diff options
author | Todd Short <tshort@akamai.com> | 2016-05-12 18:16:52 -0400 |
---|---|---|
committer | Rich Salz <rsalz@openssl.org> | 2016-06-09 13:07:51 -0400 |
commit | 5c753de668322bf9903a49ba713b2cbc62667571 (patch) | |
tree | b165b9fc4c4a67b7383e7794a4c010775ca98867 /test/ssl-tests | |
parent | 2a7de0fd5d9baf946ef4d2c51096b04dd47a8143 (diff) |
Fix session ticket and SNI
When session tickets are used, it's possible that SNI might swtich the
SSL_CTX on an SSL. Normally, this is not a problem, because the
initial_ctx/session_ctx are used for all session ticket/id processes.
However, when the SNI callback occurs, it's possible that the callback
may update the options in the SSL from the SSL_CTX, and this could
cause SSL_OP_NO_TICKET to be set. If this occurs, then two bad things
can happen:
1. The session ticket TLSEXT may not be written when the ticket expected
flag is set. The state machine transistions to writing the ticket, and
the client responds with an error as its not expecting a ticket.
2. When creating the session ticket, if the ticket key cb returns 0
the crypto/hmac contexts are not initialized, and the code crashes when
trying to encrypt the session ticket.
To fix 1, if the ticket TLSEXT is not written out, clear the expected
ticket flag.
To fix 2, consider a return of 0 from the ticket key cb a recoverable
error, and write a 0 length ticket and continue. The client-side code
can explicitly handle this case.
Fix these two cases, and add unit test code to validate ticket behavior.
Reviewed-by: Emilia Käsper <emilia@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/1098)
Diffstat (limited to 'test/ssl-tests')
-rw-r--r-- | test/ssl-tests/01-simple.conf | 14 | ||||
-rw-r--r-- | test/ssl-tests/02-protocol-version.conf | 3059 | ||||
-rw-r--r-- | test/ssl-tests/03-custom_verify.conf | 63 | ||||
-rw-r--r-- | test/ssl-tests/04-client_auth.conf | 179 | ||||
-rw-r--r-- | test/ssl-tests/05-sni.conf | 38 | ||||
-rw-r--r-- | test/ssl-tests/05-sni.conf.in | 25 | ||||
-rw-r--r-- | test/ssl-tests/06-sni-ticket.conf | 650 | ||||
-rw-r--r-- | test/ssl-tests/06-sni-ticket.conf.in | 83 |
8 files changed, 4111 insertions, 0 deletions
diff --git a/test/ssl-tests/01-simple.conf b/test/ssl-tests/01-simple.conf index 8c8067dae2..29ac3e4ece 100644 --- a/test/ssl-tests/01-simple.conf +++ b/test/ssl-tests/01-simple.conf @@ -11,6 +11,7 @@ ssl_conf = 0-default-ssl [0-default-ssl] server = 0-default-server +server2 = 0-default-server2 client = 0-default-client [0-default-server] @@ -19,6 +20,12 @@ CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[0-default-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [0-default-client] CipherString = DEFAULT VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem @@ -36,6 +43,7 @@ ssl_conf = 1-verify-cert-ssl [1-verify-cert-ssl] server = 1-verify-cert-server +server2 = 1-verify-cert-server2 client = 1-verify-cert-client [1-verify-cert-server] @@ -44,6 +52,12 @@ CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[1-verify-cert-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [1-verify-cert-client] CipherString = DEFAULT VerifyMode = Peer diff --git a/test/ssl-tests/02-protocol-version.conf b/test/ssl-tests/02-protocol-version.conf index dc46bfad3f..3c103dfc5d 100644 --- a/test/ssl-tests/02-protocol-version.conf +++ b/test/ssl-tests/02-protocol-version.conf @@ -370,6 +370,7 @@ ssl_conf = 0-version-negotiation-ssl [0-version-negotiation-ssl] server = 0-version-negotiation-server +server2 = 0-version-negotiation-server2 client = 0-version-negotiation-client [0-version-negotiation-server] @@ -379,6 +380,13 @@ MaxProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[0-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [0-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -397,6 +405,7 @@ ssl_conf = 1-version-negotiation-ssl [1-version-negotiation-ssl] server = 1-version-negotiation-server +server2 = 1-version-negotiation-server2 client = 1-version-negotiation-client [1-version-negotiation-server] @@ -406,6 +415,13 @@ MaxProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[1-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [1-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -424,6 +440,7 @@ ssl_conf = 2-version-negotiation-ssl [2-version-negotiation-ssl] server = 2-version-negotiation-server +server2 = 2-version-negotiation-server2 client = 2-version-negotiation-client [2-version-negotiation-server] @@ -433,6 +450,13 @@ MaxProtocol = TLSv1.1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[2-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [2-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -451,6 +475,7 @@ ssl_conf = 3-version-negotiation-ssl [3-version-negotiation-ssl] server = 3-version-negotiation-server +server2 = 3-version-negotiation-server2 client = 3-version-negotiation-client [3-version-negotiation-server] @@ -460,6 +485,13 @@ MaxProtocol = TLSv1.2 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[3-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [3-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -478,6 +510,7 @@ ssl_conf = 4-version-negotiation-ssl [4-version-negotiation-ssl] server = 4-version-negotiation-server +server2 = 4-version-negotiation-server2 client = 4-version-negotiation-client [4-version-negotiation-server] @@ -486,6 +519,12 @@ CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[4-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [4-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -504,6 +543,7 @@ ssl_conf = 5-version-negotiation-ssl [5-version-negotiation-ssl] server = 5-version-negotiation-server +server2 = 5-version-negotiation-server2 client = 5-version-negotiation-client [5-version-negotiation-server] @@ -514,6 +554,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[5-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = SSLv3 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [5-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -532,6 +580,7 @@ ssl_conf = 6-version-negotiation-ssl [6-version-negotiation-ssl] server = 6-version-negotiation-server +server2 = 6-version-negotiation-server2 client = 6-version-negotiation-client [6-version-negotiation-server] @@ -542,6 +591,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[6-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [6-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -560,6 +617,7 @@ ssl_conf = 7-version-negotiation-ssl [7-version-negotiation-ssl] server = 7-version-negotiation-server +server2 = 7-version-negotiation-server2 client = 7-version-negotiation-client [7-version-negotiation-server] @@ -570,6 +628,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[7-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.1 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [7-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -588,6 +654,7 @@ ssl_conf = 8-version-negotiation-ssl [8-version-negotiation-ssl] server = 8-version-negotiation-server +server2 = 8-version-negotiation-server2 client = 8-version-negotiation-client [8-version-negotiation-server] @@ -598,6 +665,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[8-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [8-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -616,6 +691,7 @@ ssl_conf = 9-version-negotiation-ssl [9-version-negotiation-ssl] server = 9-version-negotiation-server +server2 = 9-version-negotiation-server2 client = 9-version-negotiation-client [9-version-negotiation-server] @@ -625,6 +701,13 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[9-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [9-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -643,6 +726,7 @@ ssl_conf = 10-version-negotiation-ssl [10-version-negotiation-ssl] server = 10-version-negotiation-server +server2 = 10-version-negotiation-server2 client = 10-version-negotiation-client [10-version-negotiation-server] @@ -653,6 +737,14 @@ MinProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[10-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1 +MinProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [10-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -671,6 +763,7 @@ ssl_conf = 11-version-negotiation-ssl [11-version-negotiation-ssl] server = 11-version-negotiation-server +server2 = 11-version-negotiation-server2 client = 11-version-negotiation-client [11-version-negotiation-server] @@ -681,6 +774,14 @@ MinProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[11-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.1 +MinProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [11-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -699,6 +800,7 @@ ssl_conf = 12-version-negotiation-ssl [12-version-negotiation-ssl] server = 12-version-negotiation-server +server2 = 12-version-negotiation-server2 client = 12-version-negotiation-client [12-version-negotiation-server] @@ -709,6 +811,14 @@ MinProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[12-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +MinProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [12-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -727,6 +837,7 @@ ssl_conf = 13-version-negotiation-ssl [13-version-negotiation-ssl] server = 13-version-negotiation-server +server2 = 13-version-negotiation-server2 client = 13-version-negotiation-client [13-version-negotiation-server] @@ -736,6 +847,13 @@ MinProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[13-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MinProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [13-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -754,6 +872,7 @@ ssl_conf = 14-version-negotiation-ssl [14-version-negotiation-ssl] server = 14-version-negotiation-server +server2 = 14-version-negotiation-server2 client = 14-version-negotiation-client [14-version-negotiation-server] @@ -764,6 +883,14 @@ MinProtocol = TLSv1.1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[14-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.1 +MinProtocol = TLSv1.1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [14-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -782,6 +909,7 @@ ssl_conf = 15-version-negotiation-ssl [15-version-negotiation-ssl] server = 15-version-negotiation-server +server2 = 15-version-negotiation-server2 client = 15-version-negotiation-client [15-version-negotiation-server] @@ -792,6 +920,14 @@ MinProtocol = TLSv1.1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[15-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +MinProtocol = TLSv1.1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [15-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -810,6 +946,7 @@ ssl_conf = 16-version-negotiation-ssl [16-version-negotiation-ssl] server = 16-version-negotiation-server +server2 = 16-version-negotiation-server2 client = 16-version-negotiation-client [16-version-negotiation-server] @@ -819,6 +956,13 @@ MinProtocol = TLSv1.1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[16-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MinProtocol = TLSv1.1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [16-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -837,6 +981,7 @@ ssl_conf = 17-version-negotiation-ssl [17-version-negotiation-ssl] server = 17-version-negotiation-server +server2 = 17-version-negotiation-server2 client = 17-version-negotiation-client [17-version-negotiation-server] @@ -847,6 +992,14 @@ MinProtocol = TLSv1.2 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[17-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +MinProtocol = TLSv1.2 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [17-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -865,6 +1018,7 @@ ssl_conf = 18-version-negotiation-ssl [18-version-negotiation-ssl] server = 18-version-negotiation-server +server2 = 18-version-negotiation-server2 client = 18-version-negotiation-client [18-version-negotiation-server] @@ -874,6 +1028,13 @@ MinProtocol = TLSv1.2 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[18-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MinProtocol = TLSv1.2 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [18-version-negotiation-client] CipherString = DEFAULT MaxProtocol = SSLv3 @@ -892,6 +1053,7 @@ ssl_conf = 19-version-negotiation-ssl [19-version-negotiation-ssl] server = 19-version-negotiation-server +server2 = 19-version-negotiation-server2 client = 19-version-negotiation-client [19-version-negotiation-server] @@ -901,6 +1063,13 @@ MaxProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[19-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [19-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -919,6 +1088,7 @@ ssl_conf = 20-version-negotiation-ssl [20-version-negotiation-ssl] server = 20-version-negotiation-server +server2 = 20-version-negotiation-server2 client = 20-version-negotiation-client [20-version-negotiation-server] @@ -928,6 +1098,13 @@ MaxProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[20-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [20-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -947,6 +1124,7 @@ ssl_conf = 21-version-negotiation-ssl [21-version-negotiation-ssl] server = 21-version-negotiation-server +server2 = 21-version-negotiation-server2 client = 21-version-negotiation-client [21-version-negotiation-server] @@ -956,6 +1134,13 @@ MaxProtocol = TLSv1.1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[21-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [21-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -975,6 +1160,7 @@ ssl_conf = 22-version-negotiation-ssl [22-version-negotiation-ssl] server = 22-version-negotiation-server +server2 = 22-version-negotiation-server2 client = 22-version-negotiation-client [22-version-negotiation-server] @@ -984,6 +1170,13 @@ MaxProtocol = TLSv1.2 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[22-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [22-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1003,6 +1196,7 @@ ssl_conf = 23-version-negotiation-ssl [23-version-negotiation-ssl] server = 23-version-negotiation-server +server2 = 23-version-negotiation-server2 client = 23-version-negotiation-client [23-version-negotiation-server] @@ -1011,6 +1205,12 @@ CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[23-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [23-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1030,6 +1230,7 @@ ssl_conf = 24-version-negotiation-ssl [24-version-negotiation-ssl] server = 24-version-negotiation-server +server2 = 24-version-negotiation-server2 client = 24-version-negotiation-client [24-version-negotiation-server] @@ -1040,6 +1241,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[24-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = SSLv3 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [24-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1058,6 +1267,7 @@ ssl_conf = 25-version-negotiation-ssl [25-version-negotiation-ssl] server = 25-version-negotiation-server +server2 = 25-version-negotiation-server2 client = 25-version-negotiation-client [25-version-negotiation-server] @@ -1068,6 +1278,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[25-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [25-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1087,6 +1305,7 @@ ssl_conf = 26-version-negotiation-ssl [26-version-negotiation-ssl] server = 26-version-negotiation-server +server2 = 26-version-negotiation-server2 client = 26-version-negotiation-client [26-version-negotiation-server] @@ -1097,6 +1316,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[26-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.1 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [26-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1116,6 +1343,7 @@ ssl_conf = 27-version-negotiation-ssl [27-version-negotiation-ssl] server = 27-version-negotiation-server +server2 = 27-version-negotiation-server2 client = 27-version-negotiation-client [27-version-negotiation-server] @@ -1126,6 +1354,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[27-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [27-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1145,6 +1381,7 @@ ssl_conf = 28-version-negotiation-ssl [28-version-negotiation-ssl] server = 28-version-negotiation-server +server2 = 28-version-negotiation-server2 client = 28-version-negotiation-client [28-version-negotiation-server] @@ -1154,6 +1391,13 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[28-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [28-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1173,6 +1417,7 @@ ssl_conf = 29-version-negotiation-ssl [29-version-negotiation-ssl] server = 29-version-negotiation-server +server2 = 29-version-negotiation-server2 client = 29-version-negotiation-client [29-version-negotiation-server] @@ -1183,6 +1428,14 @@ MinProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[29-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1 +MinProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [29-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1202,6 +1455,7 @@ ssl_conf = 30-version-negotiation-ssl [30-version-negotiation-ssl] server = 30-version-negotiation-server +server2 = 30-version-negotiation-server2 client = 30-version-negotiation-client [30-version-negotiation-server] @@ -1212,6 +1466,14 @@ MinProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[30-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.1 +MinProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [30-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1231,6 +1493,7 @@ ssl_conf = 31-version-negotiation-ssl [31-version-negotiation-ssl] server = 31-version-negotiation-server +server2 = 31-version-negotiation-server2 client = 31-version-negotiation-client [31-version-negotiation-server] @@ -1241,6 +1504,14 @@ MinProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[31-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +MinProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [31-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1260,6 +1531,7 @@ ssl_conf = 32-version-negotiation-ssl [32-version-negotiation-ssl] server = 32-version-negotiation-server +server2 = 32-version-negotiation-server2 client = 32-version-negotiation-client [32-version-negotiation-server] @@ -1269,6 +1541,13 @@ MinProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[32-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MinProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [32-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1288,6 +1567,7 @@ ssl_conf = 33-version-negotiation-ssl [33-version-negotiation-ssl] server = 33-version-negotiation-server +server2 = 33-version-negotiation-server2 client = 33-version-negotiation-client [33-version-negotiation-server] @@ -1298,6 +1578,14 @@ MinProtocol = TLSv1.1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[33-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.1 +MinProtocol = TLSv1.1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [33-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1316,6 +1604,7 @@ ssl_conf = 34-version-negotiation-ssl [34-version-negotiation-ssl] server = 34-version-negotiation-server +server2 = 34-version-negotiation-server2 client = 34-version-negotiation-client [34-version-negotiation-server] @@ -1326,6 +1615,14 @@ MinProtocol = TLSv1.1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[34-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +MinProtocol = TLSv1.1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [34-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1344,6 +1641,7 @@ ssl_conf = 35-version-negotiation-ssl [35-version-negotiation-ssl] server = 35-version-negotiation-server +server2 = 35-version-negotiation-server2 client = 35-version-negotiation-client [35-version-negotiation-server] @@ -1353,6 +1651,13 @@ MinProtocol = TLSv1.1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[35-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MinProtocol = TLSv1.1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [35-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1371,6 +1676,7 @@ ssl_conf = 36-version-negotiation-ssl [36-version-negotiation-ssl] server = 36-version-negotiation-server +server2 = 36-version-negotiation-server2 client = 36-version-negotiation-client [36-version-negotiation-server] @@ -1381,6 +1687,14 @@ MinProtocol = TLSv1.2 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[36-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +MinProtocol = TLSv1.2 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [36-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1399,6 +1713,7 @@ ssl_conf = 37-version-negotiation-ssl [37-version-negotiation-ssl] server = 37-version-negotiation-server +server2 = 37-version-negotiation-server2 client = 37-version-negotiation-client [37-version-negotiation-server] @@ -1408,6 +1723,13 @@ MinProtocol = TLSv1.2 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[37-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MinProtocol = TLSv1.2 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [37-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1 @@ -1426,6 +1748,7 @@ ssl_conf = 38-version-negotiation-ssl [38-version-negotiation-ssl] server = 38-version-negotiation-server +server2 = 38-version-negotiation-server2 client = 38-version-negotiation-client [38-version-negotiation-server] @@ -1435,6 +1758,13 @@ MaxProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[38-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [38-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1.1 @@ -1453,6 +1783,7 @@ ssl_conf = 39-version-negotiation-ssl [39-version-negotiation-ssl] server = 39-version-negotiation-server +server2 = 39-version-negotiation-server2 client = 39-version-negotiation-client [39-version-negotiation-server] @@ -1462,6 +1793,13 @@ MaxProtocol = TLSv1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[39-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [39-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1.1 @@ -1481,6 +1819,7 @@ ssl_conf = 40-version-negotiation-ssl [40-version-negotiation-ssl] server = 40-version-negotiation-server +server2 = 40-version-negotiation-server2 client = 40-version-negotiation-client [40-version-negotiation-server] @@ -1490,6 +1829,13 @@ MaxProtocol = TLSv1.1 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[40-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.1 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [40-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1.1 @@ -1509,6 +1855,7 @@ ssl_conf = 41-version-negotiation-ssl [41-version-negotiation-ssl] server = 41-version-negotiation-server +server2 = 41-version-negotiation-server2 client = 41-version-negotiation-client [41-version-negotiation-server] @@ -1518,6 +1865,13 @@ MaxProtocol = TLSv1.2 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[41-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1.2 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [41-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1.1 @@ -1537,6 +1891,7 @@ ssl_conf = 42-version-negotiation-ssl [42-version-negotiation-ssl] server = 42-version-negotiation-server +server2 = 42-version-negotiation-server2 client = 42-version-negotiation-client [42-version-negotiation-server] @@ -1545,6 +1900,12 @@ CipherString = DEFAULT PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[42-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [42-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1.1 @@ -1564,6 +1925,7 @@ ssl_conf = 43-version-negotiation-ssl [43-version-negotiation-ssl] server = 43-version-negotiation-server +server2 = 43-version-negotiation-server2 client = 43-version-negotiation-client [43-version-negotiation-server] @@ -1574,6 +1936,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[43-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = SSLv3 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [43-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1.1 @@ -1592,6 +1962,7 @@ ssl_conf = 44-version-negotiation-ssl [44-version-negotiation-ssl] server = 44-version-negotiation-server +server2 = 44-version-negotiation-server2 client = 44-version-negotiation-client [44-version-negotiation-server] @@ -1602,6 +1973,14 @@ MinProtocol = SSLv3 PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem +[44-version-negotiation-server2] +Certificate = ${ENV::TEST_CERTS_DIR}/servercert.pem +CipherString = DEFAULT +MaxProtocol = TLSv1 +MinProtocol = SSLv3 +PrivateKey = ${ENV::TEST_CERTS_DIR}/serverkey.pem + + [44-version-negotiation-client] CipherString = DEFAULT MaxProtocol = TLSv1.1 @@ -1621,6 +2000,7 @@ ssl_conf = 45-version-negotiation-ssl [45-version-negotiation-ssl] se |