TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / c1334d934c81ca0de0f2160fae9152bf61c62f07 / . / tests / opt-testcases / tls13-misc.sh
blob: ef7580a0207da5527f41e08f7e453d5fd65b0f1b [file] [log] [blame]
Jerry Yue5991322022-11-07 14:03:44 +0800[diff] [blame]1#!/bin/sh
2
3# tls13-misc.sh
4#
5# Copyright The Mbed TLS Contributors
6# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
19#
20
21requires_gnutls_tls1_3
Jerry Yu616ba752022-11-08 21:49:47 +0800[diff] [blame]22requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
23requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
24requires_config_enabled MBEDTLS_SSL_SRV_C
25requires_config_enabled MBEDTLS_DEBUG_C
26requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
27
28run_test "TLS 1.3: PSK: No valid ciphersuite. G->m" \
29 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
30 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-CIPHER-ALL:+AES-256-GCM:+AEAD:+SHA384:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
31 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
32 localhost" \
33 1 \
34 -s "found psk key exchange modes extension" \
35 -s "found pre_shared_key extension" \
36 -s "Found PSK_EPHEMERAL KEX MODE" \
37 -s "Found PSK KEX MODE" \
38 -s "No matched ciphersuite"
39
40requires_openssl_tls1_3
41requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
42requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
43requires_config_enabled MBEDTLS_SSL_SRV_C
44requires_config_enabled MBEDTLS_DEBUG_C
45requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
46
47run_test "TLS 1.3: PSK: No valid ciphersuite. O->m" \
48 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
49 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -ciphersuites TLS_AES_256_GCM_SHA384\
50 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
51 1 \
52 -s "found psk key exchange modes extension" \
53 -s "found pre_shared_key extension" \
54 -s "Found PSK_EPHEMERAL KEX MODE" \
55 -s "Found PSK KEX MODE" \
56 -s "No matched ciphersuite"
57
58requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \
Ronald Cronf5b47062022-12-15 13:46:23 +0100[diff] [blame]59 MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \
60 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu616ba752022-11-08 21:49:47 +0800[diff] [blame]61run_test "TLS 1.3 m->m: Multiple PSKs: valid ticket, reconnect with ticket" \
62 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70 tickets=8" \
63 "$P_CLI force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70 reco_mode=1 reconnect=1" \
64 0 \
65 -c "Pre-configured PSK number = 2" \
66 -s "sent selected_identity: 0" \
67 -s "key exchange mode: psk_ephemeral" \
68 -S "key exchange mode: psk$" \
69 -S "key exchange mode: ephemeral$" \
70 -S "ticket is not authentic"
71
72requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \
Ronald Cronf5b47062022-12-15 13:46:23 +0100[diff] [blame]73 MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \
74 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu616ba752022-11-08 21:49:47 +0800[diff] [blame]75run_test "TLS 1.3 m->m: Multiple PSKs: invalid ticket, reconnect with PSK" \
76 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70 tickets=8 dummy_ticket=1" \
77 "$P_CLI force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70 reco_mode=1 reconnect=1" \
78 0 \
79 -c "Pre-configured PSK number = 2" \
80 -s "sent selected_identity: 1" \
81 -s "key exchange mode: psk_ephemeral" \
82 -S "key exchange mode: psk$" \
83 -S "key exchange mode: ephemeral$" \
84 -s "ticket is not authentic"
85
86requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \
Ronald Cronf5b47062022-12-15 13:46:23 +0100[diff] [blame]87 MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \
88 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
89 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu616ba752022-11-08 21:49:47 +0800[diff] [blame]90run_test "TLS 1.3 m->m: Session resumption failure, ticket authentication failed." \
91 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=1" \
92 "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \
93 0 \
94 -c "Pre-configured PSK number = 1" \
95 -S "sent selected_identity:" \
96 -s "key exchange mode: ephemeral" \
97 -S "key exchange mode: psk_ephemeral" \
98 -S "key exchange mode: psk$" \
99 -s "ticket is not authentic" \
100 -S "ticket is expired" \
101 -S "Invalid ticket start time" \
102 -S "Ticket age exceeds limitation" \
103 -S "Ticket age outside tolerance window"
104
105requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \
Ronald Cronf5b47062022-12-15 13:46:23 +0100[diff] [blame]106 MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \
107 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
108 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu616ba752022-11-08 21:49:47 +0800[diff] [blame]109run_test "TLS 1.3 m->m: Session resumption failure, ticket expired." \
110 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=2" \
111 "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \
112 0 \
113 -c "Pre-configured PSK number = 1" \
114 -S "sent selected_identity:" \
115 -s "key exchange mode: ephemeral" \
116 -S "key exchange mode: psk_ephemeral" \
117 -S "key exchange mode: psk$" \
118 -S "ticket is not authentic" \
119 -s "ticket is expired" \
120 -S "Invalid ticket start time" \
121 -S "Ticket age exceeds limitation" \
122 -S "Ticket age outside tolerance window"
123
124requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \
Ronald Cronf5b47062022-12-15 13:46:23 +0100[diff] [blame]125 MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \
126 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
127 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu616ba752022-11-08 21:49:47 +0800[diff] [blame]128run_test "TLS 1.3 m->m: Session resumption failure, invalid start time." \
129 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=3" \
130 "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \
131 0 \
132 -c "Pre-configured PSK number = 1" \
133 -S "sent selected_identity:" \
134 -s "key exchange mode: ephemeral" \
135 -S "key exchange mode: psk_ephemeral" \
136 -S "key exchange mode: psk$" \
137 -S "ticket is not authentic" \
138 -S "ticket is expired" \
139 -s "Invalid ticket start time" \
140 -S "Ticket age exceeds limitation" \
141 -S "Ticket age outside tolerance window"
142
143requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \
Ronald Cronf5b47062022-12-15 13:46:23 +0100[diff] [blame]144 MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \
145 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
146 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu616ba752022-11-08 21:49:47 +0800[diff] [blame]147run_test "TLS 1.3 m->m: Session resumption failure, ticket expired. too old" \
148 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=4" \
149 "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \
150 0 \
151 -c "Pre-configured PSK number = 1" \
152 -S "sent selected_identity:" \
153 -s "key exchange mode: ephemeral" \
154 -S "key exchange mode: psk_ephemeral" \
155 -S "key exchange mode: psk$" \
156 -S "ticket is not authentic" \
157 -S "ticket is expired" \
158 -S "Invalid ticket start time" \
159 -s "Ticket age exceeds limitation" \
160 -S "Ticket age outside tolerance window"
161
162requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \
Ronald Cronf5b47062022-12-15 13:46:23 +0100[diff] [blame]163 MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \
164 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
165 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu616ba752022-11-08 21:49:47 +0800[diff] [blame]166run_test "TLS 1.3 m->m: Session resumption failure, age outside tolerance window, too young." \
167 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=5" \
168 "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \
169 0 \
170 -c "Pre-configured PSK number = 1" \
171 -S "sent selected_identity:" \
172 -s "key exchange mode: ephemeral" \
173 -S "key exchange mode: psk_ephemeral" \
174 -S "key exchange mode: psk$" \
175 -S "ticket is not authentic" \
176 -S "ticket is expired" \
177 -S "Invalid ticket start time" \
178 -S "Ticket age exceeds limitation" \
179 -s "Ticket age outside tolerance window"
180
181requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS MBEDTLS_SSL_SRV_C \
Ronald Cronf5b47062022-12-15 13:46:23 +0100[diff] [blame]182 MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C MBEDTLS_HAVE_TIME \
183 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
184 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu616ba752022-11-08 21:49:47 +0800[diff] [blame]185run_test "TLS 1.3 m->m: Session resumption failure, age outside tolerance window, too old." \
186 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=8 dummy_ticket=6" \
187 "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \
188 0 \
189 -c "Pre-configured PSK number = 1" \
190 -S "sent selected_identity:" \
191 -s "key exchange mode: ephemeral" \
192 -S "key exchange mode: psk_ephemeral" \
193 -S "key exchange mode: psk$" \
194 -S "ticket is not authentic" \
195 -S "ticket is expired" \
196 -S "Invalid ticket start time" \
197 -S "Ticket age exceeds limitation" \
198 -s "Ticket age outside tolerance window"
199
200requires_gnutls_tls1_3
201requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
202requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
203run_test "TLS 1.3: G->m: ephemeral_all/psk, fail, no common kex mode" \
204 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
205 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
206 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
207 localhost" \
208 1 \
209 -s "found psk key exchange modes extension" \
210 -s "found pre_shared_key extension" \
211 -s "Found PSK_EPHEMERAL KEX MODE" \
212 -S "Found PSK KEX MODE" \
213 -S "key exchange mode: psk$" \
214 -S "key exchange mode: psk_ephemeral" \
215 -S "key exchange mode: ephemeral"
216
217requires_gnutls_tls1_3
Jerry Yue5991322022-11-07 14:03:44 +0800[diff] [blame]218requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C \
219 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
220 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
221requires_all_configs_disabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED \
222 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
223run_test "TLS 1.3: G->m: PSK: configured psk only, good." \
224 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
225 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:+GROUP-ALL \
226 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
227 localhost" \
228 0 \
229 -s "found psk key exchange modes extension" \
230 -s "found pre_shared_key extension" \
231 -s "Found PSK_EPHEMERAL KEX MODE" \
232 -s "Found PSK KEX MODE" \
233 -s "key exchange mode: psk$"
234
235requires_gnutls_tls1_3
236requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C \
237 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
238 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
239requires_all_configs_disabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED \
240 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
241run_test "TLS 1.3: G->m: PSK: configured psk_ephemeral only, good." \
242 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
243 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:+GROUP-ALL \
244 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
245 localhost" \
246 0 \
247 -s "found psk key exchange modes extension" \
248 -s "found pre_shared_key extension" \
249 -s "Found PSK_EPHEMERAL KEX MODE" \
250 -s "Found PSK KEX MODE" \
251 -s "key exchange mode: psk_ephemeral$"
252
253requires_gnutls_tls1_3
254requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C \
255 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
256 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
257requires_all_configs_disabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED \
258 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
259run_test "TLS 1.3: G->m: PSK: configured ephemeral only, good." \
260 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
261 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:+GROUP-ALL \
262 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
263 localhost" \
264 0 \
265 -s "key exchange mode: ephemeral$"
266
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]267requires_gnutls_tls1_3
268requires_config_enabled MBEDTLS_DEBUG_C
269requires_config_enabled MBEDTLS_SSL_CLI_C
270requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
271 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]272 MBEDTLS_SSL_EARLY_DATA
Xiaokang Qiane7bab002022-11-16 08:51:01 +0000[diff] [blame]273requires_any_configs_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED \
274 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]275run_test "TLS 1.3 m->G: EarlyData: basic check, good" \
276 "$G_NEXT_SRV -d 10 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:+ECDHE-PSK:+PSK --earlydata --disable-client-cert" \
Jerry Yua15af372022-12-05 15:55:24 +0800[diff] [blame]277 "$P_CLI debug_level=4 early_data=1 reco_mode=1 reconnect=1 reco_delay=900" \
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]278 1 \
279 -c "Reconnecting with saved session" \
280 -c "NewSessionTicket: early_data(42) extension received." \
281 -c "ClientHello: early_data(42) extension exists." \
282 -c "EncryptedExtensions: early_data(42) extension received." \
Xiaokang Qian8bee8992022-10-27 10:21:05 +0000[diff] [blame]283 -c "EncryptedExtensions: early_data(42) extension exists." \
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]284 -s "Parsing extension 'Early Data/42' (0 bytes)" \
285 -s "Sending extension Early Data/42 (0 bytes)" \
286 -s "early data accepted"
287
288requires_gnutls_tls1_3
289requires_config_enabled MBEDTLS_DEBUG_C
290requires_config_enabled MBEDTLS_SSL_CLI_C
291requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
292 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]293 MBEDTLS_SSL_EARLY_DATA
Xiaokang Qiane7bab002022-11-16 08:51:01 +0000[diff] [blame]294requires_any_configs_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED \
295 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qiane9622ac2022-11-17 09:23:32 +0000[diff] [blame]296run_test "TLS 1.3 m->G: EarlyData: no early_data in NewSessionTicket, good" \
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]297 "$G_NEXT_SRV -d 10 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:+ECDHE-PSK:+PSK --disable-client-cert" \
Jerry Yua15af372022-12-05 15:55:24 +0800[diff] [blame]298 "$P_CLI debug_level=4 early_data=1 reco_mode=1 reconnect=1" \
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]299 0 \
300 -c "Reconnecting with saved session" \
301 -C "NewSessionTicket: early_data(42) extension received." \
302 -c "ClientHello: early_data(42) extension does not exist." \
303 -C "EncryptedExtensions: early_data(42) extension received." \
Xiaokang Qian8bee8992022-10-27 10:21:05 +0000[diff] [blame]304 -C "EncryptedExtensions: early_data(42) extension exists."
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]305
Xiaokang Qiane7bab002022-11-16 08:51:01 +0000[diff] [blame]306#TODO: OpenSSL tests don't work now. It might be openssl options issue, cause GnuTLS has worked.
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]307skip_next_test
Xiaokang Qiane7bab002022-11-16 08:51:01 +0000[diff] [blame]308requires_openssl_tls1_3
309requires_config_enabled MBEDTLS_DEBUG_C
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]310requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiane7bab002022-11-16 08:51:01 +0000[diff] [blame]311requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
312 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
313 MBEDTLS_SSL_EARLY_DATA
314requires_any_configs_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED \
315 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Xiaokang Qianf3cefb42022-11-16 03:23:46 +0000[diff] [blame]316run_test "TLS 1.3, ext PSK, early data" \
317 "$O_NEXT_SRV_EARLY_DATA -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
318 "$P_CLI debug_level=5 force_version=tls13 tls13_kex_modes=psk early_data=1 psk=010203 psk_identity=0a0b0c" \
319 1 \
320 -c "Reconnecting with saved session" \
321 -c "NewSessionTicket: early_data(42) extension received." \
322 -c "ClientHello: early_data(42) extension exists." \
323 -c "EncryptedExtensions: early_data(42) extension received." \
324 -c "EncryptedExtensions: early_data(42) extension ( ignored )."
325
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]326requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]327 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
328 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
329 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]330run_test "TLS 1.3 m->m: Resumption with ticket flags, psk/none." \
331 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=7" \
332 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=psk_or_ephemeral reconnect=1" \
333 0 \
334 -c "Pre-configured PSK number = 1" \
335 -S "sent selected_identity:" \
336 -s "key exchange mode: ephemeral" \
337 -S "key exchange mode: psk_ephemeral" \
338 -S "key exchange mode: psk$" \
339 -s "No suitable key exchange mode" \
340 -s "No matched PSK or ticket"
Pengyu Lv302feb32022-12-09 14:27:08 +0800[diff] [blame]341
342requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]343 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
344 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
345 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]346run_test "TLS 1.3 m->m: Resumption with ticket flags, psk/psk." \
347 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=8" \
348 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=psk_or_ephemeral reconnect=1" \
349 0 \
350 -c "Pre-configured PSK number = 1" \
351 -S "No suitable key exchange mode" \
352 -s "found matched identity"
353
354requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]355 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
356 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
357 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]358run_test "TLS 1.3 m->m: Resumption with ticket flags, psk/psk_ephemeral." \
359 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=9" \
360 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=psk_or_ephemeral reconnect=1" \
361 0 \
362 -c "Pre-configured PSK number = 1" \
363 -S "sent selected_identity:" \
364 -s "key exchange mode: ephemeral" \
365 -S "key exchange mode: psk_ephemeral" \
366 -S "key exchange mode: psk$" \
367 -s "No suitable key exchange mode" \
368 -s "No matched PSK or ticket"
369
370requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]371 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
372 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
373 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]374run_test "TLS 1.3 m->m: Resumption with ticket flags, psk/psk_all." \
375 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=10" \
376 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=psk_or_ephemeral reconnect=1" \
377 0 \
378 -c "Pre-configured PSK number = 1" \
379 -S "No suitable key exchange mode" \
380 -s "found matched identity"
381
382requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]383 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
384 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
385 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]386run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_ephemeral/none." \
387 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=7" \
388 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=ephemeral_all reconnect=1" \
389 0 \
390 -c "Pre-configured PSK number = 1" \
391 -S "sent selected_identity:" \
392 -s "key exchange mode: ephemeral" \
393 -S "key exchange mode: psk_ephemeral" \
394 -S "key exchange mode: psk$" \
395 -s "No suitable key exchange mode" \
396 -s "No matched PSK or ticket"
397
398requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]399 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
400 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
401 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]402run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_ephemeral/psk." \
403 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=8" \
404 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=ephemeral_all reconnect=1" \
405 0 \
406 -c "Pre-configured PSK number = 1" \
407 -S "sent selected_identity:" \
408 -s "key exchange mode: ephemeral" \
409 -S "key exchange mode: psk_ephemeral" \
410 -S "key exchange mode: psk$" \
411 -s "No suitable key exchange mode" \
412 -s "No matched PSK or ticket"
413
414requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]415 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
416 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
417 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]418run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_ephemeral/psk_ephemeral." \
419 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=9" \
420 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=ephemeral_all reconnect=1" \
421 0 \
422 -c "Pre-configured PSK number = 1" \
423 -S "No suitable key exchange mode" \
424 -s "found matched identity"
425
426requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]427 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
428 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
429 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]430run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_ephemeral/psk_all." \
431 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=10" \
432 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=ephemeral_all reconnect=1" \
433 0 \
434 -c "Pre-configured PSK number = 1" \
435 -S "No suitable key exchange mode" \
436 -s "found matched identity"
437
438requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]439 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
440 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
441 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED \
442 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]443run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_all/none." \
444 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=7" \
445 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=all reconnect=1" \
446 0 \
447 -c "Pre-configured PSK number = 1" \
448 -S "sent selected_identity:" \
449 -s "key exchange mode: ephemeral" \
450 -S "key exchange mode: psk_ephemeral" \
451 -S "key exchange mode: psk$" \
452 -s "No suitable key exchange mode" \
453 -s "No matched PSK or ticket"
454
455requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]456 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
457 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
458 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED \
459 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]460run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_all/psk." \
461 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=8" \
462 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=all reconnect=1" \
463 0 \
464 -c "Pre-configured PSK number = 1" \
465 -S "No suitable key exchange mode" \
466 -s "found matched identity"
467
468requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]469 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
470 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
471 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED \
472 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]473run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_all/psk_ephemeral." \
474 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=9" \
475 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=all reconnect=1" \
476 0 \
477 -c "Pre-configured PSK number = 1" \
478 -S "No suitable key exchange mode" \
479 -s "found matched identity"
480
481requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_SESSION_TICKETS \
Pengyu Lvc1334d92023-01-12 16:18:08 +0800[diff] [blame^]482 MBEDTLS_SSL_SRV_C MBEDTLS_SSL_CLI_C MBEDTLS_DEBUG_C \
483 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
484 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED \
485 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Pengyu Lv06cf66d2022-12-12 10:43:55 +0800[diff] [blame]486run_test "TLS 1.3 m->m: Resumption with ticket flags, psk_all/psk_all." \
487 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 dummy_ticket=10" \
488 "$P_CLI debug_level=4 force_version=tls13 tls13_kex_modes=all reconnect=1" \
489 0 \
490 -c "Pre-configured PSK number = 1" \
491 -S "No suitable key exchange mode" \
492 -s "found matched identity"
Pengyu Lv302feb32022-12-09 14:27:08 +0800[diff] [blame]493