summaryrefslogtreecommitdiffstats
path: root/test/ssl-tests/04-client_auth.conf.in
diff options
context:
space:
mode:
Diffstat (limited to 'test/ssl-tests/04-client_auth.conf.in')
-rw-r--r--test/ssl-tests/04-client_auth.conf.in9
1 files changed, 9 insertions, 0 deletions
diff --git a/test/ssl-tests/04-client_auth.conf.in b/test/ssl-tests/04-client_auth.conf.in
index 8738f908de..d45e399c3f 100644
--- a/test/ssl-tests/04-client_auth.conf.in
+++ b/test/ssl-tests/04-client_auth.conf.in
@@ -33,6 +33,13 @@ sub generate_tests() {
} else {
$caalert = "UnknownCA";
}
+ my $clihash;
+ my $clisigalgs;
+ # TODO add TLSv1.3 versions
+ if ($protocol_name eq "TLSv1.2") {
+ $clihash = "SHA256";
+ $clisigalgs = "SHA256+RSA";
+ }
# Sanity-check simple handshake.
push @tests, {
name => "server-auth-${protocol_name}",
@@ -87,6 +94,7 @@ sub generate_tests() {
server => {
"MinProtocol" => $protocol,
"MaxProtocol" => $protocol,
+ "ClientSignatureAlgorithms" => $clisigalgs,
"VerifyCAFile" => "\${ENV::TEST_CERTS_DIR}${dir_sep}root-cert.pem",
"VerifyMode" => "Request",
},
@@ -98,6 +106,7 @@ sub generate_tests() {
},
test => { "ExpectedResult" => "Success",
"ExpectedClientCertType" => "RSA",
+ "ExpectedClientSignHash" => $clihash,
},
};