fa0b4cd2d5
1. Modify all the test configuration files to disable the DHE prime test. 2. Add a test configuration that tests three cipher suites with the DHE prime test enabled.
259 lines
4.4 KiB
Plaintext
259 lines
4.4 KiB
Plaintext
# server TLSv1 ECDHE-ECDSA-DES3
|
|
-v 1
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1 ECDHE-ECDSA-DES3
|
|
-v 1
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1 ECDHE-ECDSA-AES128
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1 ECDHE-ECDSA-AES128
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-A ./certs/ca-ecc-cert.pem
|
|
-2
|
|
|
|
# server TLSv1 ECDHE-ECDSA-AES128
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1 ECDHE-ECDSA-AES128
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1 ECDHE-ECDSA-AES256
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1 ECDHE-ECDSA-AES256
|
|
-v 1
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.1 ECDHE-ECDSA-DES3
|
|
-v 2
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.1 ECDHE-ECDSA-DES3
|
|
-v 2
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.1 ECDHE-ECDSA-AES128
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.1 ECDHE-ECDSA-AES128
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-A ./certs/ca-ecc-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.1 ECDHE-ECDSA-AES128
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.1 ECDHE-ECDSA-AES128
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.1 ECDHE-ECDSA-AES256
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.1 ECDHE-ECDSA-AES256
|
|
-v 2
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-DES3
|
|
-v 3
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-DES3
|
|
-v 3
|
|
-l ECDHE-ECDSA-DES-CBC3-SHA
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-c ./certs/server-ecc.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-SHA
|
|
-A ./certs/ca-ecc-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-SHA256
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-SHA256
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-SHA
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-EDCSA-CHACHA20-POLY1305
|
|
-v 3
|
|
-l ECDHE-ECDSA-CHACHA20-POLY1305
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-CHACHA20-POLY1305
|
|
-v 3
|
|
-l ECDHE-ECDSA-CHACHA20-POLY1305
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDH-ECDSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES128-SHA256
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-AES128-SHA256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES128-SHA256
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDH-ECDSA-AES256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES256-SHA
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDH-ECDSA-AES256
|
|
-v 3
|
|
-l ECDH-ECDSA-AES256-SHA
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-privkey.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-GCM-SHA256
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-GCM-SHA384
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES256-GCM-SHA384
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-CCM
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-CCM
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-CCM
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-CCM
|
|
-A ./certs/ca-cert.pem
|
|
-2
|
|
|
|
# server TLSv1.2 ECDHE-ECDSA-AES128-CCM-8
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-CCM-8
|
|
-c ./certs/server-ecc-rsa.pem
|
|
-k ./certs/ecc-key.pem
|
|
-2
|
|
|
|
# client TLSv1.2 ECDHE-ECDSA-AES128-CCM-8
|
|
-v 3
|
|
-l ECDHE-ECDSA-AES128-CCM-8
|
|
-A ./certs/ca-cert.pem
|