Paul Bakker | fab5c82 | 2012-02-06 16:45:10 +0000 | [diff] [blame] | 1 | killall -q openssl ssl_server |
| 2 | |
| 3 | openssl s_server -cert data_files/server2.crt -key data_files/server2.key -www -quiet -cipher NULL,ALL & |
| 4 | PROCESS_ID=$! |
| 5 | |
| 6 | sleep 1 |
| 7 | |
| 8 | CIPHERS=" \ |
| 9 | SSL-EDH-RSA-AES-128-SHA \ |
| 10 | SSL-EDH-RSA-AES-256-SHA \ |
| 11 | SSL-EDH-RSA-CAMELLIA-128-SHA \ |
| 12 | SSL-EDH-RSA-CAMELLIA-256-SHA \ |
| 13 | SSL-EDH-RSA-DES-168-SHA \ |
| 14 | SSL-RSA-AES-256-SHA \ |
| 15 | SSL-RSA-CAMELLIA-256-SHA \ |
| 16 | SSL-RSA-AES-128-SHA \ |
| 17 | SSL-RSA-CAMELLIA-128-SHA \ |
| 18 | SSL-RSA-DES-168-SHA \ |
| 19 | SSL-RSA-RC4-128-SHA \ |
| 20 | SSL-RSA-RC4-128-MD5 \ |
| 21 | SSL-RSA-NULL-MD5 \ |
| 22 | SSL-RSA-NULL-SHA \ |
| 23 | SSL-RSA-DES-SHA \ |
| 24 | SSL-EDH-RSA-DES-SHA \ |
| 25 | " |
| 26 | |
| 27 | # Not supported by OpenSSL: SSL-RSA-NULL-SHA256 |
| 28 | for i in $CIPHERS; |
| 29 | do |
| 30 | RESULT="$( ../programs/ssl/ssl_client2 force_ciphersuite=$i )" |
| 31 | EXIT=$? |
| 32 | echo -n "OpenSSL Server - PolarSSL Client - $i : $EXIT - " |
| 33 | if [ "$EXIT" = "2" ]; |
| 34 | then |
| 35 | echo Ciphersuite not supported in client |
| 36 | elif [ "$EXIT" != "0" ]; |
| 37 | then |
| 38 | echo Failed |
| 39 | echo $RESULT |
| 40 | else |
| 41 | echo Success |
| 42 | fi |
| 43 | done |
| 44 | kill $PROCESS_ID |
| 45 | |
| 46 | ../programs/ssl/ssl_server > /dev/null & |
| 47 | PROCESS_ID=$! |
| 48 | |
| 49 | sleep 1 |
| 50 | |
| 51 | CIPHERS=" \ |
| 52 | DHE-RSA-AES128-SHA \ |
| 53 | DHE-RSA-AES256-SHA \ |
| 54 | DHE-RSA-CAMELLIA128-SHA \ |
| 55 | DHE-RSA-CAMELLIA256-SHA \ |
| 56 | EDH-RSA-DES-CBC3-SHA \ |
| 57 | AES256-SHA \ |
| 58 | CAMELLIA256-SHA \ |
| 59 | AES128-SHA \ |
| 60 | CAMELLIA128-SHA \ |
| 61 | DES-CBC3-SHA \ |
| 62 | RC4-SHA \ |
| 63 | RC4-MD5 \ |
| 64 | NULL-MD5 \ |
| 65 | NULL-SHA \ |
| 66 | DES-CBC-SHA \ |
| 67 | EDH-RSA-DES-CBC-SHA \ |
| 68 | " |
| 69 | |
| 70 | # Not supported by OpenSSL: NULL-SHA256 |
| 71 | for i in $CIPHERS; |
| 72 | do |
| 73 | RESULT="$( ( echo -e 'GET HTTP/1.0'; echo; sleep 1 ) | openssl s_client -cipher $i 2>&1)" |
| 74 | EXIT=$? |
| 75 | echo -n "PolarSSL Server - OpenSSL Client - $i : $EXIT - " |
| 76 | |
| 77 | if [ "$EXIT" != "0" ]; |
| 78 | then |
| 79 | SUPPORTED="$( echo $RESULT | grep 'Cipher is (NONE)' )" |
| 80 | if [ "X$SUPPORTED" != "X" ] |
| 81 | then |
| 82 | echo "Ciphersuite not supported in server" |
| 83 | else |
| 84 | echo Failed |
| 85 | echo $RESULT |
| 86 | fi |
| 87 | else |
| 88 | echo Success |
| 89 | fi |
| 90 | done |
| 91 | |
| 92 | kill $PROCESS_ID |
| 93 | |
| 94 | ../programs/ssl/ssl_server > /dev/null & |
| 95 | PROCESS_ID=$! |
| 96 | |
| 97 | sleep 1 |
| 98 | |
| 99 | CIPHERS=" \ |
| 100 | SSL-RSA-RC4-128-SHA \ |
| 101 | SSL-RSA-NULL-MD5 \ |
| 102 | SSL-EDH-RSA-AES-128-SHA \ |
| 103 | SSL-EDH-RSA-AES-256-SHA \ |
| 104 | SSL-EDH-RSA-CAMELLIA-128-SHA \ |
| 105 | SSL-EDH-RSA-CAMELLIA-256-SHA \ |
| 106 | SSL-EDH-RSA-DES-168-SHA \ |
| 107 | SSL-RSA-NULL-SHA \ |
| 108 | SSL-RSA-AES-256-SHA \ |
| 109 | SSL-RSA-CAMELLIA-256-SHA \ |
| 110 | SSL-RSA-AES-128-SHA \ |
| 111 | SSL-RSA-CAMELLIA-128-SHA \ |
| 112 | SSL-RSA-DES-168-SHA \ |
| 113 | SSL-RSA-RC4-128-MD5 \ |
| 114 | SSL-RSA-DES-SHA \ |
| 115 | SSL-EDH-RSA-DES-SHA \ |
| 116 | SSL-RSA-NULL-SHA256 \ |
| 117 | " |
| 118 | |
| 119 | for i in $CIPHERS; |
| 120 | do |
| 121 | RESULT="$( ../programs/ssl/ssl_client2 force_ciphersuite=$i )" |
| 122 | EXIT=$? |
| 123 | echo -n "PolarSSL Server - PolarSSL Client - $i : $EXIT - " |
| 124 | if [ "$EXIT" = "2" ]; |
| 125 | then |
| 126 | echo Ciphersuite not supported in client |
| 127 | elif [ "$EXIT" != "0" ]; |
| 128 | then |
| 129 | echo Failed |
| 130 | echo $RESULT |
| 131 | else |
| 132 | echo Success |
| 133 | fi |
| 134 | done |
| 135 | kill $PROCESS_ID |
| 136 | |