mirrors/wolfssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
wolfssl/tests/test-sig.conf

220 lines
4.3 KiB
Plaintext
Raw Normal View History

remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1 ECDHE-ECDSA-DES3
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 1
-l ECDHE-ECDSA-DES-CBC3-SHA
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1 ECDHE-ECDSA-DES3
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 1
-l ECDHE-ECDSA-DES-CBC3-SHA
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 1
-l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 1
-l ECDHE-ECDSA-AES128-SHA
Testing improvements for cert gen and TLS cert validation: * Fixes to support certificate generation (`WOLFSSL_CERT_GEN`) without RSA enabled. * Added new ECC CA for 384-bit tests. * Created new server cert chain (ECC CA for 256-bit that signs server-ecc.pem) * Created new `./certs/ecc/genecc.sh` script for generating all ECC CA's, generated server cert req (CSR), signing with CA and the required CRL. * Moved the wolfCrypt ECC CA / ECC cert gen test into `ecc_test` as `ecc_test_cert_gen`. * Refactor duplicate code that saves DER to disk, converts DER to PEM and saves PEM to disk into SaveDerAndPem function. * Changed `ecc_test_make_pub` and `ecc_test_key_gen` to use XMALLOC for temp buffers (uses heap instead of stack). * Cleanup to combine all certificate subject information into global `certDefaultName`. * Updated cert request info to use wolfSSL instead of Yassl. * Cleanup to combine keyUsage into `certKeyUsage` and `certKeyUsage2`. * Re-number error codes in rsa_test. * Moved the certext_test after the ecc_test, since it uses a file generated in `ecc_test_cert_gen`.
2017-10-19 16:17:51 -07:00
-A ./certs/ca-ecc-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 1
-l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 1
-l ECDHE-ECDSA-AES128-SHA
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1 ECDHE-ECDSA-AES256
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 1
-l ECDHE-ECDSA-AES256-SHA
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1 ECDHE-ECDSA-AES256
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 1
-l ECDHE-ECDSA-AES256-SHA
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.1 ECDHE-ECDSA-DES3
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 2
-l ECDHE-ECDSA-DES-CBC3-SHA
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1.1 ECDHE-ECDSA-DES3
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 2
-l ECDHE-ECDSA-DES-CBC3-SHA
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.1 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 2
-l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1.1 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 2
-l ECDHE-ECDSA-AES128-SHA
Testing improvements for cert gen and TLS cert validation: * Fixes to support certificate generation (`WOLFSSL_CERT_GEN`) without RSA enabled. * Added new ECC CA for 384-bit tests. * Created new server cert chain (ECC CA for 256-bit that signs server-ecc.pem) * Created new `./certs/ecc/genecc.sh` script for generating all ECC CA's, generated server cert req (CSR), signing with CA and the required CRL. * Moved the wolfCrypt ECC CA / ECC cert gen test into `ecc_test` as `ecc_test_cert_gen`. * Refactor duplicate code that saves DER to disk, converts DER to PEM and saves PEM to disk into SaveDerAndPem function. * Changed `ecc_test_make_pub` and `ecc_test_key_gen` to use XMALLOC for temp buffers (uses heap instead of stack). * Cleanup to combine all certificate subject information into global `certDefaultName`. * Updated cert request info to use wolfSSL instead of Yassl. * Cleanup to combine keyUsage into `certKeyUsage` and `certKeyUsage2`. * Re-number error codes in rsa_test. * Moved the certext_test after the ecc_test, since it uses a file generated in `ecc_test_cert_gen`.
2017-10-19 16:17:51 -07:00
-A ./certs/ca-ecc-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.1 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 2
-l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1.1 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 2
-l ECDHE-ECDSA-AES128-SHA
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.1 ECDHE-ECDSA-AES256
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 2
-l ECDHE-ECDSA-AES256-SHA
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1.1 ECDHE-ECDSA-AES256
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 2
-l ECDHE-ECDSA-AES256-SHA
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.2 ECDHE-ECDSA-DES3
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 3
-l ECDHE-ECDSA-DES-CBC3-SHA
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1.2 ECDHE-ECDSA-DES3
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 3
-l ECDHE-ECDSA-DES-CBC3-SHA
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.2 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 3
-l ECDHE-ECDSA-AES128-SHA
-c ./certs/server-ecc.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1.2 ECDHE-ECDSA-AES128
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 3
-l ECDHE-ECDSA-AES128-SHA
Testing improvements for cert gen and TLS cert validation: * Fixes to support certificate generation (`WOLFSSL_CERT_GEN`) without RSA enabled. * Added new ECC CA for 384-bit tests. * Created new server cert chain (ECC CA for 256-bit that signs server-ecc.pem) * Created new `./certs/ecc/genecc.sh` script for generating all ECC CA's, generated server cert req (CSR), signing with CA and the required CRL. * Moved the wolfCrypt ECC CA / ECC cert gen test into `ecc_test` as `ecc_test_cert_gen`. * Refactor duplicate code that saves DER to disk, converts DER to PEM and saves PEM to disk into SaveDerAndPem function. * Changed `ecc_test_make_pub` and `ecc_test_key_gen` to use XMALLOC for temp buffers (uses heap instead of stack). * Cleanup to combine all certificate subject information into global `certDefaultName`. * Updated cert request info to use wolfSSL instead of Yassl. * Cleanup to combine keyUsage into `certKeyUsage` and `certKeyUsage2`. * Re-number error codes in rsa_test. * Moved the certext_test after the ecc_test, since it uses a file generated in `ecc_test_cert_gen`.
2017-10-19 16:17:51 -07:00
-A ./certs/ca-ecc-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.2 ECDHE-ECDSA-AES128-SHA256
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 3
-l ECDHE-ECDSA-AES128-SHA256
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1.2 ECDHE-ECDSA-AES128-SHA256
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 3
-l ECDHE-ECDSA-AES128-SHA256
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.2 ECDHE-ECDSA-AES256
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 3
-l ECDHE-ECDSA-AES256-SHA
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# client TLSv1.2 ECDHE-ECDSA-AES256
fix formatting of .conf file so ephemeral port is used
2016-02-12 13:41:30 -07:00
-v 3
-l ECDHE-ECDSA-AES256-SHA
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.2 ECDHE-EDCSA-CHACHA20-POLY1305
-v 3
-l ECDHE-ECDSA-CHACHA20-POLY1305
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
# client TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
-v 3
-l ECDHE-ECDSA-CHACHA20-POLY1305
-A ./certs/ca-cert.pem
# server TLSv1.2 ECDH-ECDSA-AES128-SHA256
-v 3
-l ECDH-ECDSA-AES128-SHA256
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
# client TLSv1.2 ECDH-ECDSA-AES128-SHA256
-v 3
-l ECDH-ECDSA-AES128-SHA256
-A ./certs/ca-cert.pem
# server TLSv1.2 ECDH-ECDSA-AES256
-v 3
-l ECDH-ECDSA-AES256-SHA
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
# client TLSv1.2 ECDH-ECDSA-AES256
-v 3
-l ECDH-ECDSA-AES256-SHA
-A ./certs/ca-cert.pem
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256
-A ./certs/ca-cert.pem
Add test for private key only ecc key
2017-04-10 10:01:19 +10:00
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-privkey.pem
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
-v 3
-l ECDHE-ECDSA-AES128-GCM-SHA256
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
-v 3
-l ECDHE-ECDSA-AES256-GCM-SHA384
-A ./certs/ca-cert.pem
Add cipher suite ECDHE-ECDSA-AES128-CCM 1. Added the usual cipher suite changes for the new suite. 2. Added a build option, WOLFSSL_ALT_TEST_STRINGS, for testing against GnuTLS. It wants to receive strings with newlines. 3. Updated the test configs for the new suite. Tested against GnuTLS's client and server using the options: $ gnutls-cli --priority "NONE:+VERS-TLS-ALL:+AEAD:+ECDHE-ECDSA:+AES-128-CCM:+SIGN-ALL:+COMP-NULL:+CURVE-ALL:+CTYPE-X509" --x509cafile=./certs/server-ecc.pem --no-ca-verification -p 11111 localhost $ gnutls-serv --echo --x509keyfile=./certs/ecc-key.pem --x509certfile=./certs/server-ecc.pem --port=11111 -a --priority "NONE:+VERS-TLS-ALL:+AEAD:+ECDHE-ECDSA:+AES-128-CCM:+SIGN-ALL:+COMP-NULL:+CURVE-ALL:+CTYPE-X509" To talk to GnuTLS, wolfSSL also needed the supported curves option enabled.
2016-06-13 14:39:41 -07:00
# server TLSv1.2 ECDHE-ECDSA-AES128-CCM
-v 3
-l ECDHE-ECDSA-AES128-CCM
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
# client TLSv1.2 ECDHE-ECDSA-AES128-CCM
-v 3
-l ECDHE-ECDSA-AES128-CCM
-A ./certs/ca-cert.pem
remove extra cert and key, plus add new test
2016-02-11 13:49:07 -07:00
# server TLSv1.2 ECDHE-ECDSA-AES128-CCM-8
-v 3
-l ECDHE-ECDSA-AES128-CCM-8
-c ./certs/server-ecc-rsa.pem
-k ./certs/ecc-key.pem
# client TLSv1.2 ECDHE-ECDSA-AES128-CCM-8
-v 3
-l ECDHE-ECDSA-AES128-CCM-8
-A ./certs/ca-cert.pem
Reference in New Issue Copy Permalink