| Jerry Yu | e599132 | 2022-11-07 14:03:44 +0800 | [diff] [blame] | 1 | #!/bin/sh |
| 2 | |
| 3 | # tls13-misc.sh |
| 4 | # |
| 5 | # Copyright The Mbed TLS Contributors |
| 6 | # SPDX-License-Identifier: Apache-2.0 |
| 7 | # |
| 8 | # Licensed under the Apache License, Version 2.0 (the "License"); you may |
| 9 | # not use this file except in compliance with the License. |
| 10 | # You may obtain a copy of the License at |
| 11 | # |
| 12 | # http://www.apache.org/licenses/LICENSE-2.0 |
| 13 | # |
| 14 | # Unless required by applicable law or agreed to in writing, software |
| 15 | # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT |
| 16 | # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| 17 | # See the License for the specific language governing permissions and |
| 18 | # limitations under the License. |
| 19 | # |
| 20 | |
| 21 | requires_gnutls_tls1_3 |
| Jerry Yu | 616ba75 | 2022-11-08 21:49:47 +0800 | [diff] [blame] | 22 | requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 |
| 23 | requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
| 24 | requires_config_enabled MBEDTLS_SSL_SRV_C |
| 25 | requires_config_enabled MBEDTLS_DEBUG_C |
| 26 | requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| 27 | |
| 28 | run_test "TLS 1.3: PSK: No valid ciphersuite. G->m" \ |
| 29 | "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \ |
| 30 | "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-CIPHER-ALL:+AES-256-GCM:+AEAD:+SHA384:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \ |
| 31 | --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \ |
| 32 | localhost" \ |
| 33 | 1 \ |
| 34 | -s "found psk key exchange modes extension" \ |
| 35 | -s "found pre_shared_key extension" \ |
| 36 | -s "Found PSK_EPHEMERAL KEX MODE" \ |
| 37 | -s "Found PSK KEX MODE" \ |
| 38 | -s "No matched ciphersuite" |
| 39 | |
| 40 | requires_openssl_tls1_3 |
| 41 | requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 |
| 42 | requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE |
| 43 | requires_config_enabled MBEDTLS_SSL_SRV_C |
| 44 | requires_config_enabled MBEDTLS_DEBUG_C |
| 45 | requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| 46 | |
| 47 | run_test "TLS 1.3: PSK: No valid ciphersuite. O->m" \ |
| 48 | "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \ |
| 49 | "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -ciphersuites TLS_AES_256_GCM_SHA384\ |
| 50 | -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \ |
| 51 | 1 \ |
| 52 | -s "found psk key exchange modes extension" \ |
| 53 | -s "found pre_shared_key extension" \ |
| 54 | -s "Found PSK_EPHEMERAL KEX MODE" \ |
| 55 | -s "Found PSK KEX MODE" \ |
| 56 | -s "No matched ciphersuite" |
| 57 | |
| 58 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \ |
| Ronald Cron | f5b4706 | 2022-12-15 13:46:23 +0100 | [diff] [blame] | 59 | MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \ |
| 60 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| Jerry Yu | 616ba75 | 2022-11-08 21:49:47 +0800 | [diff] [blame] | 61 | run_test "TLS 1.3 m->m: Multiple PSKs: valid ticket, reconnect with ticket" \ |
| 62 | "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70 tickets=8" \ |
| 63 | "$P_CLI force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70 reco_mode=1 reconnect=1" \ |
| 64 | 0 \ |
| 65 | -c "Pre-configured PSK number = 2" \ |
| 66 | -s "sent selected_identity: 0" \ |
| 67 | -s "key exchange mode: psk_ephemeral" \ |
| 68 | -S "key exchange mode: psk$" \ |
| 69 | -S "key exchange mode: ephemeral$" \ |
| 70 | -S "ticket is not authentic" |
| 71 | |
| 72 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \ |
| Ronald Cron | f5b4706 | 2022-12-15 13:46:23 +0100 | [diff] [blame] | 73 | MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \ |
| 74 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| Jerry Yu | 616ba75 | 2022-11-08 21:49:47 +0800 | [diff] [blame] | 75 | run_test "TLS 1.3 m->m: Multiple PSKs: invalid ticket, reconnect with PSK" \ |
| 76 | "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70 tickets=8 dummy_ticket=1" \ |
| 77 | "$P_CLI force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70 reco_mode=1 reconnect=1" \ |
| 78 | 0 \ |
| 79 | -c "Pre-configured PSK number = 2" \ |
| 80 | -s "sent selected_identity: 1" \ |
| 81 | -s "key exchange mode: psk_ephemeral" \ |
| 82 | -S "key exchange mode: psk$" \ |
| 83 | -S "key exchange mode: ephemeral$" \ |
| 84 | -s "ticket is not authentic" |
| 85 | |
| 86 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \ |
| Ronald Cron | f5b4706 | 2022-12-15 13:46:23 +0100 | [diff] [blame] | 87 | MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \ |
| 88 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \ |
| 89 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| Jerry Yu | 616ba75 | 2022-11-08 21:49:47 +0800 | [diff] [blame] | 90 | run_test "TLS 1.3 m->m: Session resumption failure, ticket authentication failed." \ |
| 91 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=1" \ |
| 92 | "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \ |
| 93 | 0 \ |
| 94 | -c "Pre-configured PSK number = 1" \ |
| 95 | -S "sent selected_identity:" \ |
| 96 | -s "key exchange mode: ephemeral" \ |
| 97 | -S "key exchange mode: psk_ephemeral" \ |
| 98 | -S "key exchange mode: psk$" \ |
| 99 | -s "ticket is not authentic" \ |
| 100 | -S "ticket is expired" \ |
| 101 | -S "Invalid ticket start time" \ |
| 102 | -S "Ticket age exceeds limitation" \ |
| 103 | -S "Ticket age outside tolerance window" |
| 104 | |
| 105 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \ |
| Ronald Cron | f5b4706 | 2022-12-15 13:46:23 +0100 | [diff] [blame] | 106 | MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \ |
| 107 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \ |
| 108 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| Jerry Yu | 616ba75 | 2022-11-08 21:49:47 +0800 | [diff] [blame] | 109 | run_test "TLS 1.3 m->m: Session resumption failure, ticket expired." \ |
| 110 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=2" \ |
| 111 | "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \ |
| 112 | 0 \ |
| 113 | -c "Pre-configured PSK number = 1" \ |
| 114 | -S "sent selected_identity:" \ |
| 115 | -s "key exchange mode: ephemeral" \ |
| 116 | -S "key exchange mode: psk_ephemeral" \ |
| 117 | -S "key exchange mode: psk$" \ |
| 118 | -S "ticket is not authentic" \ |
| 119 | -s "ticket is expired" \ |
| 120 | -S "Invalid ticket start time" \ |
| 121 | -S "Ticket age exceeds limitation" \ |
| 122 | -S "Ticket age outside tolerance window" |
| 123 | |
| 124 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \ |
| Ronald Cron | f5b4706 | 2022-12-15 13:46:23 +0100 | [diff] [blame] | 125 | MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \ |
| 126 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \ |
| 127 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| Jerry Yu | 616ba75 | 2022-11-08 21:49:47 +0800 | [diff] [blame] | 128 | run_test "TLS 1.3 m->m: Session resumption failure, invalid start time." \ |
| 129 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=3" \ |
| 130 | "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \ |
| 131 | 0 \ |
| 132 | -c "Pre-configured PSK number = 1" \ |
| 133 | -S "sent selected_identity:" \ |
| 134 | -s "key exchange mode: ephemeral" \ |
| 135 | -S "key exchange mode: psk_ephemeral" \ |
| 136 | -S "key exchange mode: psk$" \ |
| 137 | -S "ticket is not authentic" \ |
| 138 | -S "ticket is expired" \ |
| 139 | -s "Invalid ticket start time" \ |
| 140 | -S "Ticket age exceeds limitation" \ |
| 141 | -S "Ticket age outside tolerance window" |
| 142 | |
| 143 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \ |
| Ronald Cron | f5b4706 | 2022-12-15 13:46:23 +0100 | [diff] [blame] | 144 | MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \ |
| 145 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \ |
| 146 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| Jerry Yu | 616ba75 | 2022-11-08 21:49:47 +0800 | [diff] [blame] | 147 | run_test "TLS 1.3 m->m: Session resumption failure, ticket expired. too old" \ |
| 148 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=4" \ |
| 149 | "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \ |
| 150 | 0 \ |
| 151 | -c "Pre-configured PSK number = 1" \ |
| 152 | -S "sent selected_identity:" \ |
| 153 | -s "key exchange mode: ephemeral" \ |
| 154 | -S "key exchange mode: psk_ephemeral" \ |
| 155 | -S "key exchange mode: psk$" \ |
| 156 | -S "ticket is not authentic" \ |
| 157 | -S "ticket is expired" \ |
| 158 | -S "Invalid ticket start time" \ |
| 159 | -s "Ticket age exceeds limitation" \ |
| 160 | -S "Ticket age outside tolerance window" |
| 161 | |
| 162 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \ |
| Ronald Cron | f5b4706 | 2022-12-15 13:46:23 +0100 | [diff] [blame] | 163 | MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \ |
| 164 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \ |
| 165 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| Jerry Yu | 616ba75 | 2022-11-08 21:49:47 +0800 | [diff] [blame] | 166 | run_test "TLS 1.3 m->m: Session resumption failure, age outside tolerance window, too young." \ |
| 167 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=5" \ |
| 168 | "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \ |
| 169 | 0 \ |
| 170 | -c "Pre-configured PSK number = 1" \ |
| 171 | -S "sent selected_identity:" \ |
| 172 | -s "key exchange mode: ephemeral" \ |
| 173 | -S "key exchange mode: psk_ephemeral" \ |
| 174 | -S "key exchange mode: psk$" \ |
| 175 | -S "ticket is not authentic" \ |
| 176 | -S "ticket is expired" \ |
| 177 | -S "Invalid ticket start time" \ |
| 178 | -S "Ticket age exceeds limitation" \ |
| 179 | -s "Ticket age outside tolerance window" |
| 180 | |
| 181 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \ |
| Ronald Cron | f5b4706 | 2022-12-15 13:46:23 +0100 | [diff] [blame] | 182 | MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \ |
| 183 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \ |
| 184 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| Jerry Yu | 616ba75 | 2022-11-08 21:49:47 +0800 | [diff] [blame] | 185 | run_test "TLS 1.3 m->m: Session resumption failure, age outside tolerance window, too old." \ |
| 186 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=6" \ |
| 187 | "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \ |
| 188 | 0 \ |
| 189 | -c "Pre-configured PSK number = 1" \ |
| 190 | -S "sent selected_identity:" \ |
| 191 | -s "key exchange mode: ephemeral" \ |
| 192 | -S "key exchange mode: psk_ephemeral" \ |
| 193 | -S "key exchange mode: psk$" \ |
| 194 | -S "ticket is not authentic" \ |
| 195 | -S "ticket is expired" \ |
| 196 | -S "Invalid ticket start time" \ |
| 197 | -S "Ticket age exceeds limitation" \ |
| 198 | -s "Ticket age outside tolerance window" |
| 199 | |
| 200 | requires_gnutls_tls1_3 |
| 201 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C |
| 202 | requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| 203 | run_test "TLS 1.3: G->m: ephemeral_all/psk, fail, no common kex mode" \ |
| 204 | "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \ |
| 205 | "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \ |
| 206 | --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \ |
| 207 | localhost" \ |
| 208 | 1 \ |
| 209 | -s "found psk key exchange modes extension" \ |
| 210 | -s "found pre_shared_key extension" \ |
| 211 | -s "Found PSK_EPHEMERAL KEX MODE" \ |
| 212 | -S "Found PSK KEX MODE" \ |
| 213 | -S "key exchange mode: psk$" \ |
| 214 | -S "key exchange mode: psk_ephemeral" \ |
| 215 | -S "key exchange mode: ephemeral" |
| 216 | |
| 217 | requires_gnutls_tls1_3 |
| Jerry Yu | e599132 | 2022-11-07 14:03:44 +0800 | [diff] [blame] | 218 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C \ |
| 219 | MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \ |
| 220 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| 221 | requires_all_configs_disabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED \ |
| 222 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED |
| 223 | run_test "TLS 1.3: G->m: PSK: configured psk only, good." \ |
| 224 | "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \ |
| 225 | "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:+GROUP-ALL \ |
| 226 | --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \ |
| 227 | localhost" \ |
| 228 | 0 \ |
| 229 | -s "found psk key exchange modes extension" \ |
| 230 | -s "found pre_shared_key extension" \ |
| 231 | -s "Found PSK_EPHEMERAL KEX MODE" \ |
| 232 | -s "Found PSK KEX MODE" \ |
| 233 | -s "key exchange mode: psk$" |
| 234 | |
| 235 | requires_gnutls_tls1_3 |
| 236 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C \ |
| 237 | MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \ |
| 238 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| 239 | requires_all_configs_disabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED \ |
| 240 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED |
| 241 | run_test "TLS 1.3: G->m: PSK: configured psk_ephemeral only, good." \ |
| 242 | "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \ |
| 243 | "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:+GROUP-ALL \ |
| 244 | --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \ |
| 245 | localhost" \ |
| 246 | 0 \ |
| 247 | -s "found psk key exchange modes extension" \ |
| 248 | -s "found pre_shared_key extension" \ |
| 249 | -s "Found PSK_EPHEMERAL KEX MODE" \ |
| 250 | -s "Found PSK KEX MODE" \ |
| 251 | -s "key exchange mode: psk_ephemeral$" |
| 252 | |
| 253 | requires_gnutls_tls1_3 |
| 254 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C \ |
| 255 | MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \ |
| 256 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED |
| 257 | requires_all_configs_disabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED \ |
| 258 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED |
| 259 | run_test "TLS 1.3: G->m: PSK: configured ephemeral only, good." \ |
| 260 | "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \ |
| 261 | "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:+GROUP-ALL \ |
| 262 | --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \ |
| 263 | localhost" \ |
| 264 | 0 \ |
| 265 | -s "key exchange mode: ephemeral$" |
| 266 | |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 267 | requires_gnutls_tls1_3 |
| 268 | requires_config_enabled MBEDTLS_DEBUG_C |
| 269 | requires_config_enabled MBEDTLS_SSL_CLI_C |
| 270 | requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \ |
| 271 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \ |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 272 | MBEDTLS_SSL_EARLY_DATA |
| Xiaokang Qian | e7bab00 | 2022-11-16 08:51:01 +0000 | [diff] [blame] | 273 | requires_any_configs_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED \ |
| 274 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 275 | run_test "TLS 1.3 m->G: EarlyData: basic check, good" \ |
| 276 | "$G_NEXT_SRV -d 10 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:+ECDHE-PSK:+PSK --earlydata --disable-client-cert" \ |
| Jerry Yu | a15af37 | 2022-12-05 15:55:24 +0800 | [diff] [blame] | 277 | "$P_CLI debug_level=4 early_data=1 reco_mode=1 reconnect=1 reco_delay=900" \ |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 278 | 1 \ |
| 279 | -c "Reconnecting with saved session" \ |
| 280 | -c "NewSessionTicket: early_data(42) extension received." \ |
| 281 | -c "ClientHello: early_data(42) extension exists." \ |
| 282 | -c "EncryptedExtensions: early_data(42) extension received." \ |
| Xiaokang Qian | 8bee899 | 2022-10-27 10:21:05 +0000 | [diff] [blame] | 283 | -c "EncryptedExtensions: early_data(42) extension exists." \ |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 284 | -s "Parsing extension 'Early Data/42' (0 bytes)" \ |
| 285 | -s "Sending extension Early Data/42 (0 bytes)" \ |
| 286 | -s "early data accepted" |
| 287 | |
| 288 | requires_gnutls_tls1_3 |
| 289 | requires_config_enabled MBEDTLS_DEBUG_C |
| 290 | requires_config_enabled MBEDTLS_SSL_CLI_C |
| 291 | requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \ |
| 292 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \ |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 293 | MBEDTLS_SSL_EARLY_DATA |
| Xiaokang Qian | e7bab00 | 2022-11-16 08:51:01 +0000 | [diff] [blame] | 294 | requires_any_configs_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED \ |
| 295 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| Xiaokang Qian | e9622ac | 2022-11-17 09:23:32 +0000 | [diff] [blame] | 296 | run_test "TLS 1.3 m->G: EarlyData: no early_data in NewSessionTicket, good" \ |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 297 | "$G_NEXT_SRV -d 10 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:+ECDHE-PSK:+PSK --disable-client-cert" \ |
| Jerry Yu | a15af37 | 2022-12-05 15:55:24 +0800 | [diff] [blame] | 298 | "$P_CLI debug_level=4 early_data=1 reco_mode=1 reconnect=1" \ |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 299 | 0 \ |
| 300 | -c "Reconnecting with saved session" \ |
| 301 | -C "NewSessionTicket: early_data(42) extension received." \ |
| 302 | -c "ClientHello: early_data(42) extension does not exist." \ |
| 303 | -C "EncryptedExtensions: early_data(42) extension received." \ |
| Xiaokang Qian | 8bee899 | 2022-10-27 10:21:05 +0000 | [diff] [blame] | 304 | -C "EncryptedExtensions: early_data(42) extension exists." |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 305 | |
| Xiaokang Qian | e7bab00 | 2022-11-16 08:51:01 +0000 | [diff] [blame] | 306 | #TODO: OpenSSL tests don't work now. It might be openssl options issue, cause GnuTLS has worked. |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 307 | skip_next_test |
| Xiaokang Qian | e7bab00 | 2022-11-16 08:51:01 +0000 | [diff] [blame] | 308 | requires_openssl_tls1_3 |
| 309 | requires_config_enabled MBEDTLS_DEBUG_C |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 310 | requires_config_enabled MBEDTLS_SSL_CLI_C |
| Xiaokang Qian | e7bab00 | 2022-11-16 08:51:01 +0000 | [diff] [blame] | 311 | requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \ |
| 312 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \ |
| 313 | MBEDTLS_SSL_EARLY_DATA |
| 314 | requires_any_configs_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED \ |
| 315 | MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED |
| Xiaokang Qian | f3cefb4 | 2022-11-16 03:23:46 +0000 | [diff] [blame] | 316 | run_test "TLS 1.3, ext PSK, early data" \ |
| 317 | "$O_NEXT_SRV_EARLY_DATA -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \ |
| 318 | "$P_CLI debug_level=5 force_version=tls13 tls13_kex_modes=psk early_data=1 psk=010203 psk_identity=0a0b0c" \ |
| 319 | 1 \ |
| 320 | -c "Reconnecting with saved session" \ |
| 321 | -c "NewSessionTicket: early_data(42) extension received." \ |
| 322 | -c "ClientHello: early_data(42) extension exists." \ |
| 323 | -c "EncryptedExtensions: early_data(42) extension received." \ |
| 324 | -c "EncryptedExtensions: early_data(42) extension ( ignored )." |
| 325 | |
| Pengyu Lv | 06cf66d | 2022-12-12 10:43:55 +0800 | [diff] [blame] | 326 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 327 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 328 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 329 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 330 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 331 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 332 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk/none." \ |
| 333 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=7" \ |
| 334 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=psk_or_ephemeral reconnect=1" \ |
| 335 | 0 \ |
| 336 | -c "Pre-configured PSK number = 1" \ |
| 337 | -S "sent selected_identity:" \ |
| 338 | -s "key exchange mode: ephemeral" \ |
| 339 | -S "key exchange mode: psk_ephemeral" \ |
| 340 | -S "key exchange mode: psk$" \ |
| 341 | -s "No suitable key exchange mode" \ |
| 342 | -s "No matched PSK or ticket" |
| Pengyu Lv | 302feb3 | 2022-12-09 14:27:08 +0800 | [diff] [blame] | 343 | |
| 344 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 345 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 346 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 347 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 348 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 349 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| Pengyu Lv | 06cf66d | 2022-12-12 10:43:55 +0800 | [diff] [blame] | 350 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk/psk." \ |
| 351 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=8" \ |
| 352 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=psk_or_ephemeral reconnect=1" \ |
| 353 | 0 \ |
| 354 | -c "Pre-configured PSK number = 1" \ |
| 355 | -S "No suitable key exchange mode" \ |
| 356 | -s "found matched identity" |
| 357 | |
| 358 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 359 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 360 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 361 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 362 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 363 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 364 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk/psk_ephemeral." \ |
| 365 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=9" \ |
| 366 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=psk_or_ephemeral reconnect=1" \ |
| 367 | 0 \ |
| 368 | -c "Pre-configured PSK number = 1" \ |
| 369 | -S "sent selected_identity:" \ |
| 370 | -s "key exchange mode: ephemeral" \ |
| 371 | -S "key exchange mode: psk_ephemeral" \ |
| 372 | -S "key exchange mode: psk$" \ |
| 373 | -s "No suitable key exchange mode" \ |
| 374 | -s "No matched PSK or ticket" |
| 375 | |
| 376 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 377 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 378 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 379 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 380 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 381 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 382 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk/psk_all." \ |
| 383 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=10" \ |
| 384 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=psk_or_ephemeral reconnect=1" \ |
| 385 | 0 \ |
| 386 | -c "Pre-configured PSK number = 1" \ |
| 387 | -S "No suitable key exchange mode" \ |
| 388 | -s "found matched identity" |
| 389 | |
| 390 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 391 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 392 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 393 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 394 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 395 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 396 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_ephemeral/none." \ |
| 397 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=7" \ |
| 398 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=ephemeral_all reconnect=1" \ |
| 399 | 0 \ |
| 400 | -c "Pre-configured PSK number = 1" \ |
| 401 | -S "sent selected_identity:" \ |
| 402 | -s "key exchange mode: ephemeral" \ |
| 403 | -S "key exchange mode: psk_ephemeral" \ |
| 404 | -S "key exchange mode: psk$" \ |
| 405 | -s "No suitable key exchange mode" \ |
| 406 | -s "No matched PSK or ticket" |
| 407 | |
| 408 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 409 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 410 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 411 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 412 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 413 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 414 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_ephemeral/psk." \ |
| 415 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=8" \ |
| 416 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=ephemeral_all reconnect=1" \ |
| 417 | 0 \ |
| 418 | -c "Pre-configured PSK number = 1" \ |
| 419 | -S "sent selected_identity:" \ |
| 420 | -s "key exchange mode: ephemeral" \ |
| 421 | -S "key exchange mode: psk_ephemeral" \ |
| 422 | -S "key exchange mode: psk$" \ |
| 423 | -s "No suitable key exchange mode" \ |
| 424 | -s "No matched PSK or ticket" |
| 425 | |
| 426 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 427 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 428 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 429 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 430 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 431 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 432 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_ephemeral/psk_ephemeral." \ |
| 433 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=9" \ |
| 434 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=ephemeral_all reconnect=1" \ |
| 435 | 0 \ |
| 436 | -c "Pre-configured PSK number = 1" \ |
| 437 | -S "No suitable key exchange mode" \ |
| 438 | -s "found matched identity" |
| 439 | |
| 440 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 441 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 442 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 443 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 444 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 445 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 446 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_ephemeral/psk_all." \ |
| 447 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=10" \ |
| 448 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=ephemeral_all reconnect=1" \ |
| 449 | 0 \ |
| 450 | -c "Pre-configured PSK number = 1" \ |
| 451 | -S "No suitable key exchange mode" \ |
| 452 | -s "found matched identity" |
| 453 | |
| 454 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 455 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 456 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 457 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 458 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 459 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 460 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_all/none." \ |
| 461 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=7" \ |
| 462 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=all reconnect=1" \ |
| 463 | 0 \ |
| 464 | -c "Pre-configured PSK number = 1" \ |
| 465 | -S "sent selected_identity:" \ |
| 466 | -s "key exchange mode: ephemeral" \ |
| 467 | -S "key exchange mode: psk_ephemeral" \ |
| 468 | -S "key exchange mode: psk$" \ |
| 469 | -s "No suitable key exchange mode" \ |
| 470 | -s "No matched PSK or ticket" |
| 471 | |
| 472 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 473 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 474 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 475 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 476 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 477 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 478 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_all/psk." \ |
| 479 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=8" \ |
| 480 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=all reconnect=1" \ |
| 481 | 0 \ |
| 482 | -c "Pre-configured PSK number = 1" \ |
| 483 | -S "No suitable key exchange mode" \ |
| 484 | -s "found matched identity" |
| 485 | |
| 486 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 487 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 488 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 489 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 490 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 491 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 492 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_all/psk_ephemeral." \ |
| 493 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=9" \ |
| 494 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=all reconnect=1" \ |
| 495 | 0 \ |
| 496 | -c "Pre-configured PSK number = 1" \ |
| 497 | -S "No suitable key exchange mode" \ |
| 498 | -s "found matched identity" |
| 499 | |
| 500 | requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \ |
| 501 | MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C |
| 502 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \ |
| 503 | MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 504 | requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \ |
| 505 | MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED |
| 506 | run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_all/psk_all." \ |
| 507 | "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=10" \ |
| 508 | "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=all reconnect=1" \ |
| 509 | 0 \ |
| 510 | -c "Pre-configured PSK number = 1" \ |
| 511 | -S "No suitable key exchange mode" \ |
| 512 | -s "found matched identity" |
| Pengyu Lv | 302feb3 | 2022-12-09 14:27:08 +0800 | [diff] [blame] | 513 | |