_TRUE
#No_Cipher_DHE_DSS_WITH_DES_CBC_SHA = PR_FALSE

#[Cipher_DHE_DSS_WITH_3DES_EDE_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DHE_DSS_WITH_3DES_EDE_CBC_SHA = PR_TRUE
#No_Cipher_DHE_DSS_WITH_3DES_EDE_CBC_SHA = PR_FALSE

#[Cipher_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA = PR_TRUE
#No_Cipher_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA = PR_FALSE

#[Cipher_DHE_RSA_WITH_DES_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DHE_RSA_WITH_DES_CBC_SHA = PR_TRUE
#No_Cipher_DHE_RSA_WITH_DES_CBC_SHA = PR_FALSE

#[Cipher_DHE_RSA_WITH_3DES_EDE_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DHE_RSA_WITH_3DES_EDE_CBC_SHA = PR_TRUE
#No_Cipher_DHE_RSA_WITH_3DES_EDE_CBC_SHA = PR_FALSE

                                                       
#[Cipher_DH_ANON_EXPORT_WITH_RC4_40_MD5]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_ANON_EXPORT_WITH_RC4_40_MD5 = PR_TRUE
#No_Cipher_DH_ANON_EXPORT_WITH_RC4_40_MD5 = PR_FALSE

#[Cipher_DH_ANON_WITH_RC4_128_MD5]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_ANON_WITH_RC4_128_MD5 = PR_TRUE
#No_Cipher_DH_ANON_WITH_RC4_128_MD5 = PR_FALSE

###define SSL_DH_ANON_EXPORT_WITH_DES40_CBC_SHA   0x0019

#[Cipher_DH_ANON_WITH_DES_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_ANON_WITH_DES_CBC_SHA = PR_TRUE
#No_Cipher_DH_ANON_WITH_DES_CBC_SHA = PR_FALSE

#[Cipher_DH_ANON_WITH_3DES_EDE_CBC_SHA]
#IMPORTANCE = LOW
#TYPE = PRBool
#Cipher_DH_ANON_WITH_3DES_EDE_CBC_SHA = PR_TRUE
#No_Cipher_DH_ANON_WITH_3DES_EDE_CBC_SHA = PR_FALSE

#[Cipher_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA = PR_TRUE
#No_Cipher_FORTEZZA_DMS_WITH_FORTEZZA_CBC_SHA = PR_FALSE

#[Cipher_FORTEZZA_DMS_WITH_RC4_128_SHA]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_FORTEZZA_DMS_WITH_RC4_128_SHA = PR_TRUE
#No_Cipher_FORTEZZA_DMS_WITH_RC4_128_SHA = PR_FALSE

 
#[Cipher_RSA_FIPS_WITH_3DES_EDE_CBC_SHA]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_RSA_FIPS_WITH_3DES_EDE_CBC_SHA = PR_TRUE
#No_Cipher_RSA_FIPS_WITH_3DES_EDE_CBC_SHA = PR_FALSE

#[Cipher_RSA_FIPS_WITH_DES_CBC_SHA]
#IMPORTANCE = HIGH
#TYPE = PRBool
#Cipher_RSA_FIPS_WITH_DES_CBC_SHA = PR_TRUE
#No_Cipher_RSA_FIPS_WITH_DES_CBC_SHA = PR_FALSE