59a3b4a110
* Added ECC and RSA intermediate CA's and server/client chain certificates for testing. * Enhanced suites test to support expected fail arg `-H exitWithRet` in any test .conf file. * Added new `test-altchains.conf` for testing with `WOLFSSL_ALT_CERT_CHAINS` defined. * Added new `test-chains` for testing chains. * Added new `test-dhprime.conf` for DH prime check tests. * Added new `test-trustedpeer.conf` for testing `WOLFSSL_TRUST_PEER_CERT`. * Refactor to add `-2` to disable DH prime check by default (except for new test-dhprime.conf). * Added ability to run a specific test.conf file using syntax like `./tests/unit.test tests/test-altchains.conf`.
100 lines
3.0 KiB
Plaintext
100 lines
3.0 KiB
Plaintext
# Both client and server use -E [path] for trusted peer
|
|
# server TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Trusted Peer
|
|
-v 3
|
|
-l DHE-RSA-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/client-int-cert.pem
|
|
-k ./certs/server-key.pem
|
|
-c ./certs/intermediate/server-int-cert.pem
|
|
|
|
# client TLSv1.2 DHE-RSA-AES128-GCM-SHA256 RSA Trusted Peer
|
|
-v 3
|
|
-l DHE-RSA-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/server-int-cert.pem
|
|
-k ./certs/client-key.pem
|
|
-c ./certs/intermediate/client-int-cert.pem
|
|
|
|
# server TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Trusted Peer
|
|
-v 3
|
|
-l ECDHE-RSA-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/client-int-cert.pem
|
|
-k ./certs/server-key.pem
|
|
-c ./certs/intermediate/server-int-cert.pem
|
|
|
|
# client TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 RSA Trusted Peer
|
|
-v 3
|
|
-l ECDHE-RSA-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/server-int-cert.pem
|
|
-k ./certs/client-key.pem
|
|
-c ./certs/intermediate/client-int-cert.pem
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Trusted Peer
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/client-int-ecc-cert.pem
|
|
-k ./certs/ecc-key.pem
|
|
-c ./certs/intermediate/server-int-ecc-cert.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Trusted Peer
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/server-int-ecc-cert.pem
|
|
-k ./certs/ecc-client-key.pem
|
|
-c ./certs/intermediate/client-int-ecc-cert.pem
|
|
|
|
# server TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Trusted Peer
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/client-int-cert.pem
|
|
-k ./certs/server-key.pem
|
|
-c ./certs/intermediate/server-int-cert.pem
|
|
|
|
# client TLSv1.3 TLS13-AES128-GCM-SHA256 RSA Trusted Peer
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/server-int-cert.pem
|
|
-k ./certs/client-key.pem
|
|
-c ./certs/intermediate/client-int-cert.pem
|
|
|
|
# server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Trusted Peer
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/client-int-ecc-cert.pem
|
|
-k ./certs/ecc-key.pem
|
|
-c ./certs/intermediate/server-int-ecc-cert.pem
|
|
|
|
# client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Trusted Peer
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-E ./certs/intermediate/server-int-ecc-cert.pem
|
|
-k ./certs/ecc-client-key.pem
|
|
-c ./certs/intermediate/client-int-ecc-cert.pem
|
|
|
|
# Test for ECC self signed certificate as trusted peer
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Trusted Peer (self signed)
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-E ./certs/client-ecc-cert.pem
|
|
-k ./certs/ecc-key.pem
|
|
-c ./certs/server-ecc-self.pem
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 ECC Trusted Peer (self signed)
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-E ./certs/server-ecc-self.pem
|
|
-k ./certs/ecc-client-key.pem
|
|
-c ./certs/client-ecc-cert.pem
|
|
|
|
# server TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Trusted Peer (self signed)
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-E ./certs/client-ecc-cert.pem
|
|
-k ./certs/ecc-key.pem
|
|
-c ./certs/server-ecc-self.pem
|
|
|
|
# client TLSv1.3 TLS13-AES128-GCM-SHA256 ECC Trusted Peer (self signed)
|
|
-v 4
|
|
-l TLS13-AES128-GCM-SHA256
|
|
-E ./certs/server-ecc-self.pem
|
|
-k ./certs/ecc-client-key.pem
|
|
-c ./certs/client-ecc-cert.pem
|