xref: /freebsd-src/crypto/openssl/test/ssl-tests/03-custom_verify.cnf (revision e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6) 
1*e0c4386eSCy Schubert# Generated with generate_ssl_tests.pl
2*e0c4386eSCy Schubert
3*e0c4386eSCy Schubertnum_tests = 10
4*e0c4386eSCy Schubert
5*e0c4386eSCy Schuberttest-0 = 0-verify-success
6*e0c4386eSCy Schuberttest-1 = 1-verify-custom-reject
7*e0c4386eSCy Schuberttest-2 = 2-verify-custom-allow
8*e0c4386eSCy Schuberttest-3 = 3-verify-custom-retry
9*e0c4386eSCy Schuberttest-4 = 4-noverify-success
10*e0c4386eSCy Schuberttest-5 = 5-noverify-ignore-custom-reject
11*e0c4386eSCy Schuberttest-6 = 6-noverify-accept-custom-allow
12*e0c4386eSCy Schuberttest-7 = 7-verify-fail-no-root
13*e0c4386eSCy Schuberttest-8 = 8-verify-custom-success-no-root
14*e0c4386eSCy Schuberttest-9 = 9-verify-custom-fail-no-root
15*e0c4386eSCy Schubert# ===========================================================
16*e0c4386eSCy Schubert
17*e0c4386eSCy Schubert[0-verify-success]
18*e0c4386eSCy Schubertssl_conf = 0-verify-success-ssl
19*e0c4386eSCy Schubert
20*e0c4386eSCy Schubert[0-verify-success-ssl]
21*e0c4386eSCy Schubertserver = 0-verify-success-server
22*e0c4386eSCy Schubertclient = 0-verify-success-client
23*e0c4386eSCy Schubert
24*e0c4386eSCy Schubert[0-verify-success-server]
25*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
26*e0c4386eSCy SchubertCipherString = DEFAULT
27*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
28*e0c4386eSCy Schubert
29*e0c4386eSCy Schubert[0-verify-success-client]
30*e0c4386eSCy SchubertCipherString = DEFAULT
31*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
32*e0c4386eSCy SchubertVerifyMode = Peer
33*e0c4386eSCy Schubert
34*e0c4386eSCy Schubert[test-0]
35*e0c4386eSCy SchubertExpectedResult = Success
36*e0c4386eSCy Schubert
37*e0c4386eSCy Schubert
38*e0c4386eSCy Schubert# ===========================================================
39*e0c4386eSCy Schubert
40*e0c4386eSCy Schubert[1-verify-custom-reject]
41*e0c4386eSCy Schubertssl_conf = 1-verify-custom-reject-ssl
42*e0c4386eSCy Schubert
43*e0c4386eSCy Schubert[1-verify-custom-reject-ssl]
44*e0c4386eSCy Schubertserver = 1-verify-custom-reject-server
45*e0c4386eSCy Schubertclient = 1-verify-custom-reject-client
46*e0c4386eSCy Schubert
47*e0c4386eSCy Schubert[1-verify-custom-reject-server]
48*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
49*e0c4386eSCy SchubertCipherString = DEFAULT
50*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
51*e0c4386eSCy Schubert
52*e0c4386eSCy Schubert[1-verify-custom-reject-client]
53*e0c4386eSCy SchubertCipherString = DEFAULT
54*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
55*e0c4386eSCy SchubertVerifyMode = Peer
56*e0c4386eSCy Schubert
57*e0c4386eSCy Schubert[test-1]
58*e0c4386eSCy SchubertExpectedClientAlert = HandshakeFailure
59*e0c4386eSCy SchubertExpectedResult = ClientFail
60*e0c4386eSCy Schubertclient = 1-verify-custom-reject-client-extra
61*e0c4386eSCy Schubert
62*e0c4386eSCy Schubert[1-verify-custom-reject-client-extra]
63*e0c4386eSCy SchubertVerifyCallback = RejectAll
64*e0c4386eSCy Schubert
65*e0c4386eSCy Schubert
66*e0c4386eSCy Schubert# ===========================================================
67*e0c4386eSCy Schubert
68*e0c4386eSCy Schubert[2-verify-custom-allow]
69*e0c4386eSCy Schubertssl_conf = 2-verify-custom-allow-ssl
70*e0c4386eSCy Schubert
71*e0c4386eSCy Schubert[2-verify-custom-allow-ssl]
72*e0c4386eSCy Schubertserver = 2-verify-custom-allow-server
73*e0c4386eSCy Schubertclient = 2-verify-custom-allow-client
74*e0c4386eSCy Schubert
75*e0c4386eSCy Schubert[2-verify-custom-allow-server]
76*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
77*e0c4386eSCy SchubertCipherString = DEFAULT
78*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
79*e0c4386eSCy Schubert
80*e0c4386eSCy Schubert[2-verify-custom-allow-client]
81*e0c4386eSCy SchubertCipherString = DEFAULT
82*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
83*e0c4386eSCy SchubertVerifyMode = Peer
84*e0c4386eSCy Schubert
85*e0c4386eSCy Schubert[test-2]
86*e0c4386eSCy SchubertExpectedResult = Success
87*e0c4386eSCy Schubertclient = 2-verify-custom-allow-client-extra
88*e0c4386eSCy Schubert
89*e0c4386eSCy Schubert[2-verify-custom-allow-client-extra]
90*e0c4386eSCy SchubertVerifyCallback = AcceptAll
91*e0c4386eSCy Schubert
92*e0c4386eSCy Schubert
93*e0c4386eSCy Schubert# ===========================================================
94*e0c4386eSCy Schubert
95*e0c4386eSCy Schubert[3-verify-custom-retry]
96*e0c4386eSCy Schubertssl_conf = 3-verify-custom-retry-ssl
97*e0c4386eSCy Schubert
98*e0c4386eSCy Schubert[3-verify-custom-retry-ssl]
99*e0c4386eSCy Schubertserver = 3-verify-custom-retry-server
100*e0c4386eSCy Schubertclient = 3-verify-custom-retry-client
101*e0c4386eSCy Schubert
102*e0c4386eSCy Schubert[3-verify-custom-retry-server]
103*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
104*e0c4386eSCy SchubertCipherString = DEFAULT
105*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
106*e0c4386eSCy Schubert
107*e0c4386eSCy Schubert[3-verify-custom-retry-client]
108*e0c4386eSCy SchubertCipherString = DEFAULT
109*e0c4386eSCy SchubertVerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
110*e0c4386eSCy SchubertVerifyMode = Peer
111*e0c4386eSCy Schubert
112*e0c4386eSCy Schubert[test-3]
113*e0c4386eSCy SchubertExpectedResult = Success
114*e0c4386eSCy Schubertclient = 3-verify-custom-retry-client-extra
115*e0c4386eSCy Schubert
116*e0c4386eSCy Schubert[3-verify-custom-retry-client-extra]
117*e0c4386eSCy SchubertVerifyCallback = RetryOnce
118*e0c4386eSCy Schubert
119*e0c4386eSCy Schubert
120*e0c4386eSCy Schubert# ===========================================================
121*e0c4386eSCy Schubert
122*e0c4386eSCy Schubert[4-noverify-success]
123*e0c4386eSCy Schubertssl_conf = 4-noverify-success-ssl
124*e0c4386eSCy Schubert
125*e0c4386eSCy Schubert[4-noverify-success-ssl]
126*e0c4386eSCy Schubertserver = 4-noverify-success-server
127*e0c4386eSCy Schubertclient = 4-noverify-success-client
128*e0c4386eSCy Schubert
129*e0c4386eSCy Schubert[4-noverify-success-server]
130*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
131*e0c4386eSCy SchubertCipherString = DEFAULT
132*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
133*e0c4386eSCy Schubert
134*e0c4386eSCy Schubert[4-noverify-success-client]
135*e0c4386eSCy SchubertCipherString = DEFAULT
136*e0c4386eSCy Schubert
137*e0c4386eSCy Schubert[test-4]
138*e0c4386eSCy SchubertExpectedResult = Success
139*e0c4386eSCy Schubert
140*e0c4386eSCy Schubert
141*e0c4386eSCy Schubert# ===========================================================
142*e0c4386eSCy Schubert
143*e0c4386eSCy Schubert[5-noverify-ignore-custom-reject]
144*e0c4386eSCy Schubertssl_conf = 5-noverify-ignore-custom-reject-ssl
145*e0c4386eSCy Schubert
146*e0c4386eSCy Schubert[5-noverify-ignore-custom-reject-ssl]
147*e0c4386eSCy Schubertserver = 5-noverify-ignore-custom-reject-server
148*e0c4386eSCy Schubertclient = 5-noverify-ignore-custom-reject-client
149*e0c4386eSCy Schubert
150*e0c4386eSCy Schubert[5-noverify-ignore-custom-reject-server]
151*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
152*e0c4386eSCy SchubertCipherString = DEFAULT
153*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
154*e0c4386eSCy Schubert
155*e0c4386eSCy Schubert[5-noverify-ignore-custom-reject-client]
156*e0c4386eSCy SchubertCipherString = DEFAULT
157*e0c4386eSCy Schubert
158*e0c4386eSCy Schubert[test-5]
159*e0c4386eSCy SchubertExpectedResult = Success
160*e0c4386eSCy Schubertclient = 5-noverify-ignore-custom-reject-client-extra
161*e0c4386eSCy Schubert
162*e0c4386eSCy Schubert[5-noverify-ignore-custom-reject-client-extra]
163*e0c4386eSCy SchubertVerifyCallback = RejectAll
164*e0c4386eSCy Schubert
165*e0c4386eSCy Schubert
166*e0c4386eSCy Schubert# ===========================================================
167*e0c4386eSCy Schubert
168*e0c4386eSCy Schubert[6-noverify-accept-custom-allow]
169*e0c4386eSCy Schubertssl_conf = 6-noverify-accept-custom-allow-ssl
170*e0c4386eSCy Schubert
171*e0c4386eSCy Schubert[6-noverify-accept-custom-allow-ssl]
172*e0c4386eSCy Schubertserver = 6-noverify-accept-custom-allow-server
173*e0c4386eSCy Schubertclient = 6-noverify-accept-custom-allow-client
174*e0c4386eSCy Schubert
175*e0c4386eSCy Schubert[6-noverify-accept-custom-allow-server]
176*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
177*e0c4386eSCy SchubertCipherString = DEFAULT
178*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
179*e0c4386eSCy Schubert
180*e0c4386eSCy Schubert[6-noverify-accept-custom-allow-client]
181*e0c4386eSCy SchubertCipherString = DEFAULT
182*e0c4386eSCy Schubert
183*e0c4386eSCy Schubert[test-6]
184*e0c4386eSCy SchubertExpectedResult = Success
185*e0c4386eSCy Schubertclient = 6-noverify-accept-custom-allow-client-extra
186*e0c4386eSCy Schubert
187*e0c4386eSCy Schubert[6-noverify-accept-custom-allow-client-extra]
188*e0c4386eSCy SchubertVerifyCallback = AcceptAll
189*e0c4386eSCy Schubert
190*e0c4386eSCy Schubert
191*e0c4386eSCy Schubert# ===========================================================
192*e0c4386eSCy Schubert
193*e0c4386eSCy Schubert[7-verify-fail-no-root]
194*e0c4386eSCy Schubertssl_conf = 7-verify-fail-no-root-ssl
195*e0c4386eSCy Schubert
196*e0c4386eSCy Schubert[7-verify-fail-no-root-ssl]
197*e0c4386eSCy Schubertserver = 7-verify-fail-no-root-server
198*e0c4386eSCy Schubertclient = 7-verify-fail-no-root-client
199*e0c4386eSCy Schubert
200*e0c4386eSCy Schubert[7-verify-fail-no-root-server]
201*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
202*e0c4386eSCy SchubertCipherString = DEFAULT
203*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
204*e0c4386eSCy Schubert
205*e0c4386eSCy Schubert[7-verify-fail-no-root-client]
206*e0c4386eSCy SchubertCipherString = DEFAULT
207*e0c4386eSCy SchubertVerifyMode = Peer
208*e0c4386eSCy Schubert
209*e0c4386eSCy Schubert[test-7]
210*e0c4386eSCy SchubertExpectedClientAlert = UnknownCA
211*e0c4386eSCy SchubertExpectedResult = ClientFail
212*e0c4386eSCy Schubert
213*e0c4386eSCy Schubert
214*e0c4386eSCy Schubert# ===========================================================
215*e0c4386eSCy Schubert
216*e0c4386eSCy Schubert[8-verify-custom-success-no-root]
217*e0c4386eSCy Schubertssl_conf = 8-verify-custom-success-no-root-ssl
218*e0c4386eSCy Schubert
219*e0c4386eSCy Schubert[8-verify-custom-success-no-root-ssl]
220*e0c4386eSCy Schubertserver = 8-verify-custom-success-no-root-server
221*e0c4386eSCy Schubertclient = 8-verify-custom-success-no-root-client
222*e0c4386eSCy Schubert
223*e0c4386eSCy Schubert[8-verify-custom-success-no-root-server]
224*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
225*e0c4386eSCy SchubertCipherString = DEFAULT
226*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
227*e0c4386eSCy Schubert
228*e0c4386eSCy Schubert[8-verify-custom-success-no-root-client]
229*e0c4386eSCy SchubertCipherString = DEFAULT
230*e0c4386eSCy SchubertVerifyMode = Peer
231*e0c4386eSCy Schubert
232*e0c4386eSCy Schubert[test-8]
233*e0c4386eSCy SchubertExpectedResult = Success
234*e0c4386eSCy Schubertclient = 8-verify-custom-success-no-root-client-extra
235*e0c4386eSCy Schubert
236*e0c4386eSCy Schubert[8-verify-custom-success-no-root-client-extra]
237*e0c4386eSCy SchubertVerifyCallback = AcceptAll
238*e0c4386eSCy Schubert
239*e0c4386eSCy Schubert
240*e0c4386eSCy Schubert# ===========================================================
241*e0c4386eSCy Schubert
242*e0c4386eSCy Schubert[9-verify-custom-fail-no-root]
243*e0c4386eSCy Schubertssl_conf = 9-verify-custom-fail-no-root-ssl
244*e0c4386eSCy Schubert
245*e0c4386eSCy Schubert[9-verify-custom-fail-no-root-ssl]
246*e0c4386eSCy Schubertserver = 9-verify-custom-fail-no-root-server
247*e0c4386eSCy Schubertclient = 9-verify-custom-fail-no-root-client
248*e0c4386eSCy Schubert
249*e0c4386eSCy Schubert[9-verify-custom-fail-no-root-server]
250*e0c4386eSCy SchubertCertificate = ${ENV::TEST_CERTS_DIR}/servercert.pem
251*e0c4386eSCy SchubertCipherString = DEFAULT
252*e0c4386eSCy SchubertPrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem
253*e0c4386eSCy Schubert
254*e0c4386eSCy Schubert[9-verify-custom-fail-no-root-client]
255*e0c4386eSCy SchubertCipherString = DEFAULT
256*e0c4386eSCy SchubertVerifyMode = Peer
257*e0c4386eSCy Schubert
258*e0c4386eSCy Schubert[test-9]
259*e0c4386eSCy SchubertExpectedClientAlert = HandshakeFailure
260*e0c4386eSCy SchubertExpectedResult = ClientFail
261*e0c4386eSCy Schubertclient = 9-verify-custom-fail-no-root-client-extra
262*e0c4386eSCy Schubert
263*e0c4386eSCy Schubert[9-verify-custom-fail-no-root-client-extra]
264*e0c4386eSCy SchubertVerifyCallback = RejectAll
265*e0c4386eSCy Schubert
266*e0c4386eSCy Schubert
267