blob: bd9b6905479704192e8daec190abbcdc162088e9 [file] [log] [blame]
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001#!/bin/sh
2
Simon Butcher58eddef2016-05-19 23:43:11 +01003# ssl-opt.sh
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01004#
Simon Butcher58eddef2016-05-19 23:43:11 +01005# This file is part of mbed TLS (https://tls.mbed.org)
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01006#
Simon Butcher58eddef2016-05-19 23:43:11 +01007# Copyright (c) 2016, ARM Limited, All Rights Reserved
8#
9# Purpose
10#
11# Executes tests to prove various TLS/SSL options and extensions.
12#
13# The goal is not to cover every ciphersuite/version, but instead to cover
14# specific options (max fragment length, truncated hmac, etc) or procedures
15# (session resumption from cache or ticket, renego, etc).
16#
17# The tests assume a build with default options, with exceptions expressed
18# with a dependency. The tests focus on functionality and do not consider
19# performance.
20#
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010021
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010022set -u
23
Angus Grattonc4dd0732018-04-11 16:28:39 +100024if cd $( dirname $0 ); then :; else
25 echo "cd $( dirname $0 ) failed" >&2
26 exit 1
27fi
28
Antonin Décimo36e89b52019-01-23 15:24:37 +010029# default values, can be overridden by the environment
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +010030: ${P_SRV:=../programs/ssl/ssl_server2}
31: ${P_CLI:=../programs/ssl/ssl_client2}
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020032: ${P_PXY:=../programs/test/udp_proxy}
Manuel Pégourié-Gonnard74faf3c2014-03-13 18:47:44 +010033: ${OPENSSL_CMD:=openssl} # OPENSSL would conflict with the build system
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020034: ${GNUTLS_CLI:=gnutls-cli}
35: ${GNUTLS_SERV:=gnutls-serv}
Gilles Peskined50177f2017-05-16 17:53:03 +020036: ${PERL:=perl}
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010037
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +020038O_SRV="$OPENSSL_CMD s_server -www -cert data_files/server5.crt -key data_files/server5.key"
Manuel Pégourié-Gonnard74faf3c2014-03-13 18:47:44 +010039O_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_CMD s_client"
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020040G_SRV="$GNUTLS_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010041G_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_CLI --x509cafile data_files/test-ca_cat12.crt"
Gilles Peskined50177f2017-05-16 17:53:03 +020042TCP_CLIENT="$PERL scripts/tcp_client.pl"
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010043
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020044# alternative versions of OpenSSL and GnuTLS (no default path)
45
46if [ -n "${OPENSSL_LEGACY:-}" ]; then
47 O_LEGACY_SRV="$OPENSSL_LEGACY s_server -www -cert data_files/server5.crt -key data_files/server5.key"
48 O_LEGACY_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_LEGACY s_client"
49else
50 O_LEGACY_SRV=false
51 O_LEGACY_CLI=false
52fi
53
Hanno Becker58e9dc32018-08-17 15:53:21 +010054if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020055 G_NEXT_SRV="$GNUTLS_NEXT_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
56else
57 G_NEXT_SRV=false
58fi
59
Hanno Becker58e9dc32018-08-17 15:53:21 +010060if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020061 G_NEXT_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_NEXT_CLI --x509cafile data_files/test-ca_cat12.crt"
62else
63 G_NEXT_CLI=false
64fi
65
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010066TESTS=0
67FAILS=0
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +020068SKIPS=0
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010069
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000070CONFIG_H='../include/mbedtls/config.h'
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +020071
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +010072MEMCHECK=0
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +010073FILTER='.*'
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +020074EXCLUDE='^$'
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +010075
Paul Bakkere20310a2016-05-10 11:18:17 +010076SHOW_TEST_NUMBER=0
Paul Bakkerb7584a52016-05-10 10:50:43 +010077RUN_TEST_NUMBER=''
78
Paul Bakkeracaac852016-05-10 11:47:13 +010079PRESERVE_LOGS=0
80
Gilles Peskinef93c7d32017-04-14 17:55:28 +020081# Pick a "unique" server port in the range 10000-19999, and a proxy
82# port which is this plus 10000. Each port number may be independently
83# overridden by a command line option.
84SRV_PORT=$(($$ % 10000 + 10000))
85PXY_PORT=$((SRV_PORT + 10000))
86
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +010087print_usage() {
88 echo "Usage: $0 [options]"
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +010089 printf " -h|--help\tPrint this help.\n"
90 printf " -m|--memcheck\tCheck memory leaks and errors.\n"
Gilles Peskinef93c7d32017-04-14 17:55:28 +020091 printf " -f|--filter\tOnly matching tests are executed (BRE; default: '$FILTER')\n"
92 printf " -e|--exclude\tMatching tests are excluded (BRE; default: '$EXCLUDE')\n"
Paul Bakkerb7584a52016-05-10 10:50:43 +010093 printf " -n|--number\tExecute only numbered test (comma-separated, e.g. '245,256')\n"
Paul Bakkere20310a2016-05-10 11:18:17 +010094 printf " -s|--show-numbers\tShow test numbers in front of test names\n"
Paul Bakkeracaac852016-05-10 11:47:13 +010095 printf " -p|--preserve-logs\tPreserve logs of successful tests as well\n"
Gilles Peskinef93c7d32017-04-14 17:55:28 +020096 printf " --port\tTCP/UDP port (default: randomish 1xxxx)\n"
97 printf " --proxy-port\tTCP/UDP proxy port (default: randomish 2xxxx)\n"
Andres AGf04f54d2016-10-10 15:46:20 +010098 printf " --seed\tInteger seed value to use for this test run\n"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +010099}
100
101get_options() {
102 while [ $# -gt 0 ]; do
103 case "$1" in
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100104 -f|--filter)
105 shift; FILTER=$1
106 ;;
107 -e|--exclude)
108 shift; EXCLUDE=$1
109 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100110 -m|--memcheck)
111 MEMCHECK=1
112 ;;
Paul Bakkerb7584a52016-05-10 10:50:43 +0100113 -n|--number)
114 shift; RUN_TEST_NUMBER=$1
115 ;;
Paul Bakkere20310a2016-05-10 11:18:17 +0100116 -s|--show-numbers)
117 SHOW_TEST_NUMBER=1
118 ;;
Paul Bakkeracaac852016-05-10 11:47:13 +0100119 -p|--preserve-logs)
120 PRESERVE_LOGS=1
121 ;;
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200122 --port)
123 shift; SRV_PORT=$1
124 ;;
125 --proxy-port)
126 shift; PXY_PORT=$1
127 ;;
Andres AGf04f54d2016-10-10 15:46:20 +0100128 --seed)
129 shift; SEED="$1"
130 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100131 -h|--help)
132 print_usage
133 exit 0
134 ;;
135 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200136 echo "Unknown argument: '$1'"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100137 print_usage
138 exit 1
139 ;;
140 esac
141 shift
142 done
143}
144
Hanno Becker3b8b40c2018-08-28 10:25:41 +0100145# Skip next test; use this macro to skip tests which are legitimate
146# in theory and expected to be re-introduced at some point, but
147# aren't expected to succeed at the moment due to problems outside
148# our control (such as bugs in other TLS implementations).
149skip_next_test() {
150 SKIP_NEXT="YES"
151}
152
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100153# skip next test if the flag is not enabled in config.h
154requires_config_enabled() {
155 if grep "^#define $1" $CONFIG_H > /dev/null; then :; else
156 SKIP_NEXT="YES"
157 fi
158}
159
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200160# skip next test if the flag is enabled in config.h
161requires_config_disabled() {
162 if grep "^#define $1" $CONFIG_H > /dev/null; then
163 SKIP_NEXT="YES"
164 fi
165}
166
Hanno Becker7c48dd12018-08-28 16:09:22 +0100167get_config_value_or_default() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100168 # This function uses the query_config command line option to query the
169 # required Mbed TLS compile time configuration from the ssl_server2
170 # program. The command will always return a success value if the
171 # configuration is defined and the value will be printed to stdout.
172 #
173 # Note that if the configuration is not defined or is defined to nothing,
174 # the output of this function will be an empty string.
175 ${P_SRV} "query_config=${1}"
Hanno Becker7c48dd12018-08-28 16:09:22 +0100176}
177
178requires_config_value_at_least() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100179 VAL="$( get_config_value_or_default "$1" )"
180 if [ -z "$VAL" ]; then
181 # Should never happen
182 echo "Mbed TLS configuration $1 is not defined"
183 exit 1
184 elif [ "$VAL" -lt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100185 SKIP_NEXT="YES"
186 fi
187}
188
189requires_config_value_at_most() {
Hanno Becker7c48dd12018-08-28 16:09:22 +0100190 VAL=$( get_config_value_or_default "$1" )
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100191 if [ -z "$VAL" ]; then
192 # Should never happen
193 echo "Mbed TLS configuration $1 is not defined"
194 exit 1
195 elif [ "$VAL" -gt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100196 SKIP_NEXT="YES"
197 fi
198}
199
Hanno Becker9d76d562018-11-16 17:27:29 +0000200requires_ciphersuite_enabled() {
Hanno Beckera0dc9cf2018-11-20 11:31:17 +0000201 if [ -z "$($P_CLI --help | grep $1)" ]; then
Hanno Becker9d76d562018-11-16 17:27:29 +0000202 SKIP_NEXT="YES"
203 fi
204}
205
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200206# skip next test if OpenSSL doesn't support FALLBACK_SCSV
207requires_openssl_with_fallback_scsv() {
208 if [ -z "${OPENSSL_HAS_FBSCSV:-}" ]; then
209 if $OPENSSL_CMD s_client -help 2>&1 | grep fallback_scsv >/dev/null
210 then
211 OPENSSL_HAS_FBSCSV="YES"
212 else
213 OPENSSL_HAS_FBSCSV="NO"
214 fi
215 fi
216 if [ "$OPENSSL_HAS_FBSCSV" = "NO" ]; then
217 SKIP_NEXT="YES"
218 fi
219}
220
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200221# skip next test if GnuTLS isn't available
222requires_gnutls() {
223 if [ -z "${GNUTLS_AVAILABLE:-}" ]; then
Manuel Pégourié-Gonnard03db6b02015-06-26 15:45:30 +0200224 if ( which "$GNUTLS_CLI" && which "$GNUTLS_SERV" ) >/dev/null 2>&1; then
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200225 GNUTLS_AVAILABLE="YES"
226 else
227 GNUTLS_AVAILABLE="NO"
228 fi
229 fi
230 if [ "$GNUTLS_AVAILABLE" = "NO" ]; then
231 SKIP_NEXT="YES"
232 fi
233}
234
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200235# skip next test if GnuTLS-next isn't available
236requires_gnutls_next() {
237 if [ -z "${GNUTLS_NEXT_AVAILABLE:-}" ]; then
238 if ( which "${GNUTLS_NEXT_CLI:-}" && which "${GNUTLS_NEXT_SERV:-}" ) >/dev/null 2>&1; then
239 GNUTLS_NEXT_AVAILABLE="YES"
240 else
241 GNUTLS_NEXT_AVAILABLE="NO"
242 fi
243 fi
244 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
245 SKIP_NEXT="YES"
246 fi
247}
248
249# skip next test if OpenSSL-legacy isn't available
250requires_openssl_legacy() {
251 if [ -z "${OPENSSL_LEGACY_AVAILABLE:-}" ]; then
252 if which "${OPENSSL_LEGACY:-}" >/dev/null 2>&1; then
253 OPENSSL_LEGACY_AVAILABLE="YES"
254 else
255 OPENSSL_LEGACY_AVAILABLE="NO"
256 fi
257 fi
258 if [ "$OPENSSL_LEGACY_AVAILABLE" = "NO" ]; then
259 SKIP_NEXT="YES"
260 fi
261}
262
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200263# skip next test if IPv6 isn't available on this host
264requires_ipv6() {
265 if [ -z "${HAS_IPV6:-}" ]; then
266 $P_SRV server_addr='::1' > $SRV_OUT 2>&1 &
267 SRV_PID=$!
268 sleep 1
269 kill $SRV_PID >/dev/null 2>&1
270 if grep "NET - Binding of the socket failed" $SRV_OUT >/dev/null; then
271 HAS_IPV6="NO"
272 else
273 HAS_IPV6="YES"
274 fi
275 rm -r $SRV_OUT
276 fi
277
278 if [ "$HAS_IPV6" = "NO" ]; then
279 SKIP_NEXT="YES"
280 fi
281}
282
Andrzej Kurekb4593462018-10-11 08:43:30 -0400283# skip next test if it's i686 or uname is not available
284requires_not_i686() {
285 if [ -z "${IS_I686:-}" ]; then
286 IS_I686="YES"
287 if which "uname" >/dev/null 2>&1; then
288 if [ -z "$(uname -a | grep i686)" ]; then
289 IS_I686="NO"
290 fi
291 fi
292 fi
293 if [ "$IS_I686" = "YES" ]; then
294 SKIP_NEXT="YES"
295 fi
296}
297
Angus Grattonc4dd0732018-04-11 16:28:39 +1000298# Calculate the input & output maximum content lengths set in the config
299MAX_CONTENT_LEN=$( ../scripts/config.pl get MBEDTLS_SSL_MAX_CONTENT_LEN || echo "16384")
300MAX_IN_LEN=$( ../scripts/config.pl get MBEDTLS_SSL_IN_CONTENT_LEN || echo "$MAX_CONTENT_LEN")
301MAX_OUT_LEN=$( ../scripts/config.pl get MBEDTLS_SSL_OUT_CONTENT_LEN || echo "$MAX_CONTENT_LEN")
302
303if [ "$MAX_IN_LEN" -lt "$MAX_CONTENT_LEN" ]; then
304 MAX_CONTENT_LEN="$MAX_IN_LEN"
305fi
306if [ "$MAX_OUT_LEN" -lt "$MAX_CONTENT_LEN" ]; then
307 MAX_CONTENT_LEN="$MAX_OUT_LEN"
308fi
309
310# skip the next test if the SSL output buffer is less than 16KB
311requires_full_size_output_buffer() {
312 if [ "$MAX_OUT_LEN" -ne 16384 ]; then
313 SKIP_NEXT="YES"
314 fi
315}
316
Manuel Pégourié-Gonnard76fe9e42014-09-24 15:17:31 +0200317# skip the next test if valgrind is in use
318not_with_valgrind() {
319 if [ "$MEMCHECK" -gt 0 ]; then
320 SKIP_NEXT="YES"
321 fi
322}
323
Paul Bakker362689d2016-05-13 10:33:25 +0100324# skip the next test if valgrind is NOT in use
325only_with_valgrind() {
326 if [ "$MEMCHECK" -eq 0 ]; then
327 SKIP_NEXT="YES"
328 fi
329}
330
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200331# multiply the client timeout delay by the given factor for the next test
Janos Follath74537a62016-09-02 13:45:28 +0100332client_needs_more_time() {
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200333 CLI_DELAY_FACTOR=$1
334}
335
Janos Follath74537a62016-09-02 13:45:28 +0100336# wait for the given seconds after the client finished in the next test
337server_needs_more_time() {
338 SRV_DELAY_SECONDS=$1
339}
340
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100341# print_name <name>
342print_name() {
Paul Bakkere20310a2016-05-10 11:18:17 +0100343 TESTS=$(( $TESTS + 1 ))
344 LINE=""
345
346 if [ "$SHOW_TEST_NUMBER" -gt 0 ]; then
347 LINE="$TESTS "
348 fi
349
350 LINE="$LINE$1"
351 printf "$LINE "
352 LEN=$(( 72 - `echo "$LINE" | wc -c` ))
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +0100353 for i in `seq 1 $LEN`; do printf '.'; done
354 printf ' '
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100355
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100356}
357
358# fail <message>
359fail() {
360 echo "FAIL"
Manuel Pégourié-Gonnard3eec6042014-02-27 15:37:24 +0100361 echo " ! $1"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100362
Manuel Pégourié-Gonnardc2b00922014-08-31 16:46:04 +0200363 mv $SRV_OUT o-srv-${TESTS}.log
364 mv $CLI_OUT o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200365 if [ -n "$PXY_CMD" ]; then
366 mv $PXY_OUT o-pxy-${TESTS}.log
367 fi
368 echo " ! outputs saved to o-XXX-${TESTS}.log"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100369
Azim Khan19d13732018-03-29 11:04:20 +0100370 if [ "X${USER:-}" = Xbuildbot -o "X${LOGNAME:-}" = Xbuildbot -o "${LOG_FAILURE_ON_STDOUT:-0}" != 0 ]; then
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200371 echo " ! server output:"
372 cat o-srv-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200373 echo " ! ========================================================"
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200374 echo " ! client output:"
375 cat o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200376 if [ -n "$PXY_CMD" ]; then
377 echo " ! ========================================================"
378 echo " ! proxy output:"
379 cat o-pxy-${TESTS}.log
380 fi
381 echo ""
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200382 fi
383
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +0200384 FAILS=$(( $FAILS + 1 ))
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100385}
386
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100387# is_polar <cmd_line>
388is_polar() {
389 echo "$1" | grep 'ssl_server2\|ssl_client2' > /dev/null
390}
391
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +0200392# openssl s_server doesn't have -www with DTLS
393check_osrv_dtls() {
394 if echo "$SRV_CMD" | grep 's_server.*-dtls' >/dev/null; then
395 NEEDS_INPUT=1
396 SRV_CMD="$( echo $SRV_CMD | sed s/-www// )"
397 else
398 NEEDS_INPUT=0
399 fi
400}
401
402# provide input to commands that need it
403provide_input() {
404 if [ $NEEDS_INPUT -eq 0 ]; then
405 return
406 fi
407
408 while true; do
409 echo "HTTP/1.0 200 OK"
410 sleep 1
411 done
412}
413
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100414# has_mem_err <log_file_name>
415has_mem_err() {
416 if ( grep -F 'All heap blocks were freed -- no leaks are possible' "$1" &&
417 grep -F 'ERROR SUMMARY: 0 errors from 0 contexts' "$1" ) > /dev/null
418 then
419 return 1 # false: does not have errors
420 else
421 return 0 # true: has errors
422 fi
423}
424
Gilles Peskine418b5362017-12-14 18:58:42 +0100425# Wait for process $2 to be listening on port $1
426if type lsof >/dev/null 2>/dev/null; then
427 wait_server_start() {
428 START_TIME=$(date +%s)
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200429 if [ "$DTLS" -eq 1 ]; then
Gilles Peskine418b5362017-12-14 18:58:42 +0100430 proto=UDP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200431 else
Gilles Peskine418b5362017-12-14 18:58:42 +0100432 proto=TCP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200433 fi
Gilles Peskine418b5362017-12-14 18:58:42 +0100434 # Make a tight loop, server normally takes less than 1s to start.
435 while ! lsof -a -n -b -i "$proto:$1" -p "$2" >/dev/null 2>/dev/null; do
436 if [ $(( $(date +%s) - $START_TIME )) -gt $DOG_DELAY ]; then
437 echo "SERVERSTART TIMEOUT"
438 echo "SERVERSTART TIMEOUT" >> $SRV_OUT
439 break
440 fi
441 # Linux and *BSD support decimal arguments to sleep. On other
442 # OSes this may be a tight loop.
443 sleep 0.1 2>/dev/null || true
444 done
445 }
446else
Gilles Peskinea9312652018-06-29 15:48:13 +0200447 echo "Warning: lsof not available, wait_server_start = sleep"
Gilles Peskine418b5362017-12-14 18:58:42 +0100448 wait_server_start() {
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200449 sleep "$START_DELAY"
Gilles Peskine418b5362017-12-14 18:58:42 +0100450 }
451fi
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200452
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100453# Given the client or server debug output, parse the unix timestamp that is
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +0100454# included in the first 4 bytes of the random bytes and check that it's within
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100455# acceptable bounds
456check_server_hello_time() {
457 # Extract the time from the debug (lvl 3) output of the client
Andres Amaya Garcia67d8da52017-09-15 15:49:24 +0100458 SERVER_HELLO_TIME="$(sed -n 's/.*server hello, current time: //p' < "$1")"
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100459 # Get the Unix timestamp for now
460 CUR_TIME=$(date +'%s')
461 THRESHOLD_IN_SECS=300
462
463 # Check if the ServerHello time was printed
464 if [ -z "$SERVER_HELLO_TIME" ]; then
465 return 1
466 fi
467
468 # Check the time in ServerHello is within acceptable bounds
469 if [ $SERVER_HELLO_TIME -lt $(( $CUR_TIME - $THRESHOLD_IN_SECS )) ]; then
470 # The time in ServerHello is at least 5 minutes before now
471 return 1
472 elif [ $SERVER_HELLO_TIME -gt $(( $CUR_TIME + $THRESHOLD_IN_SECS )) ]; then
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +0100473 # The time in ServerHello is at least 5 minutes later than now
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100474 return 1
475 else
476 return 0
477 fi
478}
479
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200480# wait for client to terminate and set CLI_EXIT
481# must be called right after starting the client
482wait_client_done() {
483 CLI_PID=$!
484
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200485 CLI_DELAY=$(( $DOG_DELAY * $CLI_DELAY_FACTOR ))
486 CLI_DELAY_FACTOR=1
487
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200488 ( sleep $CLI_DELAY; echo "===CLIENT_TIMEOUT===" >> $CLI_OUT; kill $CLI_PID ) &
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200489 DOG_PID=$!
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200490
491 wait $CLI_PID
492 CLI_EXIT=$?
493
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200494 kill $DOG_PID >/dev/null 2>&1
495 wait $DOG_PID
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200496
497 echo "EXIT: $CLI_EXIT" >> $CLI_OUT
Janos Follath74537a62016-09-02 13:45:28 +0100498
499 sleep $SRV_DELAY_SECONDS
500 SRV_DELAY_SECONDS=0
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200501}
502
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200503# check if the given command uses dtls and sets global variable DTLS
504detect_dtls() {
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200505 if echo "$1" | grep 'dtls=1\|-dtls1\|-u' >/dev/null; then
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200506 DTLS=1
507 else
508 DTLS=0
509 fi
510}
511
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200512# Usage: run_test name [-p proxy_cmd] srv_cmd cli_cmd cli_exit [option [...]]
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100513# Options: -s pattern pattern that must be present in server output
514# -c pattern pattern that must be present in client output
Simon Butcher8e004102016-10-14 00:48:33 +0100515# -u pattern lines after pattern must be unique in client output
Andres Amaya Garcia93993de2017-09-06 15:38:07 +0100516# -f call shell function on client output
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100517# -S pattern pattern that must be absent in server output
518# -C pattern pattern that must be absent in client output
Simon Butcher8e004102016-10-14 00:48:33 +0100519# -U pattern lines after pattern must be unique in server output
Andres Amaya Garcia93993de2017-09-06 15:38:07 +0100520# -F call shell function on server output
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100521run_test() {
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100522 NAME="$1"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200523 shift 1
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100524
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100525 if echo "$NAME" | grep "$FILTER" | grep -v "$EXCLUDE" >/dev/null; then :
526 else
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +0200527 SKIP_NEXT="NO"
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100528 return
529 fi
530
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100531 print_name "$NAME"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100532
Paul Bakkerb7584a52016-05-10 10:50:43 +0100533 # Do we only run numbered tests?
534 if [ "X$RUN_TEST_NUMBER" = "X" ]; then :
535 elif echo ",$RUN_TEST_NUMBER," | grep ",$TESTS," >/dev/null; then :
536 else
537 SKIP_NEXT="YES"
538 fi
539
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200540 # does this test use a proxy?
541 if [ "X$1" = "X-p" ]; then
542 PXY_CMD="$2"
543 shift 2
544 else
545 PXY_CMD=""
546 fi
547
548 # get commands and client output
549 SRV_CMD="$1"
550 CLI_CMD="$2"
551 CLI_EXPECT="$3"
552 shift 3
553
Hanno Becker9d76d562018-11-16 17:27:29 +0000554 # Check if server forces ciphersuite
555 FORCE_CIPHERSUITE=$(echo "$SRV_CMD" | sed -n 's/^.*force_ciphersuite=\([a-zA-Z0-9\-]*\).*$/\1/p')
556 if [ ! -z "$FORCE_CIPHERSUITE" ]; then
557 requires_ciphersuite_enabled $FORCE_CIPHERSUITE
558 fi
559
560 # Check if client forces ciphersuite
561 FORCE_CIPHERSUITE=$(echo "$CLI_CMD" | sed -n 's/^.*force_ciphersuite=\([a-zA-Z0-9\-]*\).*$/\1/p')
562 if [ ! -z "$FORCE_CIPHERSUITE" ]; then
563 requires_ciphersuite_enabled $FORCE_CIPHERSUITE
564 fi
565
566 # should we skip?
567 if [ "X$SKIP_NEXT" = "XYES" ]; then
568 SKIP_NEXT="NO"
569 echo "SKIP"
570 SKIPS=$(( $SKIPS + 1 ))
571 return
572 fi
573
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200574 # fix client port
575 if [ -n "$PXY_CMD" ]; then
576 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$PXY_PORT/g )
577 else
578 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$SRV_PORT/g )
579 fi
580
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200581 # update DTLS variable
582 detect_dtls "$SRV_CMD"
583
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100584 # prepend valgrind to our commands if active
585 if [ "$MEMCHECK" -gt 0 ]; then
586 if is_polar "$SRV_CMD"; then
587 SRV_CMD="valgrind --leak-check=full $SRV_CMD"
588 fi
589 if is_polar "$CLI_CMD"; then
590 CLI_CMD="valgrind --leak-check=full $CLI_CMD"
591 fi
592 fi
593
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200594 TIMES_LEFT=2
595 while [ $TIMES_LEFT -gt 0 ]; do
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200596 TIMES_LEFT=$(( $TIMES_LEFT - 1 ))
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200597
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200598 # run the commands
599 if [ -n "$PXY_CMD" ]; then
600 echo "$PXY_CMD" > $PXY_OUT
601 $PXY_CMD >> $PXY_OUT 2>&1 &
602 PXY_PID=$!
603 # assume proxy starts faster than server
604 fi
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200605
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200606 check_osrv_dtls
607 echo "$SRV_CMD" > $SRV_OUT
608 provide_input | $SRV_CMD >> $SRV_OUT 2>&1 &
609 SRV_PID=$!
Gilles Peskine418b5362017-12-14 18:58:42 +0100610 wait_server_start "$SRV_PORT" "$SRV_PID"
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200611
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200612 echo "$CLI_CMD" > $CLI_OUT
613 eval "$CLI_CMD" >> $CLI_OUT 2>&1 &
614 wait_client_done
Manuel Pégourié-Gonnarde01af4c2014-03-25 14:16:44 +0100615
Hanno Beckercadb5bb2017-05-26 13:56:10 +0100616 sleep 0.05
617
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200618 # terminate the server (and the proxy)
619 kill $SRV_PID
620 wait $SRV_PID
Hanno Beckerd82d8462017-05-29 21:37:46 +0100621
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200622 if [ -n "$PXY_CMD" ]; then
623 kill $PXY_PID >/dev/null 2>&1
624 wait $PXY_PID
625 fi
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100626
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200627 # retry only on timeouts
628 if grep '===CLIENT_TIMEOUT===' $CLI_OUT >/dev/null; then
629 printf "RETRY "
630 else
631 TIMES_LEFT=0
632 fi
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200633 done
634
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100635 # check if the client and server went at least to the handshake stage
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200636 # (useful to avoid tests with only negative assertions and non-zero
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100637 # expected client exit to incorrectly succeed in case of catastrophic
638 # failure)
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100639 if is_polar "$SRV_CMD"; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200640 if grep "Performing the SSL/TLS handshake" $SRV_OUT >/dev/null; then :;
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100641 else
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100642 fail "server or client failed to reach handshake stage"
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100643 return
644 fi
645 fi
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100646 if is_polar "$CLI_CMD"; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200647 if grep "Performing the SSL/TLS handshake" $CLI_OUT >/dev/null; then :;
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100648 else
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100649 fail "server or client failed to reach handshake stage"
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100650 return
651 fi
652 fi
653
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100654 # check server exit code
655 if [ $? != 0 ]; then
656 fail "server fail"
657 return
658 fi
659
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100660 # check client exit code
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100661 if [ \( "$CLI_EXPECT" = 0 -a "$CLI_EXIT" != 0 \) -o \
662 \( "$CLI_EXPECT" != 0 -a "$CLI_EXIT" = 0 \) ]
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100663 then
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200664 fail "bad client exit code (expected $CLI_EXPECT, got $CLI_EXIT)"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100665 return
666 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100667
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100668 # check other assertions
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200669 # lines beginning with == are added by valgrind, ignore them
Paul Bakker1f650922016-05-13 10:16:46 +0100670 # lines with 'Serious error when reading debug info', are valgrind issues as well
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100671 while [ $# -gt 0 ]
672 do
673 case $1 in
674 "-s")
Paul Bakker1f650922016-05-13 10:16:46 +0100675 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +0100676 fail "pattern '$2' MUST be present in the Server output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100677 return
678 fi
679 ;;
680
681 "-c")
Paul Bakker1f650922016-05-13 10:16:46 +0100682 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +0100683 fail "pattern '$2' MUST be present in the Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100684 return
685 fi
686 ;;
687
688 "-S")
Paul Bakker1f650922016-05-13 10:16:46 +0100689 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Simon Butcher8e004102016-10-14 00:48:33 +0100690 fail "pattern '$2' MUST NOT be present in the Server output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100691 return
692 fi
693 ;;
694
695 "-C")
Paul Bakker1f650922016-05-13 10:16:46 +0100696 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Simon Butcher8e004102016-10-14 00:48:33 +0100697 fail "pattern '$2' MUST NOT be present in the Client output"
698 return
699 fi
700 ;;
701
702 # The filtering in the following two options (-u and -U) do the following
703 # - ignore valgrind output
Antonin Décimo36e89b52019-01-23 15:24:37 +0100704 # - filter out everything but lines right after the pattern occurrences
Simon Butcher8e004102016-10-14 00:48:33 +0100705 # - keep one of each non-unique line
706 # - count how many lines remain
707 # A line with '--' will remain in the result from previous outputs, so the number of lines in the result will be 1
708 # if there were no duplicates.
709 "-U")
710 if [ $(grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
711 fail "lines following pattern '$2' must be unique in Server output"
712 return
713 fi
714 ;;
715
716 "-u")
717 if [ $(grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
718 fail "lines following pattern '$2' must be unique in Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100719 return
720 fi
721 ;;
Andres Amaya Garcia93993de2017-09-06 15:38:07 +0100722 "-F")
723 if ! $2 "$SRV_OUT"; then
724 fail "function call to '$2' failed on Server output"
725 return
726 fi
727 ;;
728 "-f")
729 if ! $2 "$CLI_OUT"; then
730 fail "function call to '$2' failed on Client output"
731 return
732 fi
733 ;;
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100734
735 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200736 echo "Unknown test: $1" >&2
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100737 exit 1
738 esac
739 shift 2
740 done
741
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100742 # check valgrind's results
743 if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200744 if is_polar "$SRV_CMD" && has_mem_err $SRV_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100745 fail "Server has memory errors"
746 return
747 fi
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200748 if is_polar "$CLI_CMD" && has_mem_err $CLI_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100749 fail "Client has memory errors"
750 return
751 fi
752 fi
753
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100754 # if we're here, everything is ok
755 echo "PASS"
Paul Bakkeracaac852016-05-10 11:47:13 +0100756 if [ "$PRESERVE_LOGS" -gt 0 ]; then
757 mv $SRV_OUT o-srv-${TESTS}.log
758 mv $CLI_OUT o-cli-${TESTS}.log
Hanno Becker7be2e5b2018-08-20 12:21:35 +0100759 if [ -n "$PXY_CMD" ]; then
760 mv $PXY_OUT o-pxy-${TESTS}.log
761 fi
Paul Bakkeracaac852016-05-10 11:47:13 +0100762 fi
763
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200764 rm -f $SRV_OUT $CLI_OUT $PXY_OUT
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100765}
766
Hanno Becker9b5853c2018-11-16 17:28:40 +0000767run_test_psa() {
768 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Hanno Beckere9420c22018-11-20 11:37:34 +0000769 run_test "PSA-supported ciphersuite: $1" \
Hanno Becker4c8c7aa2019-04-10 09:25:41 +0100770 "$P_SRV debug_level=3 force_version=tls1_2" \
771 "$P_CLI debug_level=3 force_version=tls1_2 force_ciphersuite=$1" \
Hanno Becker9b5853c2018-11-16 17:28:40 +0000772 0 \
773 -c "Successfully setup PSA-based decryption cipher context" \
774 -c "Successfully setup PSA-based encryption cipher context" \
Andrzej Kurek683d77e2019-01-30 03:50:42 -0500775 -c "PSA calc verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -0500776 -c "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +0000777 -s "Successfully setup PSA-based decryption cipher context" \
778 -s "Successfully setup PSA-based encryption cipher context" \
Andrzej Kurek683d77e2019-01-30 03:50:42 -0500779 -s "PSA calc verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -0500780 -s "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +0000781 -C "Failed to setup PSA-based cipher context"\
782 -S "Failed to setup PSA-based cipher context"\
783 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +0000784 -c "Perform PSA-based ECDH computation."\
Andrzej Kureke85414e2019-01-15 05:23:59 -0500785 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Hanno Becker9b5853c2018-11-16 17:28:40 +0000786 -S "error" \
787 -C "error"
788}
789
Hanno Becker354e2482019-01-08 11:40:25 +0000790run_test_psa_force_curve() {
791 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
792 run_test "PSA - ECDH with $1" \
793 "$P_SRV debug_level=4 force_version=tls1_2" \
794 "$P_CLI debug_level=4 force_version=tls1_2 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 curves=$1" \
795 0 \
Hanno Becker28f78442019-02-18 16:47:50 +0000796 -c "Successfully setup PSA-based decryption cipher context" \
797 -c "Successfully setup PSA-based encryption cipher context" \
798 -c "PSA calc verify" \
799 -c "calc PSA finished" \
800 -s "Successfully setup PSA-based decryption cipher context" \
801 -s "Successfully setup PSA-based encryption cipher context" \
802 -s "PSA calc verify" \
803 -s "calc PSA finished" \
804 -C "Failed to setup PSA-based cipher context"\
805 -S "Failed to setup PSA-based cipher context"\
Hanno Becker354e2482019-01-08 11:40:25 +0000806 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +0000807 -c "Perform PSA-based ECDH computation."\
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +0100808 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200809 -S "error" \
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200810 -C "error"
811}
812
813cleanup() {
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +0100814 rm -f $CLI_OUT $SRV_OUT $PXY_OUT $SESSION
815 test -n "${SRV_PID:-}" && kill $SRV_PID >/dev/null 2>&1
816 test -n "${PXY_PID:-}" && kill $PXY_PID >/dev/null 2>&1
Manuel Pégourié-Gonnard9dea8bd2014-02-26 18:21:02 +0100817 test -n "${CLI_PID:-}" && kill $CLI_PID >/dev/null 2>&1
818 test -n "${DOG_PID:-}" && kill $DOG_PID >/dev/null 2>&1
819 exit 1
820}
Manuel Pégourié-Gonnard913030c2014-03-28 10:12:38 +0100821
822#
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +0100823# MAIN
Hanno Becker4ac73e72017-10-23 15:27:37 +0100824#
825
826get_options "$@"
Hanno Becker17c04932017-10-10 14:44:53 +0100827
828# sanity checks, avoid an avalanche of errors
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +0100829P_SRV_BIN="${P_SRV%%[ ]*}"
830P_CLI_BIN="${P_CLI%%[ ]*}"
Hanno Becker17c04932017-10-10 14:44:53 +0100831P_PXY_BIN="${P_PXY%%[ ]*}"
832if [ ! -x "$P_SRV_BIN" ]; then
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +0100833 echo "Command '$P_SRV_BIN' is not an executable file"
834 exit 1
Hanno Becker17c04932017-10-10 14:44:53 +0100835fi
836if [ ! -x "$P_CLI_BIN" ]; then
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200837 echo "Command '$P_CLI_BIN' is not an executable file"
838 exit 1
Simon Butcher3c0d7b82016-05-23 11:13:17 +0100839fi
840if [ ! -x "$P_PXY_BIN" ]; then
841 echo "Command '$P_PXY_BIN' is not an executable file"
842 exit 1
843fi
844if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnard74faf3c2014-03-13 18:47:44 +0100845 if which valgrind >/dev/null 2>&1; then :; else
846 echo "Memcheck not possible. Valgrind not found"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +0100847 exit 1
848 fi
849fi
Manuel Pégourié-Gonnard32f8f4d2014-05-29 11:31:20 +0200850if which $OPENSSL_CMD >/dev/null 2>&1; then :; else
851 echo "Command '$OPENSSL_CMD' not found"
852 exit 1
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +0100853fi
854
855# used by watchdog
856MAIN_PID="$$"
857
858# We use somewhat arbitrary delays for tests:
859# - how long do we wait for the server to start (when lsof not available)?
860# - how long do we allow for the client to finish?
861# (not to check performance, just to avoid waiting indefinitely)
862# Things are slower with valgrind, so give extra time here.
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200863#
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +0100864# Note: without lsof, there is a trade-off between the running time of this
865# script and the risk of spurious errors because we didn't wait long enough.
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200866# The watchdog delay on the other hand doesn't affect normal running time of
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +0100867# the script, only the case where a client or server gets stuck.
868if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200869 START_DELAY=6
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +0100870 DOG_DELAY=60
871else
872 START_DELAY=2
873 DOG_DELAY=20
874fi
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200875
Janos Follath74537a62016-09-02 13:45:28 +0100876# some particular tests need more time:
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200877# - for the client, we multiply the usual watchdog limit by a factor
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200878# - for the server, we sleep for a number of seconds after the client exits
Manuel Pégourié-Gonnard0af1ba32015-01-21 11:44:33 +0000879# see client_need_more_time() and server_needs_more_time()
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200880CLI_DELAY_FACTOR=1
881SRV_DELAY_SECONDS=0
Andres AGf04f54d2016-10-10 15:46:20 +0100882
Manuel Pégourié-Gonnard61957672015-06-18 17:54:58 +0200883# fix commands to use this port, force IPv4 while at it
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200884# +SRV_PORT will be replaced by either $SRV_PORT or $PXY_PORT later
885P_SRV="$P_SRV server_addr=127.0.0.1 server_port=$SRV_PORT"
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +0200886P_CLI="$P_CLI server_addr=127.0.0.1 server_port=+SRV_PORT"
Manuel Pégourié-Gonnard8066b812014-05-28 22:59:30 +0200887P_PXY="$P_PXY server_addr=127.0.0.1 server_port=$SRV_PORT listen_addr=127.0.0.1 listen_port=$PXY_PORT ${SEED:+"seed=$SEED"}"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200888O_SRV="$O_SRV -accept $SRV_PORT -dhparam data_files/dhparams.pem"
889O_CLI="$O_CLI -connect localhost:+SRV_PORT"
890G_SRV="$G_SRV -p $SRV_PORT"
891G_CLI="$G_CLI -p +SRV_PORT"
892
Hanno Becker58e9dc32018-08-17 15:53:21 +0100893if [ -n "${OPENSSL_LEGACY:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200894 O_LEGACY_SRV="$O_LEGACY_SRV -accept $SRV_PORT -dhparam data_files/dhparams.pem"
895 O_LEGACY_CLI="$O_LEGACY_CLI -connect localhost:+SRV_PORT"
896fi
Hanno Becker58e9dc32018-08-17 15:53:21 +0100897
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +0200898if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200899 G_NEXT_SRV="$G_NEXT_SRV -p $SRV_PORT"
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +0100900fi
Gilles Peskine62469d92017-05-10 10:13:59 +0200901
902if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
903 G_NEXT_CLI="$G_NEXT_CLI -p +SRV_PORT"
904fi
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200905
906# Allow SHA-1, because many of our test certificates use it
907P_SRV="$P_SRV allow_sha1=1"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200908P_CLI="$P_CLI allow_sha1=1"
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200909
910# Also pick a unique name for intermediate files
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200911SRV_OUT="srv_out.$$"
912CLI_OUT="cli_out.$$"
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +0100913PXY_OUT="pxy_out.$$"
914SESSION="session.$$"
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200915
916SKIP_NEXT="NO"
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200917
918trap cleanup INT TERM HUP
919
920# Basic test
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200921
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200922# Checks that:
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200923# - things work with all ciphersuites active (used with config-full in all.sh)
924# - the expected (highest security) parameters are selected
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200925# ("signature_algorithm ext: 6" means SHA-512 (highest common hash))
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +0200926run_test "Default" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200927 "$P_SRV debug_level=3" \
928 "$P_CLI" \
929 0 \
930 -s "Protocol is TLSv1.2" \
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200931 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256" \
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +0000932 -s "client hello v3, signature_algorithm ext: 6" \
933 -s "ECDHE curve: secp521r1" \
934 -S "error" \
935 -C "error"
936
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +0200937run_test "Default, DTLS" \
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +0000938 "$P_SRV dtls=1" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100939 "$P_CLI dtls=1" \
940 0 \
941 -s "Protocol is DTLSv1.2" \
942 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256"
943
Hanno Becker746aaf32019-03-28 15:25:23 +0000944requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
945run_test "CA callback on client" \
946 "$P_SRV debug_level=3" \
947 "$P_CLI ca_callback=1 debug_level=3 " \
948 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +0100949 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +0000950 -S "error" \
951 -C "error"
952
953requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
954requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
955requires_config_enabled MBEDTLS_ECDSA_C
956requires_config_enabled MBEDTLS_SHA256_C
957run_test "CA callback on server" \
958 "$P_SRV auth_mode=required" \
959 "$P_CLI ca_callback=1 debug_level=3 crt_file=data_files/server5.crt \
960 key_file=data_files/server5.key" \
961 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +0100962 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +0000963 -s "Verifying peer X.509 certificate... ok" \
964 -S "error" \
965 -C "error"
966
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100967# Test using an opaque private key for client authentication
968requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
969requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
970requires_config_enabled MBEDTLS_ECDSA_C
971requires_config_enabled MBEDTLS_SHA256_C
972run_test "Opaque key for client authentication" \
973 "$P_SRV auth_mode=required" \
974 "$P_CLI key_opaque=1 crt_file=data_files/server5.crt \
975 key_file=data_files/server5.key" \
976 0 \
977 -c "key type: Opaque" \
978 -s "Verifying peer X.509 certificate... ok" \
979 -S "error" \
980 -C "error"
981
Hanno Becker9b5853c2018-11-16 17:28:40 +0000982# Test ciphersuites which we expect to be fully supported by PSA Crypto
983# and check that we don't fall back to Mbed TLS' internal crypto primitives.
984run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM
985run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8
986run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM
987run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8
988run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
989run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
990run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA
991run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
992run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384
993
Hanno Becker354e2482019-01-08 11:40:25 +0000994requires_config_enabled MBEDTLS_ECP_DP_SECP521R1_ENABLED
995run_test_psa_force_curve "secp521r1"
996requires_config_enabled MBEDTLS_ECP_DP_BP512R1_ENABLED
997run_test_psa_force_curve "brainpoolP512r1"
998requires_config_enabled MBEDTLS_ECP_DP_SECP384R1_ENABLED
999run_test_psa_force_curve "secp384r1"
1000requires_config_enabled MBEDTLS_ECP_DP_BP384R1_ENABLED
1001run_test_psa_force_curve "brainpoolP384r1"
1002requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
1003run_test_psa_force_curve "secp256r1"
1004requires_config_enabled MBEDTLS_ECP_DP_SECP256K1_ENABLED
1005run_test_psa_force_curve "secp256k1"
1006requires_config_enabled MBEDTLS_ECP_DP_BP256R1_ENABLED
1007run_test_psa_force_curve "brainpoolP256r1"
1008requires_config_enabled MBEDTLS_ECP_DP_SECP224R1_ENABLED
1009run_test_psa_force_curve "secp224r1"
1010requires_config_enabled MBEDTLS_ECP_DP_SECP224K1_ENABLED
1011run_test_psa_force_curve "secp224k1"
1012requires_config_enabled MBEDTLS_ECP_DP_SECP192R1_ENABLED
1013run_test_psa_force_curve "secp192r1"
1014requires_config_enabled MBEDTLS_ECP_DP_SECP192K1_ENABLED
1015run_test_psa_force_curve "secp192k1"
1016
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001017# Test current time in ServerHello
1018requires_config_enabled MBEDTLS_HAVE_TIME
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001019run_test "ServerHello contains gmt_unix_time" \
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001020 "$P_SRV debug_level=3" \
1021 "$P_CLI debug_level=3" \
1022 0 \
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001023 -f "check_server_hello_time" \
1024 -F "check_server_hello_time"
1025
Simon Butcher8e004102016-10-14 00:48:33 +01001026# Test for uniqueness of IVs in AEAD ciphersuites
1027run_test "Unique IV in GCM" \
1028 "$P_SRV exchanges=20 debug_level=4" \
1029 "$P_CLI exchanges=20 debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
1030 0 \
1031 -u "IV used" \
1032 -U "IV used"
1033
Janos Follathee11be62019-04-04 12:03:30 +01001034# Tests for certificate verification callback
1035run_test "Configuration-specific CRT verification callback" \
1036 "$P_SRV debug_level=3" \
1037 "$P_CLI context_crt_cb=0 debug_level=3" \
1038 0 \
Janos Follathee11be62019-04-04 12:03:30 +01001039 -S "error" \
1040 -c "Verify requested for " \
1041 -c "Use configuration-specific verification callback" \
1042 -C "Use context-specific verification callback" \
1043 -C "error"
1044
Hanno Beckerefb440a2019-04-03 13:04:33 +01001045run_test "Context-specific CRT verification callback" \
1046 "$P_SRV debug_level=3" \
1047 "$P_CLI context_crt_cb=1 debug_level=3" \
1048 0 \
Hanno Beckerefb440a2019-04-03 13:04:33 +01001049 -S "error" \
Janos Follathee11be62019-04-04 12:03:30 +01001050 -c "Verify requested for " \
1051 -c "Use context-specific verification callback" \
1052 -C "Use configuration-specific verification callback" \
Hanno Beckerefb440a2019-04-03 13:04:33 +01001053 -C "error"
1054
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001055# Tests for rc4 option
1056
Simon Butchera410af52016-05-19 22:12:18 +01001057requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001058run_test "RC4: server disabled, client enabled" \
1059 "$P_SRV" \
1060 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1061 1 \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001062 -s "SSL - The server has no ciphersuites in common"
1063
Simon Butchera410af52016-05-19 22:12:18 +01001064requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001065run_test "RC4: server half, client enabled" \
1066 "$P_SRV arc4=1" \
1067 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1068 1 \
1069 -s "SSL - The server has no ciphersuites in common"
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001070
1071run_test "RC4: server enabled, client disabled" \
1072 "$P_SRV force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1073 "$P_CLI" \
1074 1 \
1075 -s "SSL - The server has no ciphersuites in common"
1076
1077run_test "RC4: both enabled" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001078 "$P_SRV force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001079 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1080 0 \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01001081 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001082 -S "SSL - The server has no ciphersuites in common"
1083
Hanno Beckerd26bb202018-08-17 09:54:10 +01001084# Test empty CA list in CertificateRequest in TLS 1.1 and earlier
1085
1086requires_gnutls
1087requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
1088run_test "CertificateRequest with empty CA list, TLS 1.1 (GnuTLS server)" \
1089 "$G_SRV"\
1090 "$P_CLI force_version=tls1_1" \
1091 0
1092
1093requires_gnutls
1094requires_config_enabled MBEDTLS_SSL_PROTO_TLS1
1095run_test "CertificateRequest with empty CA list, TLS 1.0 (GnuTLS server)" \
1096 "$G_SRV"\
1097 "$P_CLI force_version=tls1" \
1098 0
1099
Gilles Peskinebc70a182017-05-09 15:59:24 +02001100# Tests for SHA-1 support
1101
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02001102requires_config_disabled MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
Gilles Peskinebc70a182017-05-09 15:59:24 +02001103run_test "SHA-1 forbidden by default in server certificate" \
1104 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1105 "$P_CLI debug_level=2 allow_sha1=0" \
1106 1 \
1107 -c "The certificate is signed with an unacceptable hash"
1108
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02001109requires_config_enabled MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
1110run_test "SHA-1 forbidden by default in server certificate" \
1111 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1112 "$P_CLI debug_level=2 allow_sha1=0" \
1113 0
1114
Gilles Peskinebc70a182017-05-09 15:59:24 +02001115run_test "SHA-1 explicitly allowed in server certificate" \
1116 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1117 "$P_CLI allow_sha1=1" \
1118 0
1119
1120run_test "SHA-256 allowed by default in server certificate" \
1121 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2-sha256.crt" \
1122 "$P_CLI allow_sha1=0" \
1123 0
1124
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02001125requires_config_disabled MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
Gilles Peskinebc70a182017-05-09 15:59:24 +02001126run_test "SHA-1 forbidden by default in client certificate" \
1127 "$P_SRV auth_mode=required allow_sha1=0" \
1128 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1129 1 \
1130 -s "The certificate is signed with an unacceptable hash"
1131
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02001132requires_config_enabled MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
1133run_test "SHA-1 forbidden by default in client certificate" \
1134 "$P_SRV auth_mode=required allow_sha1=0" \
1135 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1136 0
1137
Gilles Peskinebc70a182017-05-09 15:59:24 +02001138run_test "SHA-1 explicitly allowed in client certificate" \
1139 "$P_SRV auth_mode=required allow_sha1=1" \
1140 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1141 0
1142
1143run_test "SHA-256 allowed by default in client certificate" \
1144 "$P_SRV auth_mode=required allow_sha1=0" \
1145 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha256.crt" \
1146 0
1147
Hanno Becker7ae8a762018-08-14 15:43:35 +01001148# Tests for datagram packing
1149run_test "DTLS: multiple records in same datagram, client and server" \
1150 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
1151 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
1152 0 \
1153 -c "next record in same datagram" \
1154 -s "next record in same datagram"
1155
1156run_test "DTLS: multiple records in same datagram, client only" \
1157 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
1158 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
1159 0 \
1160 -s "next record in same datagram" \
1161 -C "next record in same datagram"
1162
1163run_test "DTLS: multiple records in same datagram, server only" \
1164 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
1165 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
1166 0 \
1167 -S "next record in same datagram" \
1168 -c "next record in same datagram"
1169
1170run_test "DTLS: multiple records in same datagram, neither client nor server" \
1171 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
1172 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
1173 0 \
1174 -S "next record in same datagram" \
1175 -C "next record in same datagram"
1176
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001177# Tests for Truncated HMAC extension
1178
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001179run_test "Truncated HMAC: client default, server default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001180 "$P_SRV debug_level=4" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001181 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001182 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001183 -s "dumping 'expected mac' (20 bytes)" \
1184 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001185
Hanno Becker32c55012017-11-10 08:42:54 +00001186requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001187run_test "Truncated HMAC: client disabled, server default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001188 "$P_SRV debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001189 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001190 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001191 -s "dumping 'expected mac' (20 bytes)" \
1192 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001193
Hanno Becker32c55012017-11-10 08:42:54 +00001194requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001195run_test "Truncated HMAC: client enabled, server default" \
1196 "$P_SRV debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001197 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001198 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001199 -s "dumping 'expected mac' (20 bytes)" \
1200 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001201
Hanno Becker32c55012017-11-10 08:42:54 +00001202requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001203run_test "Truncated HMAC: client enabled, server disabled" \
1204 "$P_SRV debug_level=4 trunc_hmac=0" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001205 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001206 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001207 -s "dumping 'expected mac' (20 bytes)" \
1208 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001209
Hanno Becker32c55012017-11-10 08:42:54 +00001210requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Hanno Becker34d0c3f2017-11-17 15:46:24 +00001211run_test "Truncated HMAC: client disabled, server enabled" \
1212 "$P_SRV debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001213 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker34d0c3f2017-11-17 15:46:24 +00001214 0 \
1215 -s "dumping 'expected mac' (20 bytes)" \
1216 -S "dumping 'expected mac' (10 bytes)"
1217
1218requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001219run_test "Truncated HMAC: client enabled, server enabled" \
1220 "$P_SRV debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001221 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001222 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001223 -S "dumping 'expected mac' (20 bytes)" \
1224 -s "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01001225
Hanno Becker4c4f4102017-11-10 09:16:05 +00001226run_test "Truncated HMAC, DTLS: client default, server default" \
1227 "$P_SRV dtls=1 debug_level=4" \
1228 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
1229 0 \
1230 -s "dumping 'expected mac' (20 bytes)" \
1231 -S "dumping 'expected mac' (10 bytes)"
1232
1233requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1234run_test "Truncated HMAC, DTLS: client disabled, server default" \
1235 "$P_SRV dtls=1 debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001236 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00001237 0 \
1238 -s "dumping 'expected mac' (20 bytes)" \
1239 -S "dumping 'expected mac' (10 bytes)"
1240
1241requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1242run_test "Truncated HMAC, DTLS: client enabled, server default" \
1243 "$P_SRV dtls=1 debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001244 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00001245 0 \
1246 -s "dumping 'expected mac' (20 bytes)" \
1247 -S "dumping 'expected mac' (10 bytes)"
1248
1249requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1250run_test "Truncated HMAC, DTLS: client enabled, server disabled" \
1251 "$P_SRV dtls=1 debug_level=4 trunc_hmac=0" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001252 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00001253 0 \
1254 -s "dumping 'expected mac' (20 bytes)" \
1255 -S "dumping 'expected mac' (10 bytes)"
1256
1257requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1258run_test "Truncated HMAC, DTLS: client disabled, server enabled" \
1259 "$P_SRV dtls=1 debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001260 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00001261 0 \
1262 -s "dumping 'expected mac' (20 bytes)" \
1263 -S "dumping 'expected mac' (10 bytes)"
1264
1265requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1266run_test "Truncated HMAC, DTLS: client enabled, server enabled" \
1267 "$P_SRV dtls=1 debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001268 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001269 0 \
1270 -S "dumping 'expected mac' (20 bytes)" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01001271 -s "dumping 'expected mac' (10 bytes)"
1272
Hanno Becker7cf463e2019-04-09 18:08:47 +01001273# Tests for DTLS Connection ID extension
1274
Hanno Becker7cf463e2019-04-09 18:08:47 +01001275# So far, the CID API isn't implemented, so we can't
1276# grep for output witnessing its use. This needs to be
1277# changed once the CID extension is implemented.
1278
1279requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001280run_test "(STUB) Connection ID: Client enabled, server disabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001281 "$P_SRV debug_level=3 dtls=1 cid=0" \
1282 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1283 0 \
1284 -s "Disable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001285 -s "found CID extension" \
1286 -s "Client sent CID extension, but CID disabled" \
Hanno Becker6b78c832019-04-25 17:01:43 +01001287 -c "Enable use of CID extension." \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001288 -c "client hello, adding CID extension" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001289 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001290 -C "found CID extension" \
1291 -S "Copy CIDs into SSL transform" \
1292 -C "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001293
1294requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001295run_test "(STUB) Connection ID: Client disabled, server enabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001296 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1297 "$P_CLI debug_level=3 dtls=1 cid=0" \
1298 0 \
1299 -c "Disable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001300 -C "client hello, adding CID extension" \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001301 -S "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001302 -s "Enable use of CID extension." \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001303 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001304 -C "found CID extension" \
1305 -S "Copy CIDs into SSL transform" \
1306 -C "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001307
1308requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001309run_test "(STUB) Connection ID: Client+Server enabled, Client+Server CID nonempty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001310 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
1311 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef" \
1312 0 \
1313 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001314 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001315 -c "client hello, adding CID extension" \
1316 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001317 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001318 -s "server hello, adding CID extension" \
1319 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001320 -c "Use of CID extension negotiated" \
1321 -s "Copy CIDs into SSL transform" \
1322 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001323
1324requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001325run_test "(STUB) Connection ID: Client+Server enabled, Client CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001326 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1327 "$P_CLI debug_level=3 dtls=1 cid=1" \
1328 0 \
1329 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001330 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001331 -c "client hello, adding CID extension" \
1332 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001333 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001334 -s "server hello, adding CID extension" \
1335 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001336 -c "Use of CID extension negotiated" \
1337 -s "Copy CIDs into SSL transform" \
1338 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001339
1340requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001341run_test "(STUB) Connection ID: Client+Server enabled, Server CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001342 "$P_SRV debug_level=3 dtls=1 cid=1" \
1343 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1344 0 \
1345 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001346 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001347 -c "client hello, adding CID extension" \
1348 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001349 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001350 -s "server hello, adding CID extension" \
1351 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001352 -c "Use of CID extension negotiated" \
1353 -s "Copy CIDs into SSL transform" \
1354 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001355
1356requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001357run_test "(STUB) Connection ID: Client+Server enabled, Client+Server CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001358 "$P_SRV debug_level=3 dtls=1 cid=1" \
1359 "$P_CLI debug_level=3 dtls=1 cid=1" \
1360 0 \
1361 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001362 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001363 -c "client hello, adding CID extension" \
1364 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001365 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001366 -s "server hello, adding CID extension" \
1367 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001368 -c "Use of CID extension negotiated" \
1369 -s "Copy CIDs into SSL transform" \
1370 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001371
1372requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001373run_test "(STUB) Connection ID: Client+Server enabled, Client+Server CID nonempty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001374 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
1375 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
1376 0 \
1377 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001378 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001379 -c "client hello, adding CID extension" \
1380 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001381 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001382 -s "server hello, adding CID extension" \
1383 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001384 -c "Use of CID extension negotiated" \
1385 -s "Copy CIDs into SSL transform" \
1386 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001387
1388requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001389run_test "(STUB) Connection ID: Client+Server enabled, Client CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001390 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1391 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
1392 0 \
1393 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001394 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001395 -c "client hello, adding CID extension" \
1396 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001397 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001398 -s "server hello, adding CID extension" \
1399 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001400 -c "Use of CID extension negotiated" \
1401 -s "Copy CIDs into SSL transform" \
1402 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001403
1404requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001405run_test "(STUB) Connection ID: Client+Server enabled, Server CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001406 "$P_SRV debug_level=3 dtls=1 cid=1" \
1407 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
1408 0 \
1409 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001410 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001411 -c "client hello, adding CID extension" \
1412 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001413 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001414 -s "server hello, adding CID extension" \
1415 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001416 -c "Use of CID extension negotiated" \
1417 -s "Copy CIDs into SSL transform" \
1418 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001419
1420requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001421run_test "(STUB) Connection ID: Client+Server enabled, Client+Server CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001422 "$P_SRV debug_level=3 dtls=1 cid=1" \
1423 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
1424 0 \
1425 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001426 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001427 -c "client hello, adding CID extension" \
1428 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001429 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001430 -s "server hello, adding CID extension" \
1431 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001432 -c "Use of CID extension negotiated" \
1433 -s "Copy CIDs into SSL transform" \
1434 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001435
1436requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001437run_test "(STUB) Connection ID: Client+Server enabled, Client+Server CID nonempty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001438 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
1439 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
1440 0 \
1441 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001442 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001443 -c "client hello, adding CID extension" \
1444 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001445 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001446 -s "server hello, adding CID extension" \
1447 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001448 -c "Use of CID extension negotiated" \
1449 -s "Copy CIDs into SSL transform" \
1450 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001451
1452requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001453run_test "(STUB) Connection ID: Client+Server enabled, Client CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001454 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1455 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
1456 0 \
1457 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001458 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001459 -c "client hello, adding CID extension" \
1460 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001461 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001462 -s "server hello, adding CID extension" \
1463 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001464 -c "Use of CID extension negotiated" \
1465 -s "Copy CIDs into SSL transform" \
1466 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001467
1468requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001469run_test "(STUB) Connection ID: Client+Server enabled, Server CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001470 "$P_SRV debug_level=3 dtls=1 cid=1" \
1471 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
1472 0 \
1473 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001474 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001475 -c "client hello, adding CID extension" \
1476 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001477 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001478 -s "server hello, adding CID extension" \
1479 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001480 -c "Use of CID extension negotiated" \
1481 -s "Copy CIDs into SSL transform" \
1482 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001483
1484requires_config_enabled MBEDTLS_SSL_CID
Hanno Becker5f925be2019-04-23 12:02:34 +01001485run_test "(STUB) Connection ID: Client+Server enabled, Client+Server CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001486 "$P_SRV debug_level=3 dtls=1 cid=1" \
1487 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
1488 0 \
1489 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001490 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001491 -c "client hello, adding CID extension" \
1492 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001493 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001494 -s "server hello, adding CID extension" \
1495 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001496 -c "Use of CID extension negotiated" \
1497 -s "Copy CIDs into SSL transform" \
1498 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001499
Hanno Becker9bae30d2019-04-23 11:52:44 +01001500requires_config_enabled MBEDTLS_SSL_CID
1501requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker5f925be2019-04-23 12:02:34 +01001502run_test "(STUB) Connection ID: Client+Server enabled, renegotiate" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001503 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
1504 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
1505 0 \
1506 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001507 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001508 -c "client hello, adding CID extension" \
1509 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001510 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001511 -s "server hello, adding CID extension" \
1512 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001513 -c "Use of CID extension negotiated" \
1514 -s "Copy CIDs into SSL transform" \
1515 -c "Copy CIDs into SSL transform"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001516
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001517# Tests for Encrypt-then-MAC extension
1518
1519run_test "Encrypt then MAC: default" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01001520 "$P_SRV debug_level=3 \
1521 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001522 "$P_CLI debug_level=3" \
1523 0 \
1524 -c "client hello, adding encrypt_then_mac extension" \
1525 -s "found encrypt then mac extension" \
1526 -s "server hello, adding encrypt then mac extension" \
1527 -c "found encrypt_then_mac extension" \
1528 -c "using encrypt then mac" \
1529 -s "using encrypt then mac"
1530
1531run_test "Encrypt then MAC: client enabled, server disabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01001532 "$P_SRV debug_level=3 etm=0 \
1533 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001534 "$P_CLI debug_level=3 etm=1" \
1535 0 \
1536 -c "client hello, adding encrypt_then_mac extension" \
1537 -s "found encrypt then mac extension" \
1538 -S "server hello, adding encrypt then mac extension" \
1539 -C "found encrypt_then_mac extension" \
1540 -C "using encrypt then mac" \
1541 -S "using encrypt then mac"
1542
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01001543run_test "Encrypt then MAC: client enabled, aead cipher" \
1544 "$P_SRV debug_level=3 etm=1 \
1545 force_ciphersuite=TLS-RSA-WITH-AES-128-GCM-SHA256" \
1546 "$P_CLI debug_level=3 etm=1" \
1547 0 \
1548 -c "client hello, adding encrypt_then_mac extension" \
1549 -s "found encrypt then mac extension" \
1550 -S "server hello, adding encrypt then mac extension" \
1551 -C "found encrypt_then_mac extension" \
1552 -C "using encrypt then mac" \
1553 -S "using encrypt then mac"
1554
1555run_test "Encrypt then MAC: client enabled, stream cipher" \
1556 "$P_SRV debug_level=3 etm=1 \
1557 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001558 "$P_CLI debug_level=3 etm=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01001559 0 \
1560 -c "client hello, adding encrypt_then_mac extension" \
1561 -s "found encrypt then mac extension" \
1562 -S "server hello, adding encrypt then mac extension" \
1563 -C "found encrypt_then_mac extension" \
1564 -C "using encrypt then mac" \
1565 -S "using encrypt then mac"
1566
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001567run_test "Encrypt then MAC: client disabled, server enabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01001568 "$P_SRV debug_level=3 etm=1 \
1569 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001570 "$P_CLI debug_level=3 etm=0" \
1571 0 \
1572 -C "client hello, adding encrypt_then_mac extension" \
1573 -S "found encrypt then mac extension" \
1574 -S "server hello, adding encrypt then mac extension" \
1575 -C "found encrypt_then_mac extension" \
1576 -C "using encrypt then mac" \
1577 -S "using encrypt then mac"
1578
Janos Follathe2681a42016-03-07 15:57:05 +00001579requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001580run_test "Encrypt then MAC: client SSLv3, server enabled" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01001581 "$P_SRV debug_level=3 min_version=ssl3 \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01001582 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001583 "$P_CLI debug_level=3 force_version=ssl3" \
1584 0 \
1585 -C "client hello, adding encrypt_then_mac extension" \
1586 -S "found encrypt then mac extension" \
1587 -S "server hello, adding encrypt then mac extension" \
1588 -C "found encrypt_then_mac extension" \
1589 -C "using encrypt then mac" \
1590 -S "using encrypt then mac"
1591
Janos Follathe2681a42016-03-07 15:57:05 +00001592requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001593run_test "Encrypt then MAC: client enabled, server SSLv3" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01001594 "$P_SRV debug_level=3 force_version=ssl3 \
1595 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01001596 "$P_CLI debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001597 0 \
1598 -c "client hello, adding encrypt_then_mac extension" \
Janos Follath00efff72016-05-06 13:48:23 +01001599 -S "found encrypt then mac extension" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001600 -S "server hello, adding encrypt then mac extension" \
1601 -C "found encrypt_then_mac extension" \
1602 -C "using encrypt then mac" \
1603 -S "using encrypt then mac"
1604
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02001605# Tests for Extended Master Secret extension
1606
1607run_test "Extended Master Secret: default" \
1608 "$P_SRV debug_level=3" \
1609 "$P_CLI debug_level=3" \
1610 0 \
1611 -c "client hello, adding extended_master_secret extension" \
1612 -s "found extended master secret extension" \
1613 -s "server hello, adding extended master secret extension" \
1614 -c "found extended_master_secret extension" \
1615 -c "using extended master secret" \
1616 -s "using extended master secret"
1617
1618run_test "Extended Master Secret: client enabled, server disabled" \
1619 "$P_SRV debug_level=3 extended_ms=0" \
1620 "$P_CLI debug_level=3 extended_ms=1" \
1621 0 \
1622 -c "client hello, adding extended_master_secret extension" \
1623 -s "found extended master secret extension" \
1624 -S "server hello, adding extended master secret extension" \
1625 -C "found extended_master_secret extension" \
1626 -C "using extended master secret" \
1627 -S "using extended master secret"
1628
1629run_test "Extended Master Secret: client disabled, server enabled" \
1630 "$P_SRV debug_level=3 extended_ms=1" \
1631 "$P_CLI debug_level=3 extended_ms=0" \
1632 0 \
1633 -C "client hello, adding extended_master_secret extension" \
1634 -S "found extended master secret extension" \
1635 -S "server hello, adding extended master secret extension" \
1636 -C "found extended_master_secret extension" \
1637 -C "using extended master secret" \
1638 -S "using extended master secret"
1639
Janos Follathe2681a42016-03-07 15:57:05 +00001640requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02001641run_test "Extended Master Secret: client SSLv3, server enabled" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01001642 "$P_SRV debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02001643 "$P_CLI debug_level=3 force_version=ssl3" \
1644 0 \
1645 -C "client hello, adding extended_master_secret extension" \
1646 -S "found extended master secret extension" \
1647 -S "server hello, adding extended master secret extension" \
1648 -C "found extended_master_secret extension" \
1649 -C "using extended master secret" \
1650 -S "using extended master secret"
1651
Janos Follathe2681a42016-03-07 15:57:05 +00001652requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02001653run_test "Extended Master Secret: client enabled, server SSLv3" \
1654 "$P_SRV debug_level=3 force_version=ssl3" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01001655 "$P_CLI debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02001656 0 \
1657 -c "client hello, adding extended_master_secret extension" \
Janos Follath00efff72016-05-06 13:48:23 +01001658 -S "found extended master secret extension" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02001659 -S "server hello, adding extended master secret extension" \
1660 -C "found extended_master_secret extension" \
1661 -C "using extended master secret" \
1662 -S "using extended master secret"
1663
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001664# Tests for FALLBACK_SCSV
1665
1666run_test "Fallback SCSV: default" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02001667 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001668 "$P_CLI debug_level=3 force_version=tls1_1" \
1669 0 \
1670 -C "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02001671 -S "received FALLBACK_SCSV" \
1672 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001673 -C "is a fatal alert message (msg 86)"
1674
1675run_test "Fallback SCSV: explicitly disabled" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02001676 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001677 "$P_CLI debug_level=3 force_version=tls1_1 fallback=0" \
1678 0 \
1679 -C "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02001680 -S "received FALLBACK_SCSV" \
1681 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001682 -C "is a fatal alert message (msg 86)"
1683
1684run_test "Fallback SCSV: enabled" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02001685 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001686 "$P_CLI debug_level=3 force_version=tls1_1 fallback=1" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02001687 1 \
1688 -c "adding FALLBACK_SCSV" \
1689 -s "received FALLBACK_SCSV" \
1690 -s "inapropriate fallback" \
1691 -c "is a fatal alert message (msg 86)"
1692
1693run_test "Fallback SCSV: enabled, max version" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02001694 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02001695 "$P_CLI debug_level=3 fallback=1" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001696 0 \
1697 -c "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02001698 -s "received FALLBACK_SCSV" \
1699 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02001700 -C "is a fatal alert message (msg 86)"
1701
1702requires_openssl_with_fallback_scsv
1703run_test "Fallback SCSV: default, openssl server" \
1704 "$O_SRV" \
1705 "$P_CLI debug_level=3 force_version=tls1_1 fallback=0" \
1706 0 \
1707 -C "adding FALLBACK_SCSV" \
1708 -C "is a fatal alert message (msg 86)"
1709
1710requires_openssl_with_fallback_scsv
1711run_test "Fallback SCSV: enabled, openssl server" \
1712 "$O_SRV" \
1713 "$P_CLI debug_level=3 force_version=tls1_1 fallback=1" \
1714 1 \
1715 -c "adding FALLBACK_SCSV" \
1716 -c "is a fatal alert message (msg 86)"
1717
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02001718requires_openssl_with_fallback_scsv
1719run_test "Fallback SCSV: disabled, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02001720 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02001721 "$O_CLI -tls1_1" \
1722 0 \
1723 -S "received FALLBACK_SCSV" \
1724 -S "inapropriate fallback"
1725
1726requires_openssl_with_fallback_scsv
1727run_test "Fallback SCSV: enabled, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02001728 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02001729 "$O_CLI -tls1_1 -fallback_scsv" \
1730 1 \
1731 -s "received FALLBACK_SCSV" \
1732 -s "inapropriate fallback"
1733
1734requires_openssl_with_fallback_scsv
1735run_test "Fallback SCSV: enabled, max version, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02001736 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02001737 "$O_CLI -fallback_scsv" \
1738 0 \
1739 -s "received FALLBACK_SCSV" \
1740 -S "inapropriate fallback"
1741
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01001742# Test sending and receiving empty application data records
1743
1744run_test "Encrypt then MAC: empty application data record" \
1745 "$P_SRV auth_mode=none debug_level=4 etm=1" \
1746 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA" \
1747 0 \
1748 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
1749 -s "dumping 'input payload after decrypt' (0 bytes)" \
1750 -c "0 bytes written in 1 fragments"
1751
1752run_test "Default, no Encrypt then MAC: empty application data record" \
1753 "$P_SRV auth_mode=none debug_level=4 etm=0" \
1754 "$P_CLI auth_mode=none etm=0 request_size=0" \
1755 0 \
1756 -s "dumping 'input payload after decrypt' (0 bytes)" \
1757 -c "0 bytes written in 1 fragments"
1758
1759run_test "Encrypt then MAC, DTLS: empty application data record" \
1760 "$P_SRV auth_mode=none debug_level=4 etm=1 dtls=1" \
1761 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA dtls=1" \
1762 0 \
1763 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
1764 -s "dumping 'input payload after decrypt' (0 bytes)" \
1765 -c "0 bytes written in 1 fragments"
1766
1767run_test "Default, no Encrypt then MAC, DTLS: empty application data record" \
1768 "$P_SRV auth_mode=none debug_level=4 etm=0 dtls=1" \
1769 "$P_CLI auth_mode=none etm=0 request_size=0 dtls=1" \
1770 0 \
1771 -s "dumping 'input payload after decrypt' (0 bytes)" \
1772 -c "0 bytes written in 1 fragments"
1773
Gilles Peskined50177f2017-05-16 17:53:03 +02001774## ClientHello generated with
1775## "openssl s_client -CAfile tests/data_files/test-ca.crt -tls1_1 -connect localhost:4433 -cipher ..."
1776## then manually twiddling the ciphersuite list.
1777## The ClientHello content is spelled out below as a hex string as
1778## "prefix ciphersuite1 ciphersuite2 ciphersuite3 ciphersuite4 suffix".
1779## The expected response is an inappropriate_fallback alert.
1780requires_openssl_with_fallback_scsv
1781run_test "Fallback SCSV: beginning of list" \
1782 "$P_SRV debug_level=2" \
1783 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 5600 0031 0032 0033 0100000900230000000f000101' '15030200020256'" \
1784 0 \
1785 -s "received FALLBACK_SCSV" \
1786 -s "inapropriate fallback"
1787
1788requires_openssl_with_fallback_scsv
1789run_test "Fallback SCSV: end of list" \
1790 "$P_SRV debug_level=2" \
1791 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 0031 0032 0033 5600 0100000900230000000f000101' '15030200020256'" \
1792 0 \
1793 -s "received FALLBACK_SCSV" \
1794 -s "inapropriate fallback"
1795
1796## Here the expected response is a valid ServerHello prefix, up to the random.
1797requires_openssl_with_fallback_scsv
1798run_test "Fallback SCSV: not in list" \
1799 "$P_SRV debug_level=2" \
1800 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 0056 0031 0032 0033 0100000900230000000f000101' '16030200300200002c0302'" \
1801 0 \
1802 -S "received FALLBACK_SCSV" \
1803 -S "inapropriate fallback"
1804
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01001805# Tests for CBC 1/n-1 record splitting
1806
1807run_test "CBC Record splitting: TLS 1.2, no splitting" \
1808 "$P_SRV" \
1809 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
1810 request_size=123 force_version=tls1_2" \
1811 0 \
1812 -s "Read from client: 123 bytes read" \
1813 -S "Read from client: 1 bytes read" \
1814 -S "122 bytes read"
1815
1816run_test "CBC Record splitting: TLS 1.1, no splitting" \
1817 "$P_SRV" \
1818 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
1819 request_size=123 force_version=tls1_1" \
1820 0 \
1821 -s "Read from client: 123 bytes read" \
1822 -S "Read from client: 1 bytes read" \
1823 -S "122 bytes read"
1824
1825run_test "CBC Record splitting: TLS 1.0, splitting" \
1826 "$P_SRV" \
1827 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
1828 request_size=123 force_version=tls1" \
1829 0 \
1830 -S "Read from client: 123 bytes read" \
1831 -s "Read from client: 1 bytes read" \
1832 -s "122 bytes read"
1833
Janos Follathe2681a42016-03-07 15:57:05 +00001834requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01001835run_test "CBC Record splitting: SSLv3, splitting" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01001836 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01001837 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
1838 request_size=123 force_version=ssl3" \
1839 0 \
1840 -S "Read from client: 123 bytes read" \
1841 -s "Read from client: 1 bytes read" \
1842 -s "122 bytes read"
1843
1844run_test "CBC Record splitting: TLS 1.0 RC4, no splitting" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001845 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01001846 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
1847 request_size=123 force_version=tls1" \
1848 0 \
1849 -s "Read from client: 123 bytes read" \
1850 -S "Read from client: 1 bytes read" \
1851 -S "122 bytes read"
1852
1853run_test "CBC Record splitting: TLS 1.0, splitting disabled" \
1854 "$P_SRV" \
1855 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
1856 request_size=123 force_version=tls1 recsplit=0" \
1857 0 \
1858 -s "Read from client: 123 bytes read" \
1859 -S "Read from client: 1 bytes read" \
1860 -S "122 bytes read"
1861
Manuel Pégourié-Gonnarda852cf42015-01-13 20:56:15 +01001862run_test "CBC Record splitting: TLS 1.0, splitting, nbio" \
1863 "$P_SRV nbio=2" \
1864 "$P_CLI nbio=2 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
1865 request_size=123 force_version=tls1" \
1866 0 \
1867 -S "Read from client: 123 bytes read" \
1868 -s "Read from client: 1 bytes read" \
1869 -s "122 bytes read"
1870
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001871# Tests for Session Tickets
1872
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02001873run_test "Session resume using tickets: basic" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001874 "$P_SRV debug_level=3 tickets=1" \
1875 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01001876 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01001877 -c "client hello, adding session ticket extension" \
1878 -s "found session ticket extension" \
1879 -s "server hello, adding session ticket extension" \
1880 -c "found session_ticket extension" \
1881 -c "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01001882 -S "session successfully restored from cache" \
1883 -s "session successfully restored from ticket" \
1884 -s "a session has been resumed" \
1885 -c "a session has been resumed"
1886
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02001887run_test "Session resume using tickets: cache disabled" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001888 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
1889 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001890 0 \
1891 -c "client hello, adding session ticket extension" \
1892 -s "found session ticket extension" \
1893 -s "server hello, adding session ticket extension" \
1894 -c "found session_ticket extension" \
1895 -c "parse new session ticket" \
1896 -S "session successfully restored from cache" \
1897 -s "session successfully restored from ticket" \
1898 -s "a session has been resumed" \
1899 -c "a session has been resumed"
1900
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02001901run_test "Session resume using tickets: timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001902 "$P_SRV debug_level=3 tickets=1 cache_max=0 ticket_timeout=1" \
1903 "$P_CLI debug_level=3 tickets=1 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01001904 0 \
1905 -c "client hello, adding session ticket extension" \
1906 -s "found session ticket extension" \
1907 -s "server hello, adding session ticket extension" \
1908 -c "found session_ticket extension" \
1909 -c "parse new session ticket" \
1910 -S "session successfully restored from cache" \
1911 -S "session successfully restored from ticket" \
1912 -S "a session has been resumed" \
1913 -C "a session has been resumed"
1914
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02001915run_test "Session resume using tickets: openssl server" \
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001916 "$O_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001917 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01001918 0 \
1919 -c "client hello, adding session ticket extension" \
1920 -c "found session_ticket extension" \
1921 -c "parse new session ticket" \
1922 -c "a session has been resumed"
1923
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02001924run_test "Session resume using tickets: openssl client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001925 "$P_SRV debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001926 "( $O_CLI -sess_out $SESSION; \
1927 $O_CLI -sess_in $SESSION; \
1928 rm -f $SESSION )" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01001929 0 \
1930 -s "found session ticket extension" \
1931 -s "server hello, adding session ticket extension" \
1932 -S "session successfully restored from cache" \
1933 -s "session successfully restored from ticket" \
1934 -s "a session has been resumed"
1935
Hanno Becker1d739932018-08-21 13:55:22 +01001936# Tests for Session Tickets with DTLS
1937
1938run_test "Session resume using tickets, DTLS: basic" \
1939 "$P_SRV debug_level=3 dtls=1 tickets=1" \
1940 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1" \
1941 0 \
1942 -c "client hello, adding session ticket extension" \
1943 -s "found session ticket extension" \
1944 -s "server hello, adding session ticket extension" \
1945 -c "found session_ticket extension" \
1946 -c "parse new session ticket" \
1947 -S "session successfully restored from cache" \
1948 -s "session successfully restored from ticket" \
1949 -s "a session has been resumed" \
1950 -c "a session has been resumed"
1951
1952run_test "Session resume using tickets, DTLS: cache disabled" \
1953 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
1954 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1" \
1955 0 \
1956 -c "client hello, adding session ticket extension" \
1957 -s "found session ticket extension" \
1958 -s "server hello, adding session ticket extension" \
1959 -c "found session_ticket extension" \
1960 -c "parse new session ticket" \
1961 -S "session successfully restored from cache" \
1962 -s "session successfully restored from ticket" \
1963 -s "a session has been resumed" \
1964 -c "a session has been resumed"
1965
1966run_test "Session resume using tickets, DTLS: timeout" \
1967 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0 ticket_timeout=1" \
1968 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 reco_delay=2" \
1969 0 \
1970 -c "client hello, adding session ticket extension" \
1971 -s "found session ticket extension" \
1972 -s "server hello, adding session ticket extension" \
1973 -c "found session_ticket extension" \
1974 -c "parse new session ticket" \
1975 -S "session successfully restored from cache" \
1976 -S "session successfully restored from ticket" \
1977 -S "a session has been resumed" \
1978 -C "a session has been resumed"
1979
1980run_test "Session resume using tickets, DTLS: openssl server" \
1981 "$O_SRV -dtls1" \
1982 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1" \
1983 0 \
1984 -c "client hello, adding session ticket extension" \
1985 -c "found session_ticket extension" \
1986 -c "parse new session ticket" \
1987 -c "a session has been resumed"
1988
1989run_test "Session resume using tickets, DTLS: openssl client" \
1990 "$P_SRV dtls=1 debug_level=3 tickets=1" \
1991 "( $O_CLI -dtls1 -sess_out $SESSION; \
1992 $O_CLI -dtls1 -sess_in $SESSION; \
1993 rm -f $SESSION )" \
1994 0 \
1995 -s "found session ticket extension" \
1996 -s "server hello, adding session ticket extension" \
1997 -S "session successfully restored from cache" \
1998 -s "session successfully restored from ticket" \
1999 -s "a session has been resumed"
2000
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002001# Tests for Session Resume based on session-ID and cache
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002002
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002003run_test "Session resume using cache: tickets enabled on client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002004 "$P_SRV debug_level=3 tickets=0" \
2005 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002006 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002007 -c "client hello, adding session ticket extension" \
2008 -s "found session ticket extension" \
2009 -S "server hello, adding session ticket extension" \
2010 -C "found session_ticket extension" \
2011 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002012 -s "session successfully restored from cache" \
2013 -S "session successfully restored from ticket" \
2014 -s "a session has been resumed" \
2015 -c "a session has been resumed"
2016
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002017run_test "Session resume using cache: tickets enabled on server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002018 "$P_SRV debug_level=3 tickets=1" \
2019 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002020 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002021 -C "client hello, adding session ticket extension" \
2022 -S "found session ticket extension" \
2023 -S "server hello, adding session ticket extension" \
2024 -C "found session_ticket extension" \
2025 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002026 -s "session successfully restored from cache" \
2027 -S "session successfully restored from ticket" \
2028 -s "a session has been resumed" \
2029 -c "a session has been resumed"
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002030
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002031run_test "Session resume using cache: cache_max=0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002032 "$P_SRV debug_level=3 tickets=0 cache_max=0" \
2033 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002034 0 \
2035 -S "session successfully restored from cache" \
2036 -S "session successfully restored from ticket" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002037 -S "a session has been resumed" \
2038 -C "a session has been resumed"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002039
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002040run_test "Session resume using cache: cache_max=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002041 "$P_SRV debug_level=3 tickets=0 cache_max=1" \
2042 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002043 0 \
2044 -s "session successfully restored from cache" \
2045 -S "session successfully restored from ticket" \
2046 -s "a session has been resumed" \
2047 -c "a session has been resumed"
2048
Manuel Pégourié-Gonnard6df31962015-05-04 10:55:47 +02002049run_test "Session resume using cache: timeout > delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002050 "$P_SRV debug_level=3 tickets=0" \
2051 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=0" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002052 0 \
2053 -s "session successfully restored from cache" \
2054 -S "session successfully restored from ticket" \
2055 -s "a session has been resumed" \
2056 -c "a session has been resumed"
2057
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002058run_test "Session resume using cache: timeout < delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002059 "$P_SRV debug_level=3 tickets=0 cache_timeout=1" \
2060 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002061 0 \
2062 -S "session successfully restored from cache" \
2063 -S "session successfully restored from ticket" \
2064 -S "a session has been resumed" \
2065 -C "a session has been resumed"
2066
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002067run_test "Session resume using cache: no timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002068 "$P_SRV debug_level=3 tickets=0 cache_timeout=0" \
2069 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002070 0 \
2071 -s "session successfully restored from cache" \
2072 -S "session successfully restored from ticket" \
2073 -s "a session has been resumed" \
2074 -c "a session has been resumed"
2075
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002076run_test "Session resume using cache: openssl client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002077 "$P_SRV debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02002078 "( $O_CLI -sess_out $SESSION; \
2079 $O_CLI -sess_in $SESSION; \
2080 rm -f $SESSION )" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01002081 0 \
2082 -s "found session ticket extension" \
2083 -S "server hello, adding session ticket extension" \
2084 -s "session successfully restored from cache" \
2085 -S "session successfully restored from ticket" \
2086 -s "a session has been resumed"
2087
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002088run_test "Session resume using cache: openssl server" \
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01002089 "$O_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002090 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01002091 0 \
2092 -C "found session_ticket extension" \
2093 -C "parse new session ticket" \
2094 -c "a session has been resumed"
2095
Hanno Becker1d739932018-08-21 13:55:22 +01002096# Tests for Session Resume based on session-ID and cache, DTLS
2097
2098run_test "Session resume using cache, DTLS: tickets enabled on client" \
2099 "$P_SRV dtls=1 debug_level=3 tickets=0" \
2100 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1" \
2101 0 \
2102 -c "client hello, adding session ticket extension" \
2103 -s "found session ticket extension" \
2104 -S "server hello, adding session ticket extension" \
2105 -C "found session_ticket extension" \
2106 -C "parse new session ticket" \
2107 -s "session successfully restored from cache" \
2108 -S "session successfully restored from ticket" \
2109 -s "a session has been resumed" \
2110 -c "a session has been resumed"
2111
2112run_test "Session resume using cache, DTLS: tickets enabled on server" \
2113 "$P_SRV dtls=1 debug_level=3 tickets=1" \
2114 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
2115 0 \
2116 -C "client hello, adding session ticket extension" \
2117 -S "found session ticket extension" \
2118 -S "server hello, adding session ticket extension" \
2119 -C "found session_ticket extension" \
2120 -C "parse new session ticket" \
2121 -s "session successfully restored from cache" \
2122 -S "session successfully restored from ticket" \
2123 -s "a session has been resumed" \
2124 -c "a session has been resumed"
2125
2126run_test "Session resume using cache, DTLS: cache_max=0" \
2127 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=0" \
2128 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
2129 0 \
2130 -S "session successfully restored from cache" \
2131 -S "session successfully restored from ticket" \
2132 -S "a session has been resumed" \
2133 -C "a session has been resumed"
2134
2135run_test "Session resume using cache, DTLS: cache_max=1" \
2136 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=1" \
2137 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
2138 0 \
2139 -s "session successfully restored from cache" \
2140 -S "session successfully restored from ticket" \
2141 -s "a session has been resumed" \
2142 -c "a session has been resumed"
2143
2144run_test "Session resume using cache, DTLS: timeout > delay" \
2145 "$P_SRV dtls=1 debug_level=3 tickets=0" \
2146 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 reco_delay=0" \
2147 0 \
2148 -s "session successfully restored from cache" \
2149 -S "session successfully restored from ticket" \
2150 -s "a session has been resumed" \
2151 -c "a session has been resumed"
2152
2153run_test "Session resume using cache, DTLS: timeout < delay" \
2154 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=1" \
2155 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
2156 0 \
2157 -S "session successfully restored from cache" \
2158 -S "session successfully restored from ticket" \
2159 -S "a session has been resumed" \
2160 -C "a session has been resumed"
2161
2162run_test "Session resume using cache, DTLS: no timeout" \
2163 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=0" \
2164 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
2165 0 \
2166 -s "session successfully restored from cache" \
2167 -S "session successfully restored from ticket" \
2168 -s "a session has been resumed" \
2169 -c "a session has been resumed"
2170
2171run_test "Session resume using cache, DTLS: openssl client" \
2172 "$P_SRV dtls=1 debug_level=3 tickets=0" \
2173 "( $O_CLI -dtls1 -sess_out $SESSION; \
2174 $O_CLI -dtls1 -sess_in $SESSION; \
2175 rm -f $SESSION )" \
2176 0 \
2177 -s "found session ticket extension" \
2178 -S "server hello, adding session ticket extension" \
2179 -s "session successfully restored from cache" \
2180 -S "session successfully restored from ticket" \
2181 -s "a session has been resumed"
2182
2183run_test "Session resume using cache, DTLS: openssl server" \
2184 "$O_SRV -dtls1" \
2185 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
2186 0 \
2187 -C "found session_ticket extension" \
2188 -C "parse new session ticket" \
2189 -c "a session has been resumed"
2190
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002191# Tests for Max Fragment Length extension
2192
Angus Grattonc4dd0732018-04-11 16:28:39 +10002193if [ "$MAX_CONTENT_LEN" -lt "4096" ]; then
2194 printf "${CONFIG_H} defines MBEDTLS_SSL_MAX_CONTENT_LEN to be less than 4096. Fragment length tests will fail.\n"
Hanno Becker6428f8d2017-09-22 16:58:50 +01002195 exit 1
2196fi
2197
Angus Grattonc4dd0732018-04-11 16:28:39 +10002198if [ $MAX_CONTENT_LEN -ne 16384 ]; then
2199 printf "Using non-default maximum content length $MAX_CONTENT_LEN\n"
2200fi
2201
Hanno Becker4aed27e2017-09-18 15:00:34 +01002202requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Hanno Beckerc5266962017-09-18 15:01:50 +01002203run_test "Max fragment length: enabled, default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002204 "$P_SRV debug_level=3" \
2205 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002206 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002207 -c "Maximum fragment length is $MAX_CONTENT_LEN" \
2208 -s "Maximum fragment length is $MAX_CONTENT_LEN" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002209 -C "client hello, adding max_fragment_length extension" \
2210 -S "found max fragment length extension" \
2211 -S "server hello, max_fragment_length extension" \
2212 -C "found max_fragment_length extension"
2213
Hanno Becker4aed27e2017-09-18 15:00:34 +01002214requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Hanno Beckerc5266962017-09-18 15:01:50 +01002215run_test "Max fragment length: enabled, default, larger message" \
2216 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002217 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002218 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002219 -c "Maximum fragment length is $MAX_CONTENT_LEN" \
2220 -s "Maximum fragment length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002221 -C "client hello, adding max_fragment_length extension" \
2222 -S "found max fragment length extension" \
2223 -S "server hello, max_fragment_length extension" \
2224 -C "found max_fragment_length extension" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002225 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
2226 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01002227 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01002228
2229requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2230run_test "Max fragment length, DTLS: enabled, default, larger message" \
2231 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002232 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002233 1 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002234 -c "Maximum fragment length is $MAX_CONTENT_LEN" \
2235 -s "Maximum fragment length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002236 -C "client hello, adding max_fragment_length extension" \
2237 -S "found max fragment length extension" \
2238 -S "server hello, max_fragment_length extension" \
2239 -C "found max_fragment_length extension" \
2240 -c "fragment larger than.*maximum "
2241
Angus Grattonc4dd0732018-04-11 16:28:39 +10002242# Run some tests with MBEDTLS_SSL_MAX_FRAGMENT_LENGTH disabled
2243# (session fragment length will be 16384 regardless of mbedtls
2244# content length configuration.)
2245
Hanno Beckerc5266962017-09-18 15:01:50 +01002246requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2247run_test "Max fragment length: disabled, larger message" \
2248 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002249 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002250 0 \
2251 -C "Maximum fragment length is 16384" \
2252 -S "Maximum fragment length is 16384" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002253 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
2254 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01002255 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01002256
2257requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2258run_test "Max fragment length DTLS: disabled, larger message" \
2259 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002260 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002261 1 \
2262 -C "Maximum fragment length is 16384" \
2263 -S "Maximum fragment length is 16384" \
2264 -c "fragment larger than.*maximum "
2265
2266requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002267run_test "Max fragment length: used by client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002268 "$P_SRV debug_level=3" \
2269 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002270 0 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002271 -c "Maximum fragment length is 4096" \
2272 -s "Maximum fragment length is 4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002273 -c "client hello, adding max_fragment_length extension" \
2274 -s "found max fragment length extension" \
2275 -s "server hello, max_fragment_length extension" \
2276 -c "found max_fragment_length extension"
2277
Hanno Becker4aed27e2017-09-18 15:00:34 +01002278requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002279run_test "Max fragment length: used by server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002280 "$P_SRV debug_level=3 max_frag_len=4096" \
2281 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002282 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002283 -c "Maximum fragment length is $MAX_CONTENT_LEN" \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002284 -s "Maximum fragment length is 4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002285 -C "client hello, adding max_fragment_length extension" \
2286 -S "found max fragment length extension" \
2287 -S "server hello, max_fragment_length extension" \
2288 -C "found max_fragment_length extension"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002289
Hanno Becker4aed27e2017-09-18 15:00:34 +01002290requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002291requires_gnutls
2292run_test "Max fragment length: gnutls server" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02002293 "$G_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002294 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02002295 0 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002296 -c "Maximum fragment length is 4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02002297 -c "client hello, adding max_fragment_length extension" \
2298 -c "found max_fragment_length extension"
2299
Hanno Becker4aed27e2017-09-18 15:00:34 +01002300requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002301run_test "Max fragment length: client, message just fits" \
2302 "$P_SRV debug_level=3" \
2303 "$P_CLI debug_level=3 max_frag_len=2048 request_size=2048" \
2304 0 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002305 -c "Maximum fragment length is 2048" \
2306 -s "Maximum fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002307 -c "client hello, adding max_fragment_length extension" \
2308 -s "found max fragment length extension" \
2309 -s "server hello, max_fragment_length extension" \
2310 -c "found max_fragment_length extension" \
2311 -c "2048 bytes written in 1 fragments" \
2312 -s "2048 bytes read"
2313
Hanno Becker4aed27e2017-09-18 15:00:34 +01002314requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002315run_test "Max fragment length: client, larger message" \
2316 "$P_SRV debug_level=3" \
2317 "$P_CLI debug_level=3 max_frag_len=2048 request_size=2345" \
2318 0 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002319 -c "Maximum fragment length is 2048" \
2320 -s "Maximum fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002321 -c "client hello, adding max_fragment_length extension" \
2322 -s "found max fragment length extension" \
2323 -s "server hello, max_fragment_length extension" \
2324 -c "found max_fragment_length extension" \
2325 -c "2345 bytes written in 2 fragments" \
2326 -s "2048 bytes read" \
2327 -s "297 bytes read"
2328
Hanno Becker4aed27e2017-09-18 15:00:34 +01002329requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard23eb74d2015-01-21 14:37:13 +00002330run_test "Max fragment length: DTLS client, larger message" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002331 "$P_SRV debug_level=3 dtls=1" \
2332 "$P_CLI debug_level=3 dtls=1 max_frag_len=2048 request_size=2345" \
2333 1 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002334 -c "Maximum fragment length is 2048" \
2335 -s "Maximum fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002336 -c "client hello, adding max_fragment_length extension" \
2337 -s "found max fragment length extension" \
2338 -s "server hello, max_fragment_length extension" \
2339 -c "found max_fragment_length extension" \
2340 -c "fragment larger than.*maximum"
2341
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002342# Tests for renegotiation
2343
Hanno Becker6a243642017-10-12 15:18:45 +01002344# Renegotiation SCSV always added, regardless of SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002345run_test "Renegotiation: none, for reference" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002346 "$P_SRV debug_level=3 exchanges=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002347 "$P_CLI debug_level=3 exchanges=2" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002348 0 \
2349 -C "client hello, adding renegotiation extension" \
2350 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2351 -S "found renegotiation extension" \
2352 -s "server hello, secure renegotiation extension" \
2353 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002354 -C "=> renegotiate" \
2355 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002356 -S "write hello request"
2357
Hanno Becker6a243642017-10-12 15:18:45 +01002358requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002359run_test "Renegotiation: client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002360 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002361 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002362 0 \
2363 -c "client hello, adding renegotiation extension" \
2364 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2365 -s "found renegotiation extension" \
2366 -s "server hello, secure renegotiation extension" \
2367 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002368 -c "=> renegotiate" \
2369 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002370 -S "write hello request"
2371
Hanno Becker6a243642017-10-12 15:18:45 +01002372requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002373run_test "Renegotiation: server-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002374 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002375 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002376 0 \
2377 -c "client hello, adding renegotiation extension" \
2378 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2379 -s "found renegotiation extension" \
2380 -s "server hello, secure renegotiation extension" \
2381 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002382 -c "=> renegotiate" \
2383 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002384 -s "write hello request"
2385
Janos Follathb0f148c2017-10-05 12:29:42 +01002386# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
2387# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
2388# algorithm stronger than SHA-1 is enabled in config.h
Hanno Becker6a243642017-10-12 15:18:45 +01002389requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01002390run_test "Renegotiation: Signature Algorithms parsing, client-initiated" \
2391 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
2392 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
2393 0 \
2394 -c "client hello, adding renegotiation extension" \
2395 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2396 -s "found renegotiation extension" \
2397 -s "server hello, secure renegotiation extension" \
2398 -c "found renegotiation extension" \
2399 -c "=> renegotiate" \
2400 -s "=> renegotiate" \
2401 -S "write hello request" \
2402 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
2403
2404# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
2405# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
2406# algorithm stronger than SHA-1 is enabled in config.h
Hanno Becker6a243642017-10-12 15:18:45 +01002407requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01002408run_test "Renegotiation: Signature Algorithms parsing, server-initiated" \
2409 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
2410 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
2411 0 \
2412 -c "client hello, adding renegotiation extension" \
2413 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2414 -s "found renegotiation extension" \
2415 -s "server hello, secure renegotiation extension" \
2416 -c "found renegotiation extension" \
2417 -c "=> renegotiate" \
2418 -s "=> renegotiate" \
2419 -s "write hello request" \
2420 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
2421
Hanno Becker6a243642017-10-12 15:18:45 +01002422requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002423run_test "Renegotiation: double" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002424 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002425 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002426 0 \
2427 -c "client hello, adding renegotiation extension" \
2428 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2429 -s "found renegotiation extension" \
2430 -s "server hello, secure renegotiation extension" \
2431 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002432 -c "=> renegotiate" \
2433 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002434 -s "write hello request"
2435
Hanno Becker6a243642017-10-12 15:18:45 +01002436requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002437run_test "Renegotiation: client-initiated, server-rejected" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002438 "$P_SRV debug_level=3 exchanges=2 renegotiation=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002439 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002440 1 \
2441 -c "client hello, adding renegotiation extension" \
2442 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2443 -S "found renegotiation extension" \
2444 -s "server hello, secure renegotiation extension" \
2445 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002446 -c "=> renegotiate" \
2447 -S "=> renegotiate" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002448 -S "write hello request" \
Manuel Pégourié-Gonnard65919622014-08-19 12:50:30 +02002449 -c "SSL - Unexpected message at ServerHello in renegotiation" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002450 -c "failed"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002451
Hanno Becker6a243642017-10-12 15:18:45 +01002452requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002453run_test "Renegotiation: server-initiated, client-rejected, default" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002454 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002455 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002456 0 \
2457 -C "client hello, adding renegotiation extension" \
2458 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2459 -S "found renegotiation extension" \
2460 -s "server hello, secure renegotiation extension" \
2461 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002462 -C "=> renegotiate" \
2463 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002464 -s "write hello request" \
Manuel Pégourié-Gonnarda9964db2014-07-03 19:29:16 +02002465 -S "SSL - An unexpected message was received from our peer" \
2466 -S "failed"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01002467
Hanno Becker6a243642017-10-12 15:18:45 +01002468requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002469run_test "Renegotiation: server-initiated, client-rejected, not enforced" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002470 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002471 renego_delay=-1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002472 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002473 0 \
2474 -C "client hello, adding renegotiation extension" \
2475 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2476 -S "found renegotiation extension" \
2477 -s "server hello, secure renegotiation extension" \
2478 -c "found renegotiation extension" \
2479 -C "=> renegotiate" \
2480 -S "=> renegotiate" \
2481 -s "write hello request" \
2482 -S "SSL - An unexpected message was received from our peer" \
2483 -S "failed"
2484
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002485# delay 2 for 1 alert record + 1 application data record
Hanno Becker6a243642017-10-12 15:18:45 +01002486requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002487run_test "Renegotiation: server-initiated, client-rejected, delay 2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002488 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002489 renego_delay=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002490 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002491 0 \
2492 -C "client hello, adding renegotiation extension" \
2493 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2494 -S "found renegotiation extension" \
2495 -s "server hello, secure renegotiation extension" \
2496 -c "found renegotiation extension" \
2497 -C "=> renegotiate" \
2498 -S "=> renegotiate" \
2499 -s "write hello request" \
2500 -S "SSL - An unexpected message was received from our peer" \
2501 -S "failed"
2502
Hanno Becker6a243642017-10-12 15:18:45 +01002503requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002504run_test "Renegotiation: server-initiated, client-rejected, delay 0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002505 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002506 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002507 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002508 0 \
2509 -C "client hello, adding renegotiation extension" \
2510 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2511 -S "found renegotiation extension" \
2512 -s "server hello, secure renegotiation extension" \
2513 -c "found renegotiation extension" \
2514 -C "=> renegotiate" \
2515 -S "=> renegotiate" \
2516 -s "write hello request" \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002517 -s "SSL - An unexpected message was received from our peer"
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002518
Hanno Becker6a243642017-10-12 15:18:45 +01002519requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002520run_test "Renegotiation: server-initiated, client-accepted, delay 0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002521 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002522 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002523 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002524 0 \
2525 -c "client hello, adding renegotiation extension" \
2526 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2527 -s "found renegotiation extension" \
2528 -s "server hello, secure renegotiation extension" \
2529 -c "found renegotiation extension" \
2530 -c "=> renegotiate" \
2531 -s "=> renegotiate" \
2532 -s "write hello request" \
2533 -S "SSL - An unexpected message was received from our peer" \
2534 -S "failed"
2535
Hanno Becker6a243642017-10-12 15:18:45 +01002536requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002537run_test "Renegotiation: periodic, just below period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002538 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002539 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
2540 0 \
2541 -C "client hello, adding renegotiation extension" \
2542 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2543 -S "found renegotiation extension" \
2544 -s "server hello, secure renegotiation extension" \
2545 -c "found renegotiation extension" \
2546 -S "record counter limit reached: renegotiate" \
2547 -C "=> renegotiate" \
2548 -S "=> renegotiate" \
2549 -S "write hello request" \
2550 -S "SSL - An unexpected message was received from our peer" \
2551 -S "failed"
2552
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01002553# one extra exchange to be able to complete renego
Hanno Becker6a243642017-10-12 15:18:45 +01002554requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002555run_test "Renegotiation: periodic, just above period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002556 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01002557 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002558 0 \
2559 -c "client hello, adding renegotiation extension" \
2560 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2561 -s "found renegotiation extension" \
2562 -s "server hello, secure renegotiation extension" \
2563 -c "found renegotiation extension" \
2564 -s "record counter limit reached: renegotiate" \
2565 -c "=> renegotiate" \
2566 -s "=> renegotiate" \
2567 -s "write hello request" \
2568 -S "SSL - An unexpected message was received from our peer" \
2569 -S "failed"
2570
Hanno Becker6a243642017-10-12 15:18:45 +01002571requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002572run_test "Renegotiation: periodic, two times period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002573 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01002574 "$P_CLI debug_level=3 exchanges=7 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002575 0 \
2576 -c "client hello, adding renegotiation extension" \
2577 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2578 -s "found renegotiation extension" \
2579 -s "server hello, secure renegotiation extension" \
2580 -c "found renegotiation extension" \
2581 -s "record counter limit reached: renegotiate" \
2582 -c "=> renegotiate" \
2583 -s "=> renegotiate" \
2584 -s "write hello request" \
2585 -S "SSL - An unexpected message was received from our peer" \
2586 -S "failed"
2587
Hanno Becker6a243642017-10-12 15:18:45 +01002588requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002589run_test "Renegotiation: periodic, above period, disabled" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002590 "$P_SRV debug_level=3 exchanges=9 renegotiation=0 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01002591 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
2592 0 \
2593 -C "client hello, adding renegotiation extension" \
2594 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2595 -S "found renegotiation extension" \
2596 -s "server hello, secure renegotiation extension" \
2597 -c "found renegotiation extension" \
2598 -S "record counter limit reached: renegotiate" \
2599 -C "=> renegotiate" \
2600 -S "=> renegotiate" \
2601 -S "write hello request" \
2602 -S "SSL - An unexpected message was received from our peer" \
2603 -S "failed"
2604
Hanno Becker6a243642017-10-12 15:18:45 +01002605requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002606run_test "Renegotiation: nbio, client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002607 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002608 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02002609 0 \
2610 -c "client hello, adding renegotiation extension" \
2611 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2612 -s "found renegotiation extension" \
2613 -s "server hello, secure renegotiation extension" \
2614 -c "found renegotiation extension" \
2615 -c "=> renegotiate" \
2616 -s "=> renegotiate" \
2617 -S "write hello request"
2618
Hanno Becker6a243642017-10-12 15:18:45 +01002619requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002620run_test "Renegotiation: nbio, server-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002621 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002622 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02002623 0 \
2624 -c "client hello, adding renegotiation extension" \
2625 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2626 -s "found renegotiation extension" \
2627 -s "server hello, secure renegotiation extension" \
2628 -c "found renegotiation extension" \
2629 -c "=> renegotiate" \
2630 -s "=> renegotiate" \
2631 -s "write hello request"
2632
Hanno Becker6a243642017-10-12 15:18:45 +01002633requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002634run_test "Renegotiation: openssl server, client-initiated" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02002635 "$O_SRV -www" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002636 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02002637 0 \
2638 -c "client hello, adding renegotiation extension" \
2639 -c "found renegotiation extension" \
2640 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002641 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02002642 -C "error" \
2643 -c "HTTP/1.0 200 [Oo][Kk]"
2644
Paul Bakker539d9722015-02-08 16:18:35 +01002645requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01002646requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002647run_test "Renegotiation: gnutls server strict, client-initiated" \
2648 "$G_SRV --priority=NORMAL:%SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002649 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02002650 0 \
2651 -c "client hello, adding renegotiation extension" \
2652 -c "found renegotiation extension" \
2653 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002654 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02002655 -C "error" \
2656 -c "HTTP/1.0 200 [Oo][Kk]"
2657
Paul Bakker539d9722015-02-08 16:18:35 +01002658requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01002659requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002660run_test "Renegotiation: gnutls server unsafe, client-initiated default" \
2661 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
2662 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
2663 1 \
2664 -c "client hello, adding renegotiation extension" \
2665 -C "found renegotiation extension" \
2666 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002667 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002668 -c "error" \
2669 -C "HTTP/1.0 200 [Oo][Kk]"
2670
Paul Bakker539d9722015-02-08 16:18:35 +01002671requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01002672requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002673run_test "Renegotiation: gnutls server unsafe, client-inititated no legacy" \
2674 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
2675 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
2676 allow_legacy=0" \
2677 1 \
2678 -c "client hello, adding renegotiation extension" \
2679 -C "found renegotiation extension" \
2680 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002681 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002682 -c "error" \
2683 -C "HTTP/1.0 200 [Oo][Kk]"
2684
Paul Bakker539d9722015-02-08 16:18:35 +01002685requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01002686requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002687run_test "Renegotiation: gnutls server unsafe, client-inititated legacy" \
2688 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
2689 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
2690 allow_legacy=1" \
2691 0 \
2692 -c "client hello, adding renegotiation extension" \
2693 -C "found renegotiation extension" \
2694 -c "=> renegotiate" \
2695 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002696 -C "error" \
2697 -c "HTTP/1.0 200 [Oo][Kk]"
2698
Hanno Becker6a243642017-10-12 15:18:45 +01002699requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard30d16eb2014-08-19 17:43:50 +02002700run_test "Renegotiation: DTLS, client-initiated" \
2701 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1" \
2702 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
2703 0 \
2704 -c "client hello, adding renegotiation extension" \
2705 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2706 -s "found renegotiation extension" \
2707 -s "server hello, secure renegotiation extension" \
2708 -c "found renegotiation extension" \
2709 -c "=> renegotiate" \
2710 -s "=> renegotiate" \
2711 -S "write hello request"
2712
Hanno Becker6a243642017-10-12 15:18:45 +01002713requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02002714run_test "Renegotiation: DTLS, server-initiated" \
2715 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnarddf9a0a82014-10-02 14:17:18 +02002716 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 \
2717 read_timeout=1000 max_resend=2" \
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02002718 0 \
2719 -c "client hello, adding renegotiation extension" \
2720 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2721 -s "found renegotiation extension" \
2722 -s "server hello, secure renegotiation extension" \
2723 -c "found renegotiation extension" \
2724 -c "=> renegotiate" \
2725 -s "=> renegotiate" \
2726 -s "write hello request"
2727
Hanno Becker6a243642017-10-12 15:18:45 +01002728requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Andres AG692ad842017-01-19 16:30:57 +00002729run_test "Renegotiation: DTLS, renego_period overflow" \
2730 "$P_SRV debug_level=3 dtls=1 exchanges=4 renegotiation=1 renego_period=18446462598732840962 auth_mode=optional" \
2731 "$P_CLI debug_level=3 dtls=1 exchanges=4 renegotiation=1" \
2732 0 \
2733 -c "client hello, adding renegotiation extension" \
2734 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2735 -s "found renegotiation extension" \
2736 -s "server hello, secure renegotiation extension" \
2737 -s "record counter limit reached: renegotiate" \
2738 -c "=> renegotiate" \
2739 -s "=> renegotiate" \
Hanno Becker6a243642017-10-12 15:18:45 +01002740 -s "write hello request"
Andres AG692ad842017-01-19 16:30:57 +00002741
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +00002742requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01002743requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02002744run_test "Renegotiation: DTLS, gnutls server, client-initiated" \
2745 "$G_SRV -u --mtu 4096" \
2746 "$P_CLI debug_level=3 dtls=1 exchanges=1 renegotiation=1 renegotiate=1" \
2747 0 \
2748 -c "client hello, adding renegotiation extension" \
2749 -c "found renegotiation extension" \
2750 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002751 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02002752 -C "error" \
2753 -s "Extra-header:"
2754
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002755# Test for the "secure renegotation" extension only (no actual renegotiation)
2756
Paul Bakker539d9722015-02-08 16:18:35 +01002757requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002758run_test "Renego ext: gnutls server strict, client default" \
2759 "$G_SRV --priority=NORMAL:%SAFE_RENEGOTIATION" \
2760 "$P_CLI debug_level=3" \
2761 0 \
2762 -c "found renegotiation extension" \
2763 -C "error" \
2764 -c "HTTP/1.0 200 [Oo][Kk]"
2765
Paul Bakker539d9722015-02-08 16:18:35 +01002766requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002767run_test "Renego ext: gnutls server unsafe, client default" \
2768 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
2769 "$P_CLI debug_level=3" \
2770 0 \
2771 -C "found renegotiation extension" \
2772 -C "error" \
2773 -c "HTTP/1.0 200 [Oo][Kk]"
2774
Paul Bakker539d9722015-02-08 16:18:35 +01002775requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002776run_test "Renego ext: gnutls server unsafe, client break legacy" \
2777 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
2778 "$P_CLI debug_level=3 allow_legacy=-1" \
2779 1 \
2780 -C "found renegotiation extension" \
2781 -c "error" \
2782 -C "HTTP/1.0 200 [Oo][Kk]"
2783
Paul Bakker539d9722015-02-08 16:18:35 +01002784requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002785run_test "Renego ext: gnutls client strict, server default" \
2786 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002787 "$G_CLI --priority=NORMAL:%SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002788 0 \
2789 -s "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
2790 -s "server hello, secure renegotiation extension"
2791
Paul Bakker539d9722015-02-08 16:18:35 +01002792requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002793run_test "Renego ext: gnutls client unsafe, server default" \
2794 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002795 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002796 0 \
2797 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
2798 -S "server hello, secure renegotiation extension"
2799
Paul Bakker539d9722015-02-08 16:18:35 +01002800requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002801run_test "Renego ext: gnutls client unsafe, server break legacy" \
2802 "$P_SRV debug_level=3 allow_legacy=-1" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002803 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01002804 1 \
2805 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
2806 -S "server hello, secure renegotiation extension"
2807
Janos Follath0b242342016-02-17 10:11:21 +00002808# Tests for silently dropping trailing extra bytes in .der certificates
2809
2810requires_gnutls
2811run_test "DER format: no trailing bytes" \
2812 "$P_SRV crt_file=data_files/server5-der0.crt \
2813 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002814 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00002815 0 \
2816 -c "Handshake was completed" \
2817
2818requires_gnutls
2819run_test "DER format: with a trailing zero byte" \
2820 "$P_SRV crt_file=data_files/server5-der1a.crt \
2821 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002822 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00002823 0 \
2824 -c "Handshake was completed" \
2825
2826requires_gnutls
2827run_test "DER format: with a trailing random byte" \
2828 "$P_SRV crt_file=data_files/server5-der1b.crt \
2829 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002830 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00002831 0 \
2832 -c "Handshake was completed" \
2833
2834requires_gnutls
2835run_test "DER format: with 2 trailing random bytes" \
2836 "$P_SRV crt_file=data_files/server5-der2.crt \
2837 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002838 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00002839 0 \
2840 -c "Handshake was completed" \
2841
2842requires_gnutls
2843run_test "DER format: with 4 trailing random bytes" \
2844 "$P_SRV crt_file=data_files/server5-der4.crt \
2845 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002846 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00002847 0 \
2848 -c "Handshake was completed" \
2849
2850requires_gnutls
2851run_test "DER format: with 8 trailing random bytes" \
2852 "$P_SRV crt_file=data_files/server5-der8.crt \
2853 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002854 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00002855 0 \
2856 -c "Handshake was completed" \
2857
2858requires_gnutls
2859run_test "DER format: with 9 trailing random bytes" \
2860 "$P_SRV crt_file=data_files/server5-der9.crt \
2861 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02002862 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00002863 0 \
2864 -c "Handshake was completed" \
2865
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03002866# Tests for auth_mode, there are duplicated tests using ca callback for authentication
2867# When updating these tests, modify the matching authentication tests accordingly
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002868
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002869run_test "Authentication: server badcert, client required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002870 "$P_SRV crt_file=data_files/server5-badsign.crt \
2871 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002872 "$P_CLI debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002873 1 \
2874 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002875 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002876 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002877 -c "X509 - Certificate verification failed"
2878
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002879run_test "Authentication: server badcert, client optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002880 "$P_SRV crt_file=data_files/server5-badsign.crt \
2881 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002882 "$P_CLI debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002883 0 \
2884 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002885 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002886 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002887 -C "X509 - Certificate verification failed"
2888
Hanno Beckere6706e62017-05-15 16:05:15 +01002889run_test "Authentication: server goodcert, client optional, no trusted CA" \
2890 "$P_SRV" \
2891 "$P_CLI debug_level=3 auth_mode=optional ca_file=none ca_path=none" \
2892 0 \
2893 -c "x509_verify_cert() returned" \
2894 -c "! The certificate is not correctly signed by the trusted CA" \
2895 -c "! Certificate verification flags"\
2896 -C "! mbedtls_ssl_handshake returned" \
2897 -C "X509 - Certificate verification failed" \
2898 -C "SSL - No CA Chain is set, but required to operate"
2899
2900run_test "Authentication: server goodcert, client required, no trusted CA" \
2901 "$P_SRV" \
2902 "$P_CLI debug_level=3 auth_mode=required ca_file=none ca_path=none" \
2903 1 \
2904 -c "x509_verify_cert() returned" \
2905 -c "! The certificate is not correctly signed by the trusted CA" \
2906 -c "! Certificate verification flags"\
2907 -c "! mbedtls_ssl_handshake returned" \
2908 -c "SSL - No CA Chain is set, but required to operate"
2909
2910# The purpose of the next two tests is to test the client's behaviour when receiving a server
2911# certificate with an unsupported elliptic curve. This should usually not happen because
2912# the client informs the server about the supported curves - it does, though, in the
2913# corner case of a static ECDH suite, because the server doesn't check the curve on that
2914# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
2915# different means to have the server ignoring the client's supported curve list.
2916
2917requires_config_enabled MBEDTLS_ECP_C
2918run_test "Authentication: server ECDH p256v1, client required, p256v1 unsupported" \
2919 "$P_SRV debug_level=1 key_file=data_files/server5.key \
2920 crt_file=data_files/server5.ku-ka.crt" \
2921 "$P_CLI debug_level=3 auth_mode=required curves=secp521r1" \
2922 1 \
2923 -c "bad certificate (EC key curve)"\
2924 -c "! Certificate verification flags"\
2925 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
2926
2927requires_config_enabled MBEDTLS_ECP_C
2928run_test "Authentication: server ECDH p256v1, client optional, p256v1 unsupported" \
2929 "$P_SRV debug_level=1 key_file=data_files/server5.key \
2930 crt_file=data_files/server5.ku-ka.crt" \
2931 "$P_CLI debug_level=3 auth_mode=optional curves=secp521r1" \
2932 1 \
2933 -c "bad certificate (EC key curve)"\
2934 -c "! Certificate verification flags"\
2935 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
2936
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002937run_test "Authentication: server badcert, client none" \
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01002938 "$P_SRV crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002939 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002940 "$P_CLI debug_level=1 auth_mode=none" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002941 0 \
2942 -C "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01002943 -C "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02002944 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01002945 -C "X509 - Certificate verification failed"
2946
Simon Butcher99000142016-10-13 17:21:01 +01002947run_test "Authentication: client SHA256, server required" \
2948 "$P_SRV auth_mode=required" \
2949 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
2950 key_file=data_files/server6.key \
2951 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
2952 0 \
2953 -c "Supported Signature Algorithm found: 4," \
2954 -c "Supported Signature Algorithm found: 5,"
2955
2956run_test "Authentication: client SHA384, server required" \
2957 "$P_SRV auth_mode=required" \
2958 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
2959 key_file=data_files/server6.key \
2960 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
2961 0 \
2962 -c "Supported Signature Algorithm found: 4," \
2963 -c "Supported Signature Algorithm found: 5,"
2964
Gilles Peskinefd8332e2017-05-03 16:25:07 +02002965requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
2966run_test "Authentication: client has no cert, server required (SSLv3)" \
2967 "$P_SRV debug_level=3 min_version=ssl3 auth_mode=required" \
2968 "$P_CLI debug_level=3 force_version=ssl3 crt_file=none \
2969 key_file=data_files/server5.key" \
2970 1 \
2971 -S "skip write certificate request" \
2972 -C "skip parse certificate request" \
2973 -c "got a certificate request" \
2974 -c "got no certificate to send" \
2975 -S "x509_verify_cert() returned" \
2976 -s "client has no certificate" \
2977 -s "! mbedtls_ssl_handshake returned" \
2978 -c "! mbedtls_ssl_handshake returned" \
2979 -s "No client certification received from the client, but required by the authentication mode"
2980
2981run_test "Authentication: client has no cert, server required (TLS)" \
2982 "$P_SRV debug_level=3 auth_mode=required" \
2983 "$P_CLI debug_level=3 crt_file=none \
2984 key_file=data_files/server5.key" \
2985 1 \
2986 -S "skip write certificate request" \
2987 -C "skip parse certificate request" \
2988 -c "got a certificate request" \
2989 -c "= write certificate$" \
2990 -C "skip write certificate$" \
2991 -S "x509_verify_cert() returned" \
2992 -s "client has no certificate" \
2993 -s "! mbedtls_ssl_handshake returned" \
2994 -c "! mbedtls_ssl_handshake returned" \
2995 -s "No client certification received from the client, but required by the authentication mode"
2996
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002997run_test "Authentication: client badcert, server required" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002998 "$P_SRV debug_level=3 auth_mode=required" \
2999 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003000 key_file=data_files/server5.key" \
3001 1 \
3002 -S "skip write certificate request" \
3003 -C "skip parse certificate request" \
3004 -c "got a certificate request" \
3005 -C "skip write certificate" \
3006 -C "skip write certificate verify" \
3007 -S "skip parse certificate verify" \
3008 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003009 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003010 -s "! mbedtls_ssl_handshake returned" \
Gilles Peskine1cc8e342017-05-03 16:28:34 +02003011 -s "send alert level=2 message=48" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003012 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003013 -s "X509 - Certificate verification failed"
Gilles Peskine1cc8e342017-05-03 16:28:34 +02003014# We don't check that the client receives the alert because it might
3015# detect that its write end of the connection is closed and abort
3016# before reading the alert message.
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003017
Janos Follath89baba22017-04-10 14:34:35 +01003018run_test "Authentication: client cert not trusted, server required" \
3019 "$P_SRV debug_level=3 auth_mode=required" \
3020 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
3021 key_file=data_files/server5.key" \
3022 1 \
3023 -S "skip write certificate request" \
3024 -C "skip parse certificate request" \
3025 -c "got a certificate request" \
3026 -C "skip write certificate" \
3027 -C "skip write certificate verify" \
3028 -S "skip parse certificate verify" \
3029 -s "x509_verify_cert() returned" \
3030 -s "! The certificate is not correctly signed by the trusted CA" \
3031 -s "! mbedtls_ssl_handshake returned" \
3032 -c "! mbedtls_ssl_handshake returned" \
3033 -s "X509 - Certificate verification failed"
3034
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003035run_test "Authentication: client badcert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003036 "$P_SRV debug_level=3 auth_mode=optional" \
3037 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003038 key_file=data_files/server5.key" \
3039 0 \
3040 -S "skip write certificate request" \
3041 -C "skip parse certificate request" \
3042 -c "got a certificate request" \
3043 -C "skip write certificate" \
3044 -C "skip write certificate verify" \
3045 -S "skip parse certificate verify" \
3046 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003047 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003048 -S "! mbedtls_ssl_handshake returned" \
3049 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003050 -S "X509 - Certificate verification failed"
3051
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003052run_test "Authentication: client badcert, server none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003053 "$P_SRV debug_level=3 auth_mode=none" \
3054 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003055 key_file=data_files/server5.key" \
3056 0 \
3057 -s "skip write certificate request" \
3058 -C "skip parse certificate request" \
3059 -c "got no certificate request" \
3060 -c "skip write certificate" \
3061 -c "skip write certificate verify" \
3062 -s "skip parse certificate verify" \
3063 -S "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003064 -S "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003065 -S "! mbedtls_ssl_handshake returned" \
3066 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003067 -S "X509 - Certificate verification failed"
3068
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003069run_test "Authentication: client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003070 "$P_SRV debug_level=3 auth_mode=optional" \
3071 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003072 0 \
3073 -S "skip write certificate request" \
3074 -C "skip parse certificate request" \
3075 -c "got a certificate request" \
3076 -C "skip write certificate$" \
3077 -C "got no certificate to send" \
3078 -S "SSLv3 client has no certificate" \
3079 -c "skip write certificate verify" \
3080 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003081 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003082 -S "! mbedtls_ssl_handshake returned" \
3083 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003084 -S "X509 - Certificate verification failed"
3085
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003086run_test "Authentication: openssl client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003087 "$P_SRV debug_level=3 auth_mode=optional" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003088 "$O_CLI" \
3089 0 \
3090 -S "skip write certificate request" \
3091 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003092 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003093 -S "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003094 -S "X509 - Certificate verification failed"
3095
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003096run_test "Authentication: client no cert, openssl server optional" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003097 "$O_SRV -verify 10" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003098 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003099 0 \
3100 -C "skip parse certificate request" \
3101 -c "got a certificate request" \
3102 -C "skip write certificate$" \
3103 -c "skip write certificate verify" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003104 -C "! mbedtls_ssl_handshake returned"
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003105
Gilles Peskinefd8332e2017-05-03 16:25:07 +02003106run_test "Authentication: client no cert, openssl server required" \
3107 "$O_SRV -Verify 10" \
3108 "$P_CLI debug_level=3 crt_file=none key_file=none" \
3109 1 \
3110 -C "skip parse certificate request" \
3111 -c "got a certificate request" \
3112 -C "skip write certificate$" \
3113 -c "skip write certificate verify" \
3114 -c "! mbedtls_ssl_handshake returned"
3115
Janos Follathe2681a42016-03-07 15:57:05 +00003116requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003117run_test "Authentication: client no cert, ssl3" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003118 "$P_SRV debug_level=3 auth_mode=optional force_version=ssl3" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01003119 "$P_CLI debug_level=3 crt_file=none key_file=none min_version=ssl3" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003120 0 \
3121 -S "skip write certificate request" \
3122 -C "skip parse certificate request" \
3123 -c "got a certificate request" \
3124 -C "skip write certificate$" \
3125 -c "skip write certificate verify" \
3126 -c "got no certificate to send" \
3127 -s "SSLv3 client has no certificate" \
3128 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003129 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003130 -S "! mbedtls_ssl_handshake returned" \
3131 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003132 -S "X509 - Certificate verification failed"
3133
Manuel Pégourié-Gonnard9107b5f2017-07-06 12:16:25 +02003134# The "max_int chain" tests assume that MAX_INTERMEDIATE_CA is set to its
3135# default value (8)
Hanno Beckera6bca9f2017-07-26 13:35:11 +01003136
Simon Butcherbcfa6f42017-07-28 15:59:35 +01003137MAX_IM_CA='8'
Simon Butcher06b78632017-07-28 01:00:17 +01003138MAX_IM_CA_CONFIG=$( ../scripts/config.pl get MBEDTLS_X509_MAX_INTERMEDIATE_CA)
Hanno Beckera6bca9f2017-07-26 13:35:11 +01003139
Simon Butcherbcfa6f42017-07-28 15:59:35 +01003140if [ -n "$MAX_IM_CA_CONFIG" ] && [ "$MAX_IM_CA_CONFIG" -ne "$MAX_IM_CA" ]; then
Simon Butcher06b78632017-07-28 01:00:17 +01003141 printf "The ${CONFIG_H} file contains a value for the configuration of\n"
Simon Butcherbcfa6f42017-07-28 15:59:35 +01003142 printf "MBEDTLS_X509_MAX_INTERMEDIATE_CA that is different from the script’s\n"
Simon Butcher06b78632017-07-28 01:00:17 +01003143 printf "test value of ${MAX_IM_CA}. \n"
3144 printf "\n"
Simon Butcherbcfa6f42017-07-28 15:59:35 +01003145 printf "The tests assume this value and if it changes, the tests in this\n"
3146 printf "script should also be adjusted.\n"
Simon Butcher06b78632017-07-28 01:00:17 +01003147 printf "\n"
Simon Butcher06b78632017-07-28 01:00:17 +01003148
3149 exit 1
Hanno Beckera6bca9f2017-07-26 13:35:11 +01003150fi
3151
Angus Grattonc4dd0732018-04-11 16:28:39 +10003152requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003153run_test "Authentication: server max_int chain, client default" \
3154 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
3155 key_file=data_files/dir-maxpath/09.key" \
3156 "$P_CLI server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
3157 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003158 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003159
Angus Grattonc4dd0732018-04-11 16:28:39 +10003160requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003161run_test "Authentication: server max_int+1 chain, client default" \
3162 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3163 key_file=data_files/dir-maxpath/10.key" \
3164 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
3165 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003166 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003167
Angus Grattonc4dd0732018-04-11 16:28:39 +10003168requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003169run_test "Authentication: server max_int+1 chain, client optional" \
3170 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3171 key_file=data_files/dir-maxpath/10.key" \
3172 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
3173 auth_mode=optional" \
3174 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003175 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003176
Angus Grattonc4dd0732018-04-11 16:28:39 +10003177requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003178run_test "Authentication: server max_int+1 chain, client none" \
3179 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3180 key_file=data_files/dir-maxpath/10.key" \
3181 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
3182 auth_mode=none" \
3183 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003184 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003185
Angus Grattonc4dd0732018-04-11 16:28:39 +10003186requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003187run_test "Authentication: client max_int+1 chain, server default" \
3188 "$P_SRV ca_file=data_files/dir-maxpath/00.crt" \
3189 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3190 key_file=data_files/dir-maxpath/10.key" \
3191 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003192 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003193
Angus Grattonc4dd0732018-04-11 16:28:39 +10003194requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003195run_test "Authentication: client max_int+1 chain, server optional" \
3196 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
3197 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3198 key_file=data_files/dir-maxpath/10.key" \
3199 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003200 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003201
Angus Grattonc4dd0732018-04-11 16:28:39 +10003202requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003203run_test "Authentication: client max_int+1 chain, server required" \
3204 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
3205 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3206 key_file=data_files/dir-maxpath/10.key" \
3207 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003208 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003209
Angus Grattonc4dd0732018-04-11 16:28:39 +10003210requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003211run_test "Authentication: client max_int chain, server required" \
3212 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
3213 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
3214 key_file=data_files/dir-maxpath/09.key" \
3215 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003216 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003217
Janos Follath89baba22017-04-10 14:34:35 +01003218# Tests for CA list in CertificateRequest messages
3219
3220run_test "Authentication: send CA list in CertificateRequest (default)" \
3221 "$P_SRV debug_level=3 auth_mode=required" \
3222 "$P_CLI crt_file=data_files/server6.crt \
3223 key_file=data_files/server6.key" \
3224 0 \
3225 -s "requested DN"
3226
3227run_test "Authentication: do not send CA list in CertificateRequest" \
3228 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
3229 "$P_CLI crt_file=data_files/server6.crt \
3230 key_file=data_files/server6.key" \
3231 0 \
3232 -S "requested DN"
3233
3234run_test "Authentication: send CA list in CertificateRequest, client self signed" \
3235 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
3236 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
3237 key_file=data_files/server5.key" \
3238 1 \
3239 -S "requested DN" \
3240 -s "x509_verify_cert() returned" \
3241 -s "! The certificate is not correctly signed by the trusted CA" \
3242 -s "! mbedtls_ssl_handshake returned" \
3243 -c "! mbedtls_ssl_handshake returned" \
3244 -s "X509 - Certificate verification failed"
3245
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03003246# Tests for auth_mode, using CA callback, these are duplicated from the authentication tests
3247# When updating these tests, modify the matching authentication tests accordingly
Hanno Becker746aaf32019-03-28 15:25:23 +00003248
3249requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3250run_test "Authentication, CA callback: server badcert, client required" \
3251 "$P_SRV crt_file=data_files/server5-badsign.crt \
3252 key_file=data_files/server5.key" \
3253 "$P_CLI ca_callback=1 debug_level=3 auth_mode=required" \
3254 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003255 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003256 -c "x509_verify_cert() returned" \
3257 -c "! The certificate is not correctly signed by the trusted CA" \
3258 -c "! mbedtls_ssl_handshake returned" \
3259 -c "X509 - Certificate verification failed"
3260
3261requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3262run_test "Authentication, CA callback: server badcert, client optional" \
3263 "$P_SRV crt_file=data_files/server5-badsign.crt \
3264 key_file=data_files/server5.key" \
3265 "$P_CLI ca_callback=1 debug_level=3 auth_mode=optional" \
3266 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003267 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003268 -c "x509_verify_cert() returned" \
3269 -c "! The certificate is not correctly signed by the trusted CA" \
3270 -C "! mbedtls_ssl_handshake returned" \
3271 -C "X509 - Certificate verification failed"
3272
3273# The purpose of the next two tests is to test the client's behaviour when receiving a server
3274# certificate with an unsupported elliptic curve. This should usually not happen because
3275# the client informs the server about the supported curves - it does, though, in the
3276# corner case of a static ECDH suite, because the server doesn't check the curve on that
3277# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
3278# different means to have the server ignoring the client's supported curve list.
3279
3280requires_config_enabled MBEDTLS_ECP_C
3281requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3282run_test "Authentication, CA callback: server ECDH p256v1, client required, p256v1 unsupported" \
3283 "$P_SRV debug_level=1 key_file=data_files/server5.key \
3284 crt_file=data_files/server5.ku-ka.crt" \
3285 "$P_CLI ca_callback=1 debug_level=3 auth_mode=required curves=secp521r1" \
3286 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003287 -c "use CA callback for X.509 CRT verification" \
3288 -c "bad certificate (EC key curve)" \
3289 -c "! Certificate verification flags" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003290 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
3291
3292requires_config_enabled MBEDTLS_ECP_C
3293requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3294run_test "Authentication, CA callback: server ECDH p256v1, client optional, p256v1 unsupported" \
3295 "$P_SRV debug_level=1 key_file=data_files/server5.key \
3296 crt_file=data_files/server5.ku-ka.crt" \
3297 "$P_CLI ca_callback=1 debug_level=3 auth_mode=optional curves=secp521r1" \
3298 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003299 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003300 -c "bad certificate (EC key curve)"\
3301 -c "! Certificate verification flags"\
3302 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
3303
3304requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3305run_test "Authentication, CA callback: client SHA256, server required" \
3306 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
3307 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
3308 key_file=data_files/server6.key \
3309 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
3310 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003311 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003312 -c "Supported Signature Algorithm found: 4," \
3313 -c "Supported Signature Algorithm found: 5,"
3314
3315requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3316run_test "Authentication, CA callback: client SHA384, server required" \
3317 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
3318 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
3319 key_file=data_files/server6.key \
3320 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
3321 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003322 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003323 -c "Supported Signature Algorithm found: 4," \
3324 -c "Supported Signature Algorithm found: 5,"
3325
3326requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3327run_test "Authentication, CA callback: client badcert, server required" \
3328 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
3329 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
3330 key_file=data_files/server5.key" \
3331 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003332 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003333 -S "skip write certificate request" \
3334 -C "skip parse certificate request" \
3335 -c "got a certificate request" \
3336 -C "skip write certificate" \
3337 -C "skip write certificate verify" \
3338 -S "skip parse certificate verify" \
3339 -s "x509_verify_cert() returned" \
3340 -s "! The certificate is not correctly signed by the trusted CA" \
3341 -s "! mbedtls_ssl_handshake returned" \
3342 -s "send alert level=2 message=48" \
3343 -c "! mbedtls_ssl_handshake returned" \
3344 -s "X509 - Certificate verification failed"
3345# We don't check that the client receives the alert because it might
3346# detect that its write end of the connection is closed and abort
3347# before reading the alert message.
3348
3349requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3350run_test "Authentication, CA callback: client cert not trusted, server required" \
3351 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
3352 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
3353 key_file=data_files/server5.key" \
3354 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003355 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003356 -S "skip write certificate request" \
3357 -C "skip parse certificate request" \
3358 -c "got a certificate request" \
3359 -C "skip write certificate" \
3360 -C "skip write certificate verify" \
3361 -S "skip parse certificate verify" \
3362 -s "x509_verify_cert() returned" \
3363 -s "! The certificate is not correctly signed by the trusted CA" \
3364 -s "! mbedtls_ssl_handshake returned" \
3365 -c "! mbedtls_ssl_handshake returned" \
3366 -s "X509 - Certificate verification failed"
3367
3368requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3369run_test "Authentication, CA callback: client badcert, server optional" \
3370 "$P_SRV ca_callback=1 debug_level=3 auth_mode=optional" \
3371 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
3372 key_file=data_files/server5.key" \
3373 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003374 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003375 -S "skip write certificate request" \
3376 -C "skip parse certificate request" \
3377 -c "got a certificate request" \
3378 -C "skip write certificate" \
3379 -C "skip write certificate verify" \
3380 -S "skip parse certificate verify" \
3381 -s "x509_verify_cert() returned" \
3382 -s "! The certificate is not correctly signed by the trusted CA" \
3383 -S "! mbedtls_ssl_handshake returned" \
3384 -C "! mbedtls_ssl_handshake returned" \
3385 -S "X509 - Certificate verification failed"
3386
3387requires_full_size_output_buffer
3388requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3389run_test "Authentication, CA callback: server max_int chain, client default" \
3390 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
3391 key_file=data_files/dir-maxpath/09.key" \
3392 "$P_CLI ca_callback=1 debug_level=3 server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
3393 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003394 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003395 -C "X509 - A fatal error occurred"
3396
3397requires_full_size_output_buffer
3398requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3399run_test "Authentication, CA callback: server max_int+1 chain, client default" \
3400 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3401 key_file=data_files/dir-maxpath/10.key" \
3402 "$P_CLI debug_level=3 ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
3403 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003404 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003405 -c "X509 - A fatal error occurred"
3406
3407requires_full_size_output_buffer
3408requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3409run_test "Authentication, CA callback: server max_int+1 chain, client optional" \
3410 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3411 key_file=data_files/dir-maxpath/10.key" \
3412 "$P_CLI ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
3413 debug_level=3 auth_mode=optional" \
3414 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003415 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003416 -c "X509 - A fatal error occurred"
3417
3418requires_full_size_output_buffer
3419requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3420run_test "Authentication, CA callback: client max_int+1 chain, server optional" \
3421 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
3422 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3423 key_file=data_files/dir-maxpath/10.key" \
3424 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003425 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003426 -s "X509 - A fatal error occurred"
3427
3428requires_full_size_output_buffer
3429requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3430run_test "Authentication, CA callback: client max_int+1 chain, server required" \
3431 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
3432 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3433 key_file=data_files/dir-maxpath/10.key" \
3434 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003435 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003436 -s "X509 - A fatal error occurred"
3437
3438requires_full_size_output_buffer
3439requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3440run_test "Authentication, CA callback: client max_int chain, server required" \
3441 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
3442 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
3443 key_file=data_files/dir-maxpath/09.key" \
3444 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003445 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003446 -S "X509 - A fatal error occurred"
3447
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01003448# Tests for certificate selection based on SHA verson
3449
3450run_test "Certificate hash: client TLS 1.2 -> SHA-2" \
3451 "$P_SRV crt_file=data_files/server5.crt \
3452 key_file=data_files/server5.key \
3453 crt_file2=data_files/server5-sha1.crt \
3454 key_file2=data_files/server5.key" \
3455 "$P_CLI force_version=tls1_2" \
3456 0 \
3457 -c "signed using.*ECDSA with SHA256" \
3458 -C "signed using.*ECDSA with SHA1"
3459
3460run_test "Certificate hash: client TLS 1.1 -> SHA-1" \
3461 "$P_SRV crt_file=data_files/server5.crt \
3462 key_file=data_files/server5.key \
3463 crt_file2=data_files/server5-sha1.crt \
3464 key_file2=data_files/server5.key" \
3465 "$P_CLI force_version=tls1_1" \
3466 0 \
3467 -C "signed using.*ECDSA with SHA256" \
3468 -c "signed using.*ECDSA with SHA1"
3469
3470run_test "Certificate hash: client TLS 1.0 -> SHA-1" \
3471 "$P_SRV crt_file=data_files/server5.crt \
3472 key_file=data_files/server5.key \
3473 crt_file2=data_files/server5-sha1.crt \
3474 key_file2=data_files/server5.key" \
3475 "$P_CLI force_version=tls1" \
3476 0 \
3477 -C "signed using.*ECDSA with SHA256" \
3478 -c "signed using.*ECDSA with SHA1"
3479
3480run_test "Certificate hash: client TLS 1.1, no SHA-1 -> SHA-2 (order 1)" \
3481 "$P_SRV crt_file=data_files/server5.crt \
3482 key_file=data_files/server5.key \
3483 crt_file2=data_files/server6.crt \
3484 key_file2=data_files/server6.key" \
3485 "$P_CLI force_version=tls1_1" \
3486 0 \
3487 -c "serial number.*09" \
3488 -c "signed using.*ECDSA with SHA256" \
3489 -C "signed using.*ECDSA with SHA1"
3490
3491run_test "Certificate hash: client TLS 1.1, no SHA-1 -> SHA-2 (order 2)" \
3492 "$P_SRV crt_file=data_files/server6.crt \
3493 key_file=data_files/server6.key \
3494 crt_file2=data_files/server5.crt \
3495 key_file2=data_files/server5.key" \
3496 "$P_CLI force_version=tls1_1" \
3497 0 \
3498 -c "serial number.*0A" \
3499 -c "signed using.*ECDSA with SHA256" \
3500 -C "signed using.*ECDSA with SHA1"
3501
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003502# tests for SNI
3503
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003504run_test "SNI: no SNI callback" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003505 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003506 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003507 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003508 0 \
3509 -S "parse ServerName extension" \
3510 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
3511 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003512
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003513run_test "SNI: matching cert 1" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003514 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003515 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02003516 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003517 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003518 0 \
3519 -s "parse ServerName extension" \
3520 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
3521 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003522
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003523run_test "SNI: matching cert 2" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003524 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003525 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02003526 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003527 "$P_CLI server_name=polarssl.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003528 0 \
3529 -s "parse ServerName extension" \
3530 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
3531 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003532
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003533run_test "SNI: no matching cert" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003534 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003535 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02003536 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003537 "$P_CLI server_name=nonesuch.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003538 1 \
3539 -s "parse ServerName extension" \
3540 -s "ssl_sni_wrapper() returned" \
3541 -s "mbedtls_ssl_handshake returned" \
3542 -c "mbedtls_ssl_handshake returned" \
3543 -c "SSL - A fatal alert message was received from our peer"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003544
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02003545run_test "SNI: client auth no override: optional" \
3546 "$P_SRV debug_level=3 auth_mode=optional \
3547 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3548 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
3549 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003550 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02003551 -S "skip write certificate request" \
3552 -C "skip parse certificate request" \
3553 -c "got a certificate request" \
3554 -C "skip write certificate" \
3555 -C "skip write certificate verify" \
3556 -S "skip parse certificate verify"
3557
3558run_test "SNI: client auth override: none -> optional" \
3559 "$P_SRV debug_level=3 auth_mode=none \
3560 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3561 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
3562 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003563 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02003564 -S "skip write certificate request" \
3565 -C "skip parse certificate request" \
3566 -c "got a certificate request" \
3567 -C "skip write certificate" \
3568 -C "skip write certificate verify" \
3569 -S "skip parse certificate verify"
3570
3571run_test "SNI: client auth override: optional -> none" \
3572 "$P_SRV debug_level=3 auth_mode=optional \
3573 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3574 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
3575 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003576 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02003577 -s "skip write certificate request" \
3578 -C "skip parse certificate request" \
3579 -c "got no certificate request" \
3580 -c "skip write certificate" \
3581 -c "skip write certificate verify" \
3582 -s "skip parse certificate verify"
3583
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003584run_test "SNI: CA no override" \
3585 "$P_SRV debug_level=3 auth_mode=optional \
3586 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3587 ca_file=data_files/test-ca.crt \
3588 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
3589 "$P_CLI debug_level=3 server_name=localhost \
3590 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
3591 1 \
3592 -S "skip write certificate request" \
3593 -C "skip parse certificate request" \
3594 -c "got a certificate request" \
3595 -C "skip write certificate" \
3596 -C "skip write certificate verify" \
3597 -S "skip parse certificate verify" \
3598 -s "x509_verify_cert() returned" \
3599 -s "! The certificate is not correctly signed by the trusted CA" \
3600 -S "The certificate has been revoked (is on a CRL)"
3601
3602run_test "SNI: CA override" \
3603 "$P_SRV debug_level=3 auth_mode=optional \
3604 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3605 ca_file=data_files/test-ca.crt \
3606 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
3607 "$P_CLI debug_level=3 server_name=localhost \
3608 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
3609 0 \
3610 -S "skip write certificate request" \
3611 -C "skip parse certificate request" \
3612 -c "got a certificate request" \
3613 -C "skip write certificate" \
3614 -C "skip write certificate verify" \
3615 -S "skip parse certificate verify" \
3616 -S "x509_verify_cert() returned" \
3617 -S "! The certificate is not correctly signed by the trusted CA" \
3618 -S "The certificate has been revoked (is on a CRL)"
3619
3620run_test "SNI: CA override with CRL" \
3621 "$P_SRV debug_level=3 auth_mode=optional \
3622 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3623 ca_file=data_files/test-ca.crt \
3624 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
3625 "$P_CLI debug_level=3 server_name=localhost \
3626 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
3627 1 \
3628 -S "skip write certificate request" \
3629 -C "skip parse certificate request" \
3630 -c "got a certificate request" \
3631 -C "skip write certificate" \
3632 -C "skip write certificate verify" \
3633 -S "skip parse certificate verify" \
3634 -s "x509_verify_cert() returned" \
3635 -S "! The certificate is not correctly signed by the trusted CA" \
3636 -s "The certificate has been revoked (is on a CRL)"
3637
Andres AG1a834452016-12-07 10:01:30 +00003638# Tests for SNI and DTLS
3639
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01003640run_test "SNI: DTLS, no SNI callback" \
3641 "$P_SRV debug_level=3 dtls=1 \
3642 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
3643 "$P_CLI server_name=localhost dtls=1" \
3644 0 \
3645 -S "parse ServerName extension" \
3646 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
3647 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
3648
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01003649run_test "SNI: DTLS, matching cert 1" \
Andres AG1a834452016-12-07 10:01:30 +00003650 "$P_SRV debug_level=3 dtls=1 \
3651 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3652 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
3653 "$P_CLI server_name=localhost dtls=1" \
3654 0 \
3655 -s "parse ServerName extension" \
3656 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
3657 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
3658
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01003659run_test "SNI: DTLS, matching cert 2" \
3660 "$P_SRV debug_level=3 dtls=1 \
3661 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3662 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
3663 "$P_CLI server_name=polarssl.example dtls=1" \
3664 0 \
3665 -s "parse ServerName extension" \
3666 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
3667 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
3668
3669run_test "SNI: DTLS, no matching cert" \
3670 "$P_SRV debug_level=3 dtls=1 \
3671 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3672 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
3673 "$P_CLI server_name=nonesuch.example dtls=1" \
3674 1 \
3675 -s "parse ServerName extension" \
3676 -s "ssl_sni_wrapper() returned" \
3677 -s "mbedtls_ssl_handshake returned" \
3678 -c "mbedtls_ssl_handshake returned" \
3679 -c "SSL - A fatal alert message was received from our peer"
3680
3681run_test "SNI: DTLS, client auth no override: optional" \
3682 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
3683 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3684 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
3685 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
3686 0 \
3687 -S "skip write certificate request" \
3688 -C "skip parse certificate request" \
3689 -c "got a certificate request" \
3690 -C "skip write certificate" \
3691 -C "skip write certificate verify" \
3692 -S "skip parse certificate verify"
3693
3694run_test "SNI: DTLS, client auth override: none -> optional" \
3695 "$P_SRV debug_level=3 auth_mode=none dtls=1 \
3696 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3697 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
3698 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
3699 0 \
3700 -S "skip write certificate request" \
3701 -C "skip parse certificate request" \
3702 -c "got a certificate request" \
3703 -C "skip write certificate" \
3704 -C "skip write certificate verify" \
3705 -S "skip parse certificate verify"
3706
3707run_test "SNI: DTLS, client auth override: optional -> none" \
3708 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
3709 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3710 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
3711 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
3712 0 \
3713 -s "skip write certificate request" \
3714 -C "skip parse certificate request" \
3715 -c "got no certificate request" \
3716 -c "skip write certificate" \
3717 -c "skip write certificate verify" \
3718 -s "skip parse certificate verify"
3719
3720run_test "SNI: DTLS, CA no override" \
3721 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
3722 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3723 ca_file=data_files/test-ca.crt \
3724 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
3725 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
3726 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
3727 1 \
3728 -S "skip write certificate request" \
3729 -C "skip parse certificate request" \
3730 -c "got a certificate request" \
3731 -C "skip write certificate" \
3732 -C "skip write certificate verify" \
3733 -S "skip parse certificate verify" \
3734 -s "x509_verify_cert() returned" \
3735 -s "! The certificate is not correctly signed by the trusted CA" \
3736 -S "The certificate has been revoked (is on a CRL)"
3737
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01003738run_test "SNI: DTLS, CA override" \
Andres AG1a834452016-12-07 10:01:30 +00003739 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
3740 crt_file=data_files/server5.crt key_file=data_files/server5.key \
3741 ca_file=data_files/test-ca.crt \
3742 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
3743 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
3744 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
3745 0 \
3746 -S "skip write certificate request" \
3747 -C "skip parse certificate request" \
3748 -c "got a certificate request" \
3749 -C "skip write certificate" \
3750 -C "skip write certificate verify" \
3751 -S "skip parse certificate verify" \
3752 -S "x509_verify_cert() returned" \
3753 -S "! The certificate is not correctly signed by the trusted CA" \
3754 -S "The certificate has been revoked (is on a CRL)"
3755
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01003756run_test "SNI: DTLS, CA override with CRL" \
Andres AG1a834452016-12-07 10:01:30 +00003757 "$P_SRV debug_level=3 auth_mode=optional \
3758 crt_file=data_files/server5.crt key_file=data_files/server5.key dtls=1 \
3759 ca_file=data_files/test-ca.crt \
3760 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
3761 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
3762 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
3763 1 \
3764 -S "skip write certificate request" \
3765 -C "skip parse certificate request" \
3766 -c "got a certificate request" \
3767 -C "skip write certificate" \
3768 -C "skip write certificate verify" \
3769 -S "skip parse certificate verify" \
3770 -s "x509_verify_cert() returned" \
3771 -S "! The certificate is not correctly signed by the trusted CA" \
3772 -s "The certificate has been revoked (is on a CRL)"
3773
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003774# Tests for non-blocking I/O: exercise a variety of handshake flows
3775
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003776run_test "Non-blocking I/O: basic handshake" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003777 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
3778 "$P_CLI nbio=2 tickets=0" \
3779 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003780 -S "mbedtls_ssl_handshake returned" \
3781 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003782 -c "Read from server: .* bytes read"
3783
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003784run_test "Non-blocking I/O: client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003785 "$P_SRV nbio=2 tickets=0 auth_mode=required" \
3786 "$P_CLI nbio=2 tickets=0" \
3787 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003788 -S "mbedtls_ssl_handshake returned" \
3789 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003790 -c "Read from server: .* bytes read"
3791
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003792run_test "Non-blocking I/O: ticket" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003793 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
3794 "$P_CLI nbio=2 tickets=1" \
3795 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003796 -S "mbedtls_ssl_handshake returned" \
3797 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003798 -c "Read from server: .* bytes read"
3799
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003800run_test "Non-blocking I/O: ticket + client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003801 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
3802 "$P_CLI nbio=2 tickets=1" \
3803 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003804 -S "mbedtls_ssl_handshake returned" \
3805 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003806 -c "Read from server: .* bytes read"
3807
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003808run_test "Non-blocking I/O: ticket + client auth + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003809 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
3810 "$P_CLI nbio=2 tickets=1 reconnect=1" \
3811 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003812 -S "mbedtls_ssl_handshake returned" \
3813 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003814 -c "Read from server: .* bytes read"
3815
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003816run_test "Non-blocking I/O: ticket + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003817 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
3818 "$P_CLI nbio=2 tickets=1 reconnect=1" \
3819 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003820 -S "mbedtls_ssl_handshake returned" \
3821 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003822 -c "Read from server: .* bytes read"
3823
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003824run_test "Non-blocking I/O: session-id resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003825 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
3826 "$P_CLI nbio=2 tickets=0 reconnect=1" \
3827 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003828 -S "mbedtls_ssl_handshake returned" \
3829 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01003830 -c "Read from server: .* bytes read"
3831
Hanno Becker00076712017-11-15 16:39:08 +00003832# Tests for event-driven I/O: exercise a variety of handshake flows
3833
3834run_test "Event-driven I/O: basic handshake" \
3835 "$P_SRV event=1 tickets=0 auth_mode=none" \
3836 "$P_CLI event=1 tickets=0" \
3837 0 \
3838 -S "mbedtls_ssl_handshake returned" \
3839 -C "mbedtls_ssl_handshake returned" \
3840 -c "Read from server: .* bytes read"
3841
3842run_test "Event-driven I/O: client auth" \
3843 "$P_SRV event=1 tickets=0 auth_mode=required" \
3844 "$P_CLI event=1 tickets=0" \
3845 0 \
3846 -S "mbedtls_ssl_handshake returned" \
3847 -C "mbedtls_ssl_handshake returned" \
3848 -c "Read from server: .* bytes read"
3849
3850run_test "Event-driven I/O: ticket" \
3851 "$P_SRV event=1 tickets=1 auth_mode=none" \
3852 "$P_CLI event=1 tickets=1" \
3853 0 \
3854 -S "mbedtls_ssl_handshake returned" \
3855 -C "mbedtls_ssl_handshake returned" \
3856 -c "Read from server: .* bytes read"
3857
3858run_test "Event-driven I/O: ticket + client auth" \
3859 "$P_SRV event=1 tickets=1 auth_mode=required" \
3860 "$P_CLI event=1 tickets=1" \
3861 0 \
3862 -S "mbedtls_ssl_handshake returned" \
3863 -C "mbedtls_ssl_handshake returned" \
3864 -c "Read from server: .* bytes read"
3865
3866run_test "Event-driven I/O: ticket + client auth + resume" \
3867 "$P_SRV event=1 tickets=1 auth_mode=required" \
3868 "$P_CLI event=1 tickets=1 reconnect=1" \
3869 0 \
3870 -S "mbedtls_ssl_handshake returned" \
3871 -C "mbedtls_ssl_handshake returned" \
3872 -c "Read from server: .* bytes read"
3873
3874run_test "Event-driven I/O: ticket + resume" \
3875 "$P_SRV event=1 tickets=1 auth_mode=none" \
3876 "$P_CLI event=1 tickets=1 reconnect=1" \
3877 0 \
3878 -S "mbedtls_ssl_handshake returned" \
3879 -C "mbedtls_ssl_handshake returned" \
3880 -c "Read from server: .* bytes read"
3881
3882run_test "Event-driven I/O: session-id resume" \
3883 "$P_SRV event=1 tickets=0 auth_mode=none" \
3884 "$P_CLI event=1 tickets=0 reconnect=1" \
3885 0 \
3886 -S "mbedtls_ssl_handshake returned" \
3887 -C "mbedtls_ssl_handshake returned" \
3888 -c "Read from server: .* bytes read"
3889
Hanno Becker6a33f592018-03-13 11:38:46 +00003890run_test "Event-driven I/O, DTLS: basic handshake" \
3891 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
3892 "$P_CLI dtls=1 event=1 tickets=0" \
3893 0 \
3894 -c "Read from server: .* bytes read"
3895
3896run_test "Event-driven I/O, DTLS: client auth" \
3897 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
3898 "$P_CLI dtls=1 event=1 tickets=0" \
3899 0 \
3900 -c "Read from server: .* bytes read"
3901
3902run_test "Event-driven I/O, DTLS: ticket" \
3903 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
3904 "$P_CLI dtls=1 event=1 tickets=1" \
3905 0 \
3906 -c "Read from server: .* bytes read"
3907
3908run_test "Event-driven I/O, DTLS: ticket + client auth" \
3909 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
3910 "$P_CLI dtls=1 event=1 tickets=1" \
3911 0 \
3912 -c "Read from server: .* bytes read"
3913
3914run_test "Event-driven I/O, DTLS: ticket + client auth + resume" \
3915 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
3916 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1" \
3917 0 \
3918 -c "Read from server: .* bytes read"
3919
3920run_test "Event-driven I/O, DTLS: ticket + resume" \
3921 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
3922 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1" \
3923 0 \
3924 -c "Read from server: .* bytes read"
3925
3926run_test "Event-driven I/O, DTLS: session-id resume" \
3927 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
3928 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1" \
3929 0 \
3930 -c "Read from server: .* bytes read"
Hanno Beckerbc6c1102018-03-13 11:39:40 +00003931
3932# This test demonstrates the need for the mbedtls_ssl_check_pending function.
3933# During session resumption, the client will send its ApplicationData record
3934# within the same datagram as the Finished messages. In this situation, the
3935# server MUST NOT idle on the underlying transport after handshake completion,
3936# because the ApplicationData request has already been queued internally.
3937run_test "Event-driven I/O, DTLS: session-id resume, UDP packing" \
Hanno Becker8d832182018-03-15 10:14:19 +00003938 -p "$P_PXY pack=50" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00003939 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
3940 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1" \
3941 0 \
3942 -c "Read from server: .* bytes read"
3943
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02003944# Tests for version negotiation
3945
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003946run_test "Version check: all -> 1.2" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003947 "$P_SRV" \
3948 "$P_CLI" \
3949 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003950 -S "mbedtls_ssl_handshake returned" \
3951 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003952 -s "Protocol is TLSv1.2" \
3953 -c "Protocol is TLSv1.2"
3954
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003955run_test "Version check: cli max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003956 "$P_SRV" \
3957 "$P_CLI max_version=tls1_1" \
3958 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003959 -S "mbedtls_ssl_handshake returned" \
3960 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003961 -s "Protocol is TLSv1.1" \
3962 -c "Protocol is TLSv1.1"
3963
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003964run_test "Version check: srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003965 "$P_SRV max_version=tls1_1" \
3966 "$P_CLI" \
3967 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003968 -S "mbedtls_ssl_handshake returned" \
3969 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003970 -s "Protocol is TLSv1.1" \
3971 -c "Protocol is TLSv1.1"
3972
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003973run_test "Version check: cli+srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003974 "$P_SRV max_version=tls1_1" \
3975 "$P_CLI max_version=tls1_1" \
3976 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003977 -S "mbedtls_ssl_handshake returned" \
3978 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003979 -s "Protocol is TLSv1.1" \
3980 -c "Protocol is TLSv1.1"
3981
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003982run_test "Version check: cli max 1.1, srv min 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003983 "$P_SRV min_version=tls1_1" \
3984 "$P_CLI max_version=tls1_1" \
3985 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003986 -S "mbedtls_ssl_handshake returned" \
3987 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003988 -s "Protocol is TLSv1.1" \
3989 -c "Protocol is TLSv1.1"
3990
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003991run_test "Version check: cli min 1.1, srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003992 "$P_SRV max_version=tls1_1" \
3993 "$P_CLI min_version=tls1_1" \
3994 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003995 -S "mbedtls_ssl_handshake returned" \
3996 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01003997 -s "Protocol is TLSv1.1" \
3998 -c "Protocol is TLSv1.1"
3999
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004000run_test "Version check: cli min 1.2, srv max 1.1 -> fail" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004001 "$P_SRV max_version=tls1_1" \
4002 "$P_CLI min_version=tls1_2" \
4003 1 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004004 -s "mbedtls_ssl_handshake returned" \
4005 -c "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004006 -c "SSL - Handshake protocol not within min/max boundaries"
4007
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004008run_test "Version check: srv min 1.2, cli max 1.1 -> fail" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004009 "$P_SRV min_version=tls1_2" \
4010 "$P_CLI max_version=tls1_1" \
4011 1 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004012 -s "mbedtls_ssl_handshake returned" \
4013 -c "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004014 -s "SSL - Handshake protocol not within min/max boundaries"
4015
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004016# Tests for ALPN extension
4017
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004018run_test "ALPN: none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004019 "$P_SRV debug_level=3" \
4020 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004021 0 \
4022 -C "client hello, adding alpn extension" \
4023 -S "found alpn extension" \
4024 -C "got an alert message, type: \\[2:120]" \
4025 -S "server hello, adding alpn extension" \
4026 -C "found alpn extension " \
4027 -C "Application Layer Protocol is" \
4028 -S "Application Layer Protocol is"
4029
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004030run_test "ALPN: client only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004031 "$P_SRV debug_level=3" \
4032 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004033 0 \
4034 -c "client hello, adding alpn extension" \
4035 -s "found alpn extension" \
4036 -C "got an alert message, type: \\[2:120]" \
4037 -S "server hello, adding alpn extension" \
4038 -C "found alpn extension " \
4039 -c "Application Layer Protocol is (none)" \
4040 -S "Application Layer Protocol is"
4041
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004042run_test "ALPN: server only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004043 "$P_SRV debug_level=3 alpn=abc,1234" \
4044 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004045 0 \
4046 -C "client hello, adding alpn extension" \
4047 -S "found alpn extension" \
4048 -C "got an alert message, type: \\[2:120]" \
4049 -S "server hello, adding alpn extension" \
4050 -C "found alpn extension " \
4051 -C "Application Layer Protocol is" \
4052 -s "Application Layer Protocol is (none)"
4053
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004054run_test "ALPN: both, common cli1-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004055 "$P_SRV debug_level=3 alpn=abc,1234" \
4056 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004057 0 \
4058 -c "client hello, adding alpn extension" \
4059 -s "found alpn extension" \
4060 -C "got an alert message, type: \\[2:120]" \
4061 -s "server hello, adding alpn extension" \
4062 -c "found alpn extension" \
4063 -c "Application Layer Protocol is abc" \
4064 -s "Application Layer Protocol is abc"
4065
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004066run_test "ALPN: both, common cli2-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004067 "$P_SRV debug_level=3 alpn=abc,1234" \
4068 "$P_CLI debug_level=3 alpn=1234,abc" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004069 0 \
4070 -c "client hello, adding alpn extension" \
4071 -s "found alpn extension" \
4072 -C "got an alert message, type: \\[2:120]" \
4073 -s "server hello, adding alpn extension" \
4074 -c "found alpn extension" \
4075 -c "Application Layer Protocol is abc" \
4076 -s "Application Layer Protocol is abc"
4077
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004078run_test "ALPN: both, common cli1-srv2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004079 "$P_SRV debug_level=3 alpn=abc,1234" \
4080 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004081 0 \
4082 -c "client hello, adding alpn extension" \
4083 -s "found alpn extension" \
4084 -C "got an alert message, type: \\[2:120]" \
4085 -s "server hello, adding alpn extension" \
4086 -c "found alpn extension" \
4087 -c "Application Layer Protocol is 1234" \
4088 -s "Application Layer Protocol is 1234"
4089
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004090run_test "ALPN: both, no common" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004091 "$P_SRV debug_level=3 alpn=abc,123" \
4092 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004093 1 \
4094 -c "client hello, adding alpn extension" \
4095 -s "found alpn extension" \
4096 -c "got an alert message, type: \\[2:120]" \
4097 -S "server hello, adding alpn extension" \
4098 -C "found alpn extension" \
4099 -C "Application Layer Protocol is 1234" \
4100 -S "Application Layer Protocol is 1234"
4101
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +02004102
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004103# Tests for keyUsage in leaf certificates, part 1:
4104# server-side certificate/suite selection
4105
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004106run_test "keyUsage srv: RSA, digitalSignature -> (EC)DHE-RSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004107 "$P_SRV key_file=data_files/server2.key \
4108 crt_file=data_files/server2.ku-ds.crt" \
4109 "$P_CLI" \
4110 0 \
Manuel Pégourié-Gonnard17cde5f2014-05-22 14:42:39 +02004111 -c "Ciphersuite is TLS-[EC]*DHE-RSA-WITH-"
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004112
4113
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004114run_test "keyUsage srv: RSA, keyEncipherment -> RSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004115 "$P_SRV key_file=data_files/server2.key \
4116 crt_file=data_files/server2.ku-ke.crt" \
4117 "$P_CLI" \
4118 0 \
4119 -c "Ciphersuite is TLS-RSA-WITH-"
4120
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004121run_test "keyUsage srv: RSA, keyAgreement -> fail" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02004122 "$P_SRV key_file=data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004123 crt_file=data_files/server2.ku-ka.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02004124 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004125 1 \
4126 -C "Ciphersuite is "
4127
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004128run_test "keyUsage srv: ECDSA, digitalSignature -> ECDHE-ECDSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004129 "$P_SRV key_file=data_files/server5.key \
4130 crt_file=data_files/server5.ku-ds.crt" \
4131 "$P_CLI" \
4132 0 \
4133 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-"
4134
4135
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004136run_test "keyUsage srv: ECDSA, keyAgreement -> ECDH-" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004137 "$P_SRV key_file=data_files/server5.key \
4138 crt_file=data_files/server5.ku-ka.crt" \
4139 "$P_CLI" \
4140 0 \
4141 -c "Ciphersuite is TLS-ECDH-"
4142
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004143run_test "keyUsage srv: ECDSA, keyEncipherment -> fail" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02004144 "$P_SRV key_file=data_files/server5.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004145 crt_file=data_files/server5.ku-ke.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02004146 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004147 1 \
4148 -C "Ciphersuite is "
4149
4150# Tests for keyUsage in leaf certificates, part 2:
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004151# client-side checking of server cert
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004152
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004153run_test "keyUsage cli: DigitalSignature+KeyEncipherment, RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004154 "$O_SRV -key data_files/server2.key \
4155 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004156 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004157 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
4158 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004159 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004160 -C "Processing of the Certificate handshake message failed" \
4161 -c "Ciphersuite is TLS-"
4162
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004163run_test "keyUsage cli: DigitalSignature+KeyEncipherment, DHE-RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004164 "$O_SRV -key data_files/server2.key \
4165 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004166 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004167 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
4168 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004169 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004170 -C "Processing of the Certificate handshake message failed" \
4171 -c "Ciphersuite is TLS-"
4172
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004173run_test "keyUsage cli: KeyEncipherment, RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004174 "$O_SRV -key data_files/server2.key \
4175 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004176 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004177 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
4178 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004179 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004180 -C "Processing of the Certificate handshake message failed" \
4181 -c "Ciphersuite is TLS-"
4182
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004183run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004184 "$O_SRV -key data_files/server2.key \
4185 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004186 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004187 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
4188 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004189 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004190 -c "Processing of the Certificate handshake message failed" \
4191 -C "Ciphersuite is TLS-"
4192
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01004193run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail, soft" \
4194 "$O_SRV -key data_files/server2.key \
4195 -cert data_files/server2.ku-ke.crt" \
4196 "$P_CLI debug_level=1 auth_mode=optional \
4197 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
4198 0 \
4199 -c "bad certificate (usage extensions)" \
4200 -C "Processing of the Certificate handshake message failed" \
4201 -c "Ciphersuite is TLS-" \
4202 -c "! Usage does not match the keyUsage extension"
4203
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004204run_test "keyUsage cli: DigitalSignature, DHE-RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004205 "$O_SRV -key data_files/server2.key \
4206 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004207 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004208 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
4209 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004210 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004211 -C "Processing of the Certificate handshake message failed" \
4212 -c "Ciphersuite is TLS-"
4213
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004214run_test "keyUsage cli: DigitalSignature, RSA: fail" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004215 "$O_SRV -key data_files/server2.key \
4216 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004217 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004218 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
4219 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004220 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004221 -c "Processing of the Certificate handshake message failed" \
4222 -C "Ciphersuite is TLS-"
4223
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01004224run_test "keyUsage cli: DigitalSignature, RSA: fail, soft" \
4225 "$O_SRV -key data_files/server2.key \
4226 -cert data_files/server2.ku-ds.crt" \
4227 "$P_CLI debug_level=1 auth_mode=optional \
4228 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
4229 0 \
4230 -c "bad certificate (usage extensions)" \
4231 -C "Processing of the Certificate handshake message failed" \
4232 -c "Ciphersuite is TLS-" \
4233 -c "! Usage does not match the keyUsage extension"
4234
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004235# Tests for keyUsage in leaf certificates, part 3:
4236# server-side checking of client cert
4237
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004238run_test "keyUsage cli-auth: RSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004239 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004240 "$O_CLI -key data_files/server2.key \
4241 -cert data_files/server2.ku-ds.crt" \
4242 0 \
4243 -S "bad certificate (usage extensions)" \
4244 -S "Processing of the Certificate handshake message failed"
4245
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004246run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004247 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004248 "$O_CLI -key data_files/server2.key \
4249 -cert data_files/server2.ku-ke.crt" \
4250 0 \
4251 -s "bad certificate (usage extensions)" \
4252 -S "Processing of the Certificate handshake message failed"
4253
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004254run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004255 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004256 "$O_CLI -key data_files/server2.key \
4257 -cert data_files/server2.ku-ke.crt" \
4258 1 \
4259 -s "bad certificate (usage extensions)" \
4260 -s "Processing of the Certificate handshake message failed"
4261
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004262run_test "keyUsage cli-auth: ECDSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004263 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004264 "$O_CLI -key data_files/server5.key \
4265 -cert data_files/server5.ku-ds.crt" \
4266 0 \
4267 -S "bad certificate (usage extensions)" \
4268 -S "Processing of the Certificate handshake message failed"
4269
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004270run_test "keyUsage cli-auth: ECDSA, KeyAgreement: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004271 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004272 "$O_CLI -key data_files/server5.key \
4273 -cert data_files/server5.ku-ka.crt" \
4274 0 \
4275 -s "bad certificate (usage extensions)" \
4276 -S "Processing of the Certificate handshake message failed"
4277
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004278# Tests for extendedKeyUsage, part 1: server-side certificate/suite selection
4279
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004280run_test "extKeyUsage srv: serverAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004281 "$P_SRV key_file=data_files/server5.key \
4282 crt_file=data_files/server5.eku-srv.crt" \
4283 "$P_CLI" \
4284 0
4285
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004286run_test "extKeyUsage srv: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004287 "$P_SRV key_file=data_files/server5.key \
4288 crt_file=data_files/server5.eku-srv.crt" \
4289 "$P_CLI" \
4290 0
4291
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004292run_test "extKeyUsage srv: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004293 "$P_SRV key_file=data_files/server5.key \
4294 crt_file=data_files/server5.eku-cs_any.crt" \
4295 "$P_CLI" \
4296 0
4297
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004298run_test "extKeyUsage srv: codeSign -> fail" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02004299 "$P_SRV key_file=data_files/server5.key \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004300 crt_file=data_files/server5.eku-cli.crt" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02004301 "$P_CLI" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004302 1
4303
4304# Tests for extendedKeyUsage, part 2: client-side checking of server cert
4305
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004306run_test "extKeyUsage cli: serverAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004307 "$O_SRV -key data_files/server5.key \
4308 -cert data_files/server5.eku-srv.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004309 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004310 0 \
4311 -C "bad certificate (usage extensions)" \
4312 -C "Processing of the Certificate handshake message failed" \
4313 -c "Ciphersuite is TLS-"
4314
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004315run_test "extKeyUsage cli: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004316 "$O_SRV -key data_files/server5.key \
4317 -cert data_files/server5.eku-srv_cli.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004318 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004319 0 \
4320 -C "bad certificate (usage extensions)" \
4321 -C "Processing of the Certificate handshake message failed" \
4322 -c "Ciphersuite is TLS-"
4323
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004324run_test "extKeyUsage cli: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004325 "$O_SRV -key data_files/server5.key \
4326 -cert data_files/server5.eku-cs_any.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004327 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004328 0 \
4329 -C "bad certificate (usage extensions)" \
4330 -C "Processing of the Certificate handshake message failed" \
4331 -c "Ciphersuite is TLS-"
4332
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004333run_test "extKeyUsage cli: codeSign -> fail" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004334 "$O_SRV -key data_files/server5.key \
4335 -cert data_files/server5.eku-cs.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004336 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004337 1 \
4338 -c "bad certificate (usage extensions)" \
4339 -c "Processing of the Certificate handshake message failed" \
4340 -C "Ciphersuite is TLS-"
4341
4342# Tests for extendedKeyUsage, part 3: server-side checking of client cert
4343
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004344run_test "extKeyUsage cli-auth: clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004345 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004346 "$O_CLI -key data_files/server5.key \
4347 -cert data_files/server5.eku-cli.crt" \
4348 0 \
4349 -S "bad certificate (usage extensions)" \
4350 -S "Processing of the Certificate handshake message failed"
4351
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004352run_test "extKeyUsage cli-auth: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004353 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004354 "$O_CLI -key data_files/server5.key \
4355 -cert data_files/server5.eku-srv_cli.crt" \
4356 0 \
4357 -S "bad certificate (usage extensions)" \
4358 -S "Processing of the Certificate handshake message failed"
4359
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004360run_test "extKeyUsage cli-auth: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004361 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004362 "$O_CLI -key data_files/server5.key \
4363 -cert data_files/server5.eku-cs_any.crt" \
4364 0 \
4365 -S "bad certificate (usage extensions)" \
4366 -S "Processing of the Certificate handshake message failed"
4367
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004368run_test "extKeyUsage cli-auth: codeSign -> fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004369 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004370 "$O_CLI -key data_files/server5.key \
4371 -cert data_files/server5.eku-cs.crt" \
4372 0 \
4373 -s "bad certificate (usage extensions)" \
4374 -S "Processing of the Certificate handshake message failed"
4375
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004376run_test "extKeyUsage cli-auth: codeSign -> fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004377 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004378 "$O_CLI -key data_files/server5.key \
4379 -cert data_files/server5.eku-cs.crt" \
4380 1 \
4381 -s "bad certificate (usage extensions)" \
4382 -s "Processing of the Certificate handshake message failed"
4383
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02004384# Tests for DHM parameters loading
4385
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004386run_test "DHM parameters: reference" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02004387 "$P_SRV" \
4388 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4389 debug_level=3" \
4390 0 \
4391 -c "value of 'DHM: P ' (2048 bits)" \
Hanno Becker13be9902017-09-27 17:17:30 +01004392 -c "value of 'DHM: G ' (2 bits)"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02004393
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004394run_test "DHM parameters: other parameters" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02004395 "$P_SRV dhm_file=data_files/dhparams.pem" \
4396 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4397 debug_level=3" \
4398 0 \
4399 -c "value of 'DHM: P ' (1024 bits)" \
4400 -c "value of 'DHM: G ' (2 bits)"
4401
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02004402# Tests for DHM client-side size checking
4403
4404run_test "DHM size: server default, client default, OK" \
4405 "$P_SRV" \
4406 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4407 debug_level=1" \
4408 0 \
4409 -C "DHM prime too short:"
4410
4411run_test "DHM size: server default, client 2048, OK" \
4412 "$P_SRV" \
4413 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4414 debug_level=1 dhmlen=2048" \
4415 0 \
4416 -C "DHM prime too short:"
4417
4418run_test "DHM size: server 1024, client default, OK" \
4419 "$P_SRV dhm_file=data_files/dhparams.pem" \
4420 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4421 debug_level=1" \
4422 0 \
4423 -C "DHM prime too short:"
4424
4425run_test "DHM size: server 1000, client default, rejected" \
4426 "$P_SRV dhm_file=data_files/dh.1000.pem" \
4427 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4428 debug_level=1" \
4429 1 \
4430 -c "DHM prime too short:"
4431
4432run_test "DHM size: server default, client 2049, rejected" \
4433 "$P_SRV" \
4434 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4435 debug_level=1 dhmlen=2049" \
4436 1 \
4437 -c "DHM prime too short:"
4438
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004439# Tests for PSK callback
4440
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004441run_test "PSK callback: psk, no callback" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004442 "$P_SRV psk=abc123 psk_identity=foo" \
4443 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4444 psk_identity=foo psk=abc123" \
4445 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01004446 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02004447 -S "SSL - Unknown identity received" \
4448 -S "SSL - Verification of the message MAC failed"
4449
Hanno Beckerf7027512018-10-23 15:27:39 +01004450requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4451run_test "PSK callback: opaque psk on client, no callback" \
4452 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
4453 "$P_CLI extended_ms=0 debug_level=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004454 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01004455 0 \
4456 -c "skip PMS generation for opaque PSK"\
4457 -S "skip PMS generation for opaque PSK"\
4458 -C "using extended master secret"\
4459 -S "using extended master secret"\
4460 -S "SSL - None of the common ciphersuites is usable" \
4461 -S "SSL - Unknown identity received" \
4462 -S "SSL - Verification of the message MAC failed"
4463
4464requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4465run_test "PSK callback: opaque psk on client, no callback, SHA-384" \
4466 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
4467 "$P_CLI extended_ms=0 debug_level=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004468 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01004469 0 \
4470 -c "skip PMS generation for opaque PSK"\
4471 -S "skip PMS generation for opaque PSK"\
4472 -C "using extended master secret"\
4473 -S "using extended master secret"\
4474 -S "SSL - None of the common ciphersuites is usable" \
4475 -S "SSL - Unknown identity received" \
4476 -S "SSL - Verification of the message MAC failed"
4477
4478requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4479run_test "PSK callback: opaque psk on client, no callback, EMS" \
4480 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
4481 "$P_CLI extended_ms=1 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004482 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01004483 0 \
4484 -c "skip PMS generation for opaque PSK"\
4485 -S "skip PMS generation for opaque PSK"\
4486 -c "using extended master secret"\
4487 -s "using extended master secret"\
4488 -S "SSL - None of the common ciphersuites is usable" \
4489 -S "SSL - Unknown identity received" \
4490 -S "SSL - Verification of the message MAC failed"
4491
4492requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4493run_test "PSK callback: opaque psk on client, no callback, SHA-384, EMS" \
4494 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
4495 "$P_CLI extended_ms=1 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004496 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01004497 0 \
4498 -c "skip PMS generation for opaque PSK"\
4499 -S "skip PMS generation for opaque PSK"\
4500 -c "using extended master secret"\
4501 -s "using extended master secret"\
4502 -S "SSL - None of the common ciphersuites is usable" \
4503 -S "SSL - Unknown identity received" \
4504 -S "SSL - Verification of the message MAC failed"
4505
Hanno Becker28c79dc2018-10-26 13:15:08 +01004506requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4507run_test "PSK callback: raw psk on client, static opaque on server, no callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004508 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004509 "$P_CLI extended_ms=0 debug_level=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4510 psk_identity=foo psk=abc123" \
4511 0 \
4512 -C "skip PMS generation for opaque PSK"\
4513 -s "skip PMS generation for opaque PSK"\
4514 -C "using extended master secret"\
4515 -S "using extended master secret"\
4516 -S "SSL - None of the common ciphersuites is usable" \
4517 -S "SSL - Unknown identity received" \
4518 -S "SSL - Verification of the message MAC failed"
4519
4520requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4521run_test "PSK callback: raw psk on client, static opaque on server, no callback, SHA-384" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004522 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004523 "$P_CLI extended_ms=0 debug_level=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
4524 psk_identity=foo psk=abc123" \
4525 0 \
4526 -C "skip PMS generation for opaque PSK"\
4527 -s "skip PMS generation for opaque PSK"\
4528 -C "using extended master secret"\
4529 -S "using extended master secret"\
4530 -S "SSL - None of the common ciphersuites is usable" \
4531 -S "SSL - Unknown identity received" \
4532 -S "SSL - Verification of the message MAC failed"
4533
4534requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4535run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004536 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls1_2 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004537 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
4538 "$P_CLI debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4539 psk_identity=foo psk=abc123 extended_ms=1" \
4540 0 \
4541 -c "using extended master secret"\
4542 -s "using extended master secret"\
4543 -C "skip PMS generation for opaque PSK"\
4544 -s "skip PMS generation for opaque PSK"\
4545 -S "SSL - None of the common ciphersuites is usable" \
4546 -S "SSL - Unknown identity received" \
4547 -S "SSL - Verification of the message MAC failed"
4548
4549requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4550run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS, SHA384" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004551 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls1_2 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004552 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
4553 "$P_CLI debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
4554 psk_identity=foo psk=abc123 extended_ms=1" \
4555 0 \
4556 -c "using extended master secret"\
4557 -s "using extended master secret"\
4558 -C "skip PMS generation for opaque PSK"\
4559 -s "skip PMS generation for opaque PSK"\
4560 -S "SSL - None of the common ciphersuites is usable" \
4561 -S "SSL - Unknown identity received" \
4562 -S "SSL - Verification of the message MAC failed"
4563
4564requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4565run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004566 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004567 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4568 psk_identity=def psk=beef" \
4569 0 \
4570 -C "skip PMS generation for opaque PSK"\
4571 -s "skip PMS generation for opaque PSK"\
4572 -C "using extended master secret"\
4573 -S "using extended master secret"\
4574 -S "SSL - None of the common ciphersuites is usable" \
4575 -S "SSL - Unknown identity received" \
4576 -S "SSL - Verification of the message MAC failed"
4577
4578requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4579run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, SHA-384" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004580 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004581 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
4582 psk_identity=def psk=beef" \
4583 0 \
4584 -C "skip PMS generation for opaque PSK"\
4585 -s "skip PMS generation for opaque PSK"\
4586 -C "using extended master secret"\
4587 -S "using extended master secret"\
4588 -S "SSL - None of the common ciphersuites is usable" \
4589 -S "SSL - Unknown identity received" \
4590 -S "SSL - Verification of the message MAC failed"
4591
4592requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4593run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004594 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004595 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
4596 "$P_CLI debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4597 psk_identity=abc psk=dead extended_ms=1" \
4598 0 \
4599 -c "using extended master secret"\
4600 -s "using extended master secret"\
4601 -C "skip PMS generation for opaque PSK"\
4602 -s "skip PMS generation for opaque PSK"\
4603 -S "SSL - None of the common ciphersuites is usable" \
4604 -S "SSL - Unknown identity received" \
4605 -S "SSL - Verification of the message MAC failed"
4606
4607requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4608run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS, SHA384" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004609 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004610 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
4611 "$P_CLI debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
4612 psk_identity=abc psk=dead extended_ms=1" \
4613 0 \
4614 -c "using extended master secret"\
4615 -s "using extended master secret"\
4616 -C "skip PMS generation for opaque PSK"\
4617 -s "skip PMS generation for opaque PSK"\
4618 -S "SSL - None of the common ciphersuites is usable" \
4619 -S "SSL - Unknown identity received" \
4620 -S "SSL - Verification of the message MAC failed"
4621
4622requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4623run_test "PSK callback: raw psk on client, mismatching static raw PSK on server, opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004624 "$P_SRV extended_ms=0 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004625 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4626 psk_identity=def psk=beef" \
4627 0 \
4628 -C "skip PMS generation for opaque PSK"\
4629 -s "skip PMS generation for opaque PSK"\
4630 -C "using extended master secret"\
4631 -S "using extended master secret"\
4632 -S "SSL - None of the common ciphersuites is usable" \
4633 -S "SSL - Unknown identity received" \
4634 -S "SSL - Verification of the message MAC failed"
4635
4636requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4637run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004638 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004639 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4640 psk_identity=def psk=beef" \
4641 0 \
4642 -C "skip PMS generation for opaque PSK"\
4643 -s "skip PMS generation for opaque PSK"\
4644 -C "using extended master secret"\
4645 -S "using extended master secret"\
4646 -S "SSL - None of the common ciphersuites is usable" \
4647 -S "SSL - Unknown identity received" \
4648 -S "SSL - Verification of the message MAC failed"
4649
4650requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4651run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, raw PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004652 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004653 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4654 psk_identity=def psk=beef" \
4655 0 \
4656 -C "skip PMS generation for opaque PSK"\
4657 -C "using extended master secret"\
4658 -S "using extended master secret"\
4659 -S "SSL - None of the common ciphersuites is usable" \
4660 -S "SSL - Unknown identity received" \
4661 -S "SSL - Verification of the message MAC failed"
4662
4663requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4664run_test "PSK callback: raw psk on client, id-matching but wrong raw PSK on server, opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004665 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004666 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4667 psk_identity=def psk=beef" \
4668 0 \
4669 -C "skip PMS generation for opaque PSK"\
4670 -C "using extended master secret"\
4671 -S "using extended master secret"\
4672 -S "SSL - None of the common ciphersuites is usable" \
4673 -S "SSL - Unknown identity received" \
4674 -S "SSL - Verification of the message MAC failed"
4675
4676requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4677run_test "PSK callback: raw psk on client, matching opaque PSK on server, wrong opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004678 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=beef debug_level=3 psk_list=abc,dead,def,abc123 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004679 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4680 psk_identity=def psk=beef" \
4681 1 \
4682 -s "SSL - Verification of the message MAC failed"
4683
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004684run_test "PSK callback: no psk, no callback" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02004685 "$P_SRV" \
4686 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4687 psk_identity=foo psk=abc123" \
4688 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01004689 -s "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004690 -S "SSL - Unknown identity received" \
4691 -S "SSL - Verification of the message MAC failed"
4692
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004693run_test "PSK callback: callback overrides other settings" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004694 "$P_SRV psk=abc123 psk_identity=foo psk_list=abc,dead,def,beef" \
4695 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4696 psk_identity=foo psk=abc123" \
4697 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01004698 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004699 -s "SSL - Unknown identity received" \
4700 -S "SSL - Verification of the message MAC failed"
4701
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004702run_test "PSK callback: first id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004703 "$P_SRV psk_list=abc,dead,def,beef" \
4704 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4705 psk_identity=abc psk=dead" \
4706 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01004707 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004708 -S "SSL - Unknown identity received" \
4709 -S "SSL - Verification of the message MAC failed"
4710
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004711run_test "PSK callback: second id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004712 "$P_SRV psk_list=abc,dead,def,beef" \
4713 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4714 psk_identity=def psk=beef" \
4715 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01004716 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004717 -S "SSL - Unknown identity received" \
4718 -S "SSL - Verification of the message MAC failed"
4719
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004720run_test "PSK callback: no match" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004721 "$P_SRV psk_list=abc,dead,def,beef" \
4722 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4723 psk_identity=ghi psk=beef" \
4724 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01004725 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004726 -s "SSL - Unknown identity received" \
4727 -S "SSL - Verification of the message MAC failed"
4728
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004729run_test "PSK callback: wrong key" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004730 "$P_SRV psk_list=abc,dead,def,beef" \
4731 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4732 psk_identity=abc psk=beef" \
4733 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01004734 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004735 -S "SSL - Unknown identity received" \
4736 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02004737
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02004738# Tests for EC J-PAKE
4739
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02004740requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02004741run_test "ECJPAKE: client not configured" \
4742 "$P_SRV debug_level=3" \
4743 "$P_CLI debug_level=3" \
4744 0 \
4745 -C "add ciphersuite: c0ff" \
4746 -C "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02004747 -S "found ecjpake kkpp extension" \
4748 -S "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02004749 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02004750 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02004751 -C "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02004752 -S "None of the common ciphersuites is usable"
4753
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02004754requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02004755run_test "ECJPAKE: server not configured" \
4756 "$P_SRV debug_level=3" \
4757 "$P_CLI debug_level=3 ecjpake_pw=bla \
4758 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
4759 1 \
4760 -c "add ciphersuite: c0ff" \
4761 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02004762 -s "found ecjpake kkpp extension" \
4763 -s "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02004764 -s "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02004765 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02004766 -C "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02004767 -s "None of the common ciphersuites is usable"
4768
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02004769requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02004770run_test "ECJPAKE: working, TLS" \
4771 "$P_SRV debug_level=3 ecjpake_pw=bla" \
4772 "$P_CLI debug_level=3 ecjpake_pw=bla \
4773 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
Manuel Pégourié-Gonnard0f1660a2015-09-16 22:41:06 +02004774 0 \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02004775 -c "add ciphersuite: c0ff" \
4776 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02004777 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02004778 -s "found ecjpake kkpp extension" \
4779 -S "skip ecjpake kkpp extension" \
4780 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02004781 -s "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02004782 -c "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02004783 -S "None of the common ciphersuites is usable" \
4784 -S "SSL - Verification of the message MAC failed"
4785
Janos Follath74537a62016-09-02 13:45:28 +01004786server_needs_more_time 1
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02004787requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02004788run_test "ECJPAKE: password mismatch, TLS" \
4789 "$P_SRV debug_level=3 ecjpake_pw=bla" \
4790 "$P_CLI debug_level=3 ecjpake_pw=bad \
4791 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
4792 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02004793 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02004794 -s "SSL - Verification of the message MAC failed"
4795
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02004796requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02004797run_test "ECJPAKE: working, DTLS" \
4798 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
4799 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
4800 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
4801 0 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02004802 -c "re-using cached ecjpake parameters" \
4803 -S "SSL - Verification of the message MAC failed"
4804
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02004805requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02004806run_test "ECJPAKE: working, DTLS, no cookie" \
4807 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla cookies=0" \
4808 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
4809 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
4810 0 \
4811 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02004812 -S "SSL - Verification of the message MAC failed"
4813
Janos Follath74537a62016-09-02 13:45:28 +01004814server_needs_more_time 1
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02004815requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02004816run_test "ECJPAKE: password mismatch, DTLS" \
4817 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
4818 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bad \
4819 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
4820 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02004821 -c "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02004822 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02004823
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02004824# for tests with configs/config-thread.h
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02004825requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02004826run_test "ECJPAKE: working, DTLS, nolog" \
4827 "$P_SRV dtls=1 ecjpake_pw=bla" \
4828 "$P_CLI dtls=1 ecjpake_pw=bla \
4829 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
4830 0
4831
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02004832# Tests for ciphersuites per version
4833
Janos Follathe2681a42016-03-07 15:57:05 +00004834requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01004835requires_config_enabled MBEDTLS_CAMELLIA_C
4836requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004837run_test "Per-version suites: SSL3" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01004838 "$P_SRV min_version=ssl3 version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02004839 "$P_CLI force_version=ssl3" \
4840 0 \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01004841 -c "Ciphersuite is TLS-RSA-WITH-CAMELLIA-128-CBC-SHA"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02004842
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01004843requires_config_enabled MBEDTLS_SSL_PROTO_TLS1
4844requires_config_enabled MBEDTLS_CAMELLIA_C
4845requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004846run_test "Per-version suites: TLS 1.0" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01004847 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01004848 "$P_CLI force_version=tls1 arc4=1" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02004849 0 \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01004850 -c "Ciphersuite is TLS-RSA-WITH-AES-256-CBC-SHA"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02004851
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01004852requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
4853requires_config_enabled MBEDTLS_CAMELLIA_C
4854requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004855run_test "Per-version suites: TLS 1.1" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01004856 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02004857 "$P_CLI force_version=tls1_1" \
4858 0 \
4859 -c "Ciphersuite is TLS-RSA-WITH-AES-128-CBC-SHA"
4860
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01004861requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
4862requires_config_enabled MBEDTLS_CAMELLIA_C
4863requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004864run_test "Per-version suites: TLS 1.2" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01004865 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02004866 "$P_CLI force_version=tls1_2" \
4867 0 \
4868 -c "Ciphersuite is TLS-RSA-WITH-AES-128-GCM-SHA256"
4869
Manuel Pégourié-Gonnard4cc8c632015-07-23 12:24:03 +02004870# Test for ClientHello without extensions
4871
Manuel Pégourié-Gonnardd55bc202015-08-04 16:22:30 +02004872requires_gnutls
Gilles Peskine5d2511c2017-05-12 13:16:40 +02004873run_test "ClientHello without extensions, SHA-1 allowed" \
Ron Eldor574ac572019-01-16 23:14:41 +02004874 "$P_SRV debug_level=3 key_file=data_files/server2.key crt_file=data_files/server2.crt" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004875 "$G_CLI --priority=NORMAL:%NO_EXTENSIONS:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard4cc8c632015-07-23 12:24:03 +02004876 0 \
4877 -s "dumping 'client hello extensions' (0 bytes)"
4878
Gilles Peskine5d2511c2017-05-12 13:16:40 +02004879requires_gnutls
4880run_test "ClientHello without extensions, SHA-1 forbidden in certificates on server" \
4881 "$P_SRV debug_level=3 key_file=data_files/server2.key crt_file=data_files/server2.crt allow_sha1=0" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02004882 "$G_CLI --priority=NORMAL:%NO_EXTENSIONS:%DISABLE_SAFE_RENEGOTIATION localhost" \
Gilles Peskine5d2511c2017-05-12 13:16:40 +02004883 0 \
4884 -s "dumping 'client hello extensions' (0 bytes)"
4885
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004886# Tests for mbedtls_ssl_get_bytes_avail()
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02004887
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004888run_test "mbedtls_ssl_get_bytes_avail: no extra data" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02004889 "$P_SRV" \
4890 "$P_CLI request_size=100" \
4891 0 \
4892 -s "Read from client: 100 bytes read$"
4893
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004894run_test "mbedtls_ssl_get_bytes_avail: extra data" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02004895 "$P_SRV" \
4896 "$P_CLI request_size=500" \
4897 0 \
4898 -s "Read from client: 500 bytes read (.*+.*)"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02004899
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004900# Tests for small client packets
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004901
Janos Follathe2681a42016-03-07 15:57:05 +00004902requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004903run_test "Small client packet SSLv3 BlockCipher" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01004904 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004905 "$P_CLI request_size=1 force_version=ssl3 \
4906 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
4907 0 \
4908 -s "Read from client: 1 bytes read"
4909
Janos Follathe2681a42016-03-07 15:57:05 +00004910requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004911run_test "Small client packet SSLv3 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01004912 "$P_SRV min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004913 "$P_CLI request_size=1 force_version=ssl3 \
4914 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
4915 0 \
4916 -s "Read from client: 1 bytes read"
4917
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004918run_test "Small client packet TLS 1.0 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004919 "$P_SRV" \
4920 "$P_CLI request_size=1 force_version=tls1 \
4921 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
4922 0 \
4923 -s "Read from client: 1 bytes read"
4924
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004925run_test "Small client packet TLS 1.0 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01004926 "$P_SRV" \
4927 "$P_CLI request_size=1 force_version=tls1 etm=0 \
4928 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
4929 0 \
4930 -s "Read from client: 1 bytes read"
4931
Hanno Becker32c55012017-11-10 08:42:54 +00004932requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004933run_test "Small client packet TLS 1.0 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00004934 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004935 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00004936 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004937 0 \
4938 -s "Read from client: 1 bytes read"
4939
Hanno Becker32c55012017-11-10 08:42:54 +00004940requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004941run_test "Small client packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00004942 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00004943 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00004944 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00004945 0 \
4946 -s "Read from client: 1 bytes read"
4947
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004948run_test "Small client packet TLS 1.0 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01004949 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004950 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker8501f982017-11-10 08:59:04 +00004951 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
4952 0 \
4953 -s "Read from client: 1 bytes read"
4954
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004955run_test "Small client packet TLS 1.0 StreamCipher, without EtM" \
Hanno Becker8501f982017-11-10 08:59:04 +00004956 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
4957 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00004958 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00004959 0 \
4960 -s "Read from client: 1 bytes read"
4961
4962requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004963run_test "Small client packet TLS 1.0 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00004964 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004965 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00004966 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004967 0 \
4968 -s "Read from client: 1 bytes read"
4969
Hanno Becker8501f982017-11-10 08:59:04 +00004970requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004971run_test "Small client packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00004972 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
4973 "$P_CLI request_size=1 force_version=tls1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
4974 trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004975 0 \
4976 -s "Read from client: 1 bytes read"
4977
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004978run_test "Small client packet TLS 1.1 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02004979 "$P_SRV" \
4980 "$P_CLI request_size=1 force_version=tls1_1 \
4981 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
4982 0 \
4983 -s "Read from client: 1 bytes read"
4984
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004985run_test "Small client packet TLS 1.1 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01004986 "$P_SRV" \
Hanno Becker8501f982017-11-10 08:59:04 +00004987 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00004988 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00004989 0 \
4990 -s "Read from client: 1 bytes read"
4991
4992requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04004993run_test "Small client packet TLS 1.1 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00004994 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00004995 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00004996 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00004997 0 \
4998 -s "Read from client: 1 bytes read"
4999
5000requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005001run_test "Small client packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005002 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00005003 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005004 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01005005 0 \
5006 -s "Read from client: 1 bytes read"
5007
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005008run_test "Small client packet TLS 1.1 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005009 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005010 "$P_CLI request_size=1 force_version=tls1_1 \
5011 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5012 0 \
5013 -s "Read from client: 1 bytes read"
5014
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005015run_test "Small client packet TLS 1.1 StreamCipher, without EtM" \
Hanno Becker8501f982017-11-10 08:59:04 +00005016 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005017 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005018 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005019 0 \
5020 -s "Read from client: 1 bytes read"
5021
Hanno Becker8501f982017-11-10 08:59:04 +00005022requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005023run_test "Small client packet TLS 1.1 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005024 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005025 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005026 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005027 0 \
5028 -s "Read from client: 1 bytes read"
5029
Hanno Becker32c55012017-11-10 08:42:54 +00005030requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005031run_test "Small client packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005032 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005033 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005034 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005035 0 \
5036 -s "Read from client: 1 bytes read"
5037
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005038run_test "Small client packet TLS 1.2 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005039 "$P_SRV" \
5040 "$P_CLI request_size=1 force_version=tls1_2 \
5041 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5042 0 \
5043 -s "Read from client: 1 bytes read"
5044
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005045run_test "Small client packet TLS 1.2 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01005046 "$P_SRV" \
Hanno Becker8501f982017-11-10 08:59:04 +00005047 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005048 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01005049 0 \
5050 -s "Read from client: 1 bytes read"
5051
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005052run_test "Small client packet TLS 1.2 BlockCipher larger MAC" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005053 "$P_SRV" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01005054 "$P_CLI request_size=1 force_version=tls1_2 \
5055 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005056 0 \
5057 -s "Read from client: 1 bytes read"
5058
Hanno Becker32c55012017-11-10 08:42:54 +00005059requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005060run_test "Small client packet TLS 1.2 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005061 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005062 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005063 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005064 0 \
5065 -s "Read from client: 1 bytes read"
5066
Hanno Becker8501f982017-11-10 08:59:04 +00005067requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005068run_test "Small client packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005069 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00005070 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005071 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005072 0 \
5073 -s "Read from client: 1 bytes read"
5074
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005075run_test "Small client packet TLS 1.2 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005076 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005077 "$P_CLI request_size=1 force_version=tls1_2 \
5078 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5079 0 \
5080 -s "Read from client: 1 bytes read"
5081
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005082run_test "Small client packet TLS 1.2 StreamCipher, without EtM" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005083 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005084 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005085 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00005086 0 \
5087 -s "Read from client: 1 bytes read"
5088
Hanno Becker32c55012017-11-10 08:42:54 +00005089requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005090run_test "Small client packet TLS 1.2 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005091 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005092 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005093 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005094 0 \
5095 -s "Read from client: 1 bytes read"
5096
Hanno Becker8501f982017-11-10 08:59:04 +00005097requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005098run_test "Small client packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005099 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00005100 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005101 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005102 0 \
5103 -s "Read from client: 1 bytes read"
5104
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005105run_test "Small client packet TLS 1.2 AEAD" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005106 "$P_SRV" \
5107 "$P_CLI request_size=1 force_version=tls1_2 \
5108 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
5109 0 \
5110 -s "Read from client: 1 bytes read"
5111
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005112run_test "Small client packet TLS 1.2 AEAD shorter tag" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005113 "$P_SRV" \
5114 "$P_CLI request_size=1 force_version=tls1_2 \
5115 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
5116 0 \
5117 -s "Read from client: 1 bytes read"
5118
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005119# Tests for small client packets in DTLS
Hanno Beckere2148042017-11-10 08:59:18 +00005120
5121requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005122run_test "Small client packet DTLS 1.0" \
Hanno Beckere2148042017-11-10 08:59:18 +00005123 "$P_SRV dtls=1 force_version=dtls1" \
5124 "$P_CLI dtls=1 request_size=1 \
5125 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5126 0 \
5127 -s "Read from client: 1 bytes read"
5128
5129requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005130run_test "Small client packet DTLS 1.0, without EtM" \
Hanno Beckere2148042017-11-10 08:59:18 +00005131 "$P_SRV dtls=1 force_version=dtls1 etm=0" \
5132 "$P_CLI dtls=1 request_size=1 \
5133 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5134 0 \
5135 -s "Read from client: 1 bytes read"
5136
5137requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5138requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005139run_test "Small client packet DTLS 1.0, truncated hmac" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005140 "$P_SRV dtls=1 force_version=dtls1 trunc_hmac=1" \
5141 "$P_CLI dtls=1 request_size=1 trunc_hmac=1 \
Hanno Beckere2148042017-11-10 08:59:18 +00005142 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5143 0 \
5144 -s "Read from client: 1 bytes read"
5145
5146requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5147requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005148run_test "Small client packet DTLS 1.0, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005149 "$P_SRV dtls=1 force_version=dtls1 trunc_hmac=1 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00005150 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005151 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
Hanno Beckere2148042017-11-10 08:59:18 +00005152 0 \
5153 -s "Read from client: 1 bytes read"
5154
5155requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005156run_test "Small client packet DTLS 1.2" \
Hanno Beckere2148042017-11-10 08:59:18 +00005157 "$P_SRV dtls=1 force_version=dtls1_2" \
5158 "$P_CLI dtls=1 request_size=1 \
5159 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5160 0 \
5161 -s "Read from client: 1 bytes read"
5162
5163requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005164run_test "Small client packet DTLS 1.2, without EtM" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005165 "$P_SRV dtls=1 force_version=dtls1_2 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00005166 "$P_CLI dtls=1 request_size=1 \
5167 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5168 0 \
5169 -s "Read from client: 1 bytes read"
5170
5171requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5172requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005173run_test "Small client packet DTLS 1.2, truncated hmac" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005174 "$P_SRV dtls=1 force_version=dtls1_2 trunc_hmac=1" \
Hanno Beckere2148042017-11-10 08:59:18 +00005175 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005176 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Beckere2148042017-11-10 08:59:18 +00005177 0 \
5178 -s "Read from client: 1 bytes read"
5179
5180requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5181requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005182run_test "Small client packet DTLS 1.2, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005183 "$P_SRV dtls=1 force_version=dtls1_2 trunc_hmac=1 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00005184 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005185 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
Hanno Beckere2148042017-11-10 08:59:18 +00005186 0 \
5187 -s "Read from client: 1 bytes read"
5188
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005189# Tests for small server packets
5190
5191requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
5192run_test "Small server packet SSLv3 BlockCipher" \
5193 "$P_SRV response_size=1 min_version=ssl3" \
5194 "$P_CLI force_version=ssl3 \
5195 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5196 0 \
5197 -c "Read from server: 1 bytes read"
5198
5199requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
5200run_test "Small server packet SSLv3 StreamCipher" \
5201 "$P_SRV response_size=1 min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5202 "$P_CLI force_version=ssl3 \
5203 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5204 0 \
5205 -c "Read from server: 1 bytes read"
5206
5207run_test "Small server packet TLS 1.0 BlockCipher" \
5208 "$P_SRV response_size=1" \
5209 "$P_CLI force_version=tls1 \
5210 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5211 0 \
5212 -c "Read from server: 1 bytes read"
5213
5214run_test "Small server packet TLS 1.0 BlockCipher, without EtM" \
5215 "$P_SRV response_size=1" \
5216 "$P_CLI force_version=tls1 etm=0 \
5217 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5218 0 \
5219 -c "Read from server: 1 bytes read"
5220
5221requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5222run_test "Small server packet TLS 1.0 BlockCipher, truncated MAC" \
5223 "$P_SRV response_size=1 trunc_hmac=1" \
5224 "$P_CLI force_version=tls1 \
5225 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
5226 0 \
5227 -c "Read from server: 1 bytes read"
5228
5229requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5230run_test "Small server packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
5231 "$P_SRV response_size=1 trunc_hmac=1" \
5232 "$P_CLI force_version=tls1 \
5233 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
5234 0 \
5235 -c "Read from server: 1 bytes read"
5236
5237run_test "Small server packet TLS 1.0 StreamCipher" \
5238 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5239 "$P_CLI force_version=tls1 \
5240 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5241 0 \
5242 -c "Read from server: 1 bytes read"
5243
5244run_test "Small server packet TLS 1.0 StreamCipher, without EtM" \
5245 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5246 "$P_CLI force_version=tls1 \
5247 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5248 0 \
5249 -c "Read from server: 1 bytes read"
5250
5251requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5252run_test "Small server packet TLS 1.0 StreamCipher, truncated MAC" \
5253 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5254 "$P_CLI force_version=tls1 \
5255 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5256 0 \
5257 -c "Read from server: 1 bytes read"
5258
5259requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5260run_test "Small server packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
5261 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5262 "$P_CLI force_version=tls1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
5263 trunc_hmac=1 etm=0" \
5264 0 \
5265 -c "Read from server: 1 bytes read"
5266
5267run_test "Small server packet TLS 1.1 BlockCipher" \
5268 "$P_SRV response_size=1" \
5269 "$P_CLI force_version=tls1_1 \
5270 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5271 0 \
5272 -c "Read from server: 1 bytes read"
5273
5274run_test "Small server packet TLS 1.1 BlockCipher, without EtM" \
5275 "$P_SRV response_size=1" \
5276 "$P_CLI force_version=tls1_1 \
5277 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
5278 0 \
5279 -c "Read from server: 1 bytes read"
5280
5281requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5282run_test "Small server packet TLS 1.1 BlockCipher, truncated MAC" \
5283 "$P_SRV response_size=1 trunc_hmac=1" \
5284 "$P_CLI force_version=tls1_1 \
5285 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
5286 0 \
5287 -c "Read from server: 1 bytes read"
5288
5289requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5290run_test "Small server packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
5291 "$P_SRV response_size=1 trunc_hmac=1" \
5292 "$P_CLI force_version=tls1_1 \
5293 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
5294 0 \
5295 -c "Read from server: 1 bytes read"
5296
5297run_test "Small server packet TLS 1.1 StreamCipher" \
5298 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5299 "$P_CLI force_version=tls1_1 \
5300 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5301 0 \
5302 -c "Read from server: 1 bytes read"
5303
5304run_test "Small server packet TLS 1.1 StreamCipher, without EtM" \
5305 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5306 "$P_CLI force_version=tls1_1 \
5307 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5308 0 \
5309 -c "Read from server: 1 bytes read"
5310
5311requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5312run_test "Small server packet TLS 1.1 StreamCipher, truncated MAC" \
5313 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5314 "$P_CLI force_version=tls1_1 \
5315 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5316 0 \
5317 -c "Read from server: 1 bytes read"
5318
5319requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5320run_test "Small server packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
5321 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5322 "$P_CLI force_version=tls1_1 \
5323 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
5324 0 \
5325 -c "Read from server: 1 bytes read"
5326
5327run_test "Small server packet TLS 1.2 BlockCipher" \
5328 "$P_SRV response_size=1" \
5329 "$P_CLI force_version=tls1_2 \
5330 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5331 0 \
5332 -c "Read from server: 1 bytes read"
5333
5334run_test "Small server packet TLS 1.2 BlockCipher, without EtM" \
5335 "$P_SRV response_size=1" \
5336 "$P_CLI force_version=tls1_2 \
5337 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
5338 0 \
5339 -c "Read from server: 1 bytes read"
5340
5341run_test "Small server packet TLS 1.2 BlockCipher larger MAC" \
5342 "$P_SRV response_size=1" \
5343 "$P_CLI force_version=tls1_2 \
5344 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
5345 0 \
5346 -c "Read from server: 1 bytes read"
5347
5348requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5349run_test "Small server packet TLS 1.2 BlockCipher, truncated MAC" \
5350 "$P_SRV response_size=1 trunc_hmac=1" \
5351 "$P_CLI force_version=tls1_2 \
5352 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
5353 0 \
5354 -c "Read from server: 1 bytes read"
5355
5356requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5357run_test "Small server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
5358 "$P_SRV response_size=1 trunc_hmac=1" \
5359 "$P_CLI force_version=tls1_2 \
5360 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
5361 0 \
5362 -c "Read from server: 1 bytes read"
5363
5364run_test "Small server packet TLS 1.2 StreamCipher" \
5365 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5366 "$P_CLI force_version=tls1_2 \
5367 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5368 0 \
5369 -c "Read from server: 1 bytes read"
5370
5371run_test "Small server packet TLS 1.2 StreamCipher, without EtM" \
5372 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5373 "$P_CLI force_version=tls1_2 \
5374 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5375 0 \
5376 -c "Read from server: 1 bytes read"
5377
5378requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5379run_test "Small server packet TLS 1.2 StreamCipher, truncated MAC" \
5380 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5381 "$P_CLI force_version=tls1_2 \
5382 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5383 0 \
5384 -c "Read from server: 1 bytes read"
5385
5386requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5387run_test "Small server packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
5388 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5389 "$P_CLI force_version=tls1_2 \
5390 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
5391 0 \
5392 -c "Read from server: 1 bytes read"
5393
5394run_test "Small server packet TLS 1.2 AEAD" \
5395 "$P_SRV response_size=1" \
5396 "$P_CLI force_version=tls1_2 \
5397 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
5398 0 \
5399 -c "Read from server: 1 bytes read"
5400
5401run_test "Small server packet TLS 1.2 AEAD shorter tag" \
5402 "$P_SRV response_size=1" \
5403 "$P_CLI force_version=tls1_2 \
5404 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
5405 0 \
5406 -c "Read from server: 1 bytes read"
5407
5408# Tests for small server packets in DTLS
5409
5410requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5411run_test "Small server packet DTLS 1.0" \
5412 "$P_SRV dtls=1 response_size=1 force_version=dtls1" \
5413 "$P_CLI dtls=1 \
5414 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5415 0 \
5416 -c "Read from server: 1 bytes read"
5417
5418requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5419run_test "Small server packet DTLS 1.0, without EtM" \
5420 "$P_SRV dtls=1 response_size=1 force_version=dtls1 etm=0" \
5421 "$P_CLI dtls=1 \
5422 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5423 0 \
5424 -c "Read from server: 1 bytes read"
5425
5426requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5427requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5428run_test "Small server packet DTLS 1.0, truncated hmac" \
5429 "$P_SRV dtls=1 response_size=1 force_version=dtls1 trunc_hmac=1" \
5430 "$P_CLI dtls=1 trunc_hmac=1 \
5431 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5432 0 \
5433 -c "Read from server: 1 bytes read"
5434
5435requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5436requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5437run_test "Small server packet DTLS 1.0, without EtM, truncated MAC" \
5438 "$P_SRV dtls=1 response_size=1 force_version=dtls1 trunc_hmac=1 etm=0" \
5439 "$P_CLI dtls=1 \
5440 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
5441 0 \
5442 -c "Read from server: 1 bytes read"
5443
5444requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5445run_test "Small server packet DTLS 1.2" \
5446 "$P_SRV dtls=1 response_size=1 force_version=dtls1_2" \
5447 "$P_CLI dtls=1 \
5448 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5449 0 \
5450 -c "Read from server: 1 bytes read"
5451
5452requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5453run_test "Small server packet DTLS 1.2, without EtM" \
5454 "$P_SRV dtls=1 response_size=1 force_version=dtls1_2 etm=0" \
5455 "$P_CLI dtls=1 \
5456 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5457 0 \
5458 -c "Read from server: 1 bytes read"
5459
5460requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5461requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5462run_test "Small server packet DTLS 1.2, truncated hmac" \
5463 "$P_SRV dtls=1 response_size=1 force_version=dtls1_2 trunc_hmac=1" \
5464 "$P_CLI dtls=1 \
5465 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
5466 0 \
5467 -c "Read from server: 1 bytes read"
5468
5469requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5470requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5471run_test "Small server packet DTLS 1.2, without EtM, truncated MAC" \
5472 "$P_SRV dtls=1 response_size=1 force_version=dtls1_2 trunc_hmac=1 etm=0" \
5473 "$P_CLI dtls=1 \
5474 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
5475 0 \
5476 -c "Read from server: 1 bytes read"
5477
Janos Follath00efff72016-05-06 13:48:23 +01005478# A test for extensions in SSLv3
5479
5480requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
5481run_test "SSLv3 with extensions, server side" \
5482 "$P_SRV min_version=ssl3 debug_level=3" \
5483 "$P_CLI force_version=ssl3 tickets=1 max_frag_len=4096 alpn=abc,1234" \
5484 0 \
5485 -S "dumping 'client hello extensions'" \
5486 -S "server hello, total extension length:"
5487
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005488# Test for large client packets
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005489
Angus Grattonc4dd0732018-04-11 16:28:39 +10005490# How many fragments do we expect to write $1 bytes?
5491fragments_for_write() {
5492 echo "$(( ( $1 + $MAX_OUT_LEN - 1 ) / $MAX_OUT_LEN ))"
5493}
5494
Janos Follathe2681a42016-03-07 15:57:05 +00005495requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005496run_test "Large client packet SSLv3 BlockCipher" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01005497 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01005498 "$P_CLI request_size=16384 force_version=ssl3 recsplit=0 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005499 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5500 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005501 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5502 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005503
Janos Follathe2681a42016-03-07 15:57:05 +00005504requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005505run_test "Large client packet SSLv3 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005506 "$P_SRV min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005507 "$P_CLI request_size=16384 force_version=ssl3 \
5508 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5509 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005510 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5511 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005512
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005513run_test "Large client packet TLS 1.0 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005514 "$P_SRV" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01005515 "$P_CLI request_size=16384 force_version=tls1 recsplit=0 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005516 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5517 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005518 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5519 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005520
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005521run_test "Large client packet TLS 1.0 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005522 "$P_SRV" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005523 "$P_CLI request_size=16384 force_version=tls1 etm=0 recsplit=0 \
5524 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5525 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005526 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00005527
Hanno Becker32c55012017-11-10 08:42:54 +00005528requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005529run_test "Large client packet TLS 1.0 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005530 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01005531 "$P_CLI request_size=16384 force_version=tls1 recsplit=0 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005532 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005533 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005534 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5535 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005536
Hanno Becker32c55012017-11-10 08:42:54 +00005537requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005538run_test "Large client packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005539 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005540 "$P_CLI request_size=16384 force_version=tls1 etm=0 recsplit=0 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005541 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005542 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005543 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00005544
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005545run_test "Large client packet TLS 1.0 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005546 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005547 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005548 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5549 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005550 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00005551
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005552run_test "Large client packet TLS 1.0 StreamCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005553 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5554 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005555 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005556 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005557 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00005558
5559requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005560run_test "Large client packet TLS 1.0 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005561 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005562 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005563 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005564 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005565 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005566
Hanno Becker278fc7a2017-11-10 09:16:28 +00005567requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005568run_test "Large client packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005569 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005570 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005571 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005572 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005573 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5574 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005575
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005576run_test "Large client packet TLS 1.1 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005577 "$P_SRV" \
5578 "$P_CLI request_size=16384 force_version=tls1_1 \
5579 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5580 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005581 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5582 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005583
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005584run_test "Large client packet TLS 1.1 BlockCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005585 "$P_SRV" \
5586 "$P_CLI request_size=16384 force_version=tls1_1 etm=0 \
5587 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005588 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005589 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005590
Hanno Becker32c55012017-11-10 08:42:54 +00005591requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005592run_test "Large client packet TLS 1.1 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005593 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005594 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005595 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005596 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005597 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005598
Hanno Becker32c55012017-11-10 08:42:54 +00005599requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005600run_test "Large client packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005601 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005602 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005603 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005604 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005605 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00005606
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005607run_test "Large client packet TLS 1.1 StreamCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005608 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5609 "$P_CLI request_size=16384 force_version=tls1_1 \
5610 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5611 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005612 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5613 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005614
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005615run_test "Large client packet TLS 1.1 StreamCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005616 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005617 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005618 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005619 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005620 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5621 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005622
Hanno Becker278fc7a2017-11-10 09:16:28 +00005623requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005624run_test "Large client packet TLS 1.1 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005625 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005626 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005627 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005628 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005629 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005630
Hanno Becker278fc7a2017-11-10 09:16:28 +00005631requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005632run_test "Large client packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005633 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005634 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005635 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005636 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005637 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5638 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005639
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005640run_test "Large client packet TLS 1.2 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005641 "$P_SRV" \
5642 "$P_CLI request_size=16384 force_version=tls1_2 \
5643 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5644 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005645 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5646 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005647
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005648run_test "Large client packet TLS 1.2 BlockCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005649 "$P_SRV" \
5650 "$P_CLI request_size=16384 force_version=tls1_2 etm=0 \
5651 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5652 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005653 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00005654
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005655run_test "Large client packet TLS 1.2 BlockCipher larger MAC" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005656 "$P_SRV" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01005657 "$P_CLI request_size=16384 force_version=tls1_2 \
5658 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005659 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005660 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5661 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005662
Hanno Becker32c55012017-11-10 08:42:54 +00005663requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005664run_test "Large client packet TLS 1.2 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005665 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005666 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005667 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005668 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005669 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005670
Hanno Becker278fc7a2017-11-10 09:16:28 +00005671requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005672run_test "Large client packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005673 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005674 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005675 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005676 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005677 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5678 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005679
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005680run_test "Large client packet TLS 1.2 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005681 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005682 "$P_CLI request_size=16384 force_version=tls1_2 \
5683 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5684 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005685 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5686 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005687
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005688run_test "Large client packet TLS 1.2 StreamCipher, without EtM" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005689 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005690 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005691 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5692 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005693 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00005694
Hanno Becker32c55012017-11-10 08:42:54 +00005695requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005696run_test "Large client packet TLS 1.2 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005697 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005698 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005699 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005700 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005701 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005702
Hanno Becker278fc7a2017-11-10 09:16:28 +00005703requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005704run_test "Large client packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005705 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00005706 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005707 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005708 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005709 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5710 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005711
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005712run_test "Large client packet TLS 1.2 AEAD" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005713 "$P_SRV" \
5714 "$P_CLI request_size=16384 force_version=tls1_2 \
5715 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
5716 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005717 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5718 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005719
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005720run_test "Large client packet TLS 1.2 AEAD shorter tag" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005721 "$P_SRV" \
5722 "$P_CLI request_size=16384 force_version=tls1_2 \
5723 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
5724 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005725 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5726 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005727
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005728# Test for large server packets
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005729requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
5730run_test "Large server packet SSLv3 StreamCipher" \
5731 "$P_SRV response_size=16384 min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5732 "$P_CLI force_version=ssl3 \
5733 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5734 0 \
5735 -c "Read from server: 16384 bytes read"
5736
Andrzej Kurek6a4f2242018-08-27 08:00:13 -04005737# Checking next 4 tests logs for 1n-1 split against BEAST too
5738requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
5739run_test "Large server packet SSLv3 BlockCipher" \
5740 "$P_SRV response_size=16384 min_version=ssl3" \
5741 "$P_CLI force_version=ssl3 recsplit=0 \
5742 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5743 0 \
5744 -c "Read from server: 1 bytes read"\
5745 -c "16383 bytes read"\
5746 -C "Read from server: 16384 bytes read"
5747
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005748run_test "Large server packet TLS 1.0 BlockCipher" \
5749 "$P_SRV response_size=16384" \
5750 "$P_CLI force_version=tls1 recsplit=0 \
5751 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5752 0 \
5753 -c "Read from server: 1 bytes read"\
5754 -c "16383 bytes read"\
5755 -C "Read from server: 16384 bytes read"
5756
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005757run_test "Large server packet TLS 1.0 BlockCipher, without EtM" \
5758 "$P_SRV response_size=16384" \
5759 "$P_CLI force_version=tls1 etm=0 recsplit=0 \
5760 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5761 0 \
5762 -c "Read from server: 1 bytes read"\
5763 -c "16383 bytes read"\
5764 -C "Read from server: 16384 bytes read"
5765
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005766requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5767run_test "Large server packet TLS 1.0 BlockCipher truncated MAC" \
5768 "$P_SRV response_size=16384" \
5769 "$P_CLI force_version=tls1 recsplit=0 \
5770 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
5771 trunc_hmac=1" \
5772 0 \
5773 -c "Read from server: 1 bytes read"\
5774 -c "16383 bytes read"\
5775 -C "Read from server: 16384 bytes read"
5776
5777requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5778run_test "Large server packet TLS 1.0 StreamCipher truncated MAC" \
5779 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5780 "$P_CLI force_version=tls1 \
5781 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
5782 trunc_hmac=1" \
5783 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005784 -s "16384 bytes written in 1 fragments" \
5785 -c "Read from server: 16384 bytes read"
5786
5787run_test "Large server packet TLS 1.0 StreamCipher" \
5788 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5789 "$P_CLI force_version=tls1 \
5790 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5791 0 \
5792 -s "16384 bytes written in 1 fragments" \
5793 -c "Read from server: 16384 bytes read"
5794
5795run_test "Large server packet TLS 1.0 StreamCipher, without EtM" \
5796 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5797 "$P_CLI force_version=tls1 \
5798 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5799 0 \
5800 -s "16384 bytes written in 1 fragments" \
5801 -c "Read from server: 16384 bytes read"
5802
5803requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5804run_test "Large server packet TLS 1.0 StreamCipher, truncated MAC" \
5805 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5806 "$P_CLI force_version=tls1 \
5807 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5808 0 \
5809 -s "16384 bytes written in 1 fragments" \
5810 -c "Read from server: 16384 bytes read"
5811
5812requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5813run_test "Large server packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
5814 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5815 "$P_CLI force_version=tls1 \
5816 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
5817 0 \
5818 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005819 -c "Read from server: 16384 bytes read"
5820
5821run_test "Large server packet TLS 1.1 BlockCipher" \
5822 "$P_SRV response_size=16384" \
5823 "$P_CLI force_version=tls1_1 \
5824 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5825 0 \
5826 -c "Read from server: 16384 bytes read"
5827
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005828run_test "Large server packet TLS 1.1 BlockCipher, without EtM" \
5829 "$P_SRV response_size=16384" \
5830 "$P_CLI force_version=tls1_1 etm=0 \
5831 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005832 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005833 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005834 -c "Read from server: 16384 bytes read"
5835
5836requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5837run_test "Large server packet TLS 1.1 BlockCipher truncated MAC" \
5838 "$P_SRV response_size=16384" \
5839 "$P_CLI force_version=tls1_1 \
5840 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
5841 trunc_hmac=1" \
5842 0 \
5843 -c "Read from server: 16384 bytes read"
5844
5845requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005846run_test "Large server packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
5847 "$P_SRV response_size=16384 trunc_hmac=1" \
5848 "$P_CLI force_version=tls1_1 \
5849 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
5850 0 \
5851 -s "16384 bytes written in 1 fragments" \
5852 -c "Read from server: 16384 bytes read"
5853
5854run_test "Large server packet TLS 1.1 StreamCipher" \
5855 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5856 "$P_CLI force_version=tls1_1 \
5857 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5858 0 \
5859 -c "Read from server: 16384 bytes read"
5860
5861run_test "Large server packet TLS 1.1 StreamCipher, without EtM" \
5862 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5863 "$P_CLI force_version=tls1_1 \
5864 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5865 0 \
5866 -s "16384 bytes written in 1 fragments" \
5867 -c "Read from server: 16384 bytes read"
5868
5869requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005870run_test "Large server packet TLS 1.1 StreamCipher truncated MAC" \
5871 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5872 "$P_CLI force_version=tls1_1 \
5873 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
5874 trunc_hmac=1" \
5875 0 \
5876 -c "Read from server: 16384 bytes read"
5877
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005878run_test "Large server packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
5879 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5880 "$P_CLI force_version=tls1_1 \
5881 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
5882 0 \
5883 -s "16384 bytes written in 1 fragments" \
5884 -c "Read from server: 16384 bytes read"
5885
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005886run_test "Large server packet TLS 1.2 BlockCipher" \
5887 "$P_SRV response_size=16384" \
5888 "$P_CLI force_version=tls1_2 \
5889 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5890 0 \
5891 -c "Read from server: 16384 bytes read"
5892
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005893run_test "Large server packet TLS 1.2 BlockCipher, without EtM" \
5894 "$P_SRV response_size=16384" \
5895 "$P_CLI force_version=tls1_2 etm=0 \
5896 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5897 0 \
5898 -s "16384 bytes written in 1 fragments" \
5899 -c "Read from server: 16384 bytes read"
5900
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005901run_test "Large server packet TLS 1.2 BlockCipher larger MAC" \
5902 "$P_SRV response_size=16384" \
5903 "$P_CLI force_version=tls1_2 \
5904 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
5905 0 \
5906 -c "Read from server: 16384 bytes read"
5907
5908requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5909run_test "Large server packet TLS 1.2 BlockCipher truncated MAC" \
5910 "$P_SRV response_size=16384" \
5911 "$P_CLI force_version=tls1_2 \
5912 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
5913 trunc_hmac=1" \
5914 0 \
5915 -c "Read from server: 16384 bytes read"
5916
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005917run_test "Large server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
5918 "$P_SRV response_size=16384 trunc_hmac=1" \
5919 "$P_CLI force_version=tls1_2 \
5920 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
5921 0 \
5922 -s "16384 bytes written in 1 fragments" \
5923 -c "Read from server: 16384 bytes read"
5924
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005925run_test "Large server packet TLS 1.2 StreamCipher" \
5926 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5927 "$P_CLI force_version=tls1_2 \
5928 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5929 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005930 -s "16384 bytes written in 1 fragments" \
5931 -c "Read from server: 16384 bytes read"
5932
5933run_test "Large server packet TLS 1.2 StreamCipher, without EtM" \
5934 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5935 "$P_CLI force_version=tls1_2 \
5936 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5937 0 \
5938 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005939 -c "Read from server: 16384 bytes read"
5940
5941requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5942run_test "Large server packet TLS 1.2 StreamCipher truncated MAC" \
5943 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5944 "$P_CLI force_version=tls1_2 \
5945 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
5946 trunc_hmac=1" \
5947 0 \
5948 -c "Read from server: 16384 bytes read"
5949
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005950requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5951run_test "Large server packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
5952 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5953 "$P_CLI force_version=tls1_2 \
5954 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
5955 0 \
5956 -s "16384 bytes written in 1 fragments" \
5957 -c "Read from server: 16384 bytes read"
5958
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005959run_test "Large server packet TLS 1.2 AEAD" \
5960 "$P_SRV response_size=16384" \
5961 "$P_CLI force_version=tls1_2 \
5962 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
5963 0 \
5964 -c "Read from server: 16384 bytes read"
5965
5966run_test "Large server packet TLS 1.2 AEAD shorter tag" \
5967 "$P_SRV response_size=16384" \
5968 "$P_CLI force_version=tls1_2 \
5969 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
5970 0 \
5971 -c "Read from server: 16384 bytes read"
5972
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02005973# Tests for restartable ECC
5974
5975requires_config_enabled MBEDTLS_ECP_RESTARTABLE
5976run_test "EC restart: TLS, default" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02005977 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02005978 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02005979 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02005980 debug_level=1" \
5981 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02005982 -C "x509_verify_cert.*4b00" \
5983 -C "mbedtls_pk_verify.*4b00" \
5984 -C "mbedtls_ecdh_make_public.*4b00" \
5985 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02005986
5987requires_config_enabled MBEDTLS_ECP_RESTARTABLE
5988run_test "EC restart: TLS, max_ops=0" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02005989 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02005990 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02005991 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02005992 debug_level=1 ec_max_ops=0" \
5993 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02005994 -C "x509_verify_cert.*4b00" \
5995 -C "mbedtls_pk_verify.*4b00" \
5996 -C "mbedtls_ecdh_make_public.*4b00" \
5997 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02005998
5999requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6000run_test "EC restart: TLS, max_ops=65535" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006001 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006002 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006003 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006004 debug_level=1 ec_max_ops=65535" \
6005 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006006 -C "x509_verify_cert.*4b00" \
6007 -C "mbedtls_pk_verify.*4b00" \
6008 -C "mbedtls_ecdh_make_public.*4b00" \
6009 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006010
6011requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6012run_test "EC restart: TLS, max_ops=1000" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006013 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006014 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006015 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006016 debug_level=1 ec_max_ops=1000" \
6017 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006018 -c "x509_verify_cert.*4b00" \
6019 -c "mbedtls_pk_verify.*4b00" \
6020 -c "mbedtls_ecdh_make_public.*4b00" \
6021 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006022
6023requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02006024run_test "EC restart: TLS, max_ops=1000, badsign" \
6025 "$P_SRV auth_mode=required \
6026 crt_file=data_files/server5-badsign.crt \
6027 key_file=data_files/server5.key" \
6028 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
6029 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6030 debug_level=1 ec_max_ops=1000" \
6031 1 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006032 -c "x509_verify_cert.*4b00" \
6033 -C "mbedtls_pk_verify.*4b00" \
6034 -C "mbedtls_ecdh_make_public.*4b00" \
6035 -C "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02006036 -c "! The certificate is not correctly signed by the trusted CA" \
6037 -c "! mbedtls_ssl_handshake returned" \
6038 -c "X509 - Certificate verification failed"
6039
6040requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6041run_test "EC restart: TLS, max_ops=1000, auth_mode=optional badsign" \
6042 "$P_SRV auth_mode=required \
6043 crt_file=data_files/server5-badsign.crt \
6044 key_file=data_files/server5.key" \
6045 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
6046 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6047 debug_level=1 ec_max_ops=1000 auth_mode=optional" \
6048 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006049 -c "x509_verify_cert.*4b00" \
6050 -c "mbedtls_pk_verify.*4b00" \
6051 -c "mbedtls_ecdh_make_public.*4b00" \
6052 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02006053 -c "! The certificate is not correctly signed by the trusted CA" \
6054 -C "! mbedtls_ssl_handshake returned" \
6055 -C "X509 - Certificate verification failed"
6056
6057requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6058run_test "EC restart: TLS, max_ops=1000, auth_mode=none badsign" \
6059 "$P_SRV auth_mode=required \
6060 crt_file=data_files/server5-badsign.crt \
6061 key_file=data_files/server5.key" \
6062 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
6063 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6064 debug_level=1 ec_max_ops=1000 auth_mode=none" \
6065 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006066 -C "x509_verify_cert.*4b00" \
6067 -c "mbedtls_pk_verify.*4b00" \
6068 -c "mbedtls_ecdh_make_public.*4b00" \
6069 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02006070 -C "! The certificate is not correctly signed by the trusted CA" \
6071 -C "! mbedtls_ssl_handshake returned" \
6072 -C "X509 - Certificate verification failed"
6073
6074requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006075run_test "EC restart: DTLS, max_ops=1000" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006076 "$P_SRV auth_mode=required dtls=1" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006077 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006078 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006079 dtls=1 debug_level=1 ec_max_ops=1000" \
6080 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006081 -c "x509_verify_cert.*4b00" \
6082 -c "mbedtls_pk_verify.*4b00" \
6083 -c "mbedtls_ecdh_make_public.*4b00" \
6084 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006085
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02006086requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6087run_test "EC restart: TLS, max_ops=1000 no client auth" \
6088 "$P_SRV" \
6089 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
6090 debug_level=1 ec_max_ops=1000" \
6091 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006092 -c "x509_verify_cert.*4b00" \
6093 -c "mbedtls_pk_verify.*4b00" \
6094 -c "mbedtls_ecdh_make_public.*4b00" \
6095 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02006096
6097requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6098run_test "EC restart: TLS, max_ops=1000, ECDHE-PSK" \
6099 "$P_SRV psk=abc123" \
6100 "$P_CLI force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256 \
6101 psk=abc123 debug_level=1 ec_max_ops=1000" \
6102 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006103 -C "x509_verify_cert.*4b00" \
6104 -C "mbedtls_pk_verify.*4b00" \
6105 -C "mbedtls_ecdh_make_public.*4b00" \
6106 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02006107
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006108# Tests of asynchronous private key support in SSL
6109
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006110requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006111run_test "SSL async private: sign, delay=0" \
6112 "$P_SRV \
6113 async_operations=s async_private_delay1=0 async_private_delay2=0" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006114 "$P_CLI" \
6115 0 \
6116 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006117 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006118
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006119requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006120run_test "SSL async private: sign, delay=1" \
6121 "$P_SRV \
6122 async_operations=s async_private_delay1=1 async_private_delay2=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006123 "$P_CLI" \
6124 0 \
6125 -s "Async sign callback: using key slot " \
6126 -s "Async resume (slot [0-9]): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006127 -s "Async resume (slot [0-9]): sign done, status=0"
6128
Gilles Peskine12d0cc12018-04-26 15:06:56 +02006129requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
6130run_test "SSL async private: sign, delay=2" \
6131 "$P_SRV \
6132 async_operations=s async_private_delay1=2 async_private_delay2=2" \
6133 "$P_CLI" \
6134 0 \
6135 -s "Async sign callback: using key slot " \
6136 -U "Async sign callback: using key slot " \
6137 -s "Async resume (slot [0-9]): call 1 more times." \
6138 -s "Async resume (slot [0-9]): call 0 more times." \
6139 -s "Async resume (slot [0-9]): sign done, status=0"
6140
Gilles Peskined3268832018-04-26 06:23:59 +02006141# Test that the async callback correctly signs the 36-byte hash of TLS 1.0/1.1
6142# with RSA PKCS#1v1.5 as used in TLS 1.0/1.1.
6143requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
6144requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
6145run_test "SSL async private: sign, RSA, TLS 1.1" \
6146 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt \
6147 async_operations=s async_private_delay1=0 async_private_delay2=0" \
6148 "$P_CLI force_version=tls1_1" \
6149 0 \
6150 -s "Async sign callback: using key slot " \
6151 -s "Async resume (slot [0-9]): sign done, status=0"
6152
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006153requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine807d74a2018-04-30 10:30:49 +02006154run_test "SSL async private: sign, SNI" \
6155 "$P_SRV debug_level=3 \
6156 async_operations=s async_private_delay1=0 async_private_delay2=0 \
6157 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6158 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
6159 "$P_CLI server_name=polarssl.example" \
6160 0 \
6161 -s "Async sign callback: using key slot " \
6162 -s "Async resume (slot [0-9]): sign done, status=0" \
6163 -s "parse ServerName extension" \
6164 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
6165 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
6166
6167requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006168run_test "SSL async private: decrypt, delay=0" \
6169 "$P_SRV \
6170 async_operations=d async_private_delay1=0 async_private_delay2=0" \
6171 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6172 0 \
6173 -s "Async decrypt callback: using key slot " \
6174 -s "Async resume (slot [0-9]): decrypt done, status=0"
6175
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006176requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006177run_test "SSL async private: decrypt, delay=1" \
6178 "$P_SRV \
6179 async_operations=d async_private_delay1=1 async_private_delay2=1" \
6180 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6181 0 \
6182 -s "Async decrypt callback: using key slot " \
6183 -s "Async resume (slot [0-9]): call 0 more times." \
6184 -s "Async resume (slot [0-9]): decrypt done, status=0"
6185
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006186requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006187run_test "SSL async private: decrypt RSA-PSK, delay=0" \
6188 "$P_SRV psk=abc123 \
6189 async_operations=d async_private_delay1=0 async_private_delay2=0" \
6190 "$P_CLI psk=abc123 \
6191 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
6192 0 \
6193 -s "Async decrypt callback: using key slot " \
6194 -s "Async resume (slot [0-9]): decrypt done, status=0"
6195
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006196requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006197run_test "SSL async private: decrypt RSA-PSK, delay=1" \
6198 "$P_SRV psk=abc123 \
6199 async_operations=d async_private_delay1=1 async_private_delay2=1" \
6200 "$P_CLI psk=abc123 \
6201 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
6202 0 \
6203 -s "Async decrypt callback: using key slot " \
6204 -s "Async resume (slot [0-9]): call 0 more times." \
6205 -s "Async resume (slot [0-9]): decrypt done, status=0"
6206
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006207requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006208run_test "SSL async private: sign callback not present" \
6209 "$P_SRV \
6210 async_operations=d async_private_delay1=1 async_private_delay2=1" \
6211 "$P_CLI; [ \$? -eq 1 ] &&
6212 $P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6213 0 \
6214 -S "Async sign callback" \
6215 -s "! mbedtls_ssl_handshake returned" \
6216 -s "The own private key or pre-shared key is not set, but needed" \
6217 -s "Async resume (slot [0-9]): decrypt done, status=0" \
6218 -s "Successful connection"
6219
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006220requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006221run_test "SSL async private: decrypt callback not present" \
6222 "$P_SRV debug_level=1 \
6223 async_operations=s async_private_delay1=1 async_private_delay2=1" \
6224 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA;
6225 [ \$? -eq 1 ] && $P_CLI" \
6226 0 \
6227 -S "Async decrypt callback" \
6228 -s "! mbedtls_ssl_handshake returned" \
6229 -s "got no RSA private key" \
6230 -s "Async resume (slot [0-9]): sign done, status=0" \
6231 -s "Successful connection"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006232
6233# key1: ECDSA, key2: RSA; use key1 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006234requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006235run_test "SSL async private: slot 0 used with key1" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006236 "$P_SRV \
6237 async_operations=s async_private_delay1=1 \
6238 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6239 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006240 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
6241 0 \
6242 -s "Async sign callback: using key slot 0," \
6243 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006244 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006245
6246# key1: ECDSA, key2: RSA; use key2 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006247requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006248run_test "SSL async private: slot 0 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006249 "$P_SRV \
6250 async_operations=s async_private_delay2=1 \
6251 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6252 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006253 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6254 0 \
6255 -s "Async sign callback: using key slot 0," \
6256 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006257 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006258
6259# key1: ECDSA, key2: RSA; use key2 from slot 1
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006260requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinead28bf02018-04-26 00:19:16 +02006261run_test "SSL async private: slot 1 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006262 "$P_SRV \
Gilles Peskine168dae82018-04-25 23:35:42 +02006263 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006264 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6265 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006266 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6267 0 \
6268 -s "Async sign callback: using key slot 1," \
6269 -s "Async resume (slot 1): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006270 -s "Async resume (slot 1): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006271
6272# key1: ECDSA, key2: RSA; use key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006273requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006274run_test "SSL async private: fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006275 "$P_SRV \
6276 async_operations=s async_private_delay1=1 \
6277 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6278 key_file2=data_files/server2.key crt_file2=data_files/server2.crt " \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006279 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6280 0 \
6281 -s "Async sign callback: no key matches this certificate."
6282
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006283requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006284run_test "SSL async private: sign, error in start" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006285 "$P_SRV \
6286 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6287 async_private_error=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006288 "$P_CLI" \
6289 1 \
6290 -s "Async sign callback: injected error" \
6291 -S "Async resume" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02006292 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006293 -s "! mbedtls_ssl_handshake returned"
6294
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006295requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006296run_test "SSL async private: sign, cancel after start" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006297 "$P_SRV \
6298 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6299 async_private_error=2" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006300 "$P_CLI" \
6301 1 \
6302 -s "Async sign callback: using key slot " \
6303 -S "Async resume" \
6304 -s "Async cancel"
6305
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006306requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006307run_test "SSL async private: sign, error in resume" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006308 "$P_SRV \
6309 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6310 async_private_error=3" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006311 "$P_CLI" \
6312 1 \
6313 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006314 -s "Async resume callback: sign done but injected error" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02006315 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006316 -s "! mbedtls_ssl_handshake returned"
6317
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006318requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006319run_test "SSL async private: decrypt, error in start" \
6320 "$P_SRV \
6321 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6322 async_private_error=1" \
6323 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6324 1 \
6325 -s "Async decrypt callback: injected error" \
6326 -S "Async resume" \
6327 -S "Async cancel" \
6328 -s "! mbedtls_ssl_handshake returned"
6329
6330requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
6331run_test "SSL async private: decrypt, cancel after start" \
6332 "$P_SRV \
6333 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6334 async_private_error=2" \
6335 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6336 1 \
6337 -s "Async decrypt callback: using key slot " \
6338 -S "Async resume" \
6339 -s "Async cancel"
6340
6341requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
6342run_test "SSL async private: decrypt, error in resume" \
6343 "$P_SRV \
6344 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6345 async_private_error=3" \
6346 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6347 1 \
6348 -s "Async decrypt callback: using key slot " \
6349 -s "Async resume callback: decrypt done but injected error" \
6350 -S "Async cancel" \
6351 -s "! mbedtls_ssl_handshake returned"
6352
6353requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006354run_test "SSL async private: cancel after start then operate correctly" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006355 "$P_SRV \
6356 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6357 async_private_error=-2" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006358 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
6359 0 \
6360 -s "Async cancel" \
6361 -s "! mbedtls_ssl_handshake returned" \
6362 -s "Async resume" \
6363 -s "Successful connection"
6364
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006365requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006366run_test "SSL async private: error in resume then operate correctly" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006367 "$P_SRV \
6368 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6369 async_private_error=-3" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006370 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
6371 0 \
6372 -s "! mbedtls_ssl_handshake returned" \
6373 -s "Async resume" \
6374 -s "Successful connection"
6375
6376# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006377requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006378run_test "SSL async private: cancel after start then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006379 "$P_SRV \
6380 async_operations=s async_private_delay1=1 async_private_error=-2 \
6381 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6382 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006383 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
6384 [ \$? -eq 1 ] &&
6385 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6386 0 \
Gilles Peskinededa75a2018-04-30 10:02:45 +02006387 -s "Async sign callback: using key slot 0" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006388 -S "Async resume" \
6389 -s "Async cancel" \
6390 -s "! mbedtls_ssl_handshake returned" \
6391 -s "Async sign callback: no key matches this certificate." \
6392 -s "Successful connection"
6393
6394# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006395requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006396run_test "SSL async private: sign, error in resume then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006397 "$P_SRV \
6398 async_operations=s async_private_delay1=1 async_private_error=-3 \
6399 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6400 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006401 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
6402 [ \$? -eq 1 ] &&
6403 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6404 0 \
6405 -s "Async resume" \
6406 -s "! mbedtls_ssl_handshake returned" \
6407 -s "Async sign callback: no key matches this certificate." \
6408 -s "Successful connection"
6409
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006410requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006411requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006412run_test "SSL async private: renegotiation: client-initiated; sign" \
6413 "$P_SRV \
6414 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006415 exchanges=2 renegotiation=1" \
6416 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1" \
6417 0 \
6418 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006419 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006420
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006421requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006422requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006423run_test "SSL async private: renegotiation: server-initiated; sign" \
6424 "$P_SRV \
6425 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006426 exchanges=2 renegotiation=1 renegotiate=1" \
6427 "$P_CLI exchanges=2 renegotiation=1" \
6428 0 \
6429 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006430 -s "Async resume (slot [0-9]): sign done, status=0"
6431
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006432requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006433requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
6434run_test "SSL async private: renegotiation: client-initiated; decrypt" \
6435 "$P_SRV \
6436 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6437 exchanges=2 renegotiation=1" \
6438 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1 \
6439 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6440 0 \
6441 -s "Async decrypt callback: using key slot " \
6442 -s "Async resume (slot [0-9]): decrypt done, status=0"
6443
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006444requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006445requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
6446run_test "SSL async private: renegotiation: server-initiated; decrypt" \
6447 "$P_SRV \
6448 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6449 exchanges=2 renegotiation=1 renegotiate=1" \
6450 "$P_CLI exchanges=2 renegotiation=1 \
6451 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6452 0 \
6453 -s "Async decrypt callback: using key slot " \
6454 -s "Async resume (slot [0-9]): decrypt done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006455
Ron Eldor58093c82018-06-28 13:22:05 +03006456# Tests for ECC extensions (rfc 4492)
6457
Ron Eldor643df7c2018-06-28 16:17:00 +03006458requires_config_enabled MBEDTLS_AES_C
6459requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
6460requires_config_enabled MBEDTLS_SHA256_C
6461requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03006462run_test "Force a non ECC ciphersuite in the client side" \
6463 "$P_SRV debug_level=3" \
Ron Eldor643df7c2018-06-28 16:17:00 +03006464 "$P_CLI debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03006465 0 \
6466 -C "client hello, adding supported_elliptic_curves extension" \
6467 -C "client hello, adding supported_point_formats extension" \
6468 -S "found supported elliptic curves extension" \
6469 -S "found supported point formats extension"
6470
Ron Eldor643df7c2018-06-28 16:17:00 +03006471requires_config_enabled MBEDTLS_AES_C
6472requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
6473requires_config_enabled MBEDTLS_SHA256_C
6474requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03006475run_test "Force a non ECC ciphersuite in the server side" \
Ron Eldor643df7c2018-06-28 16:17:00 +03006476 "$P_SRV debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03006477 "$P_CLI debug_level=3" \
6478 0 \
6479 -C "found supported_point_formats extension" \
6480 -S "server hello, supported_point_formats extension"
6481
Ron Eldor643df7c2018-06-28 16:17:00 +03006482requires_config_enabled MBEDTLS_AES_C
6483requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
6484requires_config_enabled MBEDTLS_SHA256_C
6485requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03006486run_test "Force an ECC ciphersuite in the client side" \
6487 "$P_SRV debug_level=3" \
6488 "$P_CLI debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
6489 0 \
6490 -c "client hello, adding supported_elliptic_curves extension" \
6491 -c "client hello, adding supported_point_formats extension" \
6492 -s "found supported elliptic curves extension" \
6493 -s "found supported point formats extension"
6494
Ron Eldor643df7c2018-06-28 16:17:00 +03006495requires_config_enabled MBEDTLS_AES_C
6496requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
6497requires_config_enabled MBEDTLS_SHA256_C
6498requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03006499run_test "Force an ECC ciphersuite in the server side" \
6500 "$P_SRV debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
6501 "$P_CLI debug_level=3" \
6502 0 \
6503 -c "found supported_point_formats extension" \
6504 -s "server hello, supported_point_formats extension"
6505
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006506# Tests for DTLS HelloVerifyRequest
6507
6508run_test "DTLS cookie: enabled" \
6509 "$P_SRV dtls=1 debug_level=2" \
6510 "$P_CLI dtls=1 debug_level=2" \
6511 0 \
6512 -s "cookie verification failed" \
6513 -s "cookie verification passed" \
6514 -S "cookie verification skipped" \
6515 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02006516 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006517 -S "SSL - The requested feature is not available"
6518
6519run_test "DTLS cookie: disabled" \
6520 "$P_SRV dtls=1 debug_level=2 cookies=0" \
6521 "$P_CLI dtls=1 debug_level=2" \
6522 0 \
6523 -S "cookie verification failed" \
6524 -S "cookie verification passed" \
6525 -s "cookie verification skipped" \
6526 -C "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02006527 -S "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006528 -S "SSL - The requested feature is not available"
6529
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02006530run_test "DTLS cookie: default (failing)" \
6531 "$P_SRV dtls=1 debug_level=2 cookies=-1" \
6532 "$P_CLI dtls=1 debug_level=2 hs_timeout=100-400" \
6533 1 \
6534 -s "cookie verification failed" \
6535 -S "cookie verification passed" \
6536 -S "cookie verification skipped" \
6537 -C "received hello verify request" \
6538 -S "hello verification requested" \
6539 -s "SSL - The requested feature is not available"
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006540
6541requires_ipv6
6542run_test "DTLS cookie: enabled, IPv6" \
6543 "$P_SRV dtls=1 debug_level=2 server_addr=::1" \
6544 "$P_CLI dtls=1 debug_level=2 server_addr=::1" \
6545 0 \
6546 -s "cookie verification failed" \
6547 -s "cookie verification passed" \
6548 -S "cookie verification skipped" \
6549 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02006550 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006551 -S "SSL - The requested feature is not available"
6552
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02006553run_test "DTLS cookie: enabled, nbio" \
6554 "$P_SRV dtls=1 nbio=2 debug_level=2" \
6555 "$P_CLI dtls=1 nbio=2 debug_level=2" \
6556 0 \
6557 -s "cookie verification failed" \
6558 -s "cookie verification passed" \
6559 -S "cookie verification skipped" \
6560 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02006561 -s "hello verification requested" \
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02006562 -S "SSL - The requested feature is not available"
6563
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02006564# Tests for client reconnecting from the same port with DTLS
6565
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006566not_with_valgrind # spurious resend
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02006567run_test "DTLS client reconnect from same port: reference" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006568 "$P_SRV dtls=1 exchanges=2 read_timeout=1000" \
6569 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02006570 0 \
6571 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006572 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02006573 -S "Client initiated reconnection from same port"
6574
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006575not_with_valgrind # spurious resend
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02006576run_test "DTLS client reconnect from same port: reconnect" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006577 "$P_SRV dtls=1 exchanges=2 read_timeout=1000" \
6578 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02006579 0 \
6580 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006581 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02006582 -s "Client initiated reconnection from same port"
6583
Paul Bakker362689d2016-05-13 10:33:25 +01006584not_with_valgrind # server/client too slow to respond in time (next test has higher timeouts)
6585run_test "DTLS client reconnect from same port: reconnect, nbio, no valgrind" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006586 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 nbio=2" \
6587 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02006588 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006589 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02006590 -s "Client initiated reconnection from same port"
6591
Paul Bakker362689d2016-05-13 10:33:25 +01006592only_with_valgrind # Only with valgrind, do previous test but with higher read_timeout and hs_timeout
6593run_test "DTLS client reconnect from same port: reconnect, nbio, valgrind" \
6594 "$P_SRV dtls=1 exchanges=2 read_timeout=2000 nbio=2 hs_timeout=1500-6000" \
6595 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=1500-3000 reconnect_hard=1" \
6596 0 \
6597 -S "The operation timed out" \
6598 -s "Client initiated reconnection from same port"
6599
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006600run_test "DTLS client reconnect from same port: no cookies" \
6601 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 cookies=0" \
Manuel Pégourié-Gonnard6ad23b92015-09-15 12:57:46 +02006602 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-8000 reconnect_hard=1" \
6603 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02006604 -s "The operation timed out" \
6605 -S "Client initiated reconnection from same port"
6606
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02006607# Tests for various cases of client authentication with DTLS
6608# (focused on handshake flows and message parsing)
6609
6610run_test "DTLS client auth: required" \
6611 "$P_SRV dtls=1 auth_mode=required" \
6612 "$P_CLI dtls=1" \
6613 0 \
6614 -s "Verifying peer X.509 certificate... ok"
6615
6616run_test "DTLS client auth: optional, client has no cert" \
6617 "$P_SRV dtls=1 auth_mode=optional" \
6618 "$P_CLI dtls=1 crt_file=none key_file=none" \
6619 0 \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01006620 -s "! Certificate was missing"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02006621
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01006622run_test "DTLS client auth: none, client has no cert" \
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02006623 "$P_SRV dtls=1 auth_mode=none" \
6624 "$P_CLI dtls=1 crt_file=none key_file=none debug_level=2" \
6625 0 \
6626 -c "skip write certificate$" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01006627 -s "! Certificate verification was skipped"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02006628
Manuel Pégourié-Gonnard0a885742015-08-04 12:08:35 +02006629run_test "DTLS wrong PSK: badmac alert" \
6630 "$P_SRV dtls=1 psk=abc123 force_ciphersuite=TLS-PSK-WITH-AES-128-GCM-SHA256" \
6631 "$P_CLI dtls=1 psk=abc124" \
6632 1 \
6633 -s "SSL - Verification of the message MAC failed" \
6634 -c "SSL - A fatal alert message was received from our peer"
6635
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +02006636# Tests for receiving fragmented handshake messages with DTLS
6637
6638requires_gnutls
6639run_test "DTLS reassembly: no fragmentation (gnutls server)" \
6640 "$G_SRV -u --mtu 2048 -a" \
6641 "$P_CLI dtls=1 debug_level=2" \
6642 0 \
6643 -C "found fragmented DTLS handshake message" \
6644 -C "error"
6645
6646requires_gnutls
6647run_test "DTLS reassembly: some fragmentation (gnutls server)" \
6648 "$G_SRV -u --mtu 512" \
6649 "$P_CLI dtls=1 debug_level=2" \
6650 0 \
6651 -c "found fragmented DTLS handshake message" \
6652 -C "error"
6653
6654requires_gnutls
6655run_test "DTLS reassembly: more fragmentation (gnutls server)" \
6656 "$G_SRV -u --mtu 128" \
6657 "$P_CLI dtls=1 debug_level=2" \
6658 0 \
6659 -c "found fragmented DTLS handshake message" \
6660 -C "error"
6661
6662requires_gnutls
6663run_test "DTLS reassembly: more fragmentation, nbio (gnutls server)" \
6664 "$G_SRV -u --mtu 128" \
6665 "$P_CLI dtls=1 nbio=2 debug_level=2" \
6666 0 \
6667 -c "found fragmented DTLS handshake message" \
6668 -C "error"
6669
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02006670requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01006671requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02006672run_test "DTLS reassembly: fragmentation, renego (gnutls server)" \
6673 "$G_SRV -u --mtu 256" \
6674 "$P_CLI debug_level=3 dtls=1 renegotiation=1 renegotiate=1" \
6675 0 \
6676 -c "found fragmented DTLS handshake message" \
6677 -c "client hello, adding renegotiation extension" \
6678 -c "found renegotiation extension" \
6679 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006680 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02006681 -C "error" \
6682 -s "Extra-header:"
6683
6684requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01006685requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02006686run_test "DTLS reassembly: fragmentation, nbio, renego (gnutls server)" \
6687 "$G_SRV -u --mtu 256" \
6688 "$P_CLI debug_level=3 nbio=2 dtls=1 renegotiation=1 renegotiate=1" \
6689 0 \
6690 -c "found fragmented DTLS handshake message" \
6691 -c "client hello, adding renegotiation extension" \
6692 -c "found renegotiation extension" \
6693 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006694 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02006695 -C "error" \
6696 -s "Extra-header:"
6697
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02006698run_test "DTLS reassembly: no fragmentation (openssl server)" \
6699 "$O_SRV -dtls1 -mtu 2048" \
6700 "$P_CLI dtls=1 debug_level=2" \
6701 0 \
6702 -C "found fragmented DTLS handshake message" \
6703 -C "error"
6704
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02006705run_test "DTLS reassembly: some fragmentation (openssl server)" \
6706 "$O_SRV -dtls1 -mtu 768" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +02006707 "$P_CLI dtls=1 debug_level=2" \
6708 0 \
6709 -c "found fragmented DTLS handshake message" \
6710 -C "error"
6711
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02006712run_test "DTLS reassembly: more fragmentation (openssl server)" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +02006713 "$O_SRV -dtls1 -mtu 256" \
6714 "$P_CLI dtls=1 debug_level=2" \
6715 0 \
6716 -c "found fragmented DTLS handshake message" \
6717 -C "error"
6718
6719run_test "DTLS reassembly: fragmentation, nbio (openssl server)" \
6720 "$O_SRV -dtls1 -mtu 256" \
6721 "$P_CLI dtls=1 nbio=2 debug_level=2" \
6722 0 \
6723 -c "found fragmented DTLS handshake message" \
6724 -C "error"
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02006725
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006726# Tests for sending fragmented handshake messages with DTLS
6727#
6728# Use client auth when we need the client to send large messages,
6729# and use large cert chains on both sides too (the long chains we have all use
6730# both RSA and ECDSA, but ideally we should have long chains with either).
6731# Sizes reached (UDP payload):
6732# - 2037B for server certificate
6733# - 1542B for client certificate
6734# - 1013B for newsessionticket
6735# - all others below 512B
6736# All those tests assume MAX_CONTENT_LEN is at least 2048
6737
6738requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6739requires_config_enabled MBEDTLS_RSA_C
6740requires_config_enabled MBEDTLS_ECDSA_C
6741requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
6742run_test "DTLS fragmenting: none (for reference)" \
6743 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6744 crt_file=data_files/server7_int-ca.crt \
6745 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006746 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01006747 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006748 "$P_CLI dtls=1 debug_level=2 \
6749 crt_file=data_files/server8_int-ca2.crt \
6750 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006751 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01006752 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006753 0 \
6754 -S "found fragmented DTLS handshake message" \
6755 -C "found fragmented DTLS handshake message" \
6756 -C "error"
6757
6758requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6759requires_config_enabled MBEDTLS_RSA_C
6760requires_config_enabled MBEDTLS_ECDSA_C
6761requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006762run_test "DTLS fragmenting: server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006763 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6764 crt_file=data_files/server7_int-ca.crt \
6765 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006766 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006767 max_frag_len=1024" \
6768 "$P_CLI dtls=1 debug_level=2 \
6769 crt_file=data_files/server8_int-ca2.crt \
6770 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006771 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006772 max_frag_len=2048" \
6773 0 \
6774 -S "found fragmented DTLS handshake message" \
6775 -c "found fragmented DTLS handshake message" \
6776 -C "error"
6777
Hanno Becker69ca0ad2018-08-24 12:11:35 +01006778# With the MFL extension, the server has no way of forcing
6779# the client to not exceed a certain MTU; hence, the following
6780# test can't be replicated with an MTU proxy such as the one
6781# `client-initiated, server only (max_frag_len)` below.
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006782requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6783requires_config_enabled MBEDTLS_RSA_C
6784requires_config_enabled MBEDTLS_ECDSA_C
6785requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006786run_test "DTLS fragmenting: server only (more) (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006787 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6788 crt_file=data_files/server7_int-ca.crt \
6789 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006790 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006791 max_frag_len=512" \
6792 "$P_CLI dtls=1 debug_level=2 \
6793 crt_file=data_files/server8_int-ca2.crt \
6794 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006795 hs_timeout=2500-60000 \
Hanno Becker69ca0ad2018-08-24 12:11:35 +01006796 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006797 0 \
6798 -S "found fragmented DTLS handshake message" \
6799 -c "found fragmented DTLS handshake message" \
6800 -C "error"
6801
6802requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6803requires_config_enabled MBEDTLS_RSA_C
6804requires_config_enabled MBEDTLS_ECDSA_C
6805requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006806run_test "DTLS fragmenting: client-initiated, server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006807 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
6808 crt_file=data_files/server7_int-ca.crt \
6809 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006810 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006811 max_frag_len=2048" \
6812 "$P_CLI dtls=1 debug_level=2 \
6813 crt_file=data_files/server8_int-ca2.crt \
6814 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006815 hs_timeout=2500-60000 \
6816 max_frag_len=1024" \
6817 0 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006818 -S "found fragmented DTLS handshake message" \
6819 -c "found fragmented DTLS handshake message" \
6820 -C "error"
6821
Hanno Beckerc92b5c82018-08-24 11:48:01 +01006822# While not required by the standard defining the MFL extension
6823# (according to which it only applies to records, not to datagrams),
6824# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
6825# as otherwise there wouldn't be any means to communicate MTU restrictions
6826# to the peer.
6827# The next test checks that no datagrams significantly larger than the
6828# negotiated MFL are sent.
6829requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6830requires_config_enabled MBEDTLS_RSA_C
6831requires_config_enabled MBEDTLS_ECDSA_C
6832requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
6833run_test "DTLS fragmenting: client-initiated, server only (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04006834 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01006835 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
6836 crt_file=data_files/server7_int-ca.crt \
6837 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006838 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01006839 max_frag_len=2048" \
6840 "$P_CLI dtls=1 debug_level=2 \
6841 crt_file=data_files/server8_int-ca2.crt \
6842 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006843 hs_timeout=2500-60000 \
6844 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01006845 0 \
6846 -S "found fragmented DTLS handshake message" \
6847 -c "found fragmented DTLS handshake message" \
6848 -C "error"
6849
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006850requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6851requires_config_enabled MBEDTLS_RSA_C
6852requires_config_enabled MBEDTLS_ECDSA_C
6853requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006854run_test "DTLS fragmenting: client-initiated, both (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006855 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6856 crt_file=data_files/server7_int-ca.crt \
6857 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006858 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006859 max_frag_len=2048" \
6860 "$P_CLI dtls=1 debug_level=2 \
6861 crt_file=data_files/server8_int-ca2.crt \
6862 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006863 hs_timeout=2500-60000 \
6864 max_frag_len=1024" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02006865 0 \
6866 -s "found fragmented DTLS handshake message" \
6867 -c "found fragmented DTLS handshake message" \
6868 -C "error"
6869
Hanno Beckerc92b5c82018-08-24 11:48:01 +01006870# While not required by the standard defining the MFL extension
6871# (according to which it only applies to records, not to datagrams),
6872# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
6873# as otherwise there wouldn't be any means to communicate MTU restrictions
6874# to the peer.
6875# The next test checks that no datagrams significantly larger than the
6876# negotiated MFL are sent.
6877requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6878requires_config_enabled MBEDTLS_RSA_C
6879requires_config_enabled MBEDTLS_ECDSA_C
6880requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
6881run_test "DTLS fragmenting: client-initiated, both (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04006882 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01006883 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6884 crt_file=data_files/server7_int-ca.crt \
6885 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006886 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01006887 max_frag_len=2048" \
6888 "$P_CLI dtls=1 debug_level=2 \
6889 crt_file=data_files/server8_int-ca2.crt \
6890 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006891 hs_timeout=2500-60000 \
6892 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01006893 0 \
6894 -s "found fragmented DTLS handshake message" \
6895 -c "found fragmented DTLS handshake message" \
6896 -C "error"
6897
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006898requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6899requires_config_enabled MBEDTLS_RSA_C
6900requires_config_enabled MBEDTLS_ECDSA_C
6901run_test "DTLS fragmenting: none (for reference) (MTU)" \
6902 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6903 crt_file=data_files/server7_int-ca.crt \
6904 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006905 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01006906 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006907 "$P_CLI dtls=1 debug_level=2 \
6908 crt_file=data_files/server8_int-ca2.crt \
6909 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006910 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01006911 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006912 0 \
6913 -S "found fragmented DTLS handshake message" \
6914 -C "found fragmented DTLS handshake message" \
6915 -C "error"
6916
6917requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6918requires_config_enabled MBEDTLS_RSA_C
6919requires_config_enabled MBEDTLS_ECDSA_C
6920run_test "DTLS fragmenting: client (MTU)" \
6921 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6922 crt_file=data_files/server7_int-ca.crt \
6923 key_file=data_files/server7.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04006924 hs_timeout=3500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01006925 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006926 "$P_CLI dtls=1 debug_level=2 \
6927 crt_file=data_files/server8_int-ca2.crt \
6928 key_file=data_files/server8.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04006929 hs_timeout=3500-60000 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006930 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006931 0 \
6932 -s "found fragmented DTLS handshake message" \
6933 -C "found fragmented DTLS handshake message" \
6934 -C "error"
6935
6936requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6937requires_config_enabled MBEDTLS_RSA_C
6938requires_config_enabled MBEDTLS_ECDSA_C
6939run_test "DTLS fragmenting: server (MTU)" \
6940 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6941 crt_file=data_files/server7_int-ca.crt \
6942 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006943 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006944 mtu=512" \
6945 "$P_CLI dtls=1 debug_level=2 \
6946 crt_file=data_files/server8_int-ca2.crt \
6947 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006948 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006949 mtu=2048" \
6950 0 \
6951 -S "found fragmented DTLS handshake message" \
6952 -c "found fragmented DTLS handshake message" \
6953 -C "error"
6954
6955requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6956requires_config_enabled MBEDTLS_RSA_C
6957requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04006958run_test "DTLS fragmenting: both (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006959 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006960 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6961 crt_file=data_files/server7_int-ca.crt \
6962 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006963 hs_timeout=2500-60000 \
Andrzej Kurek95805282018-10-11 08:55:37 -04006964 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006965 "$P_CLI dtls=1 debug_level=2 \
6966 crt_file=data_files/server8_int-ca2.crt \
6967 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04006968 hs_timeout=2500-60000 \
6969 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02006970 0 \
6971 -s "found fragmented DTLS handshake message" \
6972 -c "found fragmented DTLS handshake message" \
6973 -C "error"
6974
Andrzej Kurek77826052018-10-11 07:34:08 -04006975# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04006976requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
6977requires_config_enabled MBEDTLS_RSA_C
6978requires_config_enabled MBEDTLS_ECDSA_C
6979requires_config_enabled MBEDTLS_SHA256_C
6980requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
6981requires_config_enabled MBEDTLS_AES_C
6982requires_config_enabled MBEDTLS_GCM_C
6983run_test "DTLS fragmenting: both (MTU=512)" \
Hanno Becker8d832182018-03-15 10:14:19 +00006984 -p "$P_PXY mtu=512" \
Hanno Becker72a4f032017-11-15 16:39:20 +00006985 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
6986 crt_file=data_files/server7_int-ca.crt \
6987 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04006988 hs_timeout=2500-60000 \
Hanno Becker72a4f032017-11-15 16:39:20 +00006989 mtu=512" \
6990 "$P_CLI dtls=1 debug_level=2 \
6991 crt_file=data_files/server8_int-ca2.crt \
6992 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04006993 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
6994 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02006995 mtu=512" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02006996 0 \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02006997 -s "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02006998 -c "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02006999 -C "error"
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02007000
Andrzej Kurek7311c782018-10-11 06:49:41 -04007001# Test for automatic MTU reduction on repeated resend.
Andrzej Kurek77826052018-10-11 07:34:08 -04007002# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04007003# The ratio of max/min timeout should ideally equal 4 to accept two
7004# retransmissions, but in some cases (like both the server and client using
7005# fragmentation and auto-reduction) an extra retransmission might occur,
7006# hence the ratio of 8.
Hanno Becker37029eb2018-08-29 17:01:40 +01007007not_with_valgrind
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02007008requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7009requires_config_enabled MBEDTLS_RSA_C
7010requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007011requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7012requires_config_enabled MBEDTLS_AES_C
7013requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02007014run_test "DTLS fragmenting: proxy MTU: auto-reduction" \
7015 -p "$P_PXY mtu=508" \
7016 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7017 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007018 key_file=data_files/server7.key \
7019 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02007020 "$P_CLI dtls=1 debug_level=2 \
7021 crt_file=data_files/server8_int-ca2.crt \
7022 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007023 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7024 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02007025 0 \
7026 -s "found fragmented DTLS handshake message" \
7027 -c "found fragmented DTLS handshake message" \
7028 -C "error"
7029
Andrzej Kurek77826052018-10-11 07:34:08 -04007030# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Hanno Becker108992e2018-08-29 17:04:18 +01007031only_with_valgrind
7032requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7033requires_config_enabled MBEDTLS_RSA_C
7034requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007035requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7036requires_config_enabled MBEDTLS_AES_C
7037requires_config_enabled MBEDTLS_GCM_C
Hanno Becker108992e2018-08-29 17:04:18 +01007038run_test "DTLS fragmenting: proxy MTU: auto-reduction" \
7039 -p "$P_PXY mtu=508" \
7040 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7041 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007042 key_file=data_files/server7.key \
Hanno Becker108992e2018-08-29 17:04:18 +01007043 hs_timeout=250-10000" \
7044 "$P_CLI dtls=1 debug_level=2 \
7045 crt_file=data_files/server8_int-ca2.crt \
7046 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007047 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Hanno Becker108992e2018-08-29 17:04:18 +01007048 hs_timeout=250-10000" \
7049 0 \
7050 -s "found fragmented DTLS handshake message" \
7051 -c "found fragmented DTLS handshake message" \
7052 -C "error"
7053
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007054# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
Manuel Pégourié-Gonnard3d183ce2018-08-22 09:56:22 +02007055# OTOH the client might resend if the server is to slow to reset after sending
7056# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007057not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007058requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7059requires_config_enabled MBEDTLS_RSA_C
7060requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007061run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007062 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007063 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7064 crt_file=data_files/server7_int-ca.crt \
7065 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007066 hs_timeout=10000-60000 \
7067 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007068 "$P_CLI dtls=1 debug_level=2 \
7069 crt_file=data_files/server8_int-ca2.crt \
7070 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007071 hs_timeout=10000-60000 \
7072 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007073 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007074 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007075 -s "found fragmented DTLS handshake message" \
7076 -c "found fragmented DTLS handshake message" \
7077 -C "error"
7078
Andrzej Kurek77826052018-10-11 07:34:08 -04007079# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04007080# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
7081# OTOH the client might resend if the server is to slow to reset after sending
7082# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007083not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007084requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7085requires_config_enabled MBEDTLS_RSA_C
7086requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007087requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7088requires_config_enabled MBEDTLS_AES_C
7089requires_config_enabled MBEDTLS_GCM_C
7090run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=512)" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007091 -p "$P_PXY mtu=512" \
7092 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7093 crt_file=data_files/server7_int-ca.crt \
7094 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007095 hs_timeout=10000-60000 \
7096 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007097 "$P_CLI dtls=1 debug_level=2 \
7098 crt_file=data_files/server8_int-ca2.crt \
7099 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007100 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7101 hs_timeout=10000-60000 \
7102 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007103 0 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007104 -S "autoreduction" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007105 -s "found fragmented DTLS handshake message" \
7106 -c "found fragmented DTLS handshake message" \
7107 -C "error"
7108
Andrzej Kurek7311c782018-10-11 06:49:41 -04007109not_with_valgrind # spurious autoreduction due to timeout
7110requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7111requires_config_enabled MBEDTLS_RSA_C
7112requires_config_enabled MBEDTLS_ECDSA_C
7113run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007114 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007115 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7116 crt_file=data_files/server7_int-ca.crt \
7117 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007118 hs_timeout=10000-60000 \
7119 mtu=1024 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007120 "$P_CLI dtls=1 debug_level=2 \
7121 crt_file=data_files/server8_int-ca2.crt \
7122 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007123 hs_timeout=10000-60000 \
7124 mtu=1024 nbio=2" \
7125 0 \
7126 -S "autoreduction" \
7127 -s "found fragmented DTLS handshake message" \
7128 -c "found fragmented DTLS handshake message" \
7129 -C "error"
7130
Andrzej Kurek77826052018-10-11 07:34:08 -04007131# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04007132not_with_valgrind # spurious autoreduction due to timeout
7133requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7134requires_config_enabled MBEDTLS_RSA_C
7135requires_config_enabled MBEDTLS_ECDSA_C
7136requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7137requires_config_enabled MBEDTLS_AES_C
7138requires_config_enabled MBEDTLS_GCM_C
7139run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=512)" \
7140 -p "$P_PXY mtu=512" \
7141 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7142 crt_file=data_files/server7_int-ca.crt \
7143 key_file=data_files/server7.key \
7144 hs_timeout=10000-60000 \
7145 mtu=512 nbio=2" \
7146 "$P_CLI dtls=1 debug_level=2 \
7147 crt_file=data_files/server8_int-ca2.crt \
7148 key_file=data_files/server8.key \
7149 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7150 hs_timeout=10000-60000 \
7151 mtu=512 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007152 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007153 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007154 -s "found fragmented DTLS handshake message" \
7155 -c "found fragmented DTLS handshake message" \
7156 -C "error"
7157
Andrzej Kurek77826052018-10-11 07:34:08 -04007158# Forcing ciphersuite for this test to fit the MTU of 1450 with full config.
Hanno Beckerb841b4f2018-08-28 10:25:51 +01007159# This ensures things still work after session_reset().
7160# It also exercises the "resumed handshake" flow.
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007161# Since we don't support reading fragmented ClientHello yet,
7162# up the MTU to 1450 (larger than ClientHello with session ticket,
7163# but still smaller than client's Certificate to ensure fragmentation).
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007164# An autoreduction on the client-side might happen if the server is
7165# slow to reset, therefore omitting '-C "autoreduction"' below.
Manuel Pégourié-Gonnard2f2d9022018-08-21 12:17:54 +02007166# reco_delay avoids races where the client reconnects before the server has
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007167# resumed listening, which would result in a spurious autoreduction.
7168not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007169requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7170requires_config_enabled MBEDTLS_RSA_C
7171requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007172requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7173requires_config_enabled MBEDTLS_AES_C
7174requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007175run_test "DTLS fragmenting: proxy MTU, resumed handshake" \
7176 -p "$P_PXY mtu=1450" \
7177 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7178 crt_file=data_files/server7_int-ca.crt \
7179 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007180 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007181 mtu=1450" \
7182 "$P_CLI dtls=1 debug_level=2 \
7183 crt_file=data_files/server8_int-ca2.crt \
7184 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007185 hs_timeout=10000-60000 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007186 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard2f2d9022018-08-21 12:17:54 +02007187 mtu=1450 reconnect=1 reco_delay=1" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007188 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007189 -S "autoreduction" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007190 -s "found fragmented DTLS handshake message" \
7191 -c "found fragmented DTLS handshake message" \
7192 -C "error"
7193
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007194# An autoreduction on the client-side might happen if the server is
7195# slow to reset, therefore omitting '-C "autoreduction"' below.
7196not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007197requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7198requires_config_enabled MBEDTLS_RSA_C
7199requires_config_enabled MBEDTLS_ECDSA_C
7200requires_config_enabled MBEDTLS_SHA256_C
7201requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7202requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7203requires_config_enabled MBEDTLS_CHACHAPOLY_C
7204run_test "DTLS fragmenting: proxy MTU, ChachaPoly renego" \
7205 -p "$P_PXY mtu=512" \
7206 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7207 crt_file=data_files/server7_int-ca.crt \
7208 key_file=data_files/server7.key \
7209 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007210 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007211 mtu=512" \
7212 "$P_CLI dtls=1 debug_level=2 \
7213 crt_file=data_files/server8_int-ca2.crt \
7214 key_file=data_files/server8.key \
7215 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007216 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007217 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007218 mtu=512" \
7219 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007220 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007221 -s "found fragmented DTLS handshake message" \
7222 -c "found fragmented DTLS handshake message" \
7223 -C "error"
7224
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007225# An autoreduction on the client-side might happen if the server is
7226# slow to reset, therefore omitting '-C "autoreduction"' below.
7227not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007228requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7229requires_config_enabled MBEDTLS_RSA_C
7230requires_config_enabled MBEDTLS_ECDSA_C
7231requires_config_enabled MBEDTLS_SHA256_C
7232requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7233requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7234requires_config_enabled MBEDTLS_AES_C
7235requires_config_enabled MBEDTLS_GCM_C
7236run_test "DTLS fragmenting: proxy MTU, AES-GCM renego" \
7237 -p "$P_PXY mtu=512" \
7238 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7239 crt_file=data_files/server7_int-ca.crt \
7240 key_file=data_files/server7.key \
7241 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007242 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007243 mtu=512" \
7244 "$P_CLI dtls=1 debug_level=2 \
7245 crt_file=data_files/server8_int-ca2.crt \
7246 key_file=data_files/server8.key \
7247 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007248 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007249 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007250 mtu=512" \
7251 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007252 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007253 -s "found fragmented DTLS handshake message" \
7254 -c "found fragmented DTLS handshake message" \
7255 -C "error"
7256
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007257# An autoreduction on the client-side might happen if the server is
7258# slow to reset, therefore omitting '-C "autoreduction"' below.
7259not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007260requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7261requires_config_enabled MBEDTLS_RSA_C
7262requires_config_enabled MBEDTLS_ECDSA_C
7263requires_config_enabled MBEDTLS_SHA256_C
7264requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7265requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7266requires_config_enabled MBEDTLS_AES_C
7267requires_config_enabled MBEDTLS_CCM_C
7268run_test "DTLS fragmenting: proxy MTU, AES-CCM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007269 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007270 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7271 crt_file=data_files/server7_int-ca.crt \
7272 key_file=data_files/server7.key \
7273 exchanges=2 renegotiation=1 \
7274 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007275 hs_timeout=10000-60000 \
7276 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007277 "$P_CLI dtls=1 debug_level=2 \
7278 crt_file=data_files/server8_int-ca2.crt \
7279 key_file=data_files/server8.key \
7280 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007281 hs_timeout=10000-60000 \
7282 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007283 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007284 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007285 -s "found fragmented DTLS handshake message" \
7286 -c "found fragmented DTLS handshake message" \
7287 -C "error"
7288
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007289# An autoreduction on the client-side might happen if the server is
7290# slow to reset, therefore omitting '-C "autoreduction"' below.
7291not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007292requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7293requires_config_enabled MBEDTLS_RSA_C
7294requires_config_enabled MBEDTLS_ECDSA_C
7295requires_config_enabled MBEDTLS_SHA256_C
7296requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7297requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7298requires_config_enabled MBEDTLS_AES_C
7299requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
7300requires_config_enabled MBEDTLS_SSL_ENCRYPT_THEN_MAC
7301run_test "DTLS fragmenting: proxy MTU, AES-CBC EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007302 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007303 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7304 crt_file=data_files/server7_int-ca.crt \
7305 key_file=data_files/server7.key \
7306 exchanges=2 renegotiation=1 \
7307 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007308 hs_timeout=10000-60000 \
7309 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007310 "$P_CLI dtls=1 debug_level=2 \
7311 crt_file=data_files/server8_int-ca2.crt \
7312 key_file=data_files/server8.key \
7313 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007314 hs_timeout=10000-60000 \
7315 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007316 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007317 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007318 -s "found fragmented DTLS handshake message" \
7319 -c "found fragmented DTLS handshake message" \
7320 -C "error"
7321
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007322# An autoreduction on the client-side might happen if the server is
7323# slow to reset, therefore omitting '-C "autoreduction"' below.
7324not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007325requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7326requires_config_enabled MBEDTLS_RSA_C
7327requires_config_enabled MBEDTLS_ECDSA_C
7328requires_config_enabled MBEDTLS_SHA256_C
7329requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7330requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7331requires_config_enabled MBEDTLS_AES_C
7332requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
7333run_test "DTLS fragmenting: proxy MTU, AES-CBC non-EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007334 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007335 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7336 crt_file=data_files/server7_int-ca.crt \
7337 key_file=data_files/server7.key \
7338 exchanges=2 renegotiation=1 \
7339 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 etm=0 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007340 hs_timeout=10000-60000 \
7341 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007342 "$P_CLI dtls=1 debug_level=2 \
7343 crt_file=data_files/server8_int-ca2.crt \
7344 key_file=data_files/server8.key \
7345 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007346 hs_timeout=10000-60000 \
7347 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007348 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007349 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007350 -s "found fragmented DTLS handshake message" \
7351 -c "found fragmented DTLS handshake message" \
7352 -C "error"
7353
Andrzej Kurek77826052018-10-11 07:34:08 -04007354# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007355requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7356requires_config_enabled MBEDTLS_RSA_C
7357requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007358requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7359requires_config_enabled MBEDTLS_AES_C
7360requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007361client_needs_more_time 2
7362run_test "DTLS fragmenting: proxy MTU + 3d" \
7363 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007364 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 auth_mode=required \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007365 crt_file=data_files/server7_int-ca.crt \
7366 key_file=data_files/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007367 hs_timeout=250-10000 mtu=512" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007368 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007369 crt_file=data_files/server8_int-ca2.crt \
7370 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007371 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007372 hs_timeout=250-10000 mtu=512" \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007373 0 \
7374 -s "found fragmented DTLS handshake message" \
7375 -c "found fragmented DTLS handshake message" \
7376 -C "error"
7377
Andrzej Kurek77826052018-10-11 07:34:08 -04007378# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007379requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7380requires_config_enabled MBEDTLS_RSA_C
7381requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007382requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7383requires_config_enabled MBEDTLS_AES_C
7384requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007385client_needs_more_time 2
7386run_test "DTLS fragmenting: proxy MTU + 3d, nbio" \
7387 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
7388 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7389 crt_file=data_files/server7_int-ca.crt \
7390 key_file=data_files/server7.key \
7391 hs_timeout=250-10000 mtu=512 nbio=2" \
7392 "$P_CLI dtls=1 debug_level=2 \
7393 crt_file=data_files/server8_int-ca2.crt \
7394 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007395 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007396 hs_timeout=250-10000 mtu=512 nbio=2" \
7397 0 \
7398 -s "found fragmented DTLS handshake message" \
7399 -c "found fragmented DTLS handshake message" \
7400 -C "error"
7401
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007402# interop tests for DTLS fragmentating with reliable connection
7403#
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007404# here and below we just want to test that the we fragment in a way that
7405# pleases other implementations, so we don't need the peer to fragment
7406requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7407requires_config_enabled MBEDTLS_RSA_C
7408requires_config_enabled MBEDTLS_ECDSA_C
7409requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02007410requires_gnutls
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007411run_test "DTLS fragmenting: gnutls server, DTLS 1.2" \
7412 "$G_SRV -u" \
7413 "$P_CLI dtls=1 debug_level=2 \
7414 crt_file=data_files/server8_int-ca2.crt \
7415 key_file=data_files/server8.key \
7416 mtu=512 force_version=dtls1_2" \
7417 0 \
7418 -c "fragmenting handshake message" \
7419 -C "error"
7420
7421requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7422requires_config_enabled MBEDTLS_RSA_C
7423requires_config_enabled MBEDTLS_ECDSA_C
7424requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02007425requires_gnutls
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007426run_test "DTLS fragmenting: gnutls server, DTLS 1.0" \
7427 "$G_SRV -u" \
7428 "$P_CLI dtls=1 debug_level=2 \
7429 crt_file=data_files/server8_int-ca2.crt \
7430 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007431 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007432 0 \
7433 -c "fragmenting handshake message" \
7434 -C "error"
7435
Hanno Beckerb9a00862018-08-28 10:20:22 +01007436# We use --insecure for the GnuTLS client because it expects
7437# the hostname / IP it connects to to be the name used in the
7438# certificate obtained from the server. Here, however, it
7439# connects to 127.0.0.1 while our test certificates use 'localhost'
7440# as the server name in the certificate. This will make the
7441# certifiate validation fail, but passing --insecure makes
7442# GnuTLS continue the connection nonetheless.
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007443requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7444requires_config_enabled MBEDTLS_RSA_C
7445requires_config_enabled MBEDTLS_ECDSA_C
7446requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02007447requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -04007448requires_not_i686
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007449run_test "DTLS fragmenting: gnutls client, DTLS 1.2" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02007450 "$P_SRV dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007451 crt_file=data_files/server7_int-ca.crt \
7452 key_file=data_files/server7.key \
7453 mtu=512 force_version=dtls1_2" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02007454 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007455 0 \
7456 -s "fragmenting handshake message"
7457
Hanno Beckerb9a00862018-08-28 10:20:22 +01007458# See previous test for the reason to use --insecure
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007459requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7460requires_config_enabled MBEDTLS_RSA_C
7461requires_config_enabled MBEDTLS_ECDSA_C
7462requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02007463requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -04007464requires_not_i686
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007465run_test "DTLS fragmenting: gnutls client, DTLS 1.0" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02007466 "$P_SRV dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007467 crt_file=data_files/server7_int-ca.crt \
7468 key_file=data_files/server7.key \
7469 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02007470 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007471 0 \
7472 -s "fragmenting handshake message"
7473
7474requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7475requires_config_enabled MBEDTLS_RSA_C
7476requires_config_enabled MBEDTLS_ECDSA_C
7477requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7478run_test "DTLS fragmenting: openssl server, DTLS 1.2" \
7479 "$O_SRV -dtls1_2 -verify 10" \
7480 "$P_CLI dtls=1 debug_level=2 \
7481 crt_file=data_files/server8_int-ca2.crt \
7482 key_file=data_files/server8.key \
7483 mtu=512 force_version=dtls1_2" \
7484 0 \
7485 -c "fragmenting handshake message" \
7486 -C "error"
7487
7488requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7489requires_config_enabled MBEDTLS_RSA_C
7490requires_config_enabled MBEDTLS_ECDSA_C
7491requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
7492run_test "DTLS fragmenting: openssl server, DTLS 1.0" \
7493 "$O_SRV -dtls1 -verify 10" \
7494 "$P_CLI dtls=1 debug_level=2 \
7495 crt_file=data_files/server8_int-ca2.crt \
7496 key_file=data_files/server8.key \
7497 mtu=512 force_version=dtls1" \
7498 0 \
7499 -c "fragmenting handshake message" \
7500 -C "error"
7501
7502requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7503requires_config_enabled MBEDTLS_RSA_C
7504requires_config_enabled MBEDTLS_ECDSA_C
7505requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7506run_test "DTLS fragmenting: openssl client, DTLS 1.2" \
7507 "$P_SRV dtls=1 debug_level=2 \
7508 crt_file=data_files/server7_int-ca.crt \
7509 key_file=data_files/server7.key \
7510 mtu=512 force_version=dtls1_2" \
7511 "$O_CLI -dtls1_2" \
7512 0 \
7513 -s "fragmenting handshake message"
7514
7515requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7516requires_config_enabled MBEDTLS_RSA_C
7517requires_config_enabled MBEDTLS_ECDSA_C
7518requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
7519run_test "DTLS fragmenting: openssl client, DTLS 1.0" \
7520 "$P_SRV dtls=1 debug_level=2 \
7521 crt_file=data_files/server7_int-ca.crt \
7522 key_file=data_files/server7.key \
7523 mtu=512 force_version=dtls1" \
7524 "$O_CLI -dtls1" \
7525 0 \
7526 -s "fragmenting handshake message"
7527
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007528# interop tests for DTLS fragmentating with unreliable connection
7529#
7530# again we just want to test that the we fragment in a way that
7531# pleases other implementations, so we don't need the peer to fragment
7532requires_gnutls_next
7533requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7534requires_config_enabled MBEDTLS_RSA_C
7535requires_config_enabled MBEDTLS_ECDSA_C
7536requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007537client_needs_more_time 4
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007538run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.2" \
7539 -p "$P_PXY drop=8 delay=8 duplicate=8" \
7540 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007541 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007542 crt_file=data_files/server8_int-ca2.crt \
7543 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007544 hs_timeout=250-60000 mtu=512 force_version=dtls1_2" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007545 0 \
7546 -c "fragmenting handshake message" \
7547 -C "error"
7548
7549requires_gnutls_next
7550requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7551requires_config_enabled MBEDTLS_RSA_C
7552requires_config_enabled MBEDTLS_ECDSA_C
7553requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007554client_needs_more_time 4
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007555run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.0" \
7556 -p "$P_PXY drop=8 delay=8 duplicate=8" \
7557 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007558 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007559 crt_file=data_files/server8_int-ca2.crt \
7560 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007561 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007562 0 \
7563 -c "fragmenting handshake message" \
7564 -C "error"
7565
k-stachowiak17a38d32019-02-18 15:29:56 +01007566requires_gnutls_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +01007567requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7568requires_config_enabled MBEDTLS_RSA_C
7569requires_config_enabled MBEDTLS_ECDSA_C
7570requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7571client_needs_more_time 4
7572run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.2" \
7573 -p "$P_PXY drop=8 delay=8 duplicate=8" \
7574 "$P_SRV dtls=1 debug_level=2 \
7575 crt_file=data_files/server7_int-ca.crt \
7576 key_file=data_files/server7.key \
7577 hs_timeout=250-60000 mtu=512 force_version=dtls1_2" \
k-stachowiak17a38d32019-02-18 15:29:56 +01007578 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01007579 0 \
7580 -s "fragmenting handshake message"
7581
k-stachowiak17a38d32019-02-18 15:29:56 +01007582requires_gnutls_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +01007583requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7584requires_config_enabled MBEDTLS_RSA_C
7585requires_config_enabled MBEDTLS_ECDSA_C
7586requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
7587client_needs_more_time 4
7588run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.0" \
7589 -p "$P_PXY drop=8 delay=8 duplicate=8" \
7590 "$P_SRV dtls=1 debug_level=2 \
7591 crt_file=data_files/server7_int-ca.crt \
7592 key_file=data_files/server7.key \
7593 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
k-stachowiak17a38d32019-02-18 15:29:56 +01007594 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01007595 0 \
7596 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007597
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02007598## Interop test with OpenSSL might trigger a bug in recent versions (including
7599## all versions installed on the CI machines), reported here:
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007600## Bug report: https://github.com/openssl/openssl/issues/6902
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02007601## They should be re-enabled once a fixed version of OpenSSL is available
7602## (this should happen in some 1.1.1_ release according to the ticket).
Hanno Becker3b8b40c2018-08-28 10:25:41 +01007603skip_next_test
7604requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7605requires_config_enabled MBEDTLS_RSA_C
7606requires_config_enabled MBEDTLS_ECDSA_C
7607requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7608client_needs_more_time 4
7609run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.2" \
7610 -p "$P_PXY drop=8 delay=8 duplicate=8" \
7611 "$O_SRV -dtls1_2 -verify 10" \
7612 "$P_CLI dtls=1 debug_level=2 \
7613 crt_file=data_files/server8_int-ca2.crt \
7614 key_file=data_files/server8.key \
7615 hs_timeout=250-60000 mtu=512 force_version=dtls1_2" \
7616 0 \
7617 -c "fragmenting handshake message" \
7618 -C "error"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007619
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02007620skip_next_test
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007621requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7622requires_config_enabled MBEDTLS_RSA_C
7623requires_config_enabled MBEDTLS_ECDSA_C
7624requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007625client_needs_more_time 4
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007626run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.0" \
7627 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02007628 "$O_SRV -dtls1 -verify 10" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007629 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007630 crt_file=data_files/server8_int-ca2.crt \
7631 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007632 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007633 0 \
7634 -c "fragmenting handshake message" \
7635 -C "error"
7636
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02007637skip_next_test
7638requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7639requires_config_enabled MBEDTLS_RSA_C
7640requires_config_enabled MBEDTLS_ECDSA_C
7641requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7642client_needs_more_time 4
7643run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.2" \
7644 -p "$P_PXY drop=8 delay=8 duplicate=8" \
7645 "$P_SRV dtls=1 debug_level=2 \
7646 crt_file=data_files/server7_int-ca.crt \
7647 key_file=data_files/server7.key \
7648 hs_timeout=250-60000 mtu=512 force_version=dtls1_2" \
7649 "$O_CLI -dtls1_2" \
7650 0 \
7651 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007652
7653# -nbio is added to prevent s_client from blocking in case of duplicated
7654# messages at the end of the handshake
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02007655skip_next_test
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007656requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7657requires_config_enabled MBEDTLS_RSA_C
7658requires_config_enabled MBEDTLS_ECDSA_C
7659requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007660client_needs_more_time 4
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007661run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.0" \
7662 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007663 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007664 crt_file=data_files/server7_int-ca.crt \
7665 key_file=data_files/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007666 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02007667 "$O_CLI -nbio -dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007668 0 \
7669 -s "fragmenting handshake message"
7670
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02007671# Tests for specific things with "unreliable" UDP connection
7672
7673not_with_valgrind # spurious resend due to timeout
7674run_test "DTLS proxy: reference" \
7675 -p "$P_PXY" \
7676 "$P_SRV dtls=1 debug_level=2" \
7677 "$P_CLI dtls=1 debug_level=2" \
7678 0 \
7679 -C "replayed record" \
7680 -S "replayed record" \
7681 -C "record from another epoch" \
7682 -S "record from another epoch" \
7683 -C "discarding invalid record" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02007684 -S "discarding invalid record" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02007685 -S "resend" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02007686 -s "Extra-header:" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02007687 -c "HTTP/1.0 200 OK"
7688
7689not_with_valgrind # spurious resend due to timeout
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02007690run_test "DTLS proxy: duplicate every packet" \
7691 -p "$P_PXY duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007692 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
7693 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02007694 0 \
7695 -c "replayed record" \
7696 -s "replayed record" \
7697 -c "record from another epoch" \
7698 -s "record from another epoch" \
7699 -S "resend" \
7700 -s "Extra-header:" \
7701 -c "HTTP/1.0 200 OK"
7702
7703run_test "DTLS proxy: duplicate every packet, server anti-replay off" \
7704 -p "$P_PXY duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007705 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 anti_replay=0" \
7706 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02007707 0 \
7708 -c "replayed record" \
7709 -S "replayed record" \
7710 -c "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007711 -s "record from another epoch" \
7712 -c "resend" \
7713 -s "resend" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02007714 -s "Extra-header:" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007715 -c "HTTP/1.0 200 OK"
7716
7717run_test "DTLS proxy: multiple records in same datagram" \
7718 -p "$P_PXY pack=50" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007719 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
7720 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02007721 0 \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007722 -c "next record in same datagram" \
7723 -s "next record in same datagram"
7724
7725run_test "DTLS proxy: multiple records in same datagram, duplicate every packet" \
7726 -p "$P_PXY pack=50 duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007727 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
7728 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02007729 0 \
7730 -c "next record in same datagram" \
7731 -s "next record in same datagram"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007732
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02007733run_test "DTLS proxy: inject invalid AD record, default badmac_limit" \
7734 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007735 "$P_SRV dtls=1 dgram_packing=0 debug_level=1" \
7736 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02007737 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02007738 -c "discarding invalid record (mac)" \
7739 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007740 -s "Extra-header:" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02007741 -c "HTTP/1.0 200 OK" \
7742 -S "too many records with bad MAC" \
7743 -S "Verification of the message MAC failed"
7744
7745run_test "DTLS proxy: inject invalid AD record, badmac_limit 1" \
7746 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007747 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=1" \
7748 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02007749 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02007750 -C "discarding invalid record (mac)" \
7751 -S "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02007752 -S "Extra-header:" \
7753 -C "HTTP/1.0 200 OK" \
7754 -s "too many records with bad MAC" \
7755 -s "Verification of the message MAC failed"
7756
7757run_test "DTLS proxy: inject invalid AD record, badmac_limit 2" \
7758 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007759 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2" \
7760 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02007761 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02007762 -c "discarding invalid record (mac)" \
7763 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02007764 -s "Extra-header:" \
7765 -c "HTTP/1.0 200 OK" \
7766 -S "too many records with bad MAC" \
7767 -S "Verification of the message MAC failed"
7768
7769run_test "DTLS proxy: inject invalid AD record, badmac_limit 2, exchanges 2"\
7770 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007771 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2 exchanges=2" \
7772 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100 exchanges=2" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02007773 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02007774 -c "discarding invalid record (mac)" \
7775 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02007776 -s "Extra-header:" \
7777 -c "HTTP/1.0 200 OK" \
7778 -s "too many records with bad MAC" \
7779 -s "Verification of the message MAC failed"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007780
7781run_test "DTLS proxy: delay ChangeCipherSpec" \
7782 -p "$P_PXY delay_ccs=1" \
Hanno Beckerc4305232018-08-14 13:41:21 +01007783 "$P_SRV dtls=1 debug_level=1 dgram_packing=0" \
7784 "$P_CLI dtls=1 debug_level=1 dgram_packing=0" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007785 0 \
7786 -c "record from another epoch" \
7787 -s "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007788 -s "Extra-header:" \
7789 -c "HTTP/1.0 200 OK"
7790
Hanno Beckeraa5d0c42018-08-16 13:15:19 +01007791# Tests for reordering support with DTLS
7792
Hanno Becker56cdfd12018-08-17 13:42:15 +01007793run_test "DTLS reordering: Buffer out-of-order handshake message on client" \
7794 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007795 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
7796 hs_timeout=2500-60000" \
7797 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
7798 hs_timeout=2500-60000" \
Hanno Beckere3842212018-08-16 15:28:59 +01007799 0 \
7800 -c "Buffering HS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007801 -c "Next handshake message has been buffered - load"\
7802 -S "Buffering HS message" \
7803 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +01007804 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007805 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007806 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007807 -S "Remember CCS message"
Hanno Beckere3842212018-08-16 15:28:59 +01007808
Hanno Beckerdc1e9502018-08-28 16:02:33 +01007809run_test "DTLS reordering: Buffer out-of-order handshake message fragment on client" \
7810 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007811 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
7812 hs_timeout=2500-60000" \
7813 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
7814 hs_timeout=2500-60000" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +01007815 0 \
7816 -c "Buffering HS message" \
7817 -c "found fragmented DTLS handshake message"\
7818 -c "Next handshake message 1 not or only partially bufffered" \
7819 -c "Next handshake message has been buffered - load"\
7820 -S "Buffering HS message" \
7821 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +01007822 -C "Injecting buffered CCS message" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +01007823 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007824 -S "Injecting buffered CCS message" \
Hanno Beckeraa5d0c42018-08-16 13:15:19 +01007825 -S "Remember CCS message"
7826
Hanno Beckera1adcca2018-08-24 14:41:07 +01007827# The client buffers the ServerKeyExchange before receiving the fragmented
7828# Certificate message; at the time of writing, together these are aroudn 1200b
7829# in size, so that the bound below ensures that the certificate can be reassembled
7830# while keeping the ServerKeyExchange.
7831requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1300
7832run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next" \
Hanno Beckere3567052018-08-21 16:50:43 +01007833 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007834 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
7835 hs_timeout=2500-60000" \
7836 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
7837 hs_timeout=2500-60000" \
Hanno Beckere3567052018-08-21 16:50:43 +01007838 0 \
7839 -c "Buffering HS message" \
7840 -c "Next handshake message has been buffered - load"\
Hanno Beckera1adcca2018-08-24 14:41:07 +01007841 -C "attempt to make space by freeing buffered messages" \
7842 -S "Buffering HS message" \
7843 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +01007844 -C "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +01007845 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007846 -S "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +01007847 -S "Remember CCS message"
7848
7849# The size constraints ensure that the delayed certificate message can't
7850# be reassembled while keeping the ServerKeyExchange message, but it can
7851# when dropping it first.
7852requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 900
7853requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1299
7854run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg" \
7855 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007856 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
7857 hs_timeout=2500-60000" \
7858 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
7859 hs_timeout=2500-60000" \
Hanno Beckera1adcca2018-08-24 14:41:07 +01007860 0 \
7861 -c "Buffering HS message" \
7862 -c "attempt to make space by freeing buffered future messages" \
7863 -c "Enough space available after freeing buffered HS messages" \
Hanno Beckere3567052018-08-21 16:50:43 +01007864 -S "Buffering HS message" \
7865 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +01007866 -C "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +01007867 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007868 -S "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +01007869 -S "Remember CCS message"
7870
Hanno Becker56cdfd12018-08-17 13:42:15 +01007871run_test "DTLS reordering: Buffer out-of-order handshake message on server" \
7872 -p "$P_PXY delay_cli=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007873 "$P_SRV dgram_packing=0 auth_mode=required cookies=0 dtls=1 debug_level=2 \
7874 hs_timeout=2500-60000" \
7875 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
7876 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007877 0 \
7878 -C "Buffering HS message" \
7879 -C "Next handshake message has been buffered - load"\
7880 -s "Buffering HS message" \
7881 -s "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007882 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007883 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007884 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007885 -S "Remember CCS message"
7886
7887run_test "DTLS reordering: Buffer out-of-order CCS message on client"\
7888 -p "$P_PXY delay_srv=NewSessionTicket" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007889 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
7890 hs_timeout=2500-60000" \
7891 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
7892 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007893 0 \
7894 -C "Buffering HS message" \
7895 -C "Next handshake message has been buffered - load"\
7896 -S "Buffering HS message" \
7897 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007898 -c "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007899 -c "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007900 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007901 -S "Remember CCS message"
7902
7903run_test "DTLS reordering: Buffer out-of-order CCS message on server"\
7904 -p "$P_PXY delay_cli=ClientKeyExchange" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007905 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
7906 hs_timeout=2500-60000" \
7907 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
7908 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007909 0 \
7910 -C "Buffering HS message" \
7911 -C "Next handshake message has been buffered - load"\
7912 -S "Buffering HS message" \
7913 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007914 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007915 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01007916 -s "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007917 -s "Remember CCS message"
7918
Hanno Beckera1adcca2018-08-24 14:41:07 +01007919run_test "DTLS reordering: Buffer encrypted Finished message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007920 -p "$P_PXY delay_ccs=1" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007921 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
7922 hs_timeout=2500-60000" \
7923 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
7924 hs_timeout=2500-60000" \
Hanno Beckerb34149c2018-08-16 15:29:06 +01007925 0 \
7926 -s "Buffer record from epoch 1" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01007927 -s "Found buffered record from current epoch - load" \
7928 -c "Buffer record from epoch 1" \
7929 -c "Found buffered record from current epoch - load"
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02007930
Hanno Beckera1adcca2018-08-24 14:41:07 +01007931# In this test, both the fragmented NewSessionTicket and the ChangeCipherSpec
7932# from the server are delayed, so that the encrypted Finished message
7933# is received and buffered. When the fragmented NewSessionTicket comes
7934# in afterwards, the encrypted Finished message must be freed in order
7935# to make space for the NewSessionTicket to be reassembled.
7936# This works only in very particular circumstances:
7937# - MBEDTLS_SSL_DTLS_MAX_BUFFERING must be large enough to allow buffering
7938# of the NewSessionTicket, but small enough to also allow buffering of
7939# the encrypted Finished message.
7940# - The MTU setting on the server must be so small that the NewSessionTicket
7941# needs to be fragmented.
7942# - All messages sent by the server must be small enough to be either sent
7943# without fragmentation or be reassembled within the bounds of
7944# MBEDTLS_SSL_DTLS_MAX_BUFFERING. Achieve this by testing with a PSK-based
7945# handshake, omitting CRTs.
7946requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 240
7947requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 280
7948run_test "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket" \
7949 -p "$P_PXY delay_srv=NewSessionTicket delay_srv=NewSessionTicket delay_ccs=1" \
7950 "$P_SRV mtu=190 dgram_packing=0 psk=abc123 psk_identity=foo cookies=0 dtls=1 debug_level=2" \
7951 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 psk=abc123 psk_identity=foo" \
7952 0 \
7953 -s "Buffer record from epoch 1" \
7954 -s "Found buffered record from current epoch - load" \
7955 -c "Buffer record from epoch 1" \
7956 -C "Found buffered record from current epoch - load" \
7957 -c "Enough space available after freeing future epoch record"
7958
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +02007959# Tests for "randomly unreliable connection": try a variety of flows and peers
7960
7961client_needs_more_time 2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007962run_test "DTLS proxy: 3d (drop, delay, duplicate), \"short\" PSK handshake" \
7963 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007964 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02007965 psk=abc123" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007966 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02007967 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
7968 0 \
7969 -s "Extra-header:" \
7970 -c "HTTP/1.0 200 OK"
7971
Janos Follath74537a62016-09-02 13:45:28 +01007972client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02007973run_test "DTLS proxy: 3d, \"short\" RSA handshake" \
7974 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007975 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
7976 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02007977 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
7978 0 \
7979 -s "Extra-header:" \
7980 -c "HTTP/1.0 200 OK"
7981
Janos Follath74537a62016-09-02 13:45:28 +01007982client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02007983run_test "DTLS proxy: 3d, \"short\" (no ticket, no cli_auth) FS handshake" \
7984 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007985 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
7986 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02007987 0 \
7988 -s "Extra-header:" \
7989 -c "HTTP/1.0 200 OK"
7990
Janos Follath74537a62016-09-02 13:45:28 +01007991client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02007992run_test "DTLS proxy: 3d, FS, client auth" \
7993 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007994 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=required" \
7995 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02007996 0 \
7997 -s "Extra-header:" \
7998 -c "HTTP/1.0 200 OK"
7999
Janos Follath74537a62016-09-02 13:45:28 +01008000client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008001run_test "DTLS proxy: 3d, FS, ticket" \
8002 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008003 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=none" \
8004 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008005 0 \
8006 -s "Extra-header:" \
8007 -c "HTTP/1.0 200 OK"
8008
Janos Follath74537a62016-09-02 13:45:28 +01008009client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008010run_test "DTLS proxy: 3d, max handshake (FS, ticket + client auth)" \
8011 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008012 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=required" \
8013 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008014 0 \
8015 -s "Extra-header:" \
8016 -c "HTTP/1.0 200 OK"
8017
Janos Follath74537a62016-09-02 13:45:28 +01008018client_needs_more_time 2
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008019run_test "DTLS proxy: 3d, max handshake, nbio" \
8020 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008021 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008022 auth_mode=required" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008023 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008024 0 \
8025 -s "Extra-header:" \
8026 -c "HTTP/1.0 200 OK"
8027
Janos Follath74537a62016-09-02 13:45:28 +01008028client_needs_more_time 4
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +02008029run_test "DTLS proxy: 3d, min handshake, resumption" \
8030 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008031 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +02008032 psk=abc123 debug_level=3" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008033 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +02008034 debug_level=3 reconnect=1 read_timeout=1000 max_resend=10 \
8035 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8036 0 \
8037 -s "a session has been resumed" \
8038 -c "a session has been resumed" \
8039 -s "Extra-header:" \
8040 -c "HTTP/1.0 200 OK"
8041
Janos Follath74537a62016-09-02 13:45:28 +01008042client_needs_more_time 4
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02008043run_test "DTLS proxy: 3d, min handshake, resumption, nbio" \
8044 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008045 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02008046 psk=abc123 debug_level=3 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008047 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02008048 debug_level=3 reconnect=1 read_timeout=1000 max_resend=10 \
8049 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 nbio=2" \
8050 0 \
8051 -s "a session has been resumed" \
8052 -c "a session has been resumed" \
8053 -s "Extra-header:" \
8054 -c "HTTP/1.0 200 OK"
8055
Janos Follath74537a62016-09-02 13:45:28 +01008056client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +01008057requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008058run_test "DTLS proxy: 3d, min handshake, client-initiated renego" \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +02008059 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008060 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008061 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008062 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008063 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +02008064 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8065 0 \
8066 -c "=> renegotiate" \
8067 -s "=> renegotiate" \
8068 -s "Extra-header:" \
8069 -c "HTTP/1.0 200 OK"
8070
Janos Follath74537a62016-09-02 13:45:28 +01008071client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +01008072requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008073run_test "DTLS proxy: 3d, min handshake, client-initiated renego, nbio" \
8074 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008075 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008076 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008077 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008078 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008079 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8080 0 \
8081 -c "=> renegotiate" \
8082 -s "=> renegotiate" \
8083 -s "Extra-header:" \
8084 -c "HTTP/1.0 200 OK"
8085
Janos Follath74537a62016-09-02 13:45:28 +01008086client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +01008087requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008088run_test "DTLS proxy: 3d, min handshake, server-initiated renego" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008089 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008090 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008091 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008092 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008093 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008094 renegotiation=1 exchanges=4 debug_level=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008095 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8096 0 \
8097 -c "=> renegotiate" \
8098 -s "=> renegotiate" \
8099 -s "Extra-header:" \
8100 -c "HTTP/1.0 200 OK"
8101
Janos Follath74537a62016-09-02 13:45:28 +01008102client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +01008103requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008104run_test "DTLS proxy: 3d, min handshake, server-initiated renego, nbio" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008105 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008106 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008107 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008108 debug_level=2 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008109 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008110 renegotiation=1 exchanges=4 debug_level=2 nbio=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008111 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8112 0 \
8113 -c "=> renegotiate" \
8114 -s "=> renegotiate" \
8115 -s "Extra-header:" \
8116 -c "HTTP/1.0 200 OK"
8117
Manuel Pégourié-Gonnard82986c12018-09-03 10:50:21 +02008118## Interop tests with OpenSSL might trigger a bug in recent versions (including
8119## all versions installed on the CI machines), reported here:
8120## Bug report: https://github.com/openssl/openssl/issues/6902
8121## They should be re-enabled once a fixed version of OpenSSL is available
8122## (this should happen in some 1.1.1_ release according to the ticket).
8123skip_next_test
Janos Follath74537a62016-09-02 13:45:28 +01008124client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008125not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008126run_test "DTLS proxy: 3d, openssl server" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +02008127 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
8128 "$O_SRV -dtls1 -mtu 2048" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008129 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +02008130 0 \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +02008131 -c "HTTP/1.0 200 OK"
8132
Manuel Pégourié-Gonnard82986c12018-09-03 10:50:21 +02008133skip_next_test # see above
Janos Follath74537a62016-09-02 13:45:28 +01008134client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008135not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008136run_test "DTLS proxy: 3d, openssl server, fragmentation" \
8137 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
8138 "$O_SRV -dtls1 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008139 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008140 0 \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008141 -c "HTTP/1.0 200 OK"
8142
Manuel Pégourié-Gonnard82986c12018-09-03 10:50:21 +02008143skip_next_test # see above
Janos Follath74537a62016-09-02 13:45:28 +01008144client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008145not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008146run_test "DTLS proxy: 3d, openssl server, fragmentation, nbio" \
8147 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
8148 "$O_SRV -dtls1 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008149 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2 tickets=0" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008150 0 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008151 -c "HTTP/1.0 200 OK"
8152
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +00008153requires_gnutls
Janos Follath74537a62016-09-02 13:45:28 +01008154client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008155not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008156run_test "DTLS proxy: 3d, gnutls server" \
8157 -p "$P_PXY drop=5 delay=5 duplicate=5" \
8158 "$G_SRV -u --mtu 2048 -a" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008159 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008160 0 \
8161 -s "Extra-header:" \
8162 -c "Extra-header:"
8163
k-stachowiak17a38d32019-02-18 15:29:56 +01008164requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +01008165client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008166not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008167run_test "DTLS proxy: 3d, gnutls server, fragmentation" \
8168 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +01008169 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008170 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008171 0 \
8172 -s "Extra-header:" \
8173 -c "Extra-header:"
8174
k-stachowiak17a38d32019-02-18 15:29:56 +01008175requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +01008176client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008177not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008178run_test "DTLS proxy: 3d, gnutls server, fragmentation, nbio" \
8179 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +01008180 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008181 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008182 0 \
8183 -s "Extra-header:" \
8184 -c "Extra-header:"
8185
Ron Eldorf75e2522019-05-14 20:38:49 +03008186requires_config_enabled MBEDTLS_SSL_EXPORT_KEYS
8187run_test "export keys functionality" \
8188 "$P_SRV eap_tls=1 debug_level=3" \
8189 "$P_CLI eap_tls=1 debug_level=3" \
8190 0 \
8191 -s "exported maclen is " \
8192 -s "exported keylen is " \
8193 -s "exported ivlen is " \
8194 -c "exported maclen is " \
8195 -c "exported keylen is " \
8196 -c "exported ivlen is "
8197
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01008198# Final report
8199
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01008200echo "------------------------------------------------------------------------"
8201
8202if [ $FAILS = 0 ]; then
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +01008203 printf "PASSED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01008204else
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +01008205 printf "FAILED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01008206fi
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +02008207PASSES=$(( $TESTS - $FAILS ))
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +02008208echo " ($PASSES / $TESTS tests ($SKIPS skipped))"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01008209
8210exit $FAILS