TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / 5001bfc619847adf29b87cbd0bbd7fbbad13e3c5 / . / tests / opt-testcases / tls13-kex-modes.sh
blob: 883473a39119695403c7cc30c23f61c01c740625 [file] [log] [blame]
Jerry Yu6a9beba2022-07-31 12:45:25 +0800[diff] [blame]1#!/bin/sh
2
3# tls13-kex-modes.sh
4#
5# Copyright The Mbed TLS Contributors
6# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
19#
20
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]21get_srv_psk_list ()
22{
23 case $(( TESTS % 3 )) in
24 0) echo "psk_list=abc,dead,def,beef,Client_identity,6162636465666768696a6b6c6d6e6f70";;
25 1) echo "psk_list=abc,dead,Client_identity,6162636465666768696a6b6c6d6e6f70,def,beef";;
26 2) echo "psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef";;
27 esac
28}
Jerry Yu6a9beba2022-07-31 12:45:25 +0800[diff] [blame]29
Jerry Yu66f35f22022-08-22 17:27:41 +0800[diff] [blame]30requires_gnutls_tls1_3
Jerry Yu6a9beba2022-07-31 12:45:25 +0800[diff] [blame]31requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
32requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
33requires_config_enabled MBEDTLS_SSL_SRV_C
34requires_config_enabled MBEDTLS_DEBUG_C
Jerry Yu9b83fa12022-07-31 13:13:51 +0800[diff] [blame]35# SOME_ECDHE_ENABLED?
36requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
37 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu3e06fce2022-08-25 17:51:57 +0800[diff] [blame]38run_test "TLS 1.3: PSK: No valid ciphersuite. G->m" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]39 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu2185c0f2022-08-23 16:12:43 +0800[diff] [blame]40 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-CIPHER-ALL:+AES-256-GCM:+AEAD:+SHA384:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
41 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
42 localhost" \
43 1 \
44 -s "found psk key exchange modes extension" \
45 -s "found pre_shared_key extension" \
46 -s "Found PSK_EPHEMERAL KEX MODE" \
47 -s "Found PSK KEX MODE" \
Jerry Yu3e06fce2022-08-25 17:51:57 +0800[diff] [blame]48 -s "No matched ciphersuite"
Jerry Yu2185c0f2022-08-23 16:12:43 +0800[diff] [blame]49
50requires_openssl_tls1_3
51requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
52requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
53requires_config_enabled MBEDTLS_SSL_SRV_C
54requires_config_enabled MBEDTLS_DEBUG_C
55# SOME_ECDHE_ENABLED?
56requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
57 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu3e06fce2022-08-25 17:51:57 +0800[diff] [blame]58run_test "TLS 1.3: PSK: No valid ciphersuite. O->m" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]59 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu2185c0f2022-08-23 16:12:43 +0800[diff] [blame]60 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -ciphersuites TLS_AES_256_GCM_SHA384\
61 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
62 1 \
63 -s "found psk key exchange modes extension" \
64 -s "found pre_shared_key extension" \
65 -s "Found PSK_EPHEMERAL KEX MODE" \
66 -s "Found PSK KEX MODE" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]67 -s "No matched ciphersuite"
68
69
70requires_gnutls_tls1_3
71requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
72requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]73run_test "TLS 1.3: G->m: ephemeral_all/psk, fail, no common kex mode" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]74 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]75 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
76 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
77 localhost" \
78 1 \
79 -s "found psk key exchange modes extension" \
80 -s "found pre_shared_key extension" \
81 -s "Found PSK_EPHEMERAL KEX MODE" \
82 -S "Found PSK KEX MODE" \
83 -S "key exchange mode: psk$" \
84 -S "key exchange mode: psk_ephemeral" \
85 -S "key exchange mode: ephemeral"
86
87requires_gnutls_tls1_3
88requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
89requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]90run_test "TLS 1.3: G->m: all/psk, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]91 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]92 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
93 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
94 localhost" \
95 0 \
96 -s "found psk key exchange modes extension" \
97 -s "found pre_shared_key extension" \
98 -s "Found PSK_EPHEMERAL KEX MODE" \
99 -s "Found PSK KEX MODE" \
100 -s "Pre shared key found" \
101 -S "No matched PSK or ticket" \
102 -s "key exchange mode: psk$" \
103 -S "key exchange mode: psk_ephemeral" \
104 -S "key exchange mode: ephemeral"
105
106requires_gnutls_tls1_3
107requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
108requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]109run_test "TLS 1.3: G->m: all/psk, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]110 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]111 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
112 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
113 localhost" \
114 1 \
115 -s "found psk key exchange modes extension" \
116 -s "found pre_shared_key extension" \
117 -s "Found PSK_EPHEMERAL KEX MODE" \
118 -s "Found PSK KEX MODE" \
119 -s "No matched PSK or ticket" \
120 -S "key exchange mode: psk$" \
121 -S "key exchange mode: psk_ephemeral" \
122 -S "key exchange mode: ephemeral"
123
124requires_gnutls_tls1_3
125requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
126requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]127run_test "TLS 1.3: G->m: all/psk, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]128 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]129 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
130 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
131 localhost" \
132 1 \
133 -s "found psk key exchange modes extension" \
134 -s "found pre_shared_key extension" \
135 -s "Found PSK_EPHEMERAL KEX MODE" \
136 -s "Found PSK KEX MODE" \
137 -s "Invalid binder." \
138 -S "key exchange mode: psk$" \
139 -S "key exchange mode: psk_ephemeral" \
140 -S "key exchange mode: ephemeral"
141
142requires_gnutls_tls1_3
143requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
144requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]145run_test "TLS 1.3: G->m: psk_or_ephemeral/psk, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]146 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]147 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
148 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
149 localhost" \
150 0 \
151 -s "found psk key exchange modes extension" \
152 -s "found pre_shared_key extension" \
153 -S "Found PSK_EPHEMERAL KEX MODE" \
154 -s "Found PSK KEX MODE" \
155 -s "Pre shared key found" \
156 -S "No matched PSK or ticket" \
157 -s "key exchange mode: psk$" \
158 -S "key exchange mode: psk_ephemeral" \
159 -S "key exchange mode: ephemeral"
160
161requires_gnutls_tls1_3
162requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
163requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]164run_test "TLS 1.3: G->m: psk_or_ephemeral/psk, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]165 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]166 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
167 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
168 localhost" \
169 1 \
170 -s "found psk key exchange modes extension" \
171 -s "found pre_shared_key extension" \
172 -S "Found PSK_EPHEMERAL KEX MODE" \
173 -s "Found PSK KEX MODE" \
174 -s "No matched PSK or ticket" \
175 -S "key exchange mode: psk$" \
176 -S "key exchange mode: psk_ephemeral" \
177 -S "key exchange mode: ephemeral"
178
179requires_gnutls_tls1_3
180requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
181requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]182run_test "TLS 1.3: G->m: psk_or_ephemeral/psk, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]183 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]184 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
185 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
186 localhost" \
187 1 \
188 -s "found psk key exchange modes extension" \
189 -s "found pre_shared_key extension" \
190 -S "Found PSK_EPHEMERAL KEX MODE" \
191 -s "Found PSK KEX MODE" \
192 -s "Invalid binder." \
193 -S "key exchange mode: psk$" \
194 -S "key exchange mode: psk_ephemeral" \
195 -S "key exchange mode: ephemeral"
196
197requires_gnutls_tls1_3
198requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
199requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
200requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]201run_test "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]202 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]203 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
204 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
205 localhost" \
206 0 \
207 -s "found psk key exchange modes extension" \
208 -s "found pre_shared_key extension" \
209 -s "Found PSK_EPHEMERAL KEX MODE" \
210 -S "Found PSK KEX MODE" \
211 -s "Pre shared key found" \
212 -S "No matched PSK or ticket" \
213 -S "key exchange mode: psk$" \
214 -s "key exchange mode: psk_ephemeral" \
215 -S "key exchange mode: ephemeral"
216
217requires_gnutls_tls1_3
218requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
219requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
220requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]221run_test "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]222 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]223 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
224 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
225 localhost" \
226 1 \
227 -s "found psk key exchange modes extension" \
228 -s "found pre_shared_key extension" \
229 -s "Found PSK_EPHEMERAL KEX MODE" \
230 -S "Found PSK KEX MODE" \
231 -s "No matched PSK or ticket" \
232 -S "key exchange mode: psk$" \
233 -S "key exchange mode: psk_ephemeral" \
234 -S "key exchange mode: ephemeral"
235
236requires_gnutls_tls1_3
237requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
238requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
239requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]240run_test "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]241 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]242 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
243 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
244 localhost" \
245 1 \
246 -s "found psk key exchange modes extension" \
247 -s "found pre_shared_key extension" \
248 -s "Found PSK_EPHEMERAL KEX MODE" \
249 -S "Found PSK KEX MODE" \
250 -s "Invalid binder." \
251 -S "key exchange mode: psk$" \
252 -S "key exchange mode: psk_ephemeral" \
253 -S "key exchange mode: ephemeral"
254
255requires_gnutls_tls1_3
256requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
257requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
258requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]259run_test "TLS 1.3: G->m: all/psk_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]260 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]261 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
262 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
263 localhost" \
264 0 \
265 -s "found psk key exchange modes extension" \
266 -s "found pre_shared_key extension" \
267 -s "Found PSK_EPHEMERAL KEX MODE" \
268 -s "Found PSK KEX MODE" \
269 -s "Pre shared key found" \
270 -S "No matched PSK or ticket" \
271 -S "key exchange mode: psk$" \
272 -s "key exchange mode: psk_ephemeral" \
273 -S "key exchange mode: ephemeral"
274
275requires_gnutls_tls1_3
276requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
277requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
278requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]279run_test "TLS 1.3: G->m: all/psk_ephemeral, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]280 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]281 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
282 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
283 localhost" \
284 1 \
285 -s "found psk key exchange modes extension" \
286 -s "found pre_shared_key extension" \
287 -s "Found PSK_EPHEMERAL KEX MODE" \
288 -s "Found PSK KEX MODE" \
289 -s "No matched PSK or ticket" \
290 -S "key exchange mode: psk$" \
291 -S "key exchange mode: psk_ephemeral" \
292 -S "key exchange mode: ephemeral"
293
294requires_gnutls_tls1_3
295requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
296requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
297requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]298run_test "TLS 1.3: G->m: all/psk_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]299 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]300 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
301 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
302 localhost" \
303 1 \
304 -s "found psk key exchange modes extension" \
305 -s "found pre_shared_key extension" \
306 -s "Found PSK_EPHEMERAL KEX MODE" \
307 -s "Found PSK KEX MODE" \
308 -s "Invalid binder." \
309 -S "key exchange mode: psk$" \
310 -S "key exchange mode: psk_ephemeral" \
311 -S "key exchange mode: ephemeral"
312
313requires_gnutls_tls1_3
314requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
315requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
316requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]317run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_ephemeral, fail, no common kex mode" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]318 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]319 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
320 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
321 localhost" \
322 1 \
323 -s "found psk key exchange modes extension" \
324 -s "found pre_shared_key extension" \
325 -S "Found PSK_EPHEMERAL KEX MODE" \
326 -s "Found PSK KEX MODE" \
327 -S "key exchange mode: psk$" \
328 -S "key exchange mode: psk_ephemeral" \
329 -S "key exchange mode: ephemeral"
330
331requires_gnutls_tls1_3
332requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
333requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
334requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]335run_test "TLS 1.3: G->m: ephemeral_all/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]336 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]337 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
338 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
339 localhost" \
340 0 \
341 -s "found psk key exchange modes extension" \
342 -s "found pre_shared_key extension" \
343 -s "Found PSK_EPHEMERAL KEX MODE" \
344 -S "Found PSK KEX MODE" \
345 -s "Pre shared key found" \
346 -S "No matched PSK or ticket" \
347 -S "key exchange mode: psk$" \
348 -s "key exchange mode: psk_ephemeral" \
349 -S "key exchange mode: ephemeral"
350
351requires_gnutls_tls1_3
352requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
353requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
354requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]355run_test "TLS 1.3: G->m: ephemeral_all/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]356 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]357 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
358 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
359 localhost" \
360 1 \
361 -s "found psk key exchange modes extension" \
362 -s "found pre_shared_key extension" \
363 -s "Found PSK_EPHEMERAL KEX MODE" \
364 -S "Found PSK KEX MODE" \
365 -s "No matched PSK or ticket" \
366 -S "key exchange mode: psk$" \
367 -S "key exchange mode: psk_ephemeral" \
368 -S "key exchange mode: ephemeral"
369
370requires_gnutls_tls1_3
371requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
372requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
373requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]374run_test "TLS 1.3: G->m: ephemeral_all/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]375 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]376 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
377 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
378 localhost" \
379 1 \
380 -s "found psk key exchange modes extension" \
381 -s "found pre_shared_key extension" \
382 -s "Found PSK_EPHEMERAL KEX MODE" \
383 -S "Found PSK KEX MODE" \
384 -s "Invalid binder." \
385 -S "key exchange mode: psk$" \
386 -S "key exchange mode: psk_ephemeral" \
387 -S "key exchange mode: ephemeral"
388
389requires_gnutls_tls1_3
390requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
391requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
392requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]393run_test "TLS 1.3: G->m: all/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]394 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]395 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
396 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
397 localhost" \
398 0 \
399 -s "found psk key exchange modes extension" \
400 -s "found pre_shared_key extension" \
401 -s "Found PSK_EPHEMERAL KEX MODE" \
402 -s "Found PSK KEX MODE" \
403 -s "Pre shared key found" \
404 -S "No matched PSK or ticket" \
405 -S "key exchange mode: psk$" \
406 -s "key exchange mode: psk_ephemeral" \
407 -S "key exchange mode: ephemeral"
408
409requires_gnutls_tls1_3
410requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
411requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
412requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]413run_test "TLS 1.3: G->m: all/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]414 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]415 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
416 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
417 localhost" \
418 1 \
419 -s "found psk key exchange modes extension" \
420 -s "found pre_shared_key extension" \
421 -s "Found PSK_EPHEMERAL KEX MODE" \
422 -s "Found PSK KEX MODE" \
423 -s "No matched PSK or ticket" \
424 -S "key exchange mode: psk$" \
425 -S "key exchange mode: psk_ephemeral" \
426 -S "key exchange mode: ephemeral"
427
428requires_gnutls_tls1_3
429requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
430requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
431requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]432run_test "TLS 1.3: G->m: all/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]433 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]434 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
435 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
436 localhost" \
437 1 \
438 -s "found psk key exchange modes extension" \
439 -s "found pre_shared_key extension" \
440 -s "Found PSK_EPHEMERAL KEX MODE" \
441 -s "Found PSK KEX MODE" \
442 -s "Invalid binder." \
443 -S "key exchange mode: psk$" \
444 -S "key exchange mode: psk_ephemeral" \
445 -S "key exchange mode: ephemeral"
446
447requires_gnutls_tls1_3
448requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
449requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
450requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]451run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]452 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]453 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
454 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
455 localhost" \
456 0 \
457 -s "found psk key exchange modes extension" \
458 -s "found pre_shared_key extension" \
459 -S "Found PSK_EPHEMERAL KEX MODE" \
460 -s "Found PSK KEX MODE" \
461 -s "Pre shared key found" \
462 -S "No matched PSK or ticket" \
463 -s "key exchange mode: psk$" \
464 -S "key exchange mode: psk_ephemeral" \
465 -S "key exchange mode: ephemeral"
466
467requires_gnutls_tls1_3
468requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
469requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
470requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]471run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]472 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]473 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
474 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
475 localhost" \
476 1 \
477 -s "found psk key exchange modes extension" \
478 -s "found pre_shared_key extension" \
479 -S "Found PSK_EPHEMERAL KEX MODE" \
480 -s "Found PSK KEX MODE" \
481 -s "No matched PSK or ticket" \
482 -S "key exchange mode: psk$" \
483 -S "key exchange mode: psk_ephemeral" \
484 -S "key exchange mode: ephemeral"
485
486requires_gnutls_tls1_3
487requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
488requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
489requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]490run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]491 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]492 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
493 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
494 localhost" \
495 1 \
496 -s "found psk key exchange modes extension" \
497 -s "found pre_shared_key extension" \
498 -S "Found PSK_EPHEMERAL KEX MODE" \
499 -s "Found PSK KEX MODE" \
500 -s "Invalid binder." \
501 -S "key exchange mode: psk$" \
502 -S "key exchange mode: psk_ephemeral" \
503 -S "key exchange mode: ephemeral"
504
505requires_gnutls_tls1_3
506requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
507requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
508requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]509run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]510 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]511 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
512 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
513 localhost" \
514 0 \
515 -s "found psk key exchange modes extension" \
516 -s "found pre_shared_key extension" \
517 -s "Found PSK_EPHEMERAL KEX MODE" \
518 -S "Found PSK KEX MODE" \
519 -s "Pre shared key found" \
520 -S "No matched PSK or ticket" \
521 -S "key exchange mode: psk$" \
522 -s "key exchange mode: psk_ephemeral" \
523 -S "key exchange mode: ephemeral"
524
525requires_gnutls_tls1_3
526requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
527requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
528requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]529run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]530 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]531 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
532 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
533 localhost" \
534 0 \
535 -s "found psk key exchange modes extension" \
536 -s "found pre_shared_key extension" \
537 -s "Found PSK_EPHEMERAL KEX MODE" \
538 -S "Found PSK KEX MODE" \
539 -s "No matched PSK or ticket" \
540 -S "key exchange mode: psk$" \
541 -S "key exchange mode: psk_ephemeral" \
542 -s "key exchange mode: ephemeral"
543
544requires_gnutls_tls1_3
545requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
546requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
547requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]548run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]549 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]550 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
551 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
552 localhost" \
553 1 \
554 -s "found psk key exchange modes extension" \
555 -s "found pre_shared_key extension" \
556 -s "Found PSK_EPHEMERAL KEX MODE" \
557 -S "Found PSK KEX MODE" \
558 -s "Invalid binder." \
559 -S "key exchange mode: psk$" \
560 -S "key exchange mode: psk_ephemeral" \
561 -S "key exchange mode: ephemeral"
562
563requires_gnutls_tls1_3
564requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
565requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
566requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]567run_test "TLS 1.3: G->m: all/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]568 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]569 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
570 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
571 localhost" \
572 0 \
573 -s "found psk key exchange modes extension" \
574 -s "found pre_shared_key extension" \
575 -s "Found PSK_EPHEMERAL KEX MODE" \
576 -s "Found PSK KEX MODE" \
577 -s "Pre shared key found" \
578 -S "No matched PSK or ticket" \
579 -S "key exchange mode: psk$" \
580 -s "key exchange mode: psk_ephemeral" \
581 -S "key exchange mode: ephemeral"
582
583requires_gnutls_tls1_3
584requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
585requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
586requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]587run_test "TLS 1.3: G->m: all/ephemeral_all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]588 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]589 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
590 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
591 localhost" \
592 0 \
593 -s "found psk key exchange modes extension" \
594 -s "found pre_shared_key extension" \
595 -s "Found PSK_EPHEMERAL KEX MODE" \
596 -s "Found PSK KEX MODE" \
597 -s "No matched PSK or ticket" \
598 -S "key exchange mode: psk$" \
599 -S "key exchange mode: psk_ephemeral" \
600 -s "key exchange mode: ephemeral"
601
602requires_gnutls_tls1_3
603requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
604requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
605requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]606run_test "TLS 1.3: G->m: all/ephemeral_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]607 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]608 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
609 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
610 localhost" \
611 1 \
612 -s "found psk key exchange modes extension" \
613 -s "found pre_shared_key extension" \
614 -s "Found PSK_EPHEMERAL KEX MODE" \
615 -s "Found PSK KEX MODE" \
616 -s "Invalid binder." \
617 -S "key exchange mode: psk$" \
618 -S "key exchange mode: psk_ephemeral" \
619 -S "key exchange mode: ephemeral"
620
621requires_gnutls_tls1_3
622requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
623requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
624requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]625run_test "TLS 1.3: G->m: psk_or_ephemeral/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]626 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]627 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
628 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
629 localhost" \
630 0 \
631 -s "found psk key exchange modes extension" \
632 -s "found pre_shared_key extension" \
633 -S "Found PSK_EPHEMERAL KEX MODE" \
634 -s "Found PSK KEX MODE" \
635 -s "Pre shared key found" \
636 -S "No matched PSK or ticket" \
637 -S "key exchange mode: psk$" \
638 -S "key exchange mode: psk_ephemeral" \
639 -s "key exchange mode: ephemeral"
640
641requires_gnutls_tls1_3
642requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
643requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
644requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]645run_test "TLS 1.3: G->m: ephemeral_all/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]646 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]647 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
648 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
649 localhost" \
650 0 \
651 -s "found psk key exchange modes extension" \
652 -s "found pre_shared_key extension" \
653 -s "Found PSK_EPHEMERAL KEX MODE" \
654 -S "Found PSK KEX MODE" \
655 -s "Pre shared key found" \
656 -S "No matched PSK or ticket" \
657 -S "key exchange mode: psk$" \
658 -s "key exchange mode: psk_ephemeral" \
659 -S "key exchange mode: ephemeral"
660
661requires_gnutls_tls1_3
662requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
663requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
664requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]665run_test "TLS 1.3: G->m: ephemeral_all/all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]666 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]667 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
668 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
669 localhost" \
670 0 \
671 -s "found psk key exchange modes extension" \
672 -s "found pre_shared_key extension" \
673 -s "Found PSK_EPHEMERAL KEX MODE" \
674 -S "Found PSK KEX MODE" \
675 -s "No matched PSK or ticket" \
676 -S "key exchange mode: psk$" \
677 -S "key exchange mode: psk_ephemeral" \
678 -s "key exchange mode: ephemeral"
679
680requires_gnutls_tls1_3
681requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
682requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
683requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]684run_test "TLS 1.3: G->m: ephemeral_all/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]685 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]686 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
687 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
688 localhost" \
689 1 \
690 -s "found psk key exchange modes extension" \
691 -s "found pre_shared_key extension" \
692 -s "Found PSK_EPHEMERAL KEX MODE" \
693 -S "Found PSK KEX MODE" \
694 -s "Invalid binder." \
695 -S "key exchange mode: psk$" \
696 -S "key exchange mode: psk_ephemeral" \
697 -S "key exchange mode: ephemeral"
698
699requires_gnutls_tls1_3
700requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
701requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
702requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]703run_test "TLS 1.3: G->m: all/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]704 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]705 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
706 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
707 localhost" \
708 0 \
709 -s "found psk key exchange modes extension" \
710 -s "found pre_shared_key extension" \
711 -s "Found PSK_EPHEMERAL KEX MODE" \
712 -s "Found PSK KEX MODE" \
713 -s "Pre shared key found" \
714 -S "No matched PSK or ticket" \
715 -S "key exchange mode: psk$" \
716 -s "key exchange mode: psk_ephemeral" \
717 -S "key exchange mode: ephemeral"
718
719requires_gnutls_tls1_3
720requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
721requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
722requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]723run_test "TLS 1.3: G->m: all/all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]724 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]725 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
726 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
727 localhost" \
728 0 \
729 -s "found psk key exchange modes extension" \
730 -s "found pre_shared_key extension" \
731 -s "Found PSK_EPHEMERAL KEX MODE" \
732 -s "Found PSK KEX MODE" \
733 -s "No matched PSK or ticket" \
734 -S "key exchange mode: psk$" \
735 -S "key exchange mode: psk_ephemeral" \
736 -s "key exchange mode: ephemeral"
737
738requires_gnutls_tls1_3
739requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
740requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
741requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]742run_test "TLS 1.3: G->m: all/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]743 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]744 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
745 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
746 localhost" \
747 1 \
748 -s "found psk key exchange modes extension" \
749 -s "found pre_shared_key extension" \
750 -s "Found PSK_EPHEMERAL KEX MODE" \
751 -s "Found PSK KEX MODE" \
752 -s "Invalid binder." \
753 -S "key exchange mode: psk$" \
754 -S "key exchange mode: psk_ephemeral" \
755 -S "key exchange mode: ephemeral"
756
757requires_gnutls_tls1_3
758requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
759requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
760requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]761run_test "TLS 1.3: G->m: psk_or_ephemeral/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]762 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]763 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
764 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
765 localhost" \
766 0 \
767 -s "found psk key exchange modes extension" \
768 -s "found pre_shared_key extension" \
769 -S "Found PSK_EPHEMERAL KEX MODE" \
770 -s "Found PSK KEX MODE" \
771 -s "Pre shared key found" \
772 -S "No matched PSK or ticket" \
773 -S "key exchange mode: psk$" \
774 -S "key exchange mode: psk_ephemeral" \
775 -s "key exchange mode: ephemeral"
776
777requires_gnutls_tls1_3
778requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
779requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
780requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]781run_test "TLS 1.3: G->m: psk_or_ephemeral/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]782 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]783 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
784 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
785 localhost" \
786 1 \
787 -s "found psk key exchange modes extension" \
788 -s "found pre_shared_key extension" \
789 -S "Found PSK_EPHEMERAL KEX MODE" \
790 -s "Found PSK KEX MODE" \
791 -s "Invalid binder." \
792 -S "key exchange mode: psk$" \
793 -S "key exchange mode: psk_ephemeral" \
794 -S "key exchange mode: ephemeral"
795
796requires_gnutls_tls1_3
797requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
798requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
799requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]800run_test "TLS 1.3: G->m: ephemeral_all/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]801 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]802 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
803 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
804 localhost" \
805 0 \
806 -s "found psk key exchange modes extension" \
807 -s "found pre_shared_key extension" \
808 -s "Found PSK_EPHEMERAL KEX MODE" \
809 -S "Found PSK KEX MODE" \
810 -s "Pre shared key found" \
811 -S "No matched PSK or ticket" \
812 -S "key exchange mode: psk$" \
813 -S "key exchange mode: psk_ephemeral" \
814 -s "key exchange mode: ephemeral"
815
816requires_gnutls_tls1_3
817requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
818requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
819requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]820run_test "TLS 1.3: G->m: all/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]821 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]822 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
823 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
824 localhost" \
825 0 \
826 -s "found psk key exchange modes extension" \
827 -s "found pre_shared_key extension" \
828 -s "Found PSK_EPHEMERAL KEX MODE" \
829 -s "Found PSK KEX MODE" \
830 -s "Pre shared key found" \
831 -S "No matched PSK or ticket" \
832 -S "key exchange mode: psk$" \
833 -S "key exchange mode: psk_ephemeral" \
834 -s "key exchange mode: ephemeral"
835
836requires_gnutls_tls1_3
837requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
838requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
839requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]840run_test "TLS 1.3: G->m: all/psk_or_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]841 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]842 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
843 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
844 localhost" \
845 1 \
846 -s "found psk key exchange modes extension" \
847 -s "found pre_shared_key extension" \
848 -s "Found PSK_EPHEMERAL KEX MODE" \
849 -s "Found PSK KEX MODE" \
850 -s "Invalid binder." \
851 -S "key exchange mode: psk$" \
852 -S "key exchange mode: psk_ephemeral" \
853 -S "key exchange mode: ephemeral"
854
855requires_gnutls_tls1_3
856requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
857requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
858requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]859run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]860 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]861 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
862 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
863 localhost" \
864 0 \
865 -s "found psk key exchange modes extension" \
866 -s "found pre_shared_key extension" \
867 -S "Found PSK_EPHEMERAL KEX MODE" \
868 -s "Found PSK KEX MODE" \
869 -s "Pre shared key found" \
870 -S "No matched PSK or ticket" \
871 -S "key exchange mode: psk$" \
872 -S "key exchange mode: psk_ephemeral" \
873 -s "key exchange mode: ephemeral"
874
875requires_gnutls_tls1_3
876requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
877requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
878requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]879run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_or_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]880 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]881 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
882 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
883 localhost" \
884 1 \
885 -s "found psk key exchange modes extension" \
886 -s "found pre_shared_key extension" \
887 -S "Found PSK_EPHEMERAL KEX MODE" \
888 -s "Found PSK KEX MODE" \
889 -s "Invalid binder." \
890 -S "key exchange mode: psk$" \
891 -S "key exchange mode: psk_ephemeral" \
892 -S "key exchange mode: ephemeral"
893
Jerry Yu58af2332022-09-06 11:19:31 +0800[diff] [blame]894requires_gnutls_tls1_3
895requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
896requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
897requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
898run_test "TLS 1.3: G->m: psk_ephemeral group(secp256r1) check, good" \
899 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
900 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP256R1 \
901 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
902 localhost" \
903 0 \
904 -s "write selected_group: secp256r1" \
905 -S "key exchange mode: psk$" \
906 -s "key exchange mode: psk_ephemeral" \
907 -S "key exchange mode: ephemeral"
908
909requires_gnutls_tls1_3
910requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
911requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
912requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
913run_test "TLS 1.3: G->m: psk_ephemeral group(secp384r1) check, good" \
914 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
915 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP384R1 \
916 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
917 localhost" \
918 0 \
919 -s "write selected_group: secp384r1" \
920 -S "key exchange mode: psk$" \
921 -s "key exchange mode: psk_ephemeral" \
922 -S "key exchange mode: ephemeral"
923
924requires_gnutls_tls1_3
925requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
926requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
927requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
928run_test "TLS 1.3: G->m: psk_ephemeral group(secp521r1) check, good" \
929 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
930 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP521R1 \
931 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
932 localhost" \
933 0 \
934 -s "write selected_group: secp521r1" \
935 -S "key exchange mode: psk$" \
936 -s "key exchange mode: psk_ephemeral" \
937 -S "key exchange mode: ephemeral"
938
939requires_gnutls_tls1_3
940requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
941requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
942requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
943run_test "TLS 1.3: G->m: psk_ephemeral group(x25519) check, good" \
944 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
945 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-X25519 \
946 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
947 localhost" \
948 0 \
949 -s "write selected_group: x25519" \
950 -S "key exchange mode: psk$" \
951 -s "key exchange mode: psk_ephemeral" \
952 -S "key exchange mode: ephemeral"
953
954requires_gnutls_tls1_3
955requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
956requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
957requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
958run_test "TLS 1.3: G->m: psk_ephemeral group(x448) check, good" \
959 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
960 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-X448 \
961 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
962 localhost" \
963 0 \
964 -s "write selected_group: x448" \
965 -S "key exchange mode: psk$" \
966 -s "key exchange mode: psk_ephemeral" \
967 -S "key exchange mode: ephemeral"
968
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]969requires_openssl_tls1_3
970requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
971requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]972run_test "TLS 1.3: O->m: ephemeral_all/psk, fail, no common kex mode" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]973 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]974 "$O_NEXT_CLI -tls1_3 -msg \
975 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
976 1 \
977 -s "found psk key exchange modes extension" \
978 -s "found pre_shared_key extension" \
979 -s "Found PSK_EPHEMERAL KEX MODE" \
980 -S "Found PSK KEX MODE" \
981 -S "key exchange mode: psk$" \
982 -S "key exchange mode: psk_ephemeral" \
983 -S "key exchange mode: ephemeral"
984
985requires_openssl_tls1_3
986requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
987requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]988run_test "TLS 1.3: O->m: all/psk, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]989 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]990 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
991 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
992 0 \
993 -s "found psk key exchange modes extension" \
994 -s "found pre_shared_key extension" \
995 -s "Found PSK_EPHEMERAL KEX MODE" \
996 -s "Found PSK KEX MODE" \
997 -s "Pre shared key found" \
998 -S "No matched PSK or ticket" \
999 -s "key exchange mode: psk$" \
1000 -S "key exchange mode: psk_ephemeral" \
1001 -S "key exchange mode: ephemeral"
1002
1003requires_openssl_tls1_3
1004requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1005requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1006run_test "TLS 1.3: O->m: all/psk, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1007 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1008 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1009 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1010 1 \
1011 -s "found psk key exchange modes extension" \
1012 -s "found pre_shared_key extension" \
1013 -s "Found PSK_EPHEMERAL KEX MODE" \
1014 -s "Found PSK KEX MODE" \
1015 -s "No matched PSK or ticket" \
1016 -S "key exchange mode: psk$" \
1017 -S "key exchange mode: psk_ephemeral" \
1018 -S "key exchange mode: ephemeral"
1019
1020requires_openssl_tls1_3
1021requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1022requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1023run_test "TLS 1.3: O->m: all/psk, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1024 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1025 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1026 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1027 1 \
1028 -s "found psk key exchange modes extension" \
1029 -s "found pre_shared_key extension" \
1030 -s "Found PSK_EPHEMERAL KEX MODE" \
1031 -s "Found PSK KEX MODE" \
1032 -s "Invalid binder." \
1033 -S "key exchange mode: psk$" \
1034 -S "key exchange mode: psk_ephemeral" \
1035 -S "key exchange mode: ephemeral"
1036
1037requires_openssl_tls1_3
1038requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1039requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1040requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1041run_test "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1042 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1043 "$O_NEXT_CLI -tls1_3 -msg \
1044 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1045 0 \
1046 -s "found psk key exchange modes extension" \
1047 -s "found pre_shared_key extension" \
1048 -s "Found PSK_EPHEMERAL KEX MODE" \
1049 -S "Found PSK KEX MODE" \
1050 -s "Pre shared key found" \
1051 -S "No matched PSK or ticket" \
1052 -S "key exchange mode: psk$" \
1053 -s "key exchange mode: psk_ephemeral" \
1054 -S "key exchange mode: ephemeral"
1055
1056requires_openssl_tls1_3
1057requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1058requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1059requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1060run_test "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1061 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1062 "$O_NEXT_CLI -tls1_3 -msg \
1063 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1064 1 \
1065 -s "found psk key exchange modes extension" \
1066 -s "found pre_shared_key extension" \
1067 -s "Found PSK_EPHEMERAL KEX MODE" \
1068 -S "Found PSK KEX MODE" \
1069 -s "No matched PSK or ticket" \
1070 -S "key exchange mode: psk$" \
1071 -S "key exchange mode: psk_ephemeral" \
1072 -S "key exchange mode: ephemeral"
1073
1074requires_openssl_tls1_3
1075requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1076requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1077requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1078run_test "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1079 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1080 "$O_NEXT_CLI -tls1_3 -msg \
1081 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1082 1 \
1083 -s "found psk key exchange modes extension" \
1084 -s "found pre_shared_key extension" \
1085 -s "Found PSK_EPHEMERAL KEX MODE" \
1086 -S "Found PSK KEX MODE" \
1087 -s "Invalid binder." \
1088 -S "key exchange mode: psk$" \
1089 -S "key exchange mode: psk_ephemeral" \
1090 -S "key exchange mode: ephemeral"
1091
1092requires_openssl_tls1_3
1093requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1094requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1095requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1096run_test "TLS 1.3: O->m: all/psk_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1097 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1098 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1099 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1100 0 \
1101 -s "found psk key exchange modes extension" \
1102 -s "found pre_shared_key extension" \
1103 -s "Found PSK_EPHEMERAL KEX MODE" \
1104 -s "Found PSK KEX MODE" \
1105 -s "Pre shared key found" \
1106 -S "No matched PSK or ticket" \
1107 -S "key exchange mode: psk$" \
1108 -s "key exchange mode: psk_ephemeral" \
1109 -S "key exchange mode: ephemeral"
1110
1111requires_openssl_tls1_3
1112requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1113requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1114requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1115run_test "TLS 1.3: O->m: all/psk_ephemeral, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1116 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1117 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1118 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1119 1 \
1120 -s "found psk key exchange modes extension" \
1121 -s "found pre_shared_key extension" \
1122 -s "Found PSK_EPHEMERAL KEX MODE" \
1123 -s "Found PSK KEX MODE" \
1124 -s "No matched PSK or ticket" \
1125 -S "key exchange mode: psk$" \
1126 -S "key exchange mode: psk_ephemeral" \
1127 -S "key exchange mode: ephemeral"
1128
1129requires_openssl_tls1_3
1130requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1131requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1132requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1133run_test "TLS 1.3: O->m: all/psk_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1134 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1135 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1136 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1137 1 \
1138 -s "found psk key exchange modes extension" \
1139 -s "found pre_shared_key extension" \
1140 -s "Found PSK_EPHEMERAL KEX MODE" \
1141 -s "Found PSK KEX MODE" \
1142 -s "Invalid binder." \
1143 -S "key exchange mode: psk$" \
1144 -S "key exchange mode: psk_ephemeral" \
1145 -S "key exchange mode: ephemeral"
1146
1147requires_openssl_tls1_3
1148requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1149requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1150requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1151run_test "TLS 1.3: O->m: ephemeral_all/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1152 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1153 "$O_NEXT_CLI -tls1_3 -msg \
1154 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1155 0 \
1156 -s "found psk key exchange modes extension" \
1157 -s "found pre_shared_key extension" \
1158 -s "Found PSK_EPHEMERAL KEX MODE" \
1159 -S "Found PSK KEX MODE" \
1160 -s "Pre shared key found" \
1161 -S "No matched PSK or ticket" \
1162 -S "key exchange mode: psk$" \
1163 -s "key exchange mode: psk_ephemeral" \
1164 -S "key exchange mode: ephemeral"
1165
1166requires_openssl_tls1_3
1167requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1168requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1169requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1170run_test "TLS 1.3: O->m: ephemeral_all/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1171 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1172 "$O_NEXT_CLI -tls1_3 -msg \
1173 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1174 1 \
1175 -s "found psk key exchange modes extension" \
1176 -s "found pre_shared_key extension" \
1177 -s "Found PSK_EPHEMERAL KEX MODE" \
1178 -S "Found PSK KEX MODE" \
1179 -s "No matched PSK or ticket" \
1180 -S "key exchange mode: psk$" \
1181 -S "key exchange mode: psk_ephemeral" \
1182 -S "key exchange mode: ephemeral"
1183
1184requires_openssl_tls1_3
1185requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1186requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1187requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1188run_test "TLS 1.3: O->m: ephemeral_all/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1189 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1190 "$O_NEXT_CLI -tls1_3 -msg \
1191 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1192 1 \
1193 -s "found psk key exchange modes extension" \
1194 -s "found pre_shared_key extension" \
1195 -s "Found PSK_EPHEMERAL KEX MODE" \
1196 -S "Found PSK KEX MODE" \
1197 -s "Invalid binder." \
1198 -S "key exchange mode: psk$" \
1199 -S "key exchange mode: psk_ephemeral" \
1200 -S "key exchange mode: ephemeral"
1201
1202requires_openssl_tls1_3
1203requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1204requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1205requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1206run_test "TLS 1.3: O->m: all/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1207 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1208 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1209 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1210 0 \
1211 -s "found psk key exchange modes extension" \
1212 -s "found pre_shared_key extension" \
1213 -s "Found PSK_EPHEMERAL KEX MODE" \
1214 -s "Found PSK KEX MODE" \
1215 -s "Pre shared key found" \
1216 -S "No matched PSK or ticket" \
1217 -S "key exchange mode: psk$" \
1218 -s "key exchange mode: psk_ephemeral" \
1219 -S "key exchange mode: ephemeral"
1220
1221requires_openssl_tls1_3
1222requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1223requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1224requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1225run_test "TLS 1.3: O->m: all/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1226 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1227 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1228 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1229 1 \
1230 -s "found psk key exchange modes extension" \
1231 -s "found pre_shared_key extension" \
1232 -s "Found PSK_EPHEMERAL KEX MODE" \
1233 -s "Found PSK KEX MODE" \
1234 -s "No matched PSK or ticket" \
1235 -S "key exchange mode: psk$" \
1236 -S "key exchange mode: psk_ephemeral" \
1237 -S "key exchange mode: ephemeral"
1238
1239requires_openssl_tls1_3
1240requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1241requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1242requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1243run_test "TLS 1.3: O->m: all/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1244 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1245 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1246 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1247 1 \
1248 -s "found psk key exchange modes extension" \
1249 -s "found pre_shared_key extension" \
1250 -s "Found PSK_EPHEMERAL KEX MODE" \
1251 -s "Found PSK KEX MODE" \
1252 -s "Invalid binder." \
1253 -S "key exchange mode: psk$" \
1254 -S "key exchange mode: psk_ephemeral" \
1255 -S "key exchange mode: ephemeral"
1256
1257requires_openssl_tls1_3
1258requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1259requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1260requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1261run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1262 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1263 "$O_NEXT_CLI -tls1_3 -msg \
1264 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1265 0 \
1266 -s "found psk key exchange modes extension" \
1267 -s "found pre_shared_key extension" \
1268 -s "Found PSK_EPHEMERAL KEX MODE" \
1269 -S "Found PSK KEX MODE" \
1270 -s "Pre shared key found" \
1271 -S "No matched PSK or ticket" \
1272 -S "key exchange mode: psk$" \
1273 -s "key exchange mode: psk_ephemeral" \
1274 -S "key exchange mode: ephemeral"
1275
1276requires_openssl_tls1_3
1277requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1278requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1279requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1280run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1281 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1282 "$O_NEXT_CLI -tls1_3 -msg \
1283 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1284 0 \
1285 -s "found psk key exchange modes extension" \
1286 -s "found pre_shared_key extension" \
1287 -s "Found PSK_EPHEMERAL KEX MODE" \
1288 -S "Found PSK KEX MODE" \
1289 -s "No matched PSK or ticket" \
1290 -S "key exchange mode: psk$" \
1291 -S "key exchange mode: psk_ephemeral" \
1292 -s "key exchange mode: ephemeral"
1293
1294requires_openssl_tls1_3
1295requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1296requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1297requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1298run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1299 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1300 "$O_NEXT_CLI -tls1_3 -msg \
1301 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1302 1 \
1303 -s "found psk key exchange modes extension" \
1304 -s "found pre_shared_key extension" \
1305 -s "Found PSK_EPHEMERAL KEX MODE" \
1306 -S "Found PSK KEX MODE" \
1307 -s "Invalid binder." \
1308 -S "key exchange mode: psk$" \
1309 -S "key exchange mode: psk_ephemeral" \
1310 -S "key exchange mode: ephemeral"
1311
1312requires_openssl_tls1_3
1313requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1314requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1315requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1316run_test "TLS 1.3: O->m: all/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1317 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1318 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1319 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1320 0 \
1321 -s "found psk key exchange modes extension" \
1322 -s "found pre_shared_key extension" \
1323 -s "Found PSK_EPHEMERAL KEX MODE" \
1324 -s "Found PSK KEX MODE" \
1325 -s "Pre shared key found" \
1326 -S "No matched PSK or ticket" \
1327 -S "key exchange mode: psk$" \
1328 -s "key exchange mode: psk_ephemeral" \
1329 -S "key exchange mode: ephemeral"
1330
1331requires_openssl_tls1_3
1332requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1333requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1334requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1335run_test "TLS 1.3: O->m: all/ephemeral_all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1336 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1337 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1338 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1339 0 \
1340 -s "found psk key exchange modes extension" \
1341 -s "found pre_shared_key extension" \
1342 -s "Found PSK_EPHEMERAL KEX MODE" \
1343 -s "Found PSK KEX MODE" \
1344 -s "No matched PSK or ticket" \
1345 -S "key exchange mode: psk$" \
1346 -S "key exchange mode: psk_ephemeral" \
1347 -s "key exchange mode: ephemeral"
1348
1349requires_openssl_tls1_3
1350requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1351requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1352requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1353run_test "TLS 1.3: O->m: all/ephemeral_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1354 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1355 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1356 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1357 1 \
1358 -s "found psk key exchange modes extension" \
1359 -s "found pre_shared_key extension" \
1360 -s "Found PSK_EPHEMERAL KEX MODE" \
1361 -s "Found PSK KEX MODE" \
1362 -s "Invalid binder." \
1363 -S "key exchange mode: psk$" \
1364 -S "key exchange mode: psk_ephemeral" \
1365 -S "key exchange mode: ephemeral"
1366
1367requires_openssl_tls1_3
1368requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1369requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1370requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1371run_test "TLS 1.3: O->m: ephemeral_all/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1372 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1373 "$O_NEXT_CLI -tls1_3 -msg \
1374 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1375 0 \
1376 -s "found psk key exchange modes extension" \
1377 -s "found pre_shared_key extension" \
1378 -s "Found PSK_EPHEMERAL KEX MODE" \
1379 -S "Found PSK KEX MODE" \
1380 -s "Pre shared key found" \
1381 -S "No matched PSK or ticket" \
1382 -S "key exchange mode: psk$" \
1383 -s "key exchange mode: psk_ephemeral" \
1384 -S "key exchange mode: ephemeral"
1385
1386requires_openssl_tls1_3
1387requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1388requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1389requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1390run_test "TLS 1.3: O->m: ephemeral_all/all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1391 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1392 "$O_NEXT_CLI -tls1_3 -msg \
1393 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1394 0 \
1395 -s "found psk key exchange modes extension" \
1396 -s "found pre_shared_key extension" \
1397 -s "Found PSK_EPHEMERAL KEX MODE" \
1398 -S "Found PSK KEX MODE" \
1399 -s "No matched PSK or ticket" \
1400 -S "key exchange mode: psk$" \
1401 -S "key exchange mode: psk_ephemeral" \
1402 -s "key exchange mode: ephemeral"
1403
1404requires_openssl_tls1_3
1405requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1406requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1407requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1408run_test "TLS 1.3: O->m: ephemeral_all/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1409 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1410 "$O_NEXT_CLI -tls1_3 -msg \
1411 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1412 1 \
1413 -s "found psk key exchange modes extension" \
1414 -s "found pre_shared_key extension" \
1415 -s "Found PSK_EPHEMERAL KEX MODE" \
1416 -S "Found PSK KEX MODE" \
1417 -s "Invalid binder." \
1418 -S "key exchange mode: psk$" \
1419 -S "key exchange mode: psk_ephemeral" \
1420 -S "key exchange mode: ephemeral"
1421
1422requires_openssl_tls1_3
1423requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1424requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1425requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1426run_test "TLS 1.3: O->m: all/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1427 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1428 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1429 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1430 0 \
1431 -s "found psk key exchange modes extension" \
1432 -s "found pre_shared_key extension" \
1433 -s "Found PSK_EPHEMERAL KEX MODE" \
1434 -s "Found PSK KEX MODE" \
1435 -s "Pre shared key found" \
1436 -S "No matched PSK or ticket" \
1437 -S "key exchange mode: psk$" \
1438 -s "key exchange mode: psk_ephemeral" \
1439 -S "key exchange mode: ephemeral"
1440
1441requires_openssl_tls1_3
1442requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1443requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1444requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1445run_test "TLS 1.3: O->m: all/all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1446 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1447 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1448 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1449 0 \
1450 -s "found psk key exchange modes extension" \
1451 -s "found pre_shared_key extension" \
1452 -s "Found PSK_EPHEMERAL KEX MODE" \
1453 -s "Found PSK KEX MODE" \
1454 -s "No matched PSK or ticket" \
1455 -S "key exchange mode: psk$" \
1456 -S "key exchange mode: psk_ephemeral" \
1457 -s "key exchange mode: ephemeral"
1458
1459requires_openssl_tls1_3
1460requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1461requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1462requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1463run_test "TLS 1.3: O->m: all/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1464 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1465 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1466 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1467 1 \
1468 -s "found psk key exchange modes extension" \
1469 -s "found pre_shared_key extension" \
1470 -s "Found PSK_EPHEMERAL KEX MODE" \
1471 -s "Found PSK KEX MODE" \
1472 -s "Invalid binder." \
1473 -S "key exchange mode: psk$" \
1474 -S "key exchange mode: psk_ephemeral" \
1475 -S "key exchange mode: ephemeral"
1476
1477requires_openssl_tls1_3
1478requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1479requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1480requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1481run_test "TLS 1.3: O->m: ephemeral_all/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1482 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1483 "$O_NEXT_CLI -tls1_3 -msg \
1484 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1485 0 \
1486 -s "found psk key exchange modes extension" \
1487 -s "found pre_shared_key extension" \
1488 -s "Found PSK_EPHEMERAL KEX MODE" \
1489 -S "Found PSK KEX MODE" \
1490 -s "Pre shared key found" \
1491 -S "No matched PSK or ticket" \
1492 -S "key exchange mode: psk$" \
1493 -S "key exchange mode: psk_ephemeral" \
1494 -s "key exchange mode: ephemeral"
1495
1496requires_openssl_tls1_3
1497requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1498requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1499requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1500run_test "TLS 1.3: O->m: all/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1501 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1502 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1503 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1504 0 \
1505 -s "found psk key exchange modes extension" \
1506 -s "found pre_shared_key extension" \
1507 -s "Found PSK_EPHEMERAL KEX MODE" \
1508 -s "Found PSK KEX MODE" \
1509 -s "Pre shared key found" \
1510 -S "No matched PSK or ticket" \
1511 -S "key exchange mode: psk$" \
1512 -S "key exchange mode: psk_ephemeral" \
1513 -s "key exchange mode: ephemeral"
1514
1515requires_openssl_tls1_3
1516requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1517requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1518requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1519run_test "TLS 1.3: O->m: all/psk_or_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1520 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1521 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1522 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1523 1 \
1524 -s "found psk key exchange modes extension" \
1525 -s "found pre_shared_key extension" \
1526 -s "Found PSK_EPHEMERAL KEX MODE" \
1527 -s "Found PSK KEX MODE" \
1528 -s "Invalid binder." \
1529 -S "key exchange mode: psk$" \
1530 -S "key exchange mode: psk_ephemeral" \
1531 -S "key exchange mode: ephemeral"
Jerry Yu58af2332022-09-06 11:19:31 +0800[diff] [blame]1532
1533requires_openssl_tls1_3
1534requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1535requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1536requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1537run_test "TLS 1.3: O->m: psk_ephemeral group(secp256r1) check, good" \
1538 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1539 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups P-256 \
1540 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1541 0 \
1542 -s "write selected_group: secp256r1" \
1543 -S "key exchange mode: psk$" \
1544 -s "key exchange mode: psk_ephemeral" \
1545 -S "key exchange mode: ephemeral"
1546
1547requires_openssl_tls1_3
1548requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1549requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1550requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1551run_test "TLS 1.3: O->m: psk_ephemeral group(secp384r1) check, good" \
1552 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1553 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups secp384r1 \
1554 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1555 0 \
1556 -s "write selected_group: secp384r1" \
1557 -S "key exchange mode: psk$" \
1558 -s "key exchange mode: psk_ephemeral" \
1559 -S "key exchange mode: ephemeral"
1560
1561requires_openssl_tls1_3
1562requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1563requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1564requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1565run_test "TLS 1.3: O->m: psk_ephemeral group(secp521r1) check, good" \
1566 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1567 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups secp521r1 \
1568 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1569 0 \
1570 -s "write selected_group: secp521r1" \
1571 -S "key exchange mode: psk$" \
1572 -s "key exchange mode: psk_ephemeral" \
1573 -S "key exchange mode: ephemeral"
1574
1575requires_openssl_tls1_3
1576requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1577requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1578requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1579run_test "TLS 1.3: O->m: psk_ephemeral group(x25519) check, good" \
1580 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1581 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups X25519 \
1582 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1583 0 \
1584 -s "write selected_group: x25519" \
1585 -S "key exchange mode: psk$" \
1586 -s "key exchange mode: psk_ephemeral" \
1587 -S "key exchange mode: ephemeral"
1588
1589requires_openssl_tls1_3
1590requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1591requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1592requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1593run_test "TLS 1.3: O->m: psk_ephemeral group(x448) check, good" \
1594 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1595 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups X448 \
1596 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1597 0 \
1598 -s "write selected_group: x448" \
1599 -S "key exchange mode: psk$" \
1600 -s "key exchange mode: psk_ephemeral" \
1601 -S "key exchange mode: ephemeral"
Jerry Yu2db49df2022-09-21 11:03:28 +0800[diff] [blame]1602
1603requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1604requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1605requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1606requires_openssl_tls1_3
1607run_test "TLS 1.3 O->m: psk_ephemeral group(secp256r1->secp384r1) check, good" \
Jerry Yu93706122022-09-21 22:44:24 +0800[diff] [blame]1608 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef curves=secp384r1" \
1609 "$O_NEXT_CLI_NO_CERT -tls1_3 -msg -allow_no_dhe_kex -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70 -groups P-256:P-384" \
Jerry Yu2db49df2022-09-21 11:03:28 +0800[diff] [blame]1610 0 \
1611 -s "write selected_group: secp384r1" \
1612 -s "HRR selected_group: secp384r1" \
1613 -S "key exchange mode: psk$" \
1614 -s "key exchange mode: psk_ephemeral" \
1615 -S "key exchange mode: ephemeral"
1616
1617requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1618requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1619requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1620requires_gnutls_tls1_3
1621requires_gnutls_next_no_ticket
1622requires_gnutls_next_disable_tls13_compat
1623run_test "TLS 1.3 G->m: psk_ephemeral group(secp256r1->secp384r1) check, good" \
Jerry Yu93706122022-09-21 22:44:24 +0800[diff] [blame]1624 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef curves=secp384r1" \
1625 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1 --pskusername Client_identity --pskkey 6162636465666768696a6b6c6d6e6f70 localhost" \
Jerry Yu2db49df2022-09-21 11:03:28 +0800[diff] [blame]1626 0 \
1627 -s "write selected_group: secp384r1" \
1628 -s "HRR selected_group: secp384r1" \
1629 -S "key exchange mode: psk$" \
1630 -s "key exchange mode: psk_ephemeral" \
1631 -S "key exchange mode: ephemeral"
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1632
1633
1634# Add psk test cases for mbedtls client code
1635
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1636# MbedTls->MbedTLS kinds of tls13_kex_modes
1637# PSK mode in client
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1638requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1639requires_config_enabled MBEDTLS_SSL_SRV_C
1640requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1641run_test "TLS 1.3: m->m psk / psk, good" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1642 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1643 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1644 0 \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1645 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1646 -c "client hello, adding psk_key_exchange_modes extension" \
1647 -c "client hello, adding PSK binder list" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1648 -c "HTTP/1.0 200 OK"
1649
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1650requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1651requires_config_enabled MBEDTLS_SSL_SRV_C
1652requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1653run_test "TLS 1.3: m->m psk / psk, fail - no common id" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1654 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1655 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
1656 1 \
1657 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1658 -c "client hello, adding psk_key_exchange_modes extension" \
1659 -c "client hello, adding PSK binder list" \
1660 -s "No matched PSK or ticket" \
1661 -s "ClientHello message misses mandatory extensions."
1662
1663requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1664requires_config_enabled MBEDTLS_SSL_SRV_C
1665requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1666run_test "TLS 1.3: m->m psk / psk, fail - no common psk" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1667 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1668 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
1669 1 \
1670 -c "skip pre_shared_key extensions" \
1671 -c "client hello, adding psk_key_exchange_modes extension" \
1672 -s "ClientHello message misses mandatory extensions."
1673
1674requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1675requires_config_enabled MBEDTLS_SSL_SRV_C
1676requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1677run_test "TLS 1.3: m->m psk / psk_ephemeral, fail - no common kex mode" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1678 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1679 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1680 1 \
1681 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1682 -c "client hello, adding psk_key_exchange_modes extension" \
1683 -c "client hello, adding PSK binder list" \
1684 -s "ClientHello message misses mandatory extensions."
1685
1686requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1687requires_config_enabled MBEDTLS_SSL_SRV_C
1688requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1689run_test "TLS 1.3: m->m psk / ephemeral, fail - no common kex mode" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1690 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1691 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1692 1 \
1693 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1694 -c "client hello, adding psk_key_exchange_modes extension" \
1695 -c "client hello, adding PSK binder list" \
1696 -s "ClientHello message misses mandatory extensions."
1697
1698requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1699requires_config_enabled MBEDTLS_SSL_SRV_C
1700requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1701run_test "TLS 1.3: m->m psk / ephemeral_all, fail - no common kex mode" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1702 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1703 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1704 1 \
1705 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1706 -c "client hello, adding psk_key_exchange_modes extension" \
1707 -c "client hello, adding PSK binder list" \
1708 -s "ClientHello message misses mandatory extensions."
1709
1710requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1711requires_config_enabled MBEDTLS_SSL_SRV_C
1712requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1713run_test "TLS 1.3: m->m psk / psk_all, good" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1714 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1715 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1716 0 \
1717 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1718 -c "client hello, adding psk_key_exchange_modes extension" \
1719 -c "client hello, adding PSK binder list" \
1720 -c "HTTP/1.0 200 OK"
1721
1722requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1723requires_config_enabled MBEDTLS_SSL_SRV_C
1724requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1725run_test "TLS 1.3: m->m psk / psk_all, fail - no common id" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1726 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1727 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
1728 1 \
1729 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1730 -c "client hello, adding psk_key_exchange_modes extension" \
1731 -c "client hello, adding PSK binder list" \
1732 -s "No matched PSK or ticket" \
1733 -s "ClientHello message misses mandatory extensions."
1734
1735requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1736requires_config_enabled MBEDTLS_SSL_SRV_C
1737requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1738run_test "TLS 1.3: m->m psk / psk_all, fail - no common psk" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1739 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1740 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
1741 1 \
1742 -c "skip pre_shared_key extensions" \
1743 -c "client hello, adding psk_key_exchange_modes extension" \
1744 -s "ClientHello message misses mandatory extensions."
1745
1746requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1747requires_config_enabled MBEDTLS_SSL_SRV_C
1748requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1749run_test "TLS 1.3: m->m psk / all, good" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1750 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1751 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1752 0 \
1753 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1754 -c "client hello, adding psk_key_exchange_modes extension" \
1755 -c "client hello, adding PSK binder list" \
1756 -c "HTTP/1.0 200 OK"
1757
1758requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1759requires_config_enabled MBEDTLS_SSL_SRV_C
1760requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1761run_test "TLS 1.3: m->m psk / all, fail - no common id" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1762 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1763 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
1764 1 \
1765 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1766 -c "client hello, adding psk_key_exchange_modes extension" \
1767 -c "client hello, adding PSK binder list" \
1768 -s "No matched PSK or ticket" \
1769 -s "ClientHello message misses mandatory extensions."
1770
1771requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1772requires_config_enabled MBEDTLS_SSL_SRV_C
1773requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1774run_test "TLS 1.3: m->m psk / all, fail - no common psk" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1775 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1776 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
1777 1 \
1778 -c "skip pre_shared_key extensions" \
1779 -c "client hello, adding psk_key_exchange_modes extension" \
1780 -s "ClientHello message misses mandatory extensions."
1781
1782# psk_ephemeral mode in client
1783requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1784requires_config_enabled MBEDTLS_SSL_SRV_C
1785requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1786run_test "TLS 1.3: m->m psk_ephemeral / psk, fail - no common kex mode" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1787 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1788 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1789 1 \
1790 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1791 -c "client hello, adding psk_key_exchange_modes extension" \
1792 -c "client hello, adding PSK binder list" \
1793 -s "ClientHello message misses mandatory extensions."
1794
1795requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1796requires_config_enabled MBEDTLS_SSL_SRV_C
1797requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1798run_test "TLS 1.3: m->m psk_ephemeral / psk_ephemeral, good" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1799 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1800 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1801 0 \
1802 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1803 -c "client hello, adding psk_key_exchange_modes extension" \
1804 -c "client hello, adding PSK binder list" \
1805 -c "HTTP/1.0 200 OK"
1806
1807requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1808requires_config_enabled MBEDTLS_SSL_SRV_C
1809requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1810run_test "TLS 1.3: m->m psk_ephemeral / psk_ephemeral, fail - no common id" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1811 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1812 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
1813 1 \
1814 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1815 -c "client hello, adding psk_key_exchange_modes extension" \
1816 -c "client hello, adding PSK binder list" \
1817 -s "No matched PSK or ticket" \
1818 -s "ClientHello message misses mandatory extensions."
1819
1820requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1821requires_config_enabled MBEDTLS_SSL_SRV_C
1822requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1823run_test "TLS 1.3: m->m psk_ephemeral / psk_ephemeral, fail - no common psk" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1824 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1825 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1826 1 \
1827 -c "skip pre_shared_key extensions" \
1828 -c "client hello, adding psk_key_exchange_modes extension" \
1829 -s "ClientHello message misses mandatory extensions."
1830
1831requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1832requires_config_enabled MBEDTLS_SSL_SRV_C
1833requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1834run_test "TLS 1.3: m->m psk_ephemeral / ephemeral, fail - no common kex mode" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1835 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1836 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1837 1 \
1838 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1839 -c "client hello, adding psk_key_exchange_modes extension" \
1840 -c "client hello, adding PSK binder list" \
1841 -s "ClientHello message misses mandatory extensions."
1842
1843requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1844requires_config_enabled MBEDTLS_SSL_SRV_C
1845requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1846run_test "TLS 1.3: m->m psk_ephemeral / ephemeral_all, good" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1847 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1848 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1849 0 \
1850 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1851 -c "client hello, adding psk_key_exchange_modes extension" \
1852 -c "client hello, adding PSK binder list" \
1853 -c "HTTP/1.0 200 OK"
1854
1855requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1856requires_config_enabled MBEDTLS_SSL_SRV_C
1857requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1858run_test "TLS 1.3: m->m psk_ephemeral / ephemeral_all, fail - no common id" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1859 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1860 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
1861 1 \
1862 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1863 -c "client hello, adding psk_key_exchange_modes extension" \
1864 -c "client hello, adding PSK binder list" \
1865 -s "No matched PSK or ticket" \
1866 -s "ClientHello message misses mandatory extensions."
1867
1868requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1869requires_config_enabled MBEDTLS_SSL_SRV_C
1870requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1871run_test "TLS 1.3: m->m psk_ephemeral / ephemeral_all, fail - no common psk" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1872 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1873 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1874 1 \
1875 -c "skip pre_shared_key extensions" \
1876 -c "client hello, adding psk_key_exchange_modes extension" \
1877 -s "ClientHello message misses mandatory extensions."
1878
1879requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1880requires_config_enabled MBEDTLS_SSL_SRV_C
1881requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1882run_test "TLS 1.3: m->m psk_ephemeral / psk_all, good" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1883 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1884 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1885 0 \
1886 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1887 -c "client hello, adding psk_key_exchange_modes extension" \
1888 -c "client hello, adding PSK binder list" \
1889 -c "HTTP/1.0 200 OK"
1890
1891requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1892requires_config_enabled MBEDTLS_SSL_SRV_C
1893requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1894run_test "TLS 1.3: m->m psk_ephemeral / psk_all, fail - no common id" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1895 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1896 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
1897 1 \
1898 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1899 -c "client hello, adding psk_key_exchange_modes extension" \
1900 -c "client hello, adding PSK binder list" \
1901 -s "No matched PSK or ticket" \
1902 -s "ClientHello message misses mandatory extensions."
1903
1904requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1905requires_config_enabled MBEDTLS_SSL_SRV_C
1906requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1907run_test "TLS 1.3: m->m psk_ephemeral / psk_all, fail - no common psk" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1908 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1909 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1910 1 \
1911 -c "skip pre_shared_key extensions" \
1912 -c "client hello, adding psk_key_exchange_modes extension" \
1913 -s "ClientHello message misses mandatory extensions."
1914
1915requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1916requires_config_enabled MBEDTLS_SSL_SRV_C
1917requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1918run_test "TLS 1.3: m->m psk_ephemeral / all, good" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1919 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1920 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1921 0 \
1922 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1923 -c "client hello, adding psk_key_exchange_modes extension" \
1924 -c "client hello, adding PSK binder list" \
1925 -c "HTTP/1.0 200 OK"
1926
1927requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1928requires_config_enabled MBEDTLS_SSL_SRV_C
1929requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1930run_test "TLS 1.3: m->m psk_ephemeral / all, fail - no common id" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1931 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1932 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
1933 1 \
1934 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1935 -c "client hello, adding psk_key_exchange_modes extension" \
1936 -c "client hello, adding PSK binder list" \
1937 -s "No matched PSK or ticket" \
1938 -s "ClientHello message misses mandatory extensions."
1939
1940requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1941requires_config_enabled MBEDTLS_SSL_SRV_C
1942requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1943run_test "TLS 1.3: m->m psk_ephemeral / all, fail - no common psk" \
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1944 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1945 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1946 1 \
1947 -c "skip pre_shared_key extensions" \
1948 -c "client hello, adding psk_key_exchange_modes extension" \
1949 -s "ClientHello message misses mandatory extensions."
1950
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]1951# ephemeral mode in client
1952requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1953requires_config_enabled MBEDTLS_SSL_SRV_C
1954requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1955run_test "TLS 1.3: m->m ephemeral / psk, fail - no common kex mode" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]1956 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1957 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1958 1 \
1959 -s "ClientHello message misses mandatory extensions."
1960
1961requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1962requires_config_enabled MBEDTLS_SSL_SRV_C
1963requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1964run_test "TLS 1.3: m->m ephemeral / psk_ephemeral, fail - no common kex mode" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]1965 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1966 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1967 1 \
1968 -s "ClientHello message misses mandatory extensions."
1969
1970requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1971requires_config_enabled MBEDTLS_SSL_SRV_C
1972requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1973run_test "TLS 1.3: m->m ephemeral / ephemeral, good" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]1974 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1975 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1976 0 \
1977 -c "HTTP/1.0 200 OK"
1978
1979requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1980requires_config_enabled MBEDTLS_SSL_SRV_C
1981requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]1982run_test "TLS 1.3: m->m ephemeral / ephemeral_all, good" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]1983 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1984 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1985 0 \
1986 -c "HTTP/1.0 200 OK"
1987
1988requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1989requires_config_enabled MBEDTLS_SSL_SRV_C
1990requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]1991run_test "TLS 1.3: m->m ephemeral / psk_all, fail - no common kex mode" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]1992 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1993 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1994 1 \
1995 -s "ClientHello message misses mandatory extensions."
1996
1997requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1998requires_config_enabled MBEDTLS_SSL_SRV_C
1999requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2000run_test "TLS 1.3: m->m ephemeral / all, good" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2001 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2002 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
2003 0 \
2004 -c "HTTP/1.0 200 OK"
2005
2006# ephemeral_all mode in client
2007requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2008requires_config_enabled MBEDTLS_SSL_SRV_C
2009requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2010run_test "TLS 1.3: m->m ephemeral_all / psk, fail - no common kex mode" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2011 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
2012 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2013 1 \
2014 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2015 -c "client hello, adding psk_key_exchange_modes extension" \
2016 -c "client hello, adding PSK binder list" \
2017 -s "ClientHello message misses mandatory extensions."
2018
2019requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2020requires_config_enabled MBEDTLS_SSL_SRV_C
2021requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2022run_test "TLS 1.3: m->m ephemeral_all / psk_ephemeral, good" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2023 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2024 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2025 0 \
2026 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2027 -c "client hello, adding psk_key_exchange_modes extension" \
2028 -c "client hello, adding PSK binder list" \
2029 -c "HTTP/1.0 200 OK"
2030
2031requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2032requires_config_enabled MBEDTLS_SSL_SRV_C
2033requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2034run_test "TLS 1.3: m->m ephemeral_all / psk_ephemeral, fail - no common id" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2035 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2036 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
2037 0 \
2038 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2039 -c "client hello, adding psk_key_exchange_modes extension" \
2040 -c "client hello, adding PSK binder list" \
2041 -s "No matched PSK or ticket" \
2042 -s "key exchange mode: ephemeral"
2043
2044requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2045requires_config_enabled MBEDTLS_SSL_SRV_C
2046requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2047run_test "TLS 1.3: m->m ephemeral_all / psk_ephemeral, fail - no common psk" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2048 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2049 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2050 0 \
2051 -c "skip pre_shared_key extensions" \
2052 -c "client hello, adding psk_key_exchange_modes extension" \
2053 -s "key exchange mode: ephemeral"
2054
2055requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2056requires_config_enabled MBEDTLS_SSL_SRV_C
2057requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2058run_test "TLS 1.3: m->m ephemeral_all / ephemeral, good" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2059 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
2060 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2061 0 \
2062 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2063 -c "client hello, adding psk_key_exchange_modes extension" \
2064 -c "client hello, adding PSK binder list" \
2065 -s "key exchange mode: ephemeral" \
2066 -c "HTTP/1.0 200 OK"
2067
2068requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2069requires_config_enabled MBEDTLS_SSL_SRV_C
2070requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2071run_test "TLS 1.3: m->m ephemeral_all / ephemeral_all, good" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2072 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2073 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2074 0 \
2075 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2076 -c "client hello, adding psk_key_exchange_modes extension" \
2077 -c "client hello, adding PSK binder list" \
2078 -c "HTTP/1.0 200 OK"
2079
2080requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2081requires_config_enabled MBEDTLS_SSL_SRV_C
2082requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2083run_test "TLS 1.3: m->m ephemeral_all/ephemeral_all,good,fallback to ephemeral" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2084 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2085 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
2086 0 \
2087 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2088 -c "client hello, adding psk_key_exchange_modes extension" \
2089 -c "client hello, adding PSK binder list" \
2090 -s "No matched PSK or ticket" \
2091 -s "key exchange mode: ephemeral"
2092
2093requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2094requires_config_enabled MBEDTLS_SSL_SRV_C
2095requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2096run_test "TLS 1.3: m->m ephemeral_all / psk_all, good" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2097 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2098 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2099 0 \
2100 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2101 -c "client hello, adding psk_key_exchange_modes extension" \
2102 -c "client hello, adding PSK binder list" \
2103 -c "HTTP/1.0 200 OK"
2104
2105requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2106requires_config_enabled MBEDTLS_SSL_SRV_C
2107requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2108run_test "TLS 1.3: m->m ephemeral_all / psk_all, fail - no common id" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2109 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2110 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
2111 1 \
2112 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2113 -c "client hello, adding psk_key_exchange_modes extension" \
2114 -c "client hello, adding PSK binder list" \
2115 -s "No matched PSK or ticket" \
2116 -s "ClientHello message misses mandatory extensions."
2117
2118requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2119requires_config_enabled MBEDTLS_SSL_SRV_C
2120requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2121run_test "TLS 1.3: m->m ephemeral_all / psk_all, fail - no common psk" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2122 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2123 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2124 1 \
2125 -c "skip pre_shared_key extensions" \
2126 -c "client hello, adding psk_key_exchange_modes extension" \
2127 -s "ClientHello message misses mandatory extensions."
2128
2129requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2130requires_config_enabled MBEDTLS_SSL_SRV_C
2131requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2132run_test "TLS 1.3: m->m ephemeral_all / all, good" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2133 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2134 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2135 0 \
2136 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2137 -c "client hello, adding psk_key_exchange_modes extension" \
2138 -c "client hello, adding PSK binder list" \
2139 -c "HTTP/1.0 200 OK"
2140
2141requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2142requires_config_enabled MBEDTLS_SSL_SRV_C
2143requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2144run_test "TLS 1.3: m->m ephemeral_all / all, fail - no common id" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2145 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2146 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
2147 0 \
2148 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2149 -c "client hello, adding psk_key_exchange_modes extension" \
2150 -c "client hello, adding PSK binder list" \
2151 -s "No matched PSK or ticket" \
2152 -s "key exchange mode: ephemeral"
2153
2154requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2155requires_config_enabled MBEDTLS_SSL_SRV_C
2156requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2157run_test "TLS 1.3: m->m ephemeral_all / all, fail - no common psk" \
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame]2158 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2159 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2160 0 \
2161 -c "skip pre_shared_key extensions" \
2162 -c "client hello, adding psk_key_exchange_modes extension" \
2163 -s "key exchange mode: ephemeral"
2164
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2165# psk_all mode in client
2166requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2167requires_config_enabled MBEDTLS_SSL_SRV_C
2168requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2169run_test "TLS 1.3: m->m psk_all / psk, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2170 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
2171 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2172 0 \
2173 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2174 -c "client hello, adding psk_key_exchange_modes extension" \
2175 -c "client hello, adding PSK binder list" \
2176 -c "HTTP/1.0 200 OK"
2177
2178requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2179requires_config_enabled MBEDTLS_SSL_SRV_C
2180requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2181run_test "TLS 1.3: m->m psk_all / psk, fail - no common kex mode" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2182 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
2183 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
2184 1 \
2185 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2186 -c "client hello, adding psk_key_exchange_modes extension" \
2187 -c "client hello, adding PSK binder list" \
2188 -s "ClientHello message misses mandatory extensions."
2189
2190requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2191requires_config_enabled MBEDTLS_SSL_SRV_C
2192requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2193run_test "TLS 1.3: m->m psk_all / psk, fail - no common psk" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2194 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
2195 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
2196 1 \
2197 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2198 -c "client hello, adding psk_key_exchange_modes extension" \
2199 -c "client hello, adding PSK binder list" \
2200 -s "ClientHello message misses mandatory extensions."
2201
2202requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2203requires_config_enabled MBEDTLS_SSL_SRV_C
2204requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2205run_test "TLS 1.3: m->m psk_all / psk_ephemeral, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2206 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
2207 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2208 0 \
2209 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2210 -c "client hello, adding psk_key_exchange_modes extension" \
2211 -c "client hello, adding PSK binder list" \
2212 -c "HTTP/1.0 200 OK"
2213
2214requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2215requires_config_enabled MBEDTLS_SSL_SRV_C
2216requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2217run_test "TLS 1.3: m->m psk_all / psk_ephemeral, fail - no common id" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2218 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
2219 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
2220 1 \
2221 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2222 -c "client hello, adding psk_key_exchange_modes extension" \
2223 -c "client hello, adding PSK binder list" \
2224 -s "No matched PSK or ticket" \
2225 -s "ClientHello message misses mandatory extensions."
2226
2227requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2228requires_config_enabled MBEDTLS_SSL_SRV_C
2229requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2230run_test "TLS 1.3: m->m psk_all / psk_ephemeral, fail - no common psk" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2231 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
2232 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2233 1 \
2234 -c "skip pre_shared_key extensions" \
2235 -c "client hello, adding psk_key_exchange_modes extension" \
2236 -s "ClientHello message misses mandatory extensions."
2237
2238requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2239requires_config_enabled MBEDTLS_SSL_SRV_C
2240requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2241run_test "TLS 1.3: m->m psk_all / ephemeral, fail - no common kex mode" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2242 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
2243 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2244 1 \
2245 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2246 -c "client hello, adding psk_key_exchange_modes extension" \
2247 -c "client hello, adding PSK binder list" \
2248 -s "ClientHello message misses mandatory extensions."
2249
2250requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2251requires_config_enabled MBEDTLS_SSL_SRV_C
2252requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2253run_test "TLS 1.3: m->m psk_all / ephemeral_all, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2254 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2255 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2256 0 \
2257 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2258 -c "client hello, adding psk_key_exchange_modes extension" \
2259 -c "client hello, adding PSK binder list" \
2260 -c "HTTP/1.0 200 OK"
2261
2262requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2263requires_config_enabled MBEDTLS_SSL_SRV_C
2264requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2265run_test "TLS 1.3: m->m psk_all / ephemeral_all, fail - no common id" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2266 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2267 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
2268 1 \
2269 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2270 -c "client hello, adding psk_key_exchange_modes extension" \
2271 -c "client hello, adding PSK binder list" \
2272 -s "No matched PSK or ticket" \
2273 -s "ClientHello message misses mandatory extensions."
2274
2275requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2276requires_config_enabled MBEDTLS_SSL_SRV_C
2277requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2278run_test "TLS 1.3: m->m psk_all / ephemeral_all, good - no common psk" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2279 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2280 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2281 1 \
2282 -c "skip pre_shared_key extensions" \
2283 -c "client hello, adding psk_key_exchange_modes extension" \
2284 -s "ClientHello message misses mandatory extensions."
2285
2286requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2287requires_config_enabled MBEDTLS_SSL_SRV_C
2288requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2289run_test "TLS 1.3: m->m psk_all / psk_all, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2290 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2291 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2292 0 \
2293 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2294 -c "client hello, adding psk_key_exchange_modes extension" \
2295 -c "client hello, adding PSK binder list" \
2296 -c "HTTP/1.0 200 OK"
2297
2298requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2299requires_config_enabled MBEDTLS_SSL_SRV_C
2300requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2301run_test "TLS 1.3: m->m psk_all / psk_all, fail - no common id" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2302 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2303 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
2304 1 \
2305 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2306 -c "client hello, adding psk_key_exchange_modes extension" \
2307 -c "client hello, adding PSK binder list" \
2308 -s "No matched PSK or ticket" \
2309 -s "ClientHello message misses mandatory extensions."
2310
2311requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2312requires_config_enabled MBEDTLS_SSL_SRV_C
2313requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2314run_test "TLS 1.3: m->m psk_all / psk_all, fail - no common psk" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2315 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2316 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2317 1 \
2318 -c "skip pre_shared_key extensions" \
2319 -c "client hello, adding psk_key_exchange_modes extension" \
2320 -s "ClientHello message misses mandatory extensions."
2321
2322requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2323requires_config_enabled MBEDTLS_SSL_SRV_C
2324requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2325run_test "TLS 1.3: m->m psk_all / all, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2326 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2327 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2328 0 \
2329 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2330 -c "client hello, adding psk_key_exchange_modes extension" \
2331 -c "client hello, adding PSK binder list" \
2332 -c "HTTP/1.0 200 OK"
2333
2334requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2335requires_config_enabled MBEDTLS_SSL_SRV_C
2336requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2337run_test "TLS 1.3: m->m psk_all / all, fail - no common id" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2338 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2339 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
2340 1 \
2341 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2342 -c "client hello, adding psk_key_exchange_modes extension" \
2343 -c "client hello, adding PSK binder list" \
2344 -s "No matched PSK or ticket" \
2345 -s "ClientHello message misses mandatory extensions."
2346
2347requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2348requires_config_enabled MBEDTLS_SSL_SRV_C
2349requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2350run_test "TLS 1.3: m->m psk_all / all, fail - no common psk" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2351 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2352 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2353 1 \
2354 -c "skip pre_shared_key extensions" \
2355 -c "client hello, adding psk_key_exchange_modes extension" \
2356 -s "ClientHello message misses mandatory extensions."
2357
2358# all mode in client
2359requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2360requires_config_enabled MBEDTLS_SSL_SRV_C
2361requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2362run_test "TLS 1.3: m->m all / psk, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2363 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
2364 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2365 0 \
2366 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2367 -c "client hello, adding psk_key_exchange_modes extension" \
2368 -c "client hello, adding PSK binder list" \
2369 -c "HTTP/1.0 200 OK"
2370
2371requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2372requires_config_enabled MBEDTLS_SSL_SRV_C
2373requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2374run_test "TLS 1.3: m->m all / psk, fail - no common kex mode" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2375 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
2376 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
2377 1 \
2378 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2379 -c "client hello, adding psk_key_exchange_modes extension" \
2380 -c "client hello, adding PSK binder list" \
2381 -s "ClientHello message misses mandatory extensions."
2382
2383requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2384requires_config_enabled MBEDTLS_SSL_SRV_C
2385requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2386run_test "TLS 1.3: m->m all / psk, fail - no common psk" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2387 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
2388 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
2389 1 \
2390 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2391 -c "client hello, adding psk_key_exchange_modes extension" \
2392 -c "client hello, adding PSK binder list" \
2393 -s "ClientHello message misses mandatory extensions."
2394
2395requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2396requires_config_enabled MBEDTLS_SSL_SRV_C
2397requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2398run_test "TLS 1.3: m->m all / psk_ephemeral, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2399 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
2400 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2401 0 \
2402 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2403 -c "client hello, adding psk_key_exchange_modes extension" \
2404 -c "client hello, adding PSK binder list" \
2405 -c "HTTP/1.0 200 OK"
2406
2407requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2408requires_config_enabled MBEDTLS_SSL_SRV_C
2409requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2410run_test "TLS 1.3: m->m all / psk_ephemeral, fail - no common id" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2411 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
2412 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
2413 1 \
2414 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2415 -c "client hello, adding psk_key_exchange_modes extension" \
2416 -c "client hello, adding PSK binder list" \
2417 -s "No matched PSK or ticket" \
2418 -s "ClientHello message misses mandatory extensions."
2419
2420requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2421requires_config_enabled MBEDTLS_SSL_SRV_C
2422requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2423run_test "TLS 1.3: m->m all / psk_ephemeral, fail - no common psk" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2424 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
2425 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=all" \
2426 1 \
2427 -c "skip pre_shared_key extensions" \
2428 -c "client hello, adding psk_key_exchange_modes extension" \
2429 -s "ClientHello message misses mandatory extensions."
2430
2431requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2432requires_config_enabled MBEDTLS_SSL_SRV_C
2433requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2434run_test "TLS 1.3: m->m all / ephemeral, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2435 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
2436 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2437 0 \
2438 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2439 -c "client hello, adding psk_key_exchange_modes extension" \
2440 -c "client hello, adding PSK binder list" \
2441 -c "HTTP/1.0 200 OK"
2442
2443requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2444requires_config_enabled MBEDTLS_SSL_SRV_C
2445requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2446run_test "TLS 1.3: m->m all / ephemeral_all, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2447 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2448 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2449 0 \
2450 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2451 -c "client hello, adding psk_key_exchange_modes extension" \
2452 -c "client hello, adding PSK binder list" \
2453 -c "HTTP/1.0 200 OK"
2454
2455requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2456requires_config_enabled MBEDTLS_SSL_SRV_C
2457requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2458run_test "TLS 1.3: m->m all / ephemeral_all, good - no common id" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2459 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2460 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
2461 0 \
2462 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2463 -c "client hello, adding psk_key_exchange_modes extension" \
2464 -c "client hello, adding PSK binder list" \
2465 -s "No matched PSK or ticket" \
2466 -c "HTTP/1.0 200 OK"
2467
2468requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2469requires_config_enabled MBEDTLS_SSL_SRV_C
2470requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2471run_test "TLS 1.3: m->m all / ephemeral_all, good - no common psk" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2472 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2473 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=all" \
2474 0 \
2475 -c "skip pre_shared_key extensions" \
2476 -c "client hello, adding psk_key_exchange_modes extension" \
2477 -c "HTTP/1.0 200 OK"
2478
2479requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2480requires_config_enabled MBEDTLS_SSL_SRV_C
2481requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2482run_test "TLS 1.3: m->m all / psk_all, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2483 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2484 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2485 0 \
2486 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2487 -c "client hello, adding psk_key_exchange_modes extension" \
2488 -c "client hello, adding PSK binder list" \
2489 -c "HTTP/1.0 200 OK"
2490
2491requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2492requires_config_enabled MBEDTLS_SSL_SRV_C
2493requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2494run_test "TLS 1.3: m->m all / psk_all, fail - no common id" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2495 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2496 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
2497 1 \
2498 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2499 -c "client hello, adding psk_key_exchange_modes extension" \
2500 -c "client hello, adding PSK binder list" \
2501 -s "No matched PSK or ticket" \
2502 -s "ClientHello message misses mandatory extensions."
2503
2504requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2505requires_config_enabled MBEDTLS_SSL_SRV_C
2506requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2507run_test "TLS 1.3: m->m all / psk_all, fail - no common psk" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2508 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2509 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=all" \
2510 1 \
2511 -c "skip pre_shared_key extensions" \
2512 -c "client hello, adding psk_key_exchange_modes extension" \
2513 -s "ClientHello message misses mandatory extensions."
2514
2515requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2516requires_config_enabled MBEDTLS_SSL_SRV_C
2517requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2518run_test "TLS 1.3: m->m all / all, good" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2519 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2520 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2521 0 \
2522 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2523 -c "client hello, adding psk_key_exchange_modes extension" \
2524 -c "client hello, adding PSK binder list" \
2525 -c "HTTP/1.0 200 OK"
2526
2527requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2528requires_config_enabled MBEDTLS_SSL_SRV_C
2529requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian3cbbbbc2022-08-31 07:38:37 +0000[diff] [blame]2530run_test "TLS 1.3: m->m all / all, good - no common id, fallback to ephemeral" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2531 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2532 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
2533 0 \
2534 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2535 -c "client hello, adding psk_key_exchange_modes extension" \
2536 -c "client hello, adding PSK binder list" \
2537 -s "No matched PSK or ticket" \
2538 -s "key exchange mode: ephemeral"
2539
2540requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2541requires_config_enabled MBEDTLS_SSL_SRV_C
2542requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]2543run_test "TLS 1.3: m->m all / all, good - no common psk, fallback to ephemeral" \
Xiaokang Qian8e76e1d2022-08-29 10:11:14 +0000[diff] [blame]2544 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2545 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=all" \
2546 0 \
2547 -c "skip pre_shared_key extensions" \
2548 -c "client hello, adding psk_key_exchange_modes extension" \
2549 -s "key exchange mode: ephemeral"
2550
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2551#OPENSSL-SERVER psk mode
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2552requires_openssl_tls1_3
2553requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2554requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2555requires_config_enabled MBEDTLS_DEBUG_C
2556requires_config_enabled MBEDTLS_SSL_CLI_C
2557requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2558 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2559run_test "TLS 1.3: m->O psk / all, good" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2560 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2561 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2562 0 \
2563 -c "=> write client hello" \
2564 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2565 -c "client hello, adding psk_key_exchange_modes extension" \
2566 -c "client hello, adding PSK binder list" \
2567 -c "<= write client hello" \
2568 -c "HTTP/1.0 200 ok"
2569
2570requires_openssl_tls1_3
2571requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2572requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2573requires_config_enabled MBEDTLS_DEBUG_C
2574requires_config_enabled MBEDTLS_SSL_CLI_C
2575requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2576 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2577run_test "TLS 1.3: m->O psk / ephemeral_all, fail - no common kex mode" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2578 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2579 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2580 1 \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2581 -c "=> write client hello" \
2582 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2583 -c "client hello, adding psk_key_exchange_modes extension" \
2584 -c "client hello, adding PSK binder list" \
2585 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2586 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2587
2588requires_openssl_tls1_3
2589requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2590requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2591requires_config_enabled MBEDTLS_DEBUG_C
2592requires_config_enabled MBEDTLS_SSL_CLI_C
2593requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2594 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2595run_test "TLS 1.3: m->O psk / all, fail - key material mismatch" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2596 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2597 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2598 1 \
2599 -c "=> write client hello" \
2600 -c "client hello, adding psk_key_exchange_modes extension" \
2601 -c "skip pre_shared_key extensions" \
2602 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
2603 -c "<= write client hello"
2604
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2605#OPENSSL-SERVER psk_all mode
2606requires_openssl_tls1_3
2607requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2608requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2609requires_config_enabled MBEDTLS_DEBUG_C
2610requires_config_enabled MBEDTLS_SSL_CLI_C
2611requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2612 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2613run_test "TLS 1.3: m->O psk_all / all, good" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2614 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2615 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2616 0 \
2617 -c "=> write client hello" \
2618 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2619 -c "client hello, adding psk_key_exchange_modes extension" \
2620 -c "client hello, adding PSK binder list" \
2621 -c "<= write client hello" \
2622 -c "HTTP/1.0 200 ok"
2623
2624requires_openssl_tls1_3
2625requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2626requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2627requires_config_enabled MBEDTLS_DEBUG_C
2628requires_config_enabled MBEDTLS_SSL_CLI_C
2629requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2630 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2631run_test "TLS 1.3: m->O psk_all / ephemeral_all, good" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2632 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2633 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2634 0 \
2635 -c "=> write client hello" \
2636 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2637 -c "client hello, adding psk_key_exchange_modes extension" \
2638 -c "client hello, adding PSK binder list" \
2639 -c "<= write client hello" \
2640 -c "HTTP/1.0 200 ok"
2641
2642requires_openssl_tls1_3
2643requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2644requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2645requires_config_enabled MBEDTLS_DEBUG_C
2646requires_config_enabled MBEDTLS_SSL_CLI_C
2647requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2648 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2649run_test "TLS 1.3: m->O psk_all/all,good,no common id,only warning" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2650 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2651 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2652 0 \
2653 -c "=> write client hello" \
2654 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2655 -c "client hello, adding psk_key_exchange_modes extension" \
2656 -c "client hello, adding PSK binder list" \
2657 -c "<= write client hello" \
2658 -s "PSK warning: client identity not what we expected" \
2659 -c "HTTP/1.0 200 ok"
2660
2661requires_openssl_tls1_3
2662requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2663requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2664requires_config_enabled MBEDTLS_DEBUG_C
2665requires_config_enabled MBEDTLS_SSL_CLI_C
2666requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2667 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2668run_test "TLS 1.3: m->O psk_all/ephemeral_all,good,no common id,only warning" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2669 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2670 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2671 0 \
2672 -c "=> write client hello" \
2673 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2674 -c "client hello, adding psk_key_exchange_modes extension" \
2675 -c "client hello, adding PSK binder list" \
2676 -c "<= write client hello" \
2677 -c "HTTP/1.0 200 ok"
2678
2679requires_openssl_tls1_3
2680requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2681requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2682requires_config_enabled MBEDTLS_DEBUG_C
2683requires_config_enabled MBEDTLS_SSL_CLI_C
2684requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2685 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2686run_test "TLS 1.3: m->O psk_all / all, fail - no common key material" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2687 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2688 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2689 1 \
2690 -c "=> write client hello" \
2691 -c "client hello, adding psk_key_exchange_modes extension" \
2692 -c "skip pre_shared_key extensions" \
2693 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
2694 -c "<= write client hello"
2695
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2696#OPENSSL-SERVER psk_ephemeral mode
2697requires_openssl_tls1_3
2698requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2699requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2700requires_config_enabled MBEDTLS_DEBUG_C
2701requires_config_enabled MBEDTLS_SSL_CLI_C
2702requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2703 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2704run_test "TLS 1.3: m->O psk_ephemeral / all, good" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2705 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2706 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2707 0 \
2708 -c "=> write client hello" \
2709 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2710 -c "client hello, adding psk_key_exchange_modes extension" \
2711 -c "client hello, adding PSK binder list" \
2712 -c "<= write client hello" \
2713 -c "HTTP/1.0 200 ok"
2714
2715requires_openssl_tls1_3
2716requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2717requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2718requires_config_enabled MBEDTLS_DEBUG_C
2719requires_config_enabled MBEDTLS_SSL_CLI_C
2720requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2721 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2722run_test "TLS 1.3: m->O psk_ephemeral / ephemeral_all, good" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2723 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2724 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
2725 0 \
2726 -c "=> write client hello" \
2727 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2728 -c "client hello, adding psk_key_exchange_modes extension" \
2729 -c "client hello, adding PSK binder list" \
2730 -c "<= write client hello" \
2731 -c "HTTP/1.0 200 ok"
2732
2733requires_openssl_tls1_3
2734requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2735requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2736requires_config_enabled MBEDTLS_DEBUG_C
2737requires_config_enabled MBEDTLS_SSL_CLI_C
2738requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2739 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2740run_test "TLS 1.3: m->O psk_ephemeral/dhe_all,good,no common id,only warning" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2741 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2742 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2743 0 \
2744 -c "=> write client hello" \
2745 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2746 -c "client hello, adding psk_key_exchange_modes extension" \
2747 -c "client hello, adding PSK binder list" \
2748 -c "<= write client hello" \
2749 -s "PSK warning: client identity not what we expected" \
2750 -c "HTTP/1.0 200 ok"
2751
2752requires_openssl_tls1_3
2753requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2754requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2755requires_config_enabled MBEDTLS_DEBUG_C
2756requires_config_enabled MBEDTLS_SSL_CLI_C
2757requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2758 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2759run_test "TLS 1.3: m->O psk_ephemeral/all,good,no common id,only warning" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2760 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2761 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2762 0 \
2763 -c "=> write client hello" \
2764 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2765 -c "client hello, adding psk_key_exchange_modes extension" \
2766 -c "client hello, adding PSK binder list" \
2767 -c "<= write client hello" \
2768 -c "HTTP/1.0 200 ok"
2769
2770requires_openssl_tls1_3
2771requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2772requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2773requires_config_enabled MBEDTLS_DEBUG_C
2774requires_config_enabled MBEDTLS_SSL_CLI_C
2775requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2776 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2777run_test "TLS 1.3: m->O psk_ephemeral/all, fail,no common key material" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2778 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2779 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2780 1 \
2781 -c "=> write client hello" \
2782 -c "client hello, adding psk_key_exchange_modes extension" \
2783 -c "skip pre_shared_key extensions" \
2784 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
2785 -c "<= write client hello"
2786
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2787#OPENSSL-SERVER ephemeral mode
2788requires_openssl_tls1_3
2789requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2790requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2791requires_config_enabled MBEDTLS_DEBUG_C
2792requires_config_enabled MBEDTLS_SSL_CLI_C
2793requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2794 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2795run_test "TLS 1.3: m->O ephemeral / all, good" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2796 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2797 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2798 0 \
2799 -c "=> write client hello" \
2800 -c "skip psk_key_exchange_modes extension" \
2801 -c "<= write client hello" \
2802 -c "found key_shares extension" \
2803 -c "HTTP/1.0 200 ok"
2804
2805requires_openssl_tls1_3
2806requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2807requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2808requires_config_enabled MBEDTLS_DEBUG_C
2809requires_config_enabled MBEDTLS_SSL_CLI_C
2810requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2811 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2812run_test "TLS 1.3: m->O ephemeral / ephemeral_all, good" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2813 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2814 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
2815 0 \
2816 -c "=> write client hello" \
2817 -c "skip psk_key_exchange_modes extension" \
2818 -c "<= write client hello" \
2819 -c "found key_shares extension" \
2820 -c "HTTP/1.0 200 ok"
2821
2822requires_openssl_tls1_3
2823requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2824requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2825requires_config_enabled MBEDTLS_DEBUG_C
2826requires_config_enabled MBEDTLS_SSL_CLI_C
2827requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2828 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2829run_test "TLS 1.3: m->O ephemeral / all, good,no common id, only warning" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2830 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2831 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2832 0 \
2833 -c "=> write client hello" \
2834 -c "skip psk_key_exchange_modes extension" \
2835 -c "<= write client hello" \
2836 -c "found key_shares extension" \
2837 -c "HTTP/1.0 200 ok"
2838
2839requires_openssl_tls1_3
2840requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2841requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2842requires_config_enabled MBEDTLS_DEBUG_C
2843requires_config_enabled MBEDTLS_SSL_CLI_C
2844requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2845 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2846run_test "TLS 1.3: m->O ephemeral / dhe_all, good - no common id, only warning" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2847 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2848 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2849 0 \
2850 -c "=> write client hello" \
2851 -c "skip psk_key_exchange_modes extension" \
2852 -c "<= write client hello" \
2853 -c "found key_shares extension" \
2854 -c "HTTP/1.0 200 ok"
2855
2856requires_openssl_tls1_3
2857requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2858requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2859requires_config_enabled MBEDTLS_DEBUG_C
2860requires_config_enabled MBEDTLS_SSL_CLI_C
2861requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2862 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2863run_test "TLS 1.3: m->O ephemeral/all, good, psk mismatch, fallback to dhe" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2864 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2865 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2866 0 \
2867 -c "=> write client hello" \
2868 -c "skip psk_key_exchange_modes extension" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2869 -c "<= write client hello" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]2870 -c "HTTP/1.0 200 ok"
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2871
2872#OPENSSL-SERVER ephemeral_all mode
2873requires_openssl_tls1_3
2874requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2875requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2876requires_config_enabled MBEDTLS_DEBUG_C
2877requires_config_enabled MBEDTLS_SSL_CLI_C
2878requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2879 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2880run_test "TLS 1.3: m->O ephemeral_all / all, good" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2881 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2882 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2883 0 \
2884 -c "=> write client hello" \
2885 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2886 -c "client hello, adding psk_key_exchange_modes extension" \
2887 -c "client hello, adding PSK binder list" \
2888 -c "<= write client hello" \
2889 -c "HTTP/1.0 200 ok"
2890
2891requires_openssl_tls1_3
2892requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2893requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2894requires_config_enabled MBEDTLS_DEBUG_C
2895requires_config_enabled MBEDTLS_SSL_CLI_C
2896requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2897 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2898run_test "TLS 1.3: m->O ephemeral_all / ephemeral_all, good" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2899 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2900 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2901 0 \
2902 -c "=> write client hello" \
2903 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2904 -c "client hello, adding psk_key_exchange_modes extension" \
2905 -c "client hello, adding PSK binder list" \
2906 -c "<= write client hello" \
2907 -c "HTTP/1.0 200 ok"
2908
2909requires_openssl_tls1_3
2910requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2911requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2912requires_config_enabled MBEDTLS_DEBUG_C
2913requires_config_enabled MBEDTLS_SSL_CLI_C
2914requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2915 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2916run_test "TLS 1.3: m->O ephemeral_all/all, good,no common id, only warning" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2917 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2918 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2919 0 \
2920 -c "=> write client hello" \
2921 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2922 -c "client hello, adding psk_key_exchange_modes extension" \
2923 -c "client hello, adding PSK binder list" \
2924 -c "<= write client hello" \
2925 -s "PSK warning: client identity not what we expected" \
2926 -c "HTTP/1.0 200 ok"
2927
2928requires_openssl_tls1_3
2929requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2930requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2931requires_config_enabled MBEDTLS_DEBUG_C
2932requires_config_enabled MBEDTLS_SSL_CLI_C
2933requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2934 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2935run_test "TLS 1.3: m->O ephemeral_all/dhe_all, good,no common id, only warning" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2936 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2937 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2938 0 \
2939 -c "=> write client hello" \
2940 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2941 -c "client hello, adding psk_key_exchange_modes extension" \
2942 -c "client hello, adding PSK binder list" \
2943 -c "<= write client hello" \
2944 -c "HTTP/1.0 200 ok"
2945
2946requires_openssl_tls1_3
2947requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2948requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2949requires_config_enabled MBEDTLS_DEBUG_C
2950requires_config_enabled MBEDTLS_SSL_CLI_C
2951requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2952 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2953run_test "TLS 1.3: m->O ephemeral_all/all, fail,no common material" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2954 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2955 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2956 1 \
2957 -c "=> write client hello" \
2958 -c "client hello, adding psk_key_exchange_modes extension" \
2959 -c "skip pre_shared_key extensions" \
2960 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
2961 -c "<= write client hello"
2962
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]2963#OPENSSL-SERVER all mode
2964requires_openssl_tls1_3
2965requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2966requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2967requires_config_enabled MBEDTLS_DEBUG_C
2968requires_config_enabled MBEDTLS_SSL_CLI_C
2969requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2970 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2971run_test "TLS 1.3: m->O all / all, good" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]2972 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2973 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]2974 0 \
2975 -c "=> write client hello" \
2976 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2977 -c "client hello, adding psk_key_exchange_modes extension" \
2978 -c "client hello, adding PSK binder list" \
2979 -c "<= write client hello" \
2980 -c "HTTP/1.0 200 ok"
2981
2982requires_openssl_tls1_3
2983requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2984requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2985requires_config_enabled MBEDTLS_DEBUG_C
2986requires_config_enabled MBEDTLS_SSL_CLI_C
2987requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2988 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]2989run_test "TLS 1.3: m->O all / ephemeral_all, good" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]2990 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2991 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2992 0 \
2993 -c "=> write client hello" \
2994 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2995 -c "client hello, adding psk_key_exchange_modes extension" \
2996 -c "client hello, adding PSK binder list" \
2997 -c "<= write client hello" \
2998 -c "HTTP/1.0 200 ok"
2999
3000requires_openssl_tls1_3
3001requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3002requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3003requires_config_enabled MBEDTLS_DEBUG_C
3004requires_config_enabled MBEDTLS_SSL_CLI_C
3005requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3006 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]3007run_test "TLS 1.3: m->O all/all, good, no common id, only warning" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3008 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3009 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3010 0 \
3011 -c "=> write client hello" \
3012 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3013 -c "client hello, adding psk_key_exchange_modes extension" \
3014 -c "client hello, adding PSK binder list" \
3015 -c "<= write client hello" \
3016 -s "PSK warning: client identity not what we expected" \
3017 -c "HTTP/1.0 200 ok"
3018
3019requires_openssl_tls1_3
3020requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3021requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3022requires_config_enabled MBEDTLS_DEBUG_C
3023requires_config_enabled MBEDTLS_SSL_CLI_C
3024requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3025 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]3026run_test "TLS 1.3: m->O all/dhe_all, good, no common id, only warning" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3027 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3028 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3029 0 \
3030 -c "=> write client hello" \
3031 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3032 -c "client hello, adding psk_key_exchange_modes extension" \
3033 -c "client hello, adding PSK binder list" \
3034 -c "<= write client hello" \
3035 -c "HTTP/1.0 200 ok"
3036
3037requires_openssl_tls1_3
3038requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3039requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3040requires_config_enabled MBEDTLS_DEBUG_C
3041requires_config_enabled MBEDTLS_SSL_CLI_C
3042requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3043 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qian2efece22022-09-01 03:00:25 +0000[diff] [blame]3044run_test "TLS 1.3: m->O all/all, fail,no common material, no fallback" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3045 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3046 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3047 1 \
3048 -c "=> write client hello" \
3049 -c "client hello, adding psk_key_exchange_modes extension" \
3050 -c "skip pre_shared_key extensions" \
3051 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
3052 -c "<= write client hello"
3053
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3054#GNUTLS-SERVER psk mode
3055requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3056requires_gnutls_tls1_3
3057requires_gnutls_next_no_ticket
3058requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3059requires_config_enabled MBEDTLS_DEBUG_C
3060requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3061run_test "TLS 1.3: m->G psk / all, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3062 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3063 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
3064 0 \
3065 -c "=> write client hello" \
3066 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3067 -c "client hello, adding psk_key_exchange_modes extension" \
3068 -c "client hello, adding PSK binder list" \
3069 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3070 -s "Parsing extension 'Pre Shared Key/41'" \
3071 -c "<= write client hello" \
3072 -c "HTTP/1.0 200 OK"
3073
3074requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3075requires_gnutls_tls1_3
3076requires_gnutls_next_no_ticket
3077requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3078requires_config_enabled MBEDTLS_DEBUG_C
3079requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3080run_test "TLS 1.3: m->G psk / psk_or_ephemeral, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3081 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3082 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
3083 0 \
3084 -c "=> write client hello" \
3085 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3086 -c "client hello, adding psk_key_exchange_modes extension" \
3087 -c "client hello, adding PSK binder list" \
3088 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3089 -s "Parsing extension 'Pre Shared Key/41'" \
3090 -c "<= write client hello" \
3091 -c "HTTP/1.0 200 OK"
3092
3093requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3094requires_gnutls_tls1_3
3095requires_gnutls_next_no_ticket
3096requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3097requires_config_enabled MBEDTLS_DEBUG_C
3098requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3099run_test "TLS 1.3: m->G psk / ephemeral_all, fail - no common kex mode" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3100 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3101 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
3102 1 \
3103 -c "=> write client hello" \
3104 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3105 -c "client hello, adding psk_key_exchange_modes extension" \
3106 -c "client hello, adding PSK binder list" \
3107 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3108 -s "Parsing extension 'Pre Shared Key/41'" \
3109 -c "<= write client hello" \
3110 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3111
3112requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3113requires_gnutls_tls1_3
3114requires_gnutls_next_no_ticket
3115requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3116requires_config_enabled MBEDTLS_DEBUG_C
3117requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3118run_test "TLS 1.3: m->G psk / all, fail - no common id" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3119 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3120 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
3121 1 \
3122 -c "=> write client hello" \
3123 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3124 -c "client hello, adding psk_key_exchange_modes extension" \
3125 -c "client hello, adding PSK binder list" \
3126 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3127 -s "Parsing extension 'Pre Shared Key/41'" \
3128 -c "<= write client hello" \
3129 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3130
3131requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3132requires_gnutls_tls1_3
3133requires_gnutls_next_no_ticket
3134requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3135requires_config_enabled MBEDTLS_DEBUG_C
3136requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3137run_test "TLS 1.3: m->G psk / psk, fail - no common id" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3138 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3139 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
3140 1 \
3141 -c "=> write client hello" \
3142 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3143 -c "client hello, adding psk_key_exchange_modes extension" \
3144 -c "client hello, adding PSK binder list" \
3145 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3146 -s "Parsing extension 'Pre Shared Key/41'" \
3147 -c "<= write client hello" \
3148 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3149
3150requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3151requires_gnutls_tls1_3
3152requires_gnutls_next_no_ticket
3153requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3154requires_config_enabled MBEDTLS_DEBUG_C
3155requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3156run_test "TLS 1.3: m->G psk / ephemeral_all, fail, no common material" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3157 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3158 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
3159 1 \
3160 -c "=> write client hello" \
3161 -c "client hello, adding psk_key_exchange_modes extension" \
3162 -c "skip pre_shared_key extensions" \
3163 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3164 -c "<= write client hello" \
3165 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3166
3167#GNUTLS-SERVER psk_all mode
3168requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3169requires_gnutls_tls1_3
3170requires_gnutls_next_no_ticket
3171requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3172requires_config_enabled MBEDTLS_DEBUG_C
3173requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3174run_test "TLS 1.3: m->G psk_all / all, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3175 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3176 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
3177 0 \
3178 -c "=> write client hello" \
3179 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3180 -c "client hello, adding psk_key_exchange_modes extension" \
3181 -c "client hello, adding PSK binder list" \
3182 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3183 -s "Parsing extension 'Pre Shared Key/41'" \
3184 -c "<= write client hello" \
3185 -c "HTTP/1.0 200 OK"
3186
3187requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3188requires_gnutls_tls1_3
3189requires_gnutls_next_no_ticket
3190requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3191requires_config_enabled MBEDTLS_DEBUG_C
3192requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]3193run_test "TLS 1.3: m->G psk_all / psk, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3194 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3195 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
3196 0 \
3197 -c "=> write client hello" \
3198 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3199 -c "client hello, adding psk_key_exchange_modes extension" \
3200 -c "client hello, adding PSK binder list" \
3201 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3202 -s "Parsing extension 'Pre Shared Key/41'" \
3203 -c "<= write client hello" \
3204 -c "HTTP/1.0 200 OK"
3205
3206requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3207requires_gnutls_tls1_3
3208requires_gnutls_next_no_ticket
3209requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3210requires_config_enabled MBEDTLS_DEBUG_C
3211requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3212run_test "TLS 1.3: m->G psk_all / ephemeral_all, fail - no fallback" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3213 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3214 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
3215 1 \
3216 -c "=> write client hello" \
3217 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3218 -c "client hello, adding psk_key_exchange_modes extension" \
3219 -c "client hello, adding PSK binder list" \
3220 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3221 -s "Parsing extension 'Pre Shared Key/41'" \
3222 -c "<= write client hello" \
3223 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3224
3225requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3226requires_gnutls_tls1_3
3227requires_gnutls_next_no_ticket
3228requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3229requires_config_enabled MBEDTLS_DEBUG_C
3230requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3231run_test "TLS 1.3: m->G psk_all / all, fail - no common id" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3232 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3233 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
3234 1 \
3235 -c "=> write client hello" \
3236 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3237 -c "client hello, adding psk_key_exchange_modes extension" \
3238 -c "client hello, adding PSK binder list" \
3239 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3240 -s "Parsing extension 'Pre Shared Key/41'" \
3241 -c "<= write client hello" \
3242 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3243
3244requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3245requires_gnutls_tls1_3
3246requires_gnutls_next_no_ticket
3247requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3248requires_config_enabled MBEDTLS_DEBUG_C
3249requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3250run_test "TLS 1.3: m->G psk_all / psk, fail - no common id" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3251 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3252 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
3253 1 \
3254 -c "=> write client hello" \
3255 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3256 -c "client hello, adding psk_key_exchange_modes extension" \
3257 -c "client hello, adding PSK binder list" \
3258 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3259 -s "Parsing extension 'Pre Shared Key/41'" \
3260 -c "<= write client hello" \
3261 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3262
3263requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3264requires_gnutls_tls1_3
3265requires_gnutls_next_no_ticket
3266requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3267requires_config_enabled MBEDTLS_DEBUG_C
3268requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3269run_test "TLS 1.3: m->G psk_all / ephemeral_all, fail, no common material" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3270 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3271 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
3272 1 \
3273 -c "=> write client hello" \
3274 -c "client hello, adding psk_key_exchange_modes extension" \
3275 -c "skip pre_shared_key extensions" \
3276 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3277 -c "<= write client hello" \
3278 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3279
3280#GNUTLS-SERVER psk_ephemeral mode
3281requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3282requires_gnutls_tls1_3
3283requires_gnutls_next_no_ticket
3284requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3285requires_config_enabled MBEDTLS_DEBUG_C
3286requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3287run_test "TLS 1.3: m->G psk_ephemeral / all, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3288 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3289 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
3290 0 \
3291 -c "=> write client hello" \
3292 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3293 -c "client hello, adding psk_key_exchange_modes extension" \
3294 -c "client hello, adding PSK binder list" \
3295 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3296 -s "Parsing extension 'Pre Shared Key/41'" \
3297 -c "<= write client hello" \
3298 -c "HTTP/1.0 200 OK"
3299
3300requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3301requires_gnutls_tls1_3
3302requires_gnutls_next_no_ticket
3303requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3304requires_config_enabled MBEDTLS_DEBUG_C
3305requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]3306run_test "TLS 1.3: m->G psk_ephemeral / psk, fail - no common kex mode" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3307 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3308 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
3309 1 \
3310 -c "=> write client hello" \
3311 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3312 -c "client hello, adding psk_key_exchange_modes extension" \
3313 -c "client hello, adding PSK binder list" \
3314 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3315 -s "Parsing extension 'Pre Shared Key/41'" \
3316 -c "<= write client hello" \
3317 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3318
3319requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3320requires_gnutls_tls1_3
3321requires_gnutls_next_no_ticket
3322requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3323requires_config_enabled MBEDTLS_DEBUG_C
3324requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3325run_test "TLS 1.3: m->G psk_ephemeral / ephemeral_all, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3326 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3327 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
3328 0 \
3329 -c "=> write client hello" \
3330 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3331 -c "client hello, adding psk_key_exchange_modes extension" \
3332 -c "client hello, adding PSK binder list" \
3333 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3334 -s "Parsing extension 'Pre Shared Key/41'" \
3335 -c "<= write client hello" \
3336 -c "HTTP/1.0 200 OK"
3337
3338requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3339requires_gnutls_tls1_3
3340requires_gnutls_next_no_ticket
3341requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3342requires_config_enabled MBEDTLS_DEBUG_C
3343requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3344run_test "TLS 1.3: m->G psk_ephemeral/dhe_all, fail, key material mismatch" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3345 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3346 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
3347 1 \
3348 -c "=> write client hello" \
3349 -c "client hello, adding psk_key_exchange_modes extension" \
3350 -c "skip pre_shared_key extensions" \
3351 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3352 -c "<= write client hello" \
3353 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3354
3355#GNUTLS-SERVER ephemeral mode
3356requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3357requires_gnutls_tls1_3
3358requires_gnutls_next_no_ticket
3359requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3360requires_config_enabled MBEDTLS_DEBUG_C
3361requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3362run_test "TLS 1.3: m->G ephemeral / all, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3363 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3364 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
3365 0 \
3366 -c "=> write client hello" \
3367 -c "skip psk_key_exchange_modes extension" \
3368 -s "Not sending extension (PSK Key Exchange Modes/45)" \
3369 -c "<= write client hello" \
3370 -c "HTTP/1.0 200 OK"
3371
3372requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3373requires_gnutls_tls1_3
3374requires_gnutls_next_no_ticket
3375requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3376requires_config_enabled MBEDTLS_DEBUG_C
3377requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]3378run_test "TLS 1.3: m->G ephemeral / psk, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3379 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3380 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
3381 0 \
3382 -c "=> write client hello" \
3383 -c "skip psk_key_exchange_modes extension" \
3384 -s "Not sending extension (PSK Key Exchange Modes/45)" \
3385 -c "<= write client hello" \
3386 -c "HTTP/1.0 200 OK"
3387
3388requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3389requires_gnutls_tls1_3
3390requires_gnutls_next_no_ticket
3391requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3392requires_config_enabled MBEDTLS_DEBUG_C
3393requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3394run_test "TLS 1.3: m->G ephemeral / ephemeral_all, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3395 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3396 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
3397 0 \
3398 -c "=> write client hello" \
3399 -c "skip psk_key_exchange_modes extension" \
3400 -s "Not sending extension (PSK Key Exchange Modes/45)" \
3401 -c "<= write client hello" \
3402 -c "HTTP/1.0 200 OK"
3403
3404#GNUTLS-SERVER ephemeral_all mode
3405requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3406requires_gnutls_tls1_3
3407requires_gnutls_next_no_ticket
3408requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3409requires_config_enabled MBEDTLS_DEBUG_C
3410requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3411run_test "TLS 1.3: m->G ephemeral_all / all, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3412 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3413 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
3414 0 \
3415 -c "=> write client hello" \
3416 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3417 -c "client hello, adding psk_key_exchange_modes extension" \
3418 -c "client hello, adding PSK binder list" \
3419 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3420 -s "Parsing extension 'Pre Shared Key/41'" \
3421 -c "<= write client hello" \
3422 -c "HTTP/1.0 200 OK"
3423
3424requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3425requires_gnutls_tls1_3
3426requires_gnutls_next_no_ticket
3427requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3428requires_config_enabled MBEDTLS_DEBUG_C
3429requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]3430run_test "TLS 1.3: m->G ephemeral_all / psk, good - fallback to ephemeral" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3431 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3432 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
3433 0 \
3434 -c "=> write client hello" \
3435 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3436 -c "client hello, adding psk_key_exchange_modes extension" \
3437 -c "client hello, adding PSK binder list" \
3438 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3439 -s "Parsing extension 'Pre Shared Key/41'" \
3440 -c "<= write client hello" \
3441 -c "HTTP/1.0 200 OK"
3442
3443requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3444requires_gnutls_tls1_3
3445requires_gnutls_next_no_ticket
3446requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3447requires_config_enabled MBEDTLS_DEBUG_C
3448requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3449run_test "TLS 1.3: m->G ephemeral_all / ephemeral_all, good" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3450 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3451 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
3452 0 \
3453 -c "=> write client hello" \
3454 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3455 -c "client hello, adding psk_key_exchange_modes extension" \
3456 -c "client hello, adding PSK binder list" \
3457 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3458 -s "Parsing extension 'Pre Shared Key/41'" \
3459 -c "<= write client hello" \
3460 -c "HTTP/1.0 200 OK"
3461
3462requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3463requires_gnutls_tls1_3
3464requires_gnutls_next_no_ticket
3465requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3466requires_config_enabled MBEDTLS_DEBUG_C
3467requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3468run_test "TLS 1.3: m->G dhe_all/dhe_all,good,psk mismatch,fallback to dhe" \
Xiaokang Qian2aaf1c12022-08-30 09:18:59 +0000[diff] [blame]3469 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
3470 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
3471 0 \
3472 -c "=> write client hello" \
3473 -c "client hello, adding psk_key_exchange_modes extension" \
3474 -c "skip pre_shared_key extensions" \
3475 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3476 -c "<= write client hello" \
3477 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
3478 -c "HTTP/1.0 200 OK"
3479
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3480#GNUTLS-SERVER all mode
3481requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3482requires_gnutls_tls1_3
3483requires_gnutls_next_no_ticket
3484requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3485requires_config_enabled MBEDTLS_DEBUG_C
3486requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3487run_test "TLS 1.3: m->G all / all, good" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3488 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3489 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3490 0 \
3491 -c "=> write client hello" \
3492 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3493 -c "client hello, adding psk_key_exchange_modes extension" \
3494 -c "client hello, adding PSK binder list" \
3495 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3496 -s "Parsing extension 'Pre Shared Key/41'" \
3497 -c "<= write client hello" \
3498 -c "HTTP/1.0 200 OK"
3499
3500requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3501requires_gnutls_tls1_3
3502requires_gnutls_next_no_ticket
3503requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3504requires_config_enabled MBEDTLS_DEBUG_C
3505requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiand7dcc422022-08-31 03:38:25 +0000[diff] [blame]3506run_test "TLS 1.3: m->G all / psk, good" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3507 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3508 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3509 0 \
3510 -c "=> write client hello" \
3511 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3512 -c "client hello, adding psk_key_exchange_modes extension" \
3513 -c "client hello, adding PSK binder list" \
3514 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3515 -s "Parsing extension 'Pre Shared Key/41'" \
3516 -c "<= write client hello" \
3517 -c "HTTP/1.0 200 OK"
3518
3519requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3520requires_gnutls_tls1_3
3521requires_gnutls_next_no_ticket
3522requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3523requires_config_enabled MBEDTLS_DEBUG_C
3524requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3525run_test "TLS 1.3: m->G all / ephemeral_all, good" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3526 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3527 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3528 0 \
3529 -c "=> write client hello" \
3530 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3531 -c "client hello, adding psk_key_exchange_modes extension" \
3532 -c "client hello, adding PSK binder list" \
3533 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3534 -s "Parsing extension 'Pre Shared Key/41'" \
3535 -c "<= write client hello" \
3536 -c "HTTP/1.0 200 OK"
3537
3538requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3539requires_gnutls_tls1_3
3540requires_gnutls_next_no_ticket
3541requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3542requires_config_enabled MBEDTLS_DEBUG_C
3543requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianedc35e72022-09-01 03:22:51 +0000[diff] [blame]3544run_test "TLS 1.3: m->G all/dhe_all,good,key material mismatch,fallback to dhe" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3545 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3546 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3547 0 \
3548 -c "=> write client hello" \
3549 -c "client hello, adding psk_key_exchange_modes extension" \
3550 -c "skip pre_shared_key extensions" \
3551 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3552 -c "<= write client hello" \
3553 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
3554 -c "HTTP/1.0 200 OK"