|
Packit Service |
084de1 |
# -*- mode: perl; -*-
|
|
Packit Service |
084de1 |
# Copyright 2016-2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
Packit Service |
084de1 |
#
|
|
Packit Service |
084de1 |
# Licensed under the OpenSSL license (the "License"). You may not use
|
|
Packit Service |
084de1 |
# this file except in compliance with the License. You can obtain a copy
|
|
Packit Service |
084de1 |
# in the file LICENSE in the source distribution or at
|
|
Packit Service |
084de1 |
# https://www.openssl.org/source/license.html
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
## SSL test configurations
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
use strict;
|
|
Packit Service |
084de1 |
use warnings;
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
package ssltests;
|
|
Packit Service |
084de1 |
use OpenSSL::Test::Utils;
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
our @tests = (
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
name => "SNI-switch-context",
|
|
Packit Service |
084de1 |
server => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerNameCallback" => "IgnoreMismatch",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
client => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerName" => "server2",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
test => {
|
|
Packit Service |
084de1 |
"ExpectedServerName" => "server2",
|
|
Packit Service |
084de1 |
"ExpectedResult" => "Success"
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
name => "SNI-keep-context",
|
|
Packit Service |
084de1 |
server => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerNameCallback" => "IgnoreMismatch",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
client => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerName" => "server1",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
test => {
|
|
Packit Service |
084de1 |
"ExpectedServerName" => "server1",
|
|
Packit Service |
084de1 |
"ExpectedResult" => "Success"
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
name => "SNI-no-server-support",
|
|
Packit Service |
084de1 |
server => { },
|
|
Packit Service |
084de1 |
client => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerName" => "server1",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
test => { "ExpectedResult" => "Success" },
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
name => "SNI-no-client-support",
|
|
Packit Service |
084de1 |
server => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerNameCallback" => "IgnoreMismatch",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
client => { },
|
|
Packit Service |
084de1 |
test => {
|
|
Packit Service |
084de1 |
# We expect that the callback is still called
|
|
Packit Service |
084de1 |
# to let the application decide whether they tolerate
|
|
Packit Service |
084de1 |
# missing SNI (as our test callback does).
|
|
Packit Service |
084de1 |
"ExpectedServerName" => "server1",
|
|
Packit Service |
084de1 |
"ExpectedResult" => "Success"
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
name => "SNI-bad-sni-ignore-mismatch",
|
|
Packit Service |
084de1 |
server => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerNameCallback" => "IgnoreMismatch",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
client => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerName" => "invalid",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
test => {
|
|
Packit Service |
084de1 |
"ExpectedServerName" => "server1",
|
|
Packit Service |
084de1 |
"ExpectedResult" => "Success"
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
name => "SNI-bad-sni-reject-mismatch",
|
|
Packit Service |
084de1 |
server => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerNameCallback" => "RejectMismatch",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
client => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerName" => "invalid",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
test => {
|
|
Packit Service |
084de1 |
"ExpectedResult" => "ServerFail",
|
|
Packit Service |
084de1 |
"ExpectedServerAlert" => "UnrecognizedName"
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
name => "SNI-bad-clienthello-sni-ignore-mismatch",
|
|
Packit Service |
084de1 |
server => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerNameCallback" => "ClientHelloIgnoreMismatch",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
client => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerName" => "invalid",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
test => {
|
|
Packit Service |
084de1 |
"ExpectedServerName" => "server1",
|
|
Packit Service |
084de1 |
"ExpectedResult" => "Success"
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
name => "SNI-bad-clienthello-sni-reject-mismatch",
|
|
Packit Service |
084de1 |
server => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerNameCallback" => "ClientHelloRejectMismatch",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
client => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerName" => "invalid",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
test => {
|
|
Packit Service |
084de1 |
"ExpectedResult" => "ServerFail",
|
|
Packit Service |
084de1 |
"ExpectedServerAlert" => "UnrecognizedName"
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
);
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
our @tests_tls_1_1 = (
|
|
Packit Service |
084de1 |
{
|
|
Packit Service |
084de1 |
name => "SNI-clienthello-disable-v12",
|
|
Packit Service |
084de1 |
server => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerNameCallback" => "ClientHelloNoV12",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
client => {
|
|
Packit Service |
084de1 |
extra => {
|
|
Packit Service |
084de1 |
"ServerName" => "server2",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
test => {
|
|
Packit Service |
084de1 |
"ExpectedProtocol" => "TLSv1.1",
|
|
Packit Service |
084de1 |
"ExpectedServerName" => "server2",
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
},
|
|
Packit Service |
084de1 |
);
|
|
Packit Service |
084de1 |
|
|
Packit Service |
084de1 |
push @tests, @tests_tls_1_1 unless disabled("tls1_1");
|