TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / ca48dddf62ca920222584d3d988d94c32fe4026f / . / tests / opt-testcases / tls13-kex-modes.sh
blob: 03de865026964b8231f3a1f1aefb58d9832486eb [file] [log] [blame]
Jerry Yu6a9beba2022-07-31 12:45:25 +0800[diff] [blame]1#!/bin/sh
2
3# tls13-kex-modes.sh
4#
5# Copyright The Mbed TLS Contributors
6# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
19#
20
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]21get_srv_psk_list ()
22{
23 case $(( TESTS % 3 )) in
24 0) echo "psk_list=abc,dead,def,beef,Client_identity,6162636465666768696a6b6c6d6e6f70";;
25 1) echo "psk_list=abc,dead,Client_identity,6162636465666768696a6b6c6d6e6f70,def,beef";;
26 2) echo "psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef";;
27 esac
28}
Jerry Yu6a9beba2022-07-31 12:45:25 +0800[diff] [blame]29
Jerry Yu66f35f22022-08-22 17:27:41 +0800[diff] [blame]30requires_gnutls_tls1_3
Jerry Yu6a9beba2022-07-31 12:45:25 +0800[diff] [blame]31requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
32requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
33requires_config_enabled MBEDTLS_SSL_SRV_C
34requires_config_enabled MBEDTLS_DEBUG_C
Jerry Yu9b83fa12022-07-31 13:13:51 +0800[diff] [blame]35# SOME_ECDHE_ENABLED?
36requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
37 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu3e06fce2022-08-25 17:51:57 +0800[diff] [blame]38run_test "TLS 1.3: PSK: No valid ciphersuite. G->m" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]39 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu2185c0f2022-08-23 16:12:43 +0800[diff] [blame]40 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-CIPHER-ALL:+AES-256-GCM:+AEAD:+SHA384:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
41 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
42 localhost" \
43 1 \
44 -s "found psk key exchange modes extension" \
45 -s "found pre_shared_key extension" \
46 -s "Found PSK_EPHEMERAL KEX MODE" \
47 -s "Found PSK KEX MODE" \
Jerry Yu3e06fce2022-08-25 17:51:57 +0800[diff] [blame]48 -s "No matched ciphersuite"
Jerry Yu2185c0f2022-08-23 16:12:43 +0800[diff] [blame]49
50requires_openssl_tls1_3
51requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
52requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
53requires_config_enabled MBEDTLS_SSL_SRV_C
54requires_config_enabled MBEDTLS_DEBUG_C
55# SOME_ECDHE_ENABLED?
56requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
57 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu3e06fce2022-08-25 17:51:57 +0800[diff] [blame]58run_test "TLS 1.3: PSK: No valid ciphersuite. O->m" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]59 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yu2185c0f2022-08-23 16:12:43 +0800[diff] [blame]60 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -ciphersuites TLS_AES_256_GCM_SHA384\
61 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
62 1 \
63 -s "found psk key exchange modes extension" \
64 -s "found pre_shared_key extension" \
65 -s "Found PSK_EPHEMERAL KEX MODE" \
66 -s "Found PSK KEX MODE" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]67 -s "No matched ciphersuite"
68
69
70requires_gnutls_tls1_3
71requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
72requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]73run_test "TLS 1.3: G->m: ephemeral_all/psk, fail, no common kex mode" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]74 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]75 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
76 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
77 localhost" \
78 1 \
79 -s "found psk key exchange modes extension" \
80 -s "found pre_shared_key extension" \
81 -s "Found PSK_EPHEMERAL KEX MODE" \
82 -S "Found PSK KEX MODE" \
83 -S "key exchange mode: psk$" \
84 -S "key exchange mode: psk_ephemeral" \
85 -S "key exchange mode: ephemeral"
86
87requires_gnutls_tls1_3
88requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
89requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]90run_test "TLS 1.3: G->m: all/psk, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]91 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]92 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
93 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
94 localhost" \
95 0 \
96 -s "found psk key exchange modes extension" \
97 -s "found pre_shared_key extension" \
98 -s "Found PSK_EPHEMERAL KEX MODE" \
99 -s "Found PSK KEX MODE" \
100 -s "Pre shared key found" \
101 -S "No matched PSK or ticket" \
102 -s "key exchange mode: psk$" \
103 -S "key exchange mode: psk_ephemeral" \
104 -S "key exchange mode: ephemeral"
105
106requires_gnutls_tls1_3
107requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
108requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]109run_test "TLS 1.3: G->m: all/psk, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]110 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]111 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
112 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
113 localhost" \
114 1 \
115 -s "found psk key exchange modes extension" \
116 -s "found pre_shared_key extension" \
117 -s "Found PSK_EPHEMERAL KEX MODE" \
118 -s "Found PSK KEX MODE" \
119 -s "No matched PSK or ticket" \
120 -S "key exchange mode: psk$" \
121 -S "key exchange mode: psk_ephemeral" \
122 -S "key exchange mode: ephemeral"
123
124requires_gnutls_tls1_3
125requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
126requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]127run_test "TLS 1.3: G->m: all/psk, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]128 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]129 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
130 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
131 localhost" \
132 1 \
133 -s "found psk key exchange modes extension" \
134 -s "found pre_shared_key extension" \
135 -s "Found PSK_EPHEMERAL KEX MODE" \
136 -s "Found PSK KEX MODE" \
137 -s "Invalid binder." \
138 -S "key exchange mode: psk$" \
139 -S "key exchange mode: psk_ephemeral" \
140 -S "key exchange mode: ephemeral"
141
142requires_gnutls_tls1_3
143requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
144requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]145run_test "TLS 1.3: G->m: psk_or_ephemeral/psk, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]146 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]147 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
148 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
149 localhost" \
150 0 \
151 -s "found psk key exchange modes extension" \
152 -s "found pre_shared_key extension" \
153 -S "Found PSK_EPHEMERAL KEX MODE" \
154 -s "Found PSK KEX MODE" \
155 -s "Pre shared key found" \
156 -S "No matched PSK or ticket" \
157 -s "key exchange mode: psk$" \
158 -S "key exchange mode: psk_ephemeral" \
159 -S "key exchange mode: ephemeral"
160
161requires_gnutls_tls1_3
162requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
163requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]164run_test "TLS 1.3: G->m: psk_or_ephemeral/psk, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]165 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]166 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
167 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
168 localhost" \
169 1 \
170 -s "found psk key exchange modes extension" \
171 -s "found pre_shared_key extension" \
172 -S "Found PSK_EPHEMERAL KEX MODE" \
173 -s "Found PSK KEX MODE" \
174 -s "No matched PSK or ticket" \
175 -S "key exchange mode: psk$" \
176 -S "key exchange mode: psk_ephemeral" \
177 -S "key exchange mode: ephemeral"
178
179requires_gnutls_tls1_3
180requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
181requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]182run_test "TLS 1.3: G->m: psk_or_ephemeral/psk, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]183 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]184 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
185 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
186 localhost" \
187 1 \
188 -s "found psk key exchange modes extension" \
189 -s "found pre_shared_key extension" \
190 -S "Found PSK_EPHEMERAL KEX MODE" \
191 -s "Found PSK KEX MODE" \
192 -s "Invalid binder." \
193 -S "key exchange mode: psk$" \
194 -S "key exchange mode: psk_ephemeral" \
195 -S "key exchange mode: ephemeral"
196
197requires_gnutls_tls1_3
198requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
199requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
200requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]201run_test "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]202 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]203 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
204 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
205 localhost" \
206 0 \
207 -s "found psk key exchange modes extension" \
208 -s "found pre_shared_key extension" \
209 -s "Found PSK_EPHEMERAL KEX MODE" \
210 -S "Found PSK KEX MODE" \
211 -s "Pre shared key found" \
212 -S "No matched PSK or ticket" \
213 -S "key exchange mode: psk$" \
214 -s "key exchange mode: psk_ephemeral" \
215 -S "key exchange mode: ephemeral"
216
217requires_gnutls_tls1_3
218requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
219requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
220requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]221run_test "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]222 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]223 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
224 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
225 localhost" \
226 1 \
227 -s "found psk key exchange modes extension" \
228 -s "found pre_shared_key extension" \
229 -s "Found PSK_EPHEMERAL KEX MODE" \
230 -S "Found PSK KEX MODE" \
231 -s "No matched PSK or ticket" \
232 -S "key exchange mode: psk$" \
233 -S "key exchange mode: psk_ephemeral" \
234 -S "key exchange mode: ephemeral"
235
236requires_gnutls_tls1_3
237requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
238requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
239requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]240run_test "TLS 1.3: G->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]241 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]242 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
243 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
244 localhost" \
245 1 \
246 -s "found psk key exchange modes extension" \
247 -s "found pre_shared_key extension" \
248 -s "Found PSK_EPHEMERAL KEX MODE" \
249 -S "Found PSK KEX MODE" \
250 -s "Invalid binder." \
251 -S "key exchange mode: psk$" \
252 -S "key exchange mode: psk_ephemeral" \
253 -S "key exchange mode: ephemeral"
254
255requires_gnutls_tls1_3
256requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
257requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
258requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]259run_test "TLS 1.3: G->m: all/psk_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]260 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]261 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
262 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
263 localhost" \
264 0 \
265 -s "found psk key exchange modes extension" \
266 -s "found pre_shared_key extension" \
267 -s "Found PSK_EPHEMERAL KEX MODE" \
268 -s "Found PSK KEX MODE" \
269 -s "Pre shared key found" \
270 -S "No matched PSK or ticket" \
271 -S "key exchange mode: psk$" \
272 -s "key exchange mode: psk_ephemeral" \
273 -S "key exchange mode: ephemeral"
274
275requires_gnutls_tls1_3
276requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
277requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
278requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]279run_test "TLS 1.3: G->m: all/psk_ephemeral, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]280 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]281 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
282 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
283 localhost" \
284 1 \
285 -s "found psk key exchange modes extension" \
286 -s "found pre_shared_key extension" \
287 -s "Found PSK_EPHEMERAL KEX MODE" \
288 -s "Found PSK KEX MODE" \
289 -s "No matched PSK or ticket" \
290 -S "key exchange mode: psk$" \
291 -S "key exchange mode: psk_ephemeral" \
292 -S "key exchange mode: ephemeral"
293
294requires_gnutls_tls1_3
295requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
296requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
297requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]298run_test "TLS 1.3: G->m: all/psk_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]299 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]300 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
301 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
302 localhost" \
303 1 \
304 -s "found psk key exchange modes extension" \
305 -s "found pre_shared_key extension" \
306 -s "Found PSK_EPHEMERAL KEX MODE" \
307 -s "Found PSK KEX MODE" \
308 -s "Invalid binder." \
309 -S "key exchange mode: psk$" \
310 -S "key exchange mode: psk_ephemeral" \
311 -S "key exchange mode: ephemeral"
312
313requires_gnutls_tls1_3
314requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
315requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
316requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]317run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_ephemeral, fail, no common kex mode" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]318 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]319 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
320 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
321 localhost" \
322 1 \
323 -s "found psk key exchange modes extension" \
324 -s "found pre_shared_key extension" \
325 -S "Found PSK_EPHEMERAL KEX MODE" \
326 -s "Found PSK KEX MODE" \
327 -S "key exchange mode: psk$" \
328 -S "key exchange mode: psk_ephemeral" \
329 -S "key exchange mode: ephemeral"
330
331requires_gnutls_tls1_3
332requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
333requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
334requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]335run_test "TLS 1.3: G->m: ephemeral_all/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]336 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]337 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
338 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
339 localhost" \
340 0 \
341 -s "found psk key exchange modes extension" \
342 -s "found pre_shared_key extension" \
343 -s "Found PSK_EPHEMERAL KEX MODE" \
344 -S "Found PSK KEX MODE" \
345 -s "Pre shared key found" \
346 -S "No matched PSK or ticket" \
347 -S "key exchange mode: psk$" \
348 -s "key exchange mode: psk_ephemeral" \
349 -S "key exchange mode: ephemeral"
350
351requires_gnutls_tls1_3
352requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
353requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
354requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]355run_test "TLS 1.3: G->m: ephemeral_all/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]356 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]357 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
358 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
359 localhost" \
360 1 \
361 -s "found psk key exchange modes extension" \
362 -s "found pre_shared_key extension" \
363 -s "Found PSK_EPHEMERAL KEX MODE" \
364 -S "Found PSK KEX MODE" \
365 -s "No matched PSK or ticket" \
366 -S "key exchange mode: psk$" \
367 -S "key exchange mode: psk_ephemeral" \
368 -S "key exchange mode: ephemeral"
369
370requires_gnutls_tls1_3
371requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
372requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
373requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]374run_test "TLS 1.3: G->m: ephemeral_all/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]375 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]376 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
377 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
378 localhost" \
379 1 \
380 -s "found psk key exchange modes extension" \
381 -s "found pre_shared_key extension" \
382 -s "Found PSK_EPHEMERAL KEX MODE" \
383 -S "Found PSK KEX MODE" \
384 -s "Invalid binder." \
385 -S "key exchange mode: psk$" \
386 -S "key exchange mode: psk_ephemeral" \
387 -S "key exchange mode: ephemeral"
388
389requires_gnutls_tls1_3
390requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
391requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
392requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]393run_test "TLS 1.3: G->m: all/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]394 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]395 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
396 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
397 localhost" \
398 0 \
399 -s "found psk key exchange modes extension" \
400 -s "found pre_shared_key extension" \
401 -s "Found PSK_EPHEMERAL KEX MODE" \
402 -s "Found PSK KEX MODE" \
403 -s "Pre shared key found" \
404 -S "No matched PSK or ticket" \
405 -S "key exchange mode: psk$" \
406 -s "key exchange mode: psk_ephemeral" \
407 -S "key exchange mode: ephemeral"
408
409requires_gnutls_tls1_3
410requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
411requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
412requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]413run_test "TLS 1.3: G->m: all/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]414 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]415 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
416 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
417 localhost" \
418 1 \
419 -s "found psk key exchange modes extension" \
420 -s "found pre_shared_key extension" \
421 -s "Found PSK_EPHEMERAL KEX MODE" \
422 -s "Found PSK KEX MODE" \
423 -s "No matched PSK or ticket" \
424 -S "key exchange mode: psk$" \
425 -S "key exchange mode: psk_ephemeral" \
426 -S "key exchange mode: ephemeral"
427
428requires_gnutls_tls1_3
429requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
430requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
431requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]432run_test "TLS 1.3: G->m: all/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]433 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]434 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
435 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
436 localhost" \
437 1 \
438 -s "found psk key exchange modes extension" \
439 -s "found pre_shared_key extension" \
440 -s "Found PSK_EPHEMERAL KEX MODE" \
441 -s "Found PSK KEX MODE" \
442 -s "Invalid binder." \
443 -S "key exchange mode: psk$" \
444 -S "key exchange mode: psk_ephemeral" \
445 -S "key exchange mode: ephemeral"
446
447requires_gnutls_tls1_3
448requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
449requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
450requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]451run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]452 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]453 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
454 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
455 localhost" \
456 0 \
457 -s "found psk key exchange modes extension" \
458 -s "found pre_shared_key extension" \
459 -S "Found PSK_EPHEMERAL KEX MODE" \
460 -s "Found PSK KEX MODE" \
461 -s "Pre shared key found" \
462 -S "No matched PSK or ticket" \
463 -s "key exchange mode: psk$" \
464 -S "key exchange mode: psk_ephemeral" \
465 -S "key exchange mode: ephemeral"
466
467requires_gnutls_tls1_3
468requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
469requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
470requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]471run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]472 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]473 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
474 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
475 localhost" \
476 1 \
477 -s "found psk key exchange modes extension" \
478 -s "found pre_shared_key extension" \
479 -S "Found PSK_EPHEMERAL KEX MODE" \
480 -s "Found PSK KEX MODE" \
481 -s "No matched PSK or ticket" \
482 -S "key exchange mode: psk$" \
483 -S "key exchange mode: psk_ephemeral" \
484 -S "key exchange mode: ephemeral"
485
486requires_gnutls_tls1_3
487requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
488requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
489requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]490run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]491 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]492 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
493 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
494 localhost" \
495 1 \
496 -s "found psk key exchange modes extension" \
497 -s "found pre_shared_key extension" \
498 -S "Found PSK_EPHEMERAL KEX MODE" \
499 -s "Found PSK KEX MODE" \
500 -s "Invalid binder." \
501 -S "key exchange mode: psk$" \
502 -S "key exchange mode: psk_ephemeral" \
503 -S "key exchange mode: ephemeral"
504
505requires_gnutls_tls1_3
506requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
507requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
508requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]509run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]510 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]511 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
512 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
513 localhost" \
514 0 \
515 -s "found psk key exchange modes extension" \
516 -s "found pre_shared_key extension" \
517 -s "Found PSK_EPHEMERAL KEX MODE" \
518 -S "Found PSK KEX MODE" \
519 -s "Pre shared key found" \
520 -S "No matched PSK or ticket" \
521 -S "key exchange mode: psk$" \
522 -s "key exchange mode: psk_ephemeral" \
523 -S "key exchange mode: ephemeral"
524
525requires_gnutls_tls1_3
526requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
527requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
528requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]529run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]530 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]531 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
532 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
533 localhost" \
534 0 \
535 -s "found psk key exchange modes extension" \
536 -s "found pre_shared_key extension" \
537 -s "Found PSK_EPHEMERAL KEX MODE" \
538 -S "Found PSK KEX MODE" \
539 -s "No matched PSK or ticket" \
540 -S "key exchange mode: psk$" \
541 -S "key exchange mode: psk_ephemeral" \
542 -s "key exchange mode: ephemeral"
543
544requires_gnutls_tls1_3
545requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
546requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
547requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]548run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]549 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]550 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
551 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
552 localhost" \
553 1 \
554 -s "found psk key exchange modes extension" \
555 -s "found pre_shared_key extension" \
556 -s "Found PSK_EPHEMERAL KEX MODE" \
557 -S "Found PSK KEX MODE" \
558 -s "Invalid binder." \
559 -S "key exchange mode: psk$" \
560 -S "key exchange mode: psk_ephemeral" \
561 -S "key exchange mode: ephemeral"
562
563requires_gnutls_tls1_3
564requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
565requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
566requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]567run_test "TLS 1.3: G->m: all/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]568 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]569 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
570 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
571 localhost" \
572 0 \
573 -s "found psk key exchange modes extension" \
574 -s "found pre_shared_key extension" \
575 -s "Found PSK_EPHEMERAL KEX MODE" \
576 -s "Found PSK KEX MODE" \
577 -s "Pre shared key found" \
578 -S "No matched PSK or ticket" \
579 -S "key exchange mode: psk$" \
580 -s "key exchange mode: psk_ephemeral" \
581 -S "key exchange mode: ephemeral"
582
583requires_gnutls_tls1_3
584requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
585requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
586requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]587run_test "TLS 1.3: G->m: all/ephemeral_all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]588 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]589 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
590 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
591 localhost" \
592 0 \
593 -s "found psk key exchange modes extension" \
594 -s "found pre_shared_key extension" \
595 -s "Found PSK_EPHEMERAL KEX MODE" \
596 -s "Found PSK KEX MODE" \
597 -s "No matched PSK or ticket" \
598 -S "key exchange mode: psk$" \
599 -S "key exchange mode: psk_ephemeral" \
600 -s "key exchange mode: ephemeral"
601
602requires_gnutls_tls1_3
603requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
604requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
605requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]606run_test "TLS 1.3: G->m: all/ephemeral_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]607 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]608 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
609 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
610 localhost" \
611 1 \
612 -s "found psk key exchange modes extension" \
613 -s "found pre_shared_key extension" \
614 -s "Found PSK_EPHEMERAL KEX MODE" \
615 -s "Found PSK KEX MODE" \
616 -s "Invalid binder." \
617 -S "key exchange mode: psk$" \
618 -S "key exchange mode: psk_ephemeral" \
619 -S "key exchange mode: ephemeral"
620
621requires_gnutls_tls1_3
622requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
623requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
624requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]625run_test "TLS 1.3: G->m: psk_or_ephemeral/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]626 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]627 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
628 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
629 localhost" \
630 0 \
631 -s "found psk key exchange modes extension" \
632 -s "found pre_shared_key extension" \
633 -S "Found PSK_EPHEMERAL KEX MODE" \
634 -s "Found PSK KEX MODE" \
635 -s "Pre shared key found" \
636 -S "No matched PSK or ticket" \
637 -S "key exchange mode: psk$" \
638 -S "key exchange mode: psk_ephemeral" \
639 -s "key exchange mode: ephemeral"
640
641requires_gnutls_tls1_3
642requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
643requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
644requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]645run_test "TLS 1.3: G->m: ephemeral_all/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]646 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]647 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
648 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
649 localhost" \
650 0 \
651 -s "found psk key exchange modes extension" \
652 -s "found pre_shared_key extension" \
653 -s "Found PSK_EPHEMERAL KEX MODE" \
654 -S "Found PSK KEX MODE" \
655 -s "Pre shared key found" \
656 -S "No matched PSK or ticket" \
657 -S "key exchange mode: psk$" \
658 -s "key exchange mode: psk_ephemeral" \
659 -S "key exchange mode: ephemeral"
660
661requires_gnutls_tls1_3
662requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
663requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
664requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]665run_test "TLS 1.3: G->m: ephemeral_all/all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]666 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]667 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
668 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
669 localhost" \
670 0 \
671 -s "found psk key exchange modes extension" \
672 -s "found pre_shared_key extension" \
673 -s "Found PSK_EPHEMERAL KEX MODE" \
674 -S "Found PSK KEX MODE" \
675 -s "No matched PSK or ticket" \
676 -S "key exchange mode: psk$" \
677 -S "key exchange mode: psk_ephemeral" \
678 -s "key exchange mode: ephemeral"
679
680requires_gnutls_tls1_3
681requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
682requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
683requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]684run_test "TLS 1.3: G->m: ephemeral_all/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]685 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]686 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
687 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
688 localhost" \
689 1 \
690 -s "found psk key exchange modes extension" \
691 -s "found pre_shared_key extension" \
692 -s "Found PSK_EPHEMERAL KEX MODE" \
693 -S "Found PSK KEX MODE" \
694 -s "Invalid binder." \
695 -S "key exchange mode: psk$" \
696 -S "key exchange mode: psk_ephemeral" \
697 -S "key exchange mode: ephemeral"
698
699requires_gnutls_tls1_3
700requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
701requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
702requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]703run_test "TLS 1.3: G->m: all/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]704 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]705 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
706 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
707 localhost" \
708 0 \
709 -s "found psk key exchange modes extension" \
710 -s "found pre_shared_key extension" \
711 -s "Found PSK_EPHEMERAL KEX MODE" \
712 -s "Found PSK KEX MODE" \
713 -s "Pre shared key found" \
714 -S "No matched PSK or ticket" \
715 -S "key exchange mode: psk$" \
716 -s "key exchange mode: psk_ephemeral" \
717 -S "key exchange mode: ephemeral"
718
719requires_gnutls_tls1_3
720requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
721requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
722requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]723run_test "TLS 1.3: G->m: all/all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]724 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]725 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
726 --pskusername wrong_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
727 localhost" \
728 0 \
729 -s "found psk key exchange modes extension" \
730 -s "found pre_shared_key extension" \
731 -s "Found PSK_EPHEMERAL KEX MODE" \
732 -s "Found PSK KEX MODE" \
733 -s "No matched PSK or ticket" \
734 -S "key exchange mode: psk$" \
735 -S "key exchange mode: psk_ephemeral" \
736 -s "key exchange mode: ephemeral"
737
738requires_gnutls_tls1_3
739requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
740requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
741requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]742run_test "TLS 1.3: G->m: all/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]743 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]744 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
745 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
746 localhost" \
747 1 \
748 -s "found psk key exchange modes extension" \
749 -s "found pre_shared_key extension" \
750 -s "Found PSK_EPHEMERAL KEX MODE" \
751 -s "Found PSK KEX MODE" \
752 -s "Invalid binder." \
753 -S "key exchange mode: psk$" \
754 -S "key exchange mode: psk_ephemeral" \
755 -S "key exchange mode: ephemeral"
756
757requires_gnutls_tls1_3
758requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
759requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
760requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]761run_test "TLS 1.3: G->m: psk_or_ephemeral/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]762 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]763 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
764 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
765 localhost" \
766 0 \
767 -s "found psk key exchange modes extension" \
768 -s "found pre_shared_key extension" \
769 -S "Found PSK_EPHEMERAL KEX MODE" \
770 -s "Found PSK KEX MODE" \
771 -s "Pre shared key found" \
772 -S "No matched PSK or ticket" \
773 -S "key exchange mode: psk$" \
774 -S "key exchange mode: psk_ephemeral" \
775 -s "key exchange mode: ephemeral"
776
777requires_gnutls_tls1_3
778requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
779requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
780requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]781run_test "TLS 1.3: G->m: psk_or_ephemeral/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]782 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]783 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
784 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
785 localhost" \
786 1 \
787 -s "found psk key exchange modes extension" \
788 -s "found pre_shared_key extension" \
789 -S "Found PSK_EPHEMERAL KEX MODE" \
790 -s "Found PSK KEX MODE" \
791 -s "Invalid binder." \
792 -S "key exchange mode: psk$" \
793 -S "key exchange mode: psk_ephemeral" \
794 -S "key exchange mode: ephemeral"
795
796requires_gnutls_tls1_3
797requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
798requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
799requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]800run_test "TLS 1.3: G->m: ephemeral_all/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]801 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]802 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+VERS-TLS1.3 \
803 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
804 localhost" \
805 0 \
806 -s "found psk key exchange modes extension" \
807 -s "found pre_shared_key extension" \
808 -s "Found PSK_EPHEMERAL KEX MODE" \
809 -S "Found PSK KEX MODE" \
810 -s "Pre shared key found" \
811 -S "No matched PSK or ticket" \
812 -S "key exchange mode: psk$" \
813 -S "key exchange mode: psk_ephemeral" \
814 -s "key exchange mode: ephemeral"
815
816requires_gnutls_tls1_3
817requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
818requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
819requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]820run_test "TLS 1.3: G->m: all/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]821 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]822 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
823 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
824 localhost" \
825 0 \
826 -s "found psk key exchange modes extension" \
827 -s "found pre_shared_key extension" \
828 -s "Found PSK_EPHEMERAL KEX MODE" \
829 -s "Found PSK KEX MODE" \
830 -s "Pre shared key found" \
831 -S "No matched PSK or ticket" \
832 -S "key exchange mode: psk$" \
833 -S "key exchange mode: psk_ephemeral" \
834 -s "key exchange mode: ephemeral"
835
836requires_gnutls_tls1_3
837requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
838requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
839requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]840run_test "TLS 1.3: G->m: all/psk_or_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]841 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]842 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3 \
843 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
844 localhost" \
845 1 \
846 -s "found psk key exchange modes extension" \
847 -s "found pre_shared_key extension" \
848 -s "Found PSK_EPHEMERAL KEX MODE" \
849 -s "Found PSK KEX MODE" \
850 -s "Invalid binder." \
851 -S "key exchange mode: psk$" \
852 -S "key exchange mode: psk_ephemeral" \
853 -S "key exchange mode: ephemeral"
854
855requires_gnutls_tls1_3
856requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
857requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
858requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]859run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]860 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]861 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
862 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
863 localhost" \
864 0 \
865 -s "found psk key exchange modes extension" \
866 -s "found pre_shared_key extension" \
867 -S "Found PSK_EPHEMERAL KEX MODE" \
868 -s "Found PSK KEX MODE" \
869 -s "Pre shared key found" \
870 -S "No matched PSK or ticket" \
871 -S "key exchange mode: psk$" \
872 -S "key exchange mode: psk_ephemeral" \
873 -s "key exchange mode: ephemeral"
874
875requires_gnutls_tls1_3
876requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
877requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
878requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu66886692022-08-31 17:08:34 +0800[diff] [blame]879run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_or_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]880 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]881 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+VERS-TLS1.3 \
882 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f71 \
883 localhost" \
884 1 \
885 -s "found psk key exchange modes extension" \
886 -s "found pre_shared_key extension" \
887 -S "Found PSK_EPHEMERAL KEX MODE" \
888 -s "Found PSK KEX MODE" \
889 -s "Invalid binder." \
890 -S "key exchange mode: psk$" \
891 -S "key exchange mode: psk_ephemeral" \
892 -S "key exchange mode: ephemeral"
893
Jerry Yu58af2332022-09-06 11:19:31 +0800[diff] [blame]894requires_gnutls_tls1_3
895requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
896requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
897requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
898run_test "TLS 1.3: G->m: psk_ephemeral group(secp256r1) check, good" \
899 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
900 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP256R1 \
901 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
902 localhost" \
903 0 \
904 -s "write selected_group: secp256r1" \
905 -S "key exchange mode: psk$" \
906 -s "key exchange mode: psk_ephemeral" \
907 -S "key exchange mode: ephemeral"
908
909requires_gnutls_tls1_3
910requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
911requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
912requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
913run_test "TLS 1.3: G->m: psk_ephemeral group(secp384r1) check, good" \
914 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
915 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP384R1 \
916 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
917 localhost" \
918 0 \
919 -s "write selected_group: secp384r1" \
920 -S "key exchange mode: psk$" \
921 -s "key exchange mode: psk_ephemeral" \
922 -S "key exchange mode: ephemeral"
923
924requires_gnutls_tls1_3
925requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
926requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
927requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
928run_test "TLS 1.3: G->m: psk_ephemeral group(secp521r1) check, good" \
929 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
930 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP521R1 \
931 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
932 localhost" \
933 0 \
934 -s "write selected_group: secp521r1" \
935 -S "key exchange mode: psk$" \
936 -s "key exchange mode: psk_ephemeral" \
937 -S "key exchange mode: ephemeral"
938
939requires_gnutls_tls1_3
940requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
941requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
942requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
943run_test "TLS 1.3: G->m: psk_ephemeral group(x25519) check, good" \
944 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
945 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-X25519 \
946 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
947 localhost" \
948 0 \
949 -s "write selected_group: x25519" \
950 -S "key exchange mode: psk$" \
951 -s "key exchange mode: psk_ephemeral" \
952 -S "key exchange mode: ephemeral"
953
954requires_gnutls_tls1_3
955requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
956requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
957requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
958run_test "TLS 1.3: G->m: psk_ephemeral group(x448) check, good" \
959 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
960 "$G_NEXT_CLI -d 10 --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-X448 \
961 --pskusername Client_identity --pskkey=6162636465666768696a6b6c6d6e6f70 \
962 localhost" \
963 0 \
964 -s "write selected_group: x448" \
965 -S "key exchange mode: psk$" \
966 -s "key exchange mode: psk_ephemeral" \
967 -S "key exchange mode: ephemeral"
968
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]969requires_openssl_tls1_3
970requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
971requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]972run_test "TLS 1.3: O->m: ephemeral_all/psk, fail, no common kex mode" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]973 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]974 "$O_NEXT_CLI -tls1_3 -msg \
975 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
976 1 \
977 -s "found psk key exchange modes extension" \
978 -s "found pre_shared_key extension" \
979 -s "Found PSK_EPHEMERAL KEX MODE" \
980 -S "Found PSK KEX MODE" \
981 -S "key exchange mode: psk$" \
982 -S "key exchange mode: psk_ephemeral" \
983 -S "key exchange mode: ephemeral"
984
985requires_openssl_tls1_3
986requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
987requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]988run_test "TLS 1.3: O->m: all/psk, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]989 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]990 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
991 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
992 0 \
993 -s "found psk key exchange modes extension" \
994 -s "found pre_shared_key extension" \
995 -s "Found PSK_EPHEMERAL KEX MODE" \
996 -s "Found PSK KEX MODE" \
997 -s "Pre shared key found" \
998 -S "No matched PSK or ticket" \
999 -s "key exchange mode: psk$" \
1000 -S "key exchange mode: psk_ephemeral" \
1001 -S "key exchange mode: ephemeral"
1002
1003requires_openssl_tls1_3
1004requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1005requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1006run_test "TLS 1.3: O->m: all/psk, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1007 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1008 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1009 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1010 1 \
1011 -s "found psk key exchange modes extension" \
1012 -s "found pre_shared_key extension" \
1013 -s "Found PSK_EPHEMERAL KEX MODE" \
1014 -s "Found PSK KEX MODE" \
1015 -s "No matched PSK or ticket" \
1016 -S "key exchange mode: psk$" \
1017 -S "key exchange mode: psk_ephemeral" \
1018 -S "key exchange mode: ephemeral"
1019
1020requires_openssl_tls1_3
1021requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1022requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1023run_test "TLS 1.3: O->m: all/psk, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1024 "$P_SRV force_version=tls13 tls13_kex_modes=psk debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1025 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1026 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1027 1 \
1028 -s "found psk key exchange modes extension" \
1029 -s "found pre_shared_key extension" \
1030 -s "Found PSK_EPHEMERAL KEX MODE" \
1031 -s "Found PSK KEX MODE" \
1032 -s "Invalid binder." \
1033 -S "key exchange mode: psk$" \
1034 -S "key exchange mode: psk_ephemeral" \
1035 -S "key exchange mode: ephemeral"
1036
1037requires_openssl_tls1_3
1038requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1039requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1040requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1041run_test "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1042 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1043 "$O_NEXT_CLI -tls1_3 -msg \
1044 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1045 0 \
1046 -s "found psk key exchange modes extension" \
1047 -s "found pre_shared_key extension" \
1048 -s "Found PSK_EPHEMERAL KEX MODE" \
1049 -S "Found PSK KEX MODE" \
1050 -s "Pre shared key found" \
1051 -S "No matched PSK or ticket" \
1052 -S "key exchange mode: psk$" \
1053 -s "key exchange mode: psk_ephemeral" \
1054 -S "key exchange mode: ephemeral"
1055
1056requires_openssl_tls1_3
1057requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1058requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1059requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1060run_test "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1061 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1062 "$O_NEXT_CLI -tls1_3 -msg \
1063 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1064 1 \
1065 -s "found psk key exchange modes extension" \
1066 -s "found pre_shared_key extension" \
1067 -s "Found PSK_EPHEMERAL KEX MODE" \
1068 -S "Found PSK KEX MODE" \
1069 -s "No matched PSK or ticket" \
1070 -S "key exchange mode: psk$" \
1071 -S "key exchange mode: psk_ephemeral" \
1072 -S "key exchange mode: ephemeral"
1073
1074requires_openssl_tls1_3
1075requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1076requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1077requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1078run_test "TLS 1.3: O->m: ephemeral_all/psk_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1079 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1080 "$O_NEXT_CLI -tls1_3 -msg \
1081 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1082 1 \
1083 -s "found psk key exchange modes extension" \
1084 -s "found pre_shared_key extension" \
1085 -s "Found PSK_EPHEMERAL KEX MODE" \
1086 -S "Found PSK KEX MODE" \
1087 -s "Invalid binder." \
1088 -S "key exchange mode: psk$" \
1089 -S "key exchange mode: psk_ephemeral" \
1090 -S "key exchange mode: ephemeral"
1091
1092requires_openssl_tls1_3
1093requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1094requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1095requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1096run_test "TLS 1.3: O->m: all/psk_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1097 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1098 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1099 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1100 0 \
1101 -s "found psk key exchange modes extension" \
1102 -s "found pre_shared_key extension" \
1103 -s "Found PSK_EPHEMERAL KEX MODE" \
1104 -s "Found PSK KEX MODE" \
1105 -s "Pre shared key found" \
1106 -S "No matched PSK or ticket" \
1107 -S "key exchange mode: psk$" \
1108 -s "key exchange mode: psk_ephemeral" \
1109 -S "key exchange mode: ephemeral"
1110
1111requires_openssl_tls1_3
1112requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1113requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1114requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1115run_test "TLS 1.3: O->m: all/psk_ephemeral, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1116 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1117 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1118 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1119 1 \
1120 -s "found psk key exchange modes extension" \
1121 -s "found pre_shared_key extension" \
1122 -s "Found PSK_EPHEMERAL KEX MODE" \
1123 -s "Found PSK KEX MODE" \
1124 -s "No matched PSK or ticket" \
1125 -S "key exchange mode: psk$" \
1126 -S "key exchange mode: psk_ephemeral" \
1127 -S "key exchange mode: ephemeral"
1128
1129requires_openssl_tls1_3
1130requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1131requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1132requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1133run_test "TLS 1.3: O->m: all/psk_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1134 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1135 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1136 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1137 1 \
1138 -s "found psk key exchange modes extension" \
1139 -s "found pre_shared_key extension" \
1140 -s "Found PSK_EPHEMERAL KEX MODE" \
1141 -s "Found PSK KEX MODE" \
1142 -s "Invalid binder." \
1143 -S "key exchange mode: psk$" \
1144 -S "key exchange mode: psk_ephemeral" \
1145 -S "key exchange mode: ephemeral"
1146
1147requires_openssl_tls1_3
1148requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1149requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1150requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1151run_test "TLS 1.3: O->m: ephemeral_all/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1152 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1153 "$O_NEXT_CLI -tls1_3 -msg \
1154 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1155 0 \
1156 -s "found psk key exchange modes extension" \
1157 -s "found pre_shared_key extension" \
1158 -s "Found PSK_EPHEMERAL KEX MODE" \
1159 -S "Found PSK KEX MODE" \
1160 -s "Pre shared key found" \
1161 -S "No matched PSK or ticket" \
1162 -S "key exchange mode: psk$" \
1163 -s "key exchange mode: psk_ephemeral" \
1164 -S "key exchange mode: ephemeral"
1165
1166requires_openssl_tls1_3
1167requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1168requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1169requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1170run_test "TLS 1.3: O->m: ephemeral_all/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1171 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1172 "$O_NEXT_CLI -tls1_3 -msg \
1173 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1174 1 \
1175 -s "found psk key exchange modes extension" \
1176 -s "found pre_shared_key extension" \
1177 -s "Found PSK_EPHEMERAL KEX MODE" \
1178 -S "Found PSK KEX MODE" \
1179 -s "No matched PSK or ticket" \
1180 -S "key exchange mode: psk$" \
1181 -S "key exchange mode: psk_ephemeral" \
1182 -S "key exchange mode: ephemeral"
1183
1184requires_openssl_tls1_3
1185requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1186requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1187requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1188run_test "TLS 1.3: O->m: ephemeral_all/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1189 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1190 "$O_NEXT_CLI -tls1_3 -msg \
1191 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1192 1 \
1193 -s "found psk key exchange modes extension" \
1194 -s "found pre_shared_key extension" \
1195 -s "Found PSK_EPHEMERAL KEX MODE" \
1196 -S "Found PSK KEX MODE" \
1197 -s "Invalid binder." \
1198 -S "key exchange mode: psk$" \
1199 -S "key exchange mode: psk_ephemeral" \
1200 -S "key exchange mode: ephemeral"
1201
1202requires_openssl_tls1_3
1203requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1204requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1205requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1206run_test "TLS 1.3: O->m: all/psk_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1207 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1208 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1209 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1210 0 \
1211 -s "found psk key exchange modes extension" \
1212 -s "found pre_shared_key extension" \
1213 -s "Found PSK_EPHEMERAL KEX MODE" \
1214 -s "Found PSK KEX MODE" \
1215 -s "Pre shared key found" \
1216 -S "No matched PSK or ticket" \
1217 -S "key exchange mode: psk$" \
1218 -s "key exchange mode: psk_ephemeral" \
1219 -S "key exchange mode: ephemeral"
1220
1221requires_openssl_tls1_3
1222requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1223requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1224requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1225run_test "TLS 1.3: O->m: all/psk_all, fail, key id mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1226 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1227 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1228 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1229 1 \
1230 -s "found psk key exchange modes extension" \
1231 -s "found pre_shared_key extension" \
1232 -s "Found PSK_EPHEMERAL KEX MODE" \
1233 -s "Found PSK KEX MODE" \
1234 -s "No matched PSK or ticket" \
1235 -S "key exchange mode: psk$" \
1236 -S "key exchange mode: psk_ephemeral" \
1237 -S "key exchange mode: ephemeral"
1238
1239requires_openssl_tls1_3
1240requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1241requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1242requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1243run_test "TLS 1.3: O->m: all/psk_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1244 "$P_SRV force_version=tls13 tls13_kex_modes=psk_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1245 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1246 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1247 1 \
1248 -s "found psk key exchange modes extension" \
1249 -s "found pre_shared_key extension" \
1250 -s "Found PSK_EPHEMERAL KEX MODE" \
1251 -s "Found PSK KEX MODE" \
1252 -s "Invalid binder." \
1253 -S "key exchange mode: psk$" \
1254 -S "key exchange mode: psk_ephemeral" \
1255 -S "key exchange mode: ephemeral"
1256
1257requires_openssl_tls1_3
1258requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1259requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1260requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1261run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1262 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1263 "$O_NEXT_CLI -tls1_3 -msg \
1264 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1265 0 \
1266 -s "found psk key exchange modes extension" \
1267 -s "found pre_shared_key extension" \
1268 -s "Found PSK_EPHEMERAL KEX MODE" \
1269 -S "Found PSK KEX MODE" \
1270 -s "Pre shared key found" \
1271 -S "No matched PSK or ticket" \
1272 -S "key exchange mode: psk$" \
1273 -s "key exchange mode: psk_ephemeral" \
1274 -S "key exchange mode: ephemeral"
1275
1276requires_openssl_tls1_3
1277requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1278requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1279requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1280run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1281 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1282 "$O_NEXT_CLI -tls1_3 -msg \
1283 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1284 0 \
1285 -s "found psk key exchange modes extension" \
1286 -s "found pre_shared_key extension" \
1287 -s "Found PSK_EPHEMERAL KEX MODE" \
1288 -S "Found PSK KEX MODE" \
1289 -s "No matched PSK or ticket" \
1290 -S "key exchange mode: psk$" \
1291 -S "key exchange mode: psk_ephemeral" \
1292 -s "key exchange mode: ephemeral"
1293
1294requires_openssl_tls1_3
1295requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1296requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1297requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1298run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1299 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1300 "$O_NEXT_CLI -tls1_3 -msg \
1301 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1302 1 \
1303 -s "found psk key exchange modes extension" \
1304 -s "found pre_shared_key extension" \
1305 -s "Found PSK_EPHEMERAL KEX MODE" \
1306 -S "Found PSK KEX MODE" \
1307 -s "Invalid binder." \
1308 -S "key exchange mode: psk$" \
1309 -S "key exchange mode: psk_ephemeral" \
1310 -S "key exchange mode: ephemeral"
1311
1312requires_openssl_tls1_3
1313requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1314requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1315requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1316run_test "TLS 1.3: O->m: all/ephemeral_all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1317 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1318 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1319 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1320 0 \
1321 -s "found psk key exchange modes extension" \
1322 -s "found pre_shared_key extension" \
1323 -s "Found PSK_EPHEMERAL KEX MODE" \
1324 -s "Found PSK KEX MODE" \
1325 -s "Pre shared key found" \
1326 -S "No matched PSK or ticket" \
1327 -S "key exchange mode: psk$" \
1328 -s "key exchange mode: psk_ephemeral" \
1329 -S "key exchange mode: ephemeral"
1330
1331requires_openssl_tls1_3
1332requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1333requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1334requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1335run_test "TLS 1.3: O->m: all/ephemeral_all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1336 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1337 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1338 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1339 0 \
1340 -s "found psk key exchange modes extension" \
1341 -s "found pre_shared_key extension" \
1342 -s "Found PSK_EPHEMERAL KEX MODE" \
1343 -s "Found PSK KEX MODE" \
1344 -s "No matched PSK or ticket" \
1345 -S "key exchange mode: psk$" \
1346 -S "key exchange mode: psk_ephemeral" \
1347 -s "key exchange mode: ephemeral"
1348
1349requires_openssl_tls1_3
1350requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1351requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1352requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1353run_test "TLS 1.3: O->m: all/ephemeral_all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1354 "$P_SRV force_version=tls13 tls13_kex_modes=ephemeral_all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1355 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1356 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1357 1 \
1358 -s "found psk key exchange modes extension" \
1359 -s "found pre_shared_key extension" \
1360 -s "Found PSK_EPHEMERAL KEX MODE" \
1361 -s "Found PSK KEX MODE" \
1362 -s "Invalid binder." \
1363 -S "key exchange mode: psk$" \
1364 -S "key exchange mode: psk_ephemeral" \
1365 -S "key exchange mode: ephemeral"
1366
1367requires_openssl_tls1_3
1368requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1369requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1370requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1371run_test "TLS 1.3: O->m: ephemeral_all/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1372 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1373 "$O_NEXT_CLI -tls1_3 -msg \
1374 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1375 0 \
1376 -s "found psk key exchange modes extension" \
1377 -s "found pre_shared_key extension" \
1378 -s "Found PSK_EPHEMERAL KEX MODE" \
1379 -S "Found PSK KEX MODE" \
1380 -s "Pre shared key found" \
1381 -S "No matched PSK or ticket" \
1382 -S "key exchange mode: psk$" \
1383 -s "key exchange mode: psk_ephemeral" \
1384 -S "key exchange mode: ephemeral"
1385
1386requires_openssl_tls1_3
1387requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1388requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1389requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1390run_test "TLS 1.3: O->m: ephemeral_all/all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1391 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1392 "$O_NEXT_CLI -tls1_3 -msg \
1393 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1394 0 \
1395 -s "found psk key exchange modes extension" \
1396 -s "found pre_shared_key extension" \
1397 -s "Found PSK_EPHEMERAL KEX MODE" \
1398 -S "Found PSK KEX MODE" \
1399 -s "No matched PSK or ticket" \
1400 -S "key exchange mode: psk$" \
1401 -S "key exchange mode: psk_ephemeral" \
1402 -s "key exchange mode: ephemeral"
1403
1404requires_openssl_tls1_3
1405requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1406requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1407requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1408run_test "TLS 1.3: O->m: ephemeral_all/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1409 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1410 "$O_NEXT_CLI -tls1_3 -msg \
1411 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1412 1 \
1413 -s "found psk key exchange modes extension" \
1414 -s "found pre_shared_key extension" \
1415 -s "Found PSK_EPHEMERAL KEX MODE" \
1416 -S "Found PSK KEX MODE" \
1417 -s "Invalid binder." \
1418 -S "key exchange mode: psk$" \
1419 -S "key exchange mode: psk_ephemeral" \
1420 -S "key exchange mode: ephemeral"
1421
1422requires_openssl_tls1_3
1423requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1424requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1425requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1426run_test "TLS 1.3: O->m: all/all, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1427 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1428 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1429 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1430 0 \
1431 -s "found psk key exchange modes extension" \
1432 -s "found pre_shared_key extension" \
1433 -s "Found PSK_EPHEMERAL KEX MODE" \
1434 -s "Found PSK KEX MODE" \
1435 -s "Pre shared key found" \
1436 -S "No matched PSK or ticket" \
1437 -S "key exchange mode: psk$" \
1438 -s "key exchange mode: psk_ephemeral" \
1439 -S "key exchange mode: ephemeral"
1440
1441requires_openssl_tls1_3
1442requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1443requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1444requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1445run_test "TLS 1.3: O->m: all/all, good, key id mismatch, dhe." \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1446 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1447 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1448 -psk_identity wrong_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1449 0 \
1450 -s "found psk key exchange modes extension" \
1451 -s "found pre_shared_key extension" \
1452 -s "Found PSK_EPHEMERAL KEX MODE" \
1453 -s "Found PSK KEX MODE" \
1454 -s "No matched PSK or ticket" \
1455 -S "key exchange mode: psk$" \
1456 -S "key exchange mode: psk_ephemeral" \
1457 -s "key exchange mode: ephemeral"
1458
1459requires_openssl_tls1_3
1460requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1461requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1462requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1463run_test "TLS 1.3: O->m: all/all, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1464 "$P_SRV force_version=tls13 tls13_kex_modes=all debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1465 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1466 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1467 1 \
1468 -s "found psk key exchange modes extension" \
1469 -s "found pre_shared_key extension" \
1470 -s "Found PSK_EPHEMERAL KEX MODE" \
1471 -s "Found PSK KEX MODE" \
1472 -s "Invalid binder." \
1473 -S "key exchange mode: psk$" \
1474 -S "key exchange mode: psk_ephemeral" \
1475 -S "key exchange mode: ephemeral"
1476
1477requires_openssl_tls1_3
1478requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1479requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1480requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu7101b872022-08-31 14:15:23 +0800[diff] [blame]1481run_test "TLS 1.3: O->m: ephemeral_all/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1482 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1483 "$O_NEXT_CLI -tls1_3 -msg \
1484 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1485 0 \
1486 -s "found psk key exchange modes extension" \
1487 -s "found pre_shared_key extension" \
1488 -s "Found PSK_EPHEMERAL KEX MODE" \
1489 -S "Found PSK KEX MODE" \
1490 -s "Pre shared key found" \
1491 -S "No matched PSK or ticket" \
1492 -S "key exchange mode: psk$" \
1493 -S "key exchange mode: psk_ephemeral" \
1494 -s "key exchange mode: ephemeral"
1495
1496requires_openssl_tls1_3
1497requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1498requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1499requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1500run_test "TLS 1.3: O->m: all/psk_or_ephemeral, good" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1501 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1502 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1503 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1504 0 \
1505 -s "found psk key exchange modes extension" \
1506 -s "found pre_shared_key extension" \
1507 -s "Found PSK_EPHEMERAL KEX MODE" \
1508 -s "Found PSK KEX MODE" \
1509 -s "Pre shared key found" \
1510 -S "No matched PSK or ticket" \
1511 -S "key exchange mode: psk$" \
1512 -S "key exchange mode: psk_ephemeral" \
1513 -s "key exchange mode: ephemeral"
1514
1515requires_openssl_tls1_3
1516requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1517requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1518requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Jerry Yu63d40e62022-08-29 20:38:39 +0800[diff] [blame]1519run_test "TLS 1.3: O->m: all/psk_or_ephemeral, fail, key material mismatch" \
Jerry Yu673b0f92022-09-14 15:02:21 +0800[diff] [blame]1520 "$P_SRV force_version=tls13 tls13_kex_modes=psk_or_ephemeral debug_level=5 $(get_srv_psk_list)" \
Jerry Yue7b4b582022-08-25 17:53:13 +0800[diff] [blame]1521 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex \
1522 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f71" \
1523 1 \
1524 -s "found psk key exchange modes extension" \
1525 -s "found pre_shared_key extension" \
1526 -s "Found PSK_EPHEMERAL KEX MODE" \
1527 -s "Found PSK KEX MODE" \
1528 -s "Invalid binder." \
1529 -S "key exchange mode: psk$" \
1530 -S "key exchange mode: psk_ephemeral" \
1531 -S "key exchange mode: ephemeral"
Jerry Yu58af2332022-09-06 11:19:31 +0800[diff] [blame]1532
1533requires_openssl_tls1_3
1534requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1535requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1536requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1537run_test "TLS 1.3: O->m: psk_ephemeral group(secp256r1) check, good" \
1538 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1539 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups P-256 \
1540 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1541 0 \
1542 -s "write selected_group: secp256r1" \
1543 -S "key exchange mode: psk$" \
1544 -s "key exchange mode: psk_ephemeral" \
1545 -S "key exchange mode: ephemeral"
1546
1547requires_openssl_tls1_3
1548requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1549requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1550requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1551run_test "TLS 1.3: O->m: psk_ephemeral group(secp384r1) check, good" \
1552 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1553 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups secp384r1 \
1554 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1555 0 \
1556 -s "write selected_group: secp384r1" \
1557 -S "key exchange mode: psk$" \
1558 -s "key exchange mode: psk_ephemeral" \
1559 -S "key exchange mode: ephemeral"
1560
1561requires_openssl_tls1_3
1562requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1563requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1564requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1565run_test "TLS 1.3: O->m: psk_ephemeral group(secp521r1) check, good" \
1566 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1567 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups secp521r1 \
1568 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1569 0 \
1570 -s "write selected_group: secp521r1" \
1571 -S "key exchange mode: psk$" \
1572 -s "key exchange mode: psk_ephemeral" \
1573 -S "key exchange mode: ephemeral"
1574
1575requires_openssl_tls1_3
1576requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1577requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1578requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1579run_test "TLS 1.3: O->m: psk_ephemeral group(x25519) check, good" \
1580 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1581 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups X25519 \
1582 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1583 0 \
1584 -s "write selected_group: x25519" \
1585 -S "key exchange mode: psk$" \
1586 -s "key exchange mode: psk_ephemeral" \
1587 -S "key exchange mode: ephemeral"
1588
1589requires_openssl_tls1_3
1590requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1591requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1592requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1593run_test "TLS 1.3: O->m: psk_ephemeral group(x448) check, good" \
1594 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_identity=Client_identity psk=6162636465666768696a6b6c6d6e6f70" \
1595 "$O_NEXT_CLI -tls1_3 -msg -allow_no_dhe_kex -groups X448 \
1596 -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70" \
1597 0 \
1598 -s "write selected_group: x448" \
1599 -S "key exchange mode: psk$" \
1600 -s "key exchange mode: psk_ephemeral" \
1601 -S "key exchange mode: ephemeral"
Jerry Yu2db49df2022-09-21 11:03:28 +0800[diff] [blame]1602
1603requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1604requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1605requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1606requires_openssl_tls1_3
1607run_test "TLS 1.3 O->m: psk_ephemeral group(secp256r1->secp384r1) check, good" \
Jerry Yu93706122022-09-21 22:44:24 +0800[diff] [blame]1608 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef curves=secp384r1" \
1609 "$O_NEXT_CLI_NO_CERT -tls1_3 -msg -allow_no_dhe_kex -psk_identity Client_identity -psk 6162636465666768696a6b6c6d6e6f70 -groups P-256:P-384" \
Jerry Yu2db49df2022-09-21 11:03:28 +0800[diff] [blame]1610 0 \
1611 -s "write selected_group: secp384r1" \
1612 -s "HRR selected_group: secp384r1" \
1613 -S "key exchange mode: psk$" \
1614 -s "key exchange mode: psk_ephemeral" \
1615 -S "key exchange mode: ephemeral"
1616
1617requires_all_configs_enabled MBEDTLS_SSL_PROTO_TLS1_3 MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE MBEDTLS_SSL_SRV_C MBEDTLS_DEBUG_C
1618requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_DHE_PSK_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1619requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
1620requires_gnutls_tls1_3
1621requires_gnutls_next_no_ticket
1622requires_gnutls_next_disable_tls13_compat
1623run_test "TLS 1.3 G->m: psk_ephemeral group(secp256r1->secp384r1) check, good" \
Jerry Yu93706122022-09-21 22:44:24 +0800[diff] [blame]1624 "$P_SRV force_version=tls13 tls13_kex_modes=psk_ephemeral debug_level=5 psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef curves=secp384r1" \
1625 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --priority NORMAL:-VERS-ALL:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+VERS-TLS1.3:-GROUP-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1 --pskusername Client_identity --pskkey 6162636465666768696a6b6c6d6e6f70 localhost" \
Jerry Yu2db49df2022-09-21 11:03:28 +0800[diff] [blame]1626 0 \
1627 -s "write selected_group: secp384r1" \
1628 -s "HRR selected_group: secp384r1" \
1629 -S "key exchange mode: psk$" \
1630 -s "key exchange mode: psk_ephemeral" \
1631 -S "key exchange mode: ephemeral"
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1632
1633
1634# Add psk test cases for mbedtls client code
1635
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1636# MbedTls->MbedTLS kinds of tls13_kex_modes
1637# PSK mode in client
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1638requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1639requires_config_enabled MBEDTLS_SSL_SRV_C
1640requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1641run_test "TLS 1.3Client: m->m psk / psk, good" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1642 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1643 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1644 0 \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1645 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1646 -c "client hello, adding psk_key_exchange_modes extension" \
1647 -c "client hello, adding PSK binder list" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]1648 -c "HTTP/1.0 200 OK"
1649
Xiaokang Qianf9b694b2022-08-25 08:48:51 +0000[diff] [blame]1650requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1651requires_config_enabled MBEDTLS_SSL_SRV_C
1652requires_config_enabled MBEDTLS_SSL_CLI_C
1653run_test "TLS 1.3Client: m->m psk / psk, fail - no common identity" \
1654 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1655 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
1656 1 \
1657 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1658 -c "client hello, adding psk_key_exchange_modes extension" \
1659 -c "client hello, adding PSK binder list" \
1660 -s "No matched PSK or ticket" \
1661 -s "ClientHello message misses mandatory extensions."
1662
1663requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1664requires_config_enabled MBEDTLS_SSL_SRV_C
1665requires_config_enabled MBEDTLS_SSL_CLI_C
1666run_test "TLS 1.3Client: m->m psk / psk, fail - no common psk" \
1667 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1668 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
1669 1 \
1670 -c "skip pre_shared_key extensions" \
1671 -c "client hello, adding psk_key_exchange_modes extension" \
1672 -s "ClientHello message misses mandatory extensions."
1673
1674requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1675requires_config_enabled MBEDTLS_SSL_SRV_C
1676requires_config_enabled MBEDTLS_SSL_CLI_C
1677run_test "TLS 1.3Client: m->m psk / psk_ephemeral, fail - no common key exchange mode" \
1678 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1679 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1680 1 \
1681 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1682 -c "client hello, adding psk_key_exchange_modes extension" \
1683 -c "client hello, adding PSK binder list" \
1684 -s "ClientHello message misses mandatory extensions."
1685
1686requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1687requires_config_enabled MBEDTLS_SSL_SRV_C
1688requires_config_enabled MBEDTLS_SSL_CLI_C
1689run_test "TLS 1.3Client: m->m psk / ephemeral, fail - no common key exchange mode" \
1690 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1691 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1692 1 \
1693 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1694 -c "client hello, adding psk_key_exchange_modes extension" \
1695 -c "client hello, adding PSK binder list" \
1696 -s "ClientHello message misses mandatory extensions."
1697
1698requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1699requires_config_enabled MBEDTLS_SSL_SRV_C
1700requires_config_enabled MBEDTLS_SSL_CLI_C
1701run_test "TLS 1.3Client: m->m psk / ephemeral_all, fail - no common key exchange mode" \
1702 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1703 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1704 1 \
1705 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1706 -c "client hello, adding psk_key_exchange_modes extension" \
1707 -c "client hello, adding PSK binder list" \
1708 -s "ClientHello message misses mandatory extensions."
1709
1710requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1711requires_config_enabled MBEDTLS_SSL_SRV_C
1712requires_config_enabled MBEDTLS_SSL_CLI_C
1713run_test "TLS 1.3Client: m->m psk / psk_all, good" \
1714 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1715 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1716 0 \
1717 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1718 -c "client hello, adding psk_key_exchange_modes extension" \
1719 -c "client hello, adding PSK binder list" \
1720 -c "HTTP/1.0 200 OK"
1721
1722requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1723requires_config_enabled MBEDTLS_SSL_SRV_C
1724requires_config_enabled MBEDTLS_SSL_CLI_C
1725run_test "TLS 1.3Client: m->m psk / psk_all, fail - no common identity" \
1726 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1727 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
1728 1 \
1729 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1730 -c "client hello, adding psk_key_exchange_modes extension" \
1731 -c "client hello, adding PSK binder list" \
1732 -s "No matched PSK or ticket" \
1733 -s "ClientHello message misses mandatory extensions."
1734
1735requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1736requires_config_enabled MBEDTLS_SSL_SRV_C
1737requires_config_enabled MBEDTLS_SSL_CLI_C
1738run_test "TLS 1.3Client: m->m psk / psk_all, fail - no common psk" \
1739 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1740 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
1741 1 \
1742 -c "skip pre_shared_key extensions" \
1743 -c "client hello, adding psk_key_exchange_modes extension" \
1744 -s "ClientHello message misses mandatory extensions."
1745
1746requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1747requires_config_enabled MBEDTLS_SSL_SRV_C
1748requires_config_enabled MBEDTLS_SSL_CLI_C
1749run_test "TLS 1.3Client: m->m psk / all, good" \
1750 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1751 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1752 0 \
1753 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1754 -c "client hello, adding psk_key_exchange_modes extension" \
1755 -c "client hello, adding PSK binder list" \
1756 -c "HTTP/1.0 200 OK"
1757
1758requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1759requires_config_enabled MBEDTLS_SSL_SRV_C
1760requires_config_enabled MBEDTLS_SSL_CLI_C
1761run_test "TLS 1.3Client: m->m psk / all, fail - no common identity" \
1762 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1763 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
1764 1 \
1765 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1766 -c "client hello, adding psk_key_exchange_modes extension" \
1767 -c "client hello, adding PSK binder list" \
1768 -s "No matched PSK or ticket" \
1769 -s "ClientHello message misses mandatory extensions."
1770
1771requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1772requires_config_enabled MBEDTLS_SSL_SRV_C
1773requires_config_enabled MBEDTLS_SSL_CLI_C
1774run_test "TLS 1.3Client: m->m psk / all, fail - no common psk" \
1775 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1776 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
1777 1 \
1778 -c "skip pre_shared_key extensions" \
1779 -c "client hello, adding psk_key_exchange_modes extension" \
1780 -s "ClientHello message misses mandatory extensions."
1781
1782# psk_ephemeral mode in client
1783requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1784requires_config_enabled MBEDTLS_SSL_SRV_C
1785requires_config_enabled MBEDTLS_SSL_CLI_C
1786run_test "TLS 1.3Client: m->m psk_ephemeral / psk, fail - no common key exchange mode" \
1787 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1788 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1789 1 \
1790 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1791 -c "client hello, adding psk_key_exchange_modes extension" \
1792 -c "client hello, adding PSK binder list" \
1793 -s "ClientHello message misses mandatory extensions."
1794
1795requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1796requires_config_enabled MBEDTLS_SSL_SRV_C
1797requires_config_enabled MBEDTLS_SSL_CLI_C
1798run_test "TLS 1.3Client: m->m psk_ephemeral / psk_ephemeral, good" \
1799 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1800 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1801 0 \
1802 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1803 -c "client hello, adding psk_key_exchange_modes extension" \
1804 -c "client hello, adding PSK binder list" \
1805 -c "HTTP/1.0 200 OK"
1806
1807requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1808requires_config_enabled MBEDTLS_SSL_SRV_C
1809requires_config_enabled MBEDTLS_SSL_CLI_C
1810run_test "TLS 1.3Client: m->m psk_ephemeral / psk_ephemeral, fail - no common identity" \
1811 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1812 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
1813 1 \
1814 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1815 -c "client hello, adding psk_key_exchange_modes extension" \
1816 -c "client hello, adding PSK binder list" \
1817 -s "No matched PSK or ticket" \
1818 -s "ClientHello message misses mandatory extensions."
1819
1820requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1821requires_config_enabled MBEDTLS_SSL_SRV_C
1822requires_config_enabled MBEDTLS_SSL_CLI_C
1823run_test "TLS 1.3Client: m->m psk_ephemeral / psk_ephemeral, fail - no common psk" \
1824 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1825 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1826 1 \
1827 -c "skip pre_shared_key extensions" \
1828 -c "client hello, adding psk_key_exchange_modes extension" \
1829 -s "ClientHello message misses mandatory extensions."
1830
1831requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1832requires_config_enabled MBEDTLS_SSL_SRV_C
1833requires_config_enabled MBEDTLS_SSL_CLI_C
1834run_test "TLS 1.3Client: m->m psk_ephemeral / ephemeral, fail - no common key exchange mode" \
1835 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1836 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1837 1 \
1838 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1839 -c "client hello, adding psk_key_exchange_modes extension" \
1840 -c "client hello, adding PSK binder list" \
1841 -s "ClientHello message misses mandatory extensions."
1842
1843requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1844requires_config_enabled MBEDTLS_SSL_SRV_C
1845requires_config_enabled MBEDTLS_SSL_CLI_C
1846run_test "TLS 1.3Client: m->m psk_ephemeral / ephemeral_all, good" \
1847 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1848 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1849 0 \
1850 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1851 -c "client hello, adding psk_key_exchange_modes extension" \
1852 -c "client hello, adding PSK binder list" \
1853 -c "HTTP/1.0 200 OK"
1854
1855requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1856requires_config_enabled MBEDTLS_SSL_SRV_C
1857requires_config_enabled MBEDTLS_SSL_CLI_C
1858run_test "TLS 1.3Client: m->m psk_ephemeral / ephemeral_all, fail - no common identity" \
1859 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1860 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
1861 1 \
1862 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1863 -c "client hello, adding psk_key_exchange_modes extension" \
1864 -c "client hello, adding PSK binder list" \
1865 -s "No matched PSK or ticket" \
1866 -s "ClientHello message misses mandatory extensions."
1867
1868requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1869requires_config_enabled MBEDTLS_SSL_SRV_C
1870requires_config_enabled MBEDTLS_SSL_CLI_C
1871run_test "TLS 1.3Client: m->m psk_ephemeral / ephemeral_all, fail - no common psk" \
1872 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1873 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1874 1 \
1875 -c "skip pre_shared_key extensions" \
1876 -c "client hello, adding psk_key_exchange_modes extension" \
1877 -s "ClientHello message misses mandatory extensions."
1878
1879requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1880requires_config_enabled MBEDTLS_SSL_SRV_C
1881requires_config_enabled MBEDTLS_SSL_CLI_C
1882run_test "TLS 1.3Client: m->m psk_ephemeral / psk_all, good" \
1883 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1884 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1885 0 \
1886 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1887 -c "client hello, adding psk_key_exchange_modes extension" \
1888 -c "client hello, adding PSK binder list" \
1889 -c "HTTP/1.0 200 OK"
1890
1891requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1892requires_config_enabled MBEDTLS_SSL_SRV_C
1893requires_config_enabled MBEDTLS_SSL_CLI_C
1894run_test "TLS 1.3Client: m->m psk_ephemeral / psk_all, fail - no common identity" \
1895 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1896 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
1897 1 \
1898 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1899 -c "client hello, adding psk_key_exchange_modes extension" \
1900 -c "client hello, adding PSK binder list" \
1901 -s "No matched PSK or ticket" \
1902 -s "ClientHello message misses mandatory extensions."
1903
1904requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1905requires_config_enabled MBEDTLS_SSL_SRV_C
1906requires_config_enabled MBEDTLS_SSL_CLI_C
1907run_test "TLS 1.3Client: m->m psk_ephemeral / psk_all, fail - no common psk" \
1908 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1909 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1910 1 \
1911 -c "skip pre_shared_key extensions" \
1912 -c "client hello, adding psk_key_exchange_modes extension" \
1913 -s "ClientHello message misses mandatory extensions."
1914
1915requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1916requires_config_enabled MBEDTLS_SSL_SRV_C
1917requires_config_enabled MBEDTLS_SSL_CLI_C
1918run_test "TLS 1.3Client: m->m psk_ephemeral / all, good" \
1919 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1920 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1921 0 \
1922 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1923 -c "client hello, adding psk_key_exchange_modes extension" \
1924 -c "client hello, adding PSK binder list" \
1925 -c "HTTP/1.0 200 OK"
1926
1927requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1928requires_config_enabled MBEDTLS_SSL_SRV_C
1929requires_config_enabled MBEDTLS_SSL_CLI_C
1930run_test "TLS 1.3Client: m->m psk_ephemeral / all, fail - no common identity" \
1931 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1932 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
1933 1 \
1934 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
1935 -c "client hello, adding psk_key_exchange_modes extension" \
1936 -c "client hello, adding PSK binder list" \
1937 -s "No matched PSK or ticket" \
1938 -s "ClientHello message misses mandatory extensions."
1939
1940requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1941requires_config_enabled MBEDTLS_SSL_SRV_C
1942requires_config_enabled MBEDTLS_SSL_CLI_C
1943run_test "TLS 1.3Client: m->m psk_ephemeral / all, fail - no common psk" \
1944 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
1945 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1946 1 \
1947 -c "skip pre_shared_key extensions" \
1948 -c "client hello, adding psk_key_exchange_modes extension" \
1949 -s "ClientHello message misses mandatory extensions."
1950
Xiaokang Qianca48ddd2022-08-29 08:25:17 +0000[diff] [blame^]1951# ephemeral mode in client
1952requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1953requires_config_enabled MBEDTLS_SSL_SRV_C
1954requires_config_enabled MBEDTLS_SSL_CLI_C
1955run_test "TLS 1.3Client: m->m ephemeral / psk, fail - no common key exchange mode" \
1956 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
1957 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1958 1 \
1959 -s "ClientHello message misses mandatory extensions."
1960
1961requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1962requires_config_enabled MBEDTLS_SSL_SRV_C
1963requires_config_enabled MBEDTLS_SSL_CLI_C
1964run_test "TLS 1.3Client: m->m ephemeral / psk_ephemeral, fail - no common key exchange mode" \
1965 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
1966 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1967 1 \
1968 -s "ClientHello message misses mandatory extensions."
1969
1970requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1971requires_config_enabled MBEDTLS_SSL_SRV_C
1972requires_config_enabled MBEDTLS_SSL_CLI_C
1973run_test "TLS 1.3Client: m->m ephemeral / ephemeral, good" \
1974 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1975 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1976 0 \
1977 -c "HTTP/1.0 200 OK"
1978
1979requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1980requires_config_enabled MBEDTLS_SSL_SRV_C
1981requires_config_enabled MBEDTLS_SSL_CLI_C
1982run_test "TLS 1.3Client: m->m ephemeral / ephemeral_all, good" \
1983 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
1984 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1985 0 \
1986 -c "HTTP/1.0 200 OK"
1987
1988requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1989requires_config_enabled MBEDTLS_SSL_SRV_C
1990requires_config_enabled MBEDTLS_SSL_CLI_C
1991run_test "TLS 1.3Client: m->m ephemeral / psk_all, fail - no common key exchange mode" \
1992 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
1993 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
1994 1 \
1995 -s "ClientHello message misses mandatory extensions."
1996
1997requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
1998requires_config_enabled MBEDTLS_SSL_SRV_C
1999requires_config_enabled MBEDTLS_SSL_CLI_C
2000run_test "TLS 1.3Client: m->m ephemeral / all, good" \
2001 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2002 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
2003 0 \
2004 -c "HTTP/1.0 200 OK"
2005
2006# ephemeral_all mode in client
2007requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2008requires_config_enabled MBEDTLS_SSL_SRV_C
2009requires_config_enabled MBEDTLS_SSL_CLI_C
2010run_test "TLS 1.3Client: m->m ephemeral_all / psk, fail - no common key exchange mode" \
2011 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
2012 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2013 1 \
2014 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2015 -c "client hello, adding psk_key_exchange_modes extension" \
2016 -c "client hello, adding PSK binder list" \
2017 -s "ClientHello message misses mandatory extensions."
2018
2019requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2020requires_config_enabled MBEDTLS_SSL_SRV_C
2021requires_config_enabled MBEDTLS_SSL_CLI_C
2022run_test "TLS 1.3Client: m->m ephemeral_all / psk_ephemeral, good" \
2023 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2024 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2025 0 \
2026 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2027 -c "client hello, adding psk_key_exchange_modes extension" \
2028 -c "client hello, adding PSK binder list" \
2029 -c "HTTP/1.0 200 OK"
2030
2031requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2032requires_config_enabled MBEDTLS_SSL_SRV_C
2033requires_config_enabled MBEDTLS_SSL_CLI_C
2034run_test "TLS 1.3Client: m->m ephemeral_all / psk_ephemeral, fail - no common identity" \
2035 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2036 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
2037 0 \
2038 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2039 -c "client hello, adding psk_key_exchange_modes extension" \
2040 -c "client hello, adding PSK binder list" \
2041 -s "No matched PSK or ticket" \
2042 -s "key exchange mode: ephemeral"
2043
2044requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2045requires_config_enabled MBEDTLS_SSL_SRV_C
2046requires_config_enabled MBEDTLS_SSL_CLI_C
2047run_test "TLS 1.3Client: m->m ephemeral_all / psk_ephemeral, fail - no common psk" \
2048 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2049 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2050 0 \
2051 -c "skip pre_shared_key extensions" \
2052 -c "client hello, adding psk_key_exchange_modes extension" \
2053 -s "key exchange mode: ephemeral"
2054
2055requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2056requires_config_enabled MBEDTLS_SSL_SRV_C
2057requires_config_enabled MBEDTLS_SSL_CLI_C
2058run_test "TLS 1.3Client: m->m ephemeral_all / ephemeral, good" \
2059 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
2060 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2061 0 \
2062 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2063 -c "client hello, adding psk_key_exchange_modes extension" \
2064 -c "client hello, adding PSK binder list" \
2065 -s "key exchange mode: ephemeral" \
2066 -c "HTTP/1.0 200 OK"
2067
2068requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2069requires_config_enabled MBEDTLS_SSL_SRV_C
2070requires_config_enabled MBEDTLS_SSL_CLI_C
2071run_test "TLS 1.3Client: m->m ephemeral_all / ephemeral_all, good" \
2072 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2073 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2074 0 \
2075 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2076 -c "client hello, adding psk_key_exchange_modes extension" \
2077 -c "client hello, adding PSK binder list" \
2078 -c "HTTP/1.0 200 OK"
2079
2080requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2081requires_config_enabled MBEDTLS_SSL_SRV_C
2082requires_config_enabled MBEDTLS_SSL_CLI_C
2083run_test "TLS 1.3Client: m->m ephemeral_all / ephemeral_all, good - fallback to ephemeral" \
2084 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2085 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
2086 0 \
2087 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2088 -c "client hello, adding psk_key_exchange_modes extension" \
2089 -c "client hello, adding PSK binder list" \
2090 -s "No matched PSK or ticket" \
2091 -s "key exchange mode: ephemeral"
2092
2093requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2094requires_config_enabled MBEDTLS_SSL_SRV_C
2095requires_config_enabled MBEDTLS_SSL_CLI_C
2096run_test "TLS 1.3Client: m->m ephemeral_all / ephemeral_all, good - fallback to ephemeral" \
2097 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2098 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2099 0 \
2100 -c "skip pre_shared_key extensions" \
2101 -c "client hello, adding psk_key_exchange_modes extension" \
2102 -s "key exchange mode: ephemeral"
2103
2104requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2105requires_config_enabled MBEDTLS_SSL_SRV_C
2106requires_config_enabled MBEDTLS_SSL_CLI_C
2107run_test "TLS 1.3Client: m->m ephemeral_all / psk_all, good" \
2108 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2109 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2110 0 \
2111 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2112 -c "client hello, adding psk_key_exchange_modes extension" \
2113 -c "client hello, adding PSK binder list" \
2114 -c "HTTP/1.0 200 OK"
2115
2116requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2117requires_config_enabled MBEDTLS_SSL_SRV_C
2118requires_config_enabled MBEDTLS_SSL_CLI_C
2119run_test "TLS 1.3Client: m->m ephemeral_all / psk_all, fail - no common identity" \
2120 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2121 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
2122 1 \
2123 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2124 -c "client hello, adding psk_key_exchange_modes extension" \
2125 -c "client hello, adding PSK binder list" \
2126 -s "No matched PSK or ticket" \
2127 -s "ClientHello message misses mandatory extensions."
2128
2129requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2130requires_config_enabled MBEDTLS_SSL_SRV_C
2131requires_config_enabled MBEDTLS_SSL_CLI_C
2132run_test "TLS 1.3Client: m->m ephemeral_all / psk_all, fail - no common psk" \
2133 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2134 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2135 1 \
2136 -c "skip pre_shared_key extensions" \
2137 -c "client hello, adding psk_key_exchange_modes extension" \
2138 -s "ClientHello message misses mandatory extensions."
2139
2140requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2141requires_config_enabled MBEDTLS_SSL_SRV_C
2142requires_config_enabled MBEDTLS_SSL_CLI_C
2143run_test "TLS 1.3Client: m->m ephemeral_all / all, good" \
2144 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2145 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2146 0 \
2147 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2148 -c "client hello, adding psk_key_exchange_modes extension" \
2149 -c "client hello, adding PSK binder list" \
2150 -c "HTTP/1.0 200 OK"
2151
2152requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2153requires_config_enabled MBEDTLS_SSL_SRV_C
2154requires_config_enabled MBEDTLS_SSL_CLI_C
2155run_test "TLS 1.3Client: m->m ephemeral_all / all, fail - no common identity" \
2156 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2157 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
2158 0 \
2159 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2160 -c "client hello, adding psk_key_exchange_modes extension" \
2161 -c "client hello, adding PSK binder list" \
2162 -s "No matched PSK or ticket" \
2163 -s "key exchange mode: ephemeral"
2164
2165requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2166requires_config_enabled MBEDTLS_SSL_SRV_C
2167requires_config_enabled MBEDTLS_SSL_CLI_C
2168run_test "TLS 1.3Client: m->m ephemeral_all / all, fail - no common psk" \
2169 "$P_SRV nbio=2 debug_level=5 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
2170 "$P_CLI nbio=2 debug_level=5 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
2171 0 \
2172 -c "skip pre_shared_key extensions" \
2173 -c "client hello, adding psk_key_exchange_modes extension" \
2174 -s "key exchange mode: ephemeral"
2175
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2176#OPENSSL-SERVER psk mode
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2177requires_openssl_tls1_3
2178requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2179requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2180requires_config_enabled MBEDTLS_DEBUG_C
2181requires_config_enabled MBEDTLS_SSL_CLI_C
2182requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2183 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2184run_test "TLS 1.3Client: PSK: psk: with matched key and identity, with psk_ke and psk_dhe_ke. m->O" \
2185 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2186 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2187 0 \
2188 -c "=> write client hello" \
2189 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2190 -c "client hello, adding psk_key_exchange_modes extension" \
2191 -c "client hello, adding PSK binder list" \
2192 -c "<= write client hello" \
2193 -c "HTTP/1.0 200 ok"
2194
2195requires_openssl_tls1_3
2196requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2197requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2198requires_config_enabled MBEDTLS_DEBUG_C
2199requires_config_enabled MBEDTLS_SSL_CLI_C
2200requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2201 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2202run_test "TLS 1.3Client: PSK: psk: with matched key and identity, with psk_dhe_ke. m->O" \
2203 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2204 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2205 1 \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2206 -c "=> write client hello" \
2207 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2208 -c "client hello, adding psk_key_exchange_modes extension" \
2209 -c "client hello, adding PSK binder list" \
2210 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2211 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2212
2213requires_openssl_tls1_3
2214requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2215requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2216requires_config_enabled MBEDTLS_DEBUG_C
2217requires_config_enabled MBEDTLS_SSL_CLI_C
2218requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2219 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2220run_test "TLS 1.3Client: PSK: psk: with mismatched identity, with psk_ke and psk_dhe_ke. m->O" \
2221 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2222 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=psk" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2223 0 \
2224 -c "=> write client hello" \
2225 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2226 -c "client hello, adding psk_key_exchange_modes extension" \
2227 -c "client hello, adding PSK binder list" \
2228 -c "<= write client hello" \
2229 -s "PSK warning: client identity not what we expected" \
2230 -c "HTTP/1.0 200 ok"
2231
2232requires_openssl_tls1_3
2233requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2234requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2235requires_config_enabled MBEDTLS_DEBUG_C
2236requires_config_enabled MBEDTLS_SSL_CLI_C
2237requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2238 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2239run_test "TLS 1.3Client: PSK: psk: without pre-share key, with psk_ke and psk_dhe_ke. m->O" \
2240 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2241 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2242 1 \
2243 -c "=> write client hello" \
2244 -c "client hello, adding psk_key_exchange_modes extension" \
2245 -c "skip pre_shared_key extensions" \
2246 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
2247 -c "<= write client hello"
2248
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2249#GNUTLS-SERVER psk mode
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2250requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2251requires_gnutls_tls1_3
2252requires_gnutls_next_no_ticket
2253requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2254requires_config_enabled MBEDTLS_DEBUG_C
2255requires_config_enabled MBEDTLS_SSL_CLI_C
2256run_test "TLS 1.3Client: PSK: psk: with matched key and identity, with psk_ke and psk_dhe_ke. m->G" \
2257 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2258 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2259 0 \
2260 -c "=> write client hello" \
2261 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2262 -c "client hello, adding psk_key_exchange_modes extension" \
2263 -c "client hello, adding PSK binder list" \
2264 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2265 -s "Parsing extension 'Pre Shared Key/41'" \
2266 -c "<= write client hello" \
2267 -c "HTTP/1.0 200 OK"
2268
2269requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2270requires_gnutls_tls1_3
2271requires_gnutls_next_no_ticket
2272requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2273requires_config_enabled MBEDTLS_DEBUG_C
2274requires_config_enabled MBEDTLS_SSL_CLI_C
2275run_test "TLS 1.3Client: PSK: psk: with matched key and identity, with psk_ke. m->G" \
2276 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2277 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2278 0 \
2279 -c "=> write client hello" \
2280 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2281 -c "client hello, adding psk_key_exchange_modes extension" \
2282 -c "client hello, adding PSK binder list" \
2283 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2284 -s "Parsing extension 'Pre Shared Key/41'" \
2285 -c "<= write client hello" \
2286 -c "HTTP/1.0 200 OK"
2287
2288requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2289requires_gnutls_tls1_3
2290requires_gnutls_next_no_ticket
2291requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2292requires_config_enabled MBEDTLS_DEBUG_C
2293requires_config_enabled MBEDTLS_SSL_CLI_C
2294run_test "TLS 1.3Client: PSK: psk: with matched key and identity, with psk_dhe_ke. m->G" \
2295 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2296 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2297 1 \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2298 -c "=> write client hello" \
2299 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2300 -c "client hello, adding psk_key_exchange_modes extension" \
2301 -c "client hello, adding PSK binder list" \
2302 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2303 -s "Parsing extension 'Pre Shared Key/41'" \
2304 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2305 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2306
2307requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2308requires_gnutls_tls1_3
2309requires_gnutls_next_no_ticket
2310requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2311requires_config_enabled MBEDTLS_DEBUG_C
2312requires_config_enabled MBEDTLS_SSL_CLI_C
2313run_test "TLS 1.3Client: PSK: psk: with mismatched identity, with psk_ke and psk_dhe_ke. m->G" \
2314 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2315 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2316 1 \
2317 -c "=> write client hello" \
2318 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2319 -c "client hello, adding psk_key_exchange_modes extension" \
2320 -c "client hello, adding PSK binder list" \
2321 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2322 -s "Parsing extension 'Pre Shared Key/41'" \
2323 -c "<= write client hello" \
2324 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
2325
2326requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2327requires_gnutls_tls1_3
2328requires_gnutls_next_no_ticket
2329requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2330requires_config_enabled MBEDTLS_DEBUG_C
2331requires_config_enabled MBEDTLS_SSL_CLI_C
2332run_test "TLS 1.3Client: PSK: psk: with mismatched identity, with psk_ke. m->G" \
2333 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2334 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk" \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2335 1 \
2336 -c "=> write client hello" \
2337 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2338 -c "client hello, adding psk_key_exchange_modes extension" \
2339 -c "client hello, adding PSK binder list" \
2340 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2341 -s "Parsing extension 'Pre Shared Key/41'" \
2342 -c "<= write client hello" \
2343 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
2344
2345requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2346requires_gnutls_tls1_3
2347requires_gnutls_next_no_ticket
2348requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2349requires_config_enabled MBEDTLS_DEBUG_C
2350requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2351run_test "TLS 1.3Client: PSK: psk: without pre-share key, with psk_ke and psk_dhe_ke. m->G" \
2352 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2353 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2354 1 \
Xiaokang Qiancf6442e2022-08-23 06:47:40 +0000[diff] [blame]2355 -c "=> write client hello" \
2356 -c "client hello, adding psk_key_exchange_modes extension" \
2357 -c "skip pre_shared_key extensions" \
2358 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2359 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2360 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2361
2362#OPENSSL-SERVER psk_all mode
2363requires_openssl_tls1_3
2364requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2365requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2366requires_config_enabled MBEDTLS_DEBUG_C
2367requires_config_enabled MBEDTLS_SSL_CLI_C
2368requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2369 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2370run_test "TLS 1.3Client: PSK: psk_all: with matched key and identity, with psk_ke and psk_dhe_ke. m->O" \
2371 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2372 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2373 0 \
2374 -c "=> write client hello" \
2375 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2376 -c "client hello, adding psk_key_exchange_modes extension" \
2377 -c "client hello, adding PSK binder list" \
2378 -c "<= write client hello" \
2379 -c "HTTP/1.0 200 ok"
2380
2381requires_openssl_tls1_3
2382requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2383requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2384requires_config_enabled MBEDTLS_DEBUG_C
2385requires_config_enabled MBEDTLS_SSL_CLI_C
2386requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2387 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2388run_test "TLS 1.3Client: PSK: psk_all: with matched key and identity, with psk_dhe_ke. m->O" \
2389 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2390 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
2391 0 \
2392 -c "=> write client hello" \
2393 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2394 -c "client hello, adding psk_key_exchange_modes extension" \
2395 -c "client hello, adding PSK binder list" \
2396 -c "<= write client hello" \
2397 -c "HTTP/1.0 200 ok"
2398
2399requires_openssl_tls1_3
2400requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2401requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2402requires_config_enabled MBEDTLS_DEBUG_C
2403requires_config_enabled MBEDTLS_SSL_CLI_C
2404requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2405 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2406run_test "TLS 1.3Client: PSK: psk_all: with mismatched identity, with psk_ke and psk_dhe_ke. m->O" \
2407 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2408 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2409 0 \
2410 -c "=> write client hello" \
2411 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2412 -c "client hello, adding psk_key_exchange_modes extension" \
2413 -c "client hello, adding PSK binder list" \
2414 -c "<= write client hello" \
2415 -s "PSK warning: client identity not what we expected" \
2416 -c "HTTP/1.0 200 ok"
2417
2418requires_openssl_tls1_3
2419requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2420requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2421requires_config_enabled MBEDTLS_DEBUG_C
2422requires_config_enabled MBEDTLS_SSL_CLI_C
2423requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2424 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2425run_test "TLS 1.3Client: PSK: psk_all: with mismatched identity, with psk_dhe_ke. m->O" \
2426 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2427 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2428 0 \
2429 -c "=> write client hello" \
2430 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2431 -c "client hello, adding psk_key_exchange_modes extension" \
2432 -c "client hello, adding PSK binder list" \
2433 -c "<= write client hello" \
2434 -c "HTTP/1.0 200 ok"
2435
2436requires_openssl_tls1_3
2437requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2438requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2439requires_config_enabled MBEDTLS_DEBUG_C
2440requires_config_enabled MBEDTLS_SSL_CLI_C
2441requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2442 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2443run_test "TLS 1.3Client: PSK: psk_all: without pre-share key, with psk_ke and psk_dhe_ke. m->O" \
2444 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2445 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2446 1 \
2447 -c "=> write client hello" \
2448 -c "client hello, adding psk_key_exchange_modes extension" \
2449 -c "skip pre_shared_key extensions" \
2450 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
2451 -c "<= write client hello"
2452
2453#GNUTLS-SERVER psk_all mode
2454requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2455requires_gnutls_tls1_3
2456requires_gnutls_next_no_ticket
2457requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2458requires_config_enabled MBEDTLS_DEBUG_C
2459requires_config_enabled MBEDTLS_SSL_CLI_C
2460run_test "TLS 1.3Client: PSK: psk_all: with matched key and identity, with psk_ke and psk_dhe_ke. m->G" \
2461 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2462 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2463 0 \
2464 -c "=> write client hello" \
2465 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2466 -c "client hello, adding psk_key_exchange_modes extension" \
2467 -c "client hello, adding PSK binder list" \
2468 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2469 -s "Parsing extension 'Pre Shared Key/41'" \
2470 -c "<= write client hello" \
2471 -c "HTTP/1.0 200 OK"
2472
2473requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2474requires_gnutls_tls1_3
2475requires_gnutls_next_no_ticket
2476requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2477requires_config_enabled MBEDTLS_DEBUG_C
2478requires_config_enabled MBEDTLS_SSL_CLI_C
2479run_test "TLS 1.3Client: PSK: psk_all: with matched key and identity, with psk_ke. m->G" \
2480 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2481 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2482 0 \
2483 -c "=> write client hello" \
2484 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2485 -c "client hello, adding psk_key_exchange_modes extension" \
2486 -c "client hello, adding PSK binder list" \
2487 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2488 -s "Parsing extension 'Pre Shared Key/41'" \
2489 -c "<= write client hello" \
2490 -c "HTTP/1.0 200 OK"
2491
2492requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2493requires_gnutls_tls1_3
2494requires_gnutls_next_no_ticket
2495requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2496requires_config_enabled MBEDTLS_DEBUG_C
2497requires_config_enabled MBEDTLS_SSL_CLI_C
2498run_test "TLS 1.3Client: PSK: psk_all: with matched key and identity, with psk_dhe_ke. m->G" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2499 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2500 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_all" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2501 1 \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2502 -c "=> write client hello" \
2503 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2504 -c "client hello, adding psk_key_exchange_modes extension" \
2505 -c "client hello, adding PSK binder list" \
2506 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2507 -s "Parsing extension 'Pre Shared Key/41'" \
2508 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2509 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2510
2511requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2512requires_gnutls_tls1_3
2513requires_gnutls_next_no_ticket
2514requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2515requires_config_enabled MBEDTLS_DEBUG_C
2516requires_config_enabled MBEDTLS_SSL_CLI_C
2517run_test "TLS 1.3Client: PSK: psk_all: with mismatched identity, with psk_ke and psk_dhe_ke. m->G" \
2518 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2519 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2520 1 \
2521 -c "=> write client hello" \
2522 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2523 -c "client hello, adding psk_key_exchange_modes extension" \
2524 -c "client hello, adding PSK binder list" \
2525 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2526 -s "Parsing extension 'Pre Shared Key/41'" \
2527 -c "<= write client hello" \
2528 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
2529
2530requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2531requires_gnutls_tls1_3
2532requires_gnutls_next_no_ticket
2533requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2534requires_config_enabled MBEDTLS_DEBUG_C
2535requires_config_enabled MBEDTLS_SSL_CLI_C
2536run_test "TLS 1.3Client: PSK: psk_all: with mismatched identity, with psk_ke. m->G" \
2537 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2538 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2539 1 \
2540 -c "=> write client hello" \
2541 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2542 -c "client hello, adding psk_key_exchange_modes extension" \
2543 -c "client hello, adding PSK binder list" \
2544 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2545 -s "Parsing extension 'Pre Shared Key/41'" \
2546 -c "<= write client hello" \
2547 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
2548
2549requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2550requires_gnutls_tls1_3
2551requires_gnutls_next_no_ticket
2552requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2553requires_config_enabled MBEDTLS_DEBUG_C
2554requires_config_enabled MBEDTLS_SSL_CLI_C
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2555run_test "TLS 1.3Client: PSK: psk_all: without pre-share key, with psk_ke and psk_dhe_ke. m->G" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2556 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2557 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0d0e0f tls13_kex_modes=psk_all" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2558 1 \
Xiaokang Qian73894232022-08-23 08:06:34 +0000[diff] [blame]2559 -c "=> write client hello" \
2560 -c "client hello, adding psk_key_exchange_modes extension" \
2561 -c "skip pre_shared_key extensions" \
2562 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2563 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2564 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2565
2566#OPENSSL-SERVER psk_ephemeral mode
2567requires_openssl_tls1_3
2568requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2569requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2570requires_config_enabled MBEDTLS_DEBUG_C
2571requires_config_enabled MBEDTLS_SSL_CLI_C
2572requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2573 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2574run_test "TLS 1.3Client: PSK: psk_ephemeral: with matched key and identity, with psk_ke and psk_dhe_ke. m->O" \
2575 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2576 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2577 0 \
2578 -c "=> write client hello" \
2579 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2580 -c "client hello, adding psk_key_exchange_modes extension" \
2581 -c "client hello, adding PSK binder list" \
2582 -c "<= write client hello" \
2583 -c "HTTP/1.0 200 ok"
2584
2585requires_openssl_tls1_3
2586requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2587requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2588requires_config_enabled MBEDTLS_DEBUG_C
2589requires_config_enabled MBEDTLS_SSL_CLI_C
2590requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2591 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2592run_test "TLS 1.3Client: PSK: psk_ephemeral: with matched key and identity, with psk_dhe_ke. m->O" \
2593 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2594 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
2595 0 \
2596 -c "=> write client hello" \
2597 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2598 -c "client hello, adding psk_key_exchange_modes extension" \
2599 -c "client hello, adding PSK binder list" \
2600 -c "<= write client hello" \
2601 -c "HTTP/1.0 200 ok"
2602
2603requires_openssl_tls1_3
2604requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2605requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2606requires_config_enabled MBEDTLS_DEBUG_C
2607requires_config_enabled MBEDTLS_SSL_CLI_C
2608requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2609 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2610run_test "TLS 1.3Client: PSK: psk_ephemeral: with mismatched identity, with psk_ke and psk_dhe_ke. m->O" \
2611 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2612 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2613 0 \
2614 -c "=> write client hello" \
2615 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2616 -c "client hello, adding psk_key_exchange_modes extension" \
2617 -c "client hello, adding PSK binder list" \
2618 -c "<= write client hello" \
2619 -s "PSK warning: client identity not what we expected" \
2620 -c "HTTP/1.0 200 ok"
2621
2622requires_openssl_tls1_3
2623requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2624requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2625requires_config_enabled MBEDTLS_DEBUG_C
2626requires_config_enabled MBEDTLS_SSL_CLI_C
2627requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2628 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2629run_test "TLS 1.3Client: PSK: psk_ephemeral: with mismatched identity, with psk_dhe_ke. m->O" \
2630 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2631 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2632 0 \
2633 -c "=> write client hello" \
2634 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2635 -c "client hello, adding psk_key_exchange_modes extension" \
2636 -c "client hello, adding PSK binder list" \
2637 -c "<= write client hello" \
2638 -c "HTTP/1.0 200 ok"
2639
2640requires_openssl_tls1_3
2641requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2642requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2643requires_config_enabled MBEDTLS_DEBUG_C
2644requires_config_enabled MBEDTLS_SSL_CLI_C
2645requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2646 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2647run_test "TLS 1.3Client: PSK: psk_ephemeral: without pre-share key, with psk_ke and psk_dhe_ke. m->O" \
2648 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2649 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2650 1 \
2651 -c "=> write client hello" \
2652 -c "client hello, adding psk_key_exchange_modes extension" \
2653 -c "skip pre_shared_key extensions" \
2654 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
2655 -c "<= write client hello"
2656
2657#GNUTLS-SERVER psk_ephemeral mode
2658requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2659requires_gnutls_tls1_3
2660requires_gnutls_next_no_ticket
2661requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2662requires_config_enabled MBEDTLS_DEBUG_C
2663requires_config_enabled MBEDTLS_SSL_CLI_C
2664run_test "TLS 1.3Client: PSK: psk_ephemeral: with matched key and identity, with psk_ke and psk_dhe_ke. m->G" \
2665 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2666 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2667 0 \
2668 -c "=> write client hello" \
2669 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2670 -c "client hello, adding psk_key_exchange_modes extension" \
2671 -c "client hello, adding PSK binder list" \
2672 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2673 -s "Parsing extension 'Pre Shared Key/41'" \
2674 -c "<= write client hello" \
2675 -c "HTTP/1.0 200 OK"
2676
2677requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2678requires_gnutls_tls1_3
2679requires_gnutls_next_no_ticket
2680requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2681requires_config_enabled MBEDTLS_DEBUG_C
2682requires_config_enabled MBEDTLS_SSL_CLI_C
2683run_test "TLS 1.3Client: PSK: psk_ephemeral: with matched key and identity, with psk_ke. m->G" \
2684 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2685 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2686 1 \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2687 -c "=> write client hello" \
2688 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2689 -c "client hello, adding psk_key_exchange_modes extension" \
2690 -c "client hello, adding PSK binder list" \
2691 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2692 -s "Parsing extension 'Pre Shared Key/41'" \
2693 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2694 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2695
2696requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2697requires_gnutls_tls1_3
2698requires_gnutls_next_no_ticket
2699requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2700requires_config_enabled MBEDTLS_DEBUG_C
2701requires_config_enabled MBEDTLS_SSL_CLI_C
2702run_test "TLS 1.3Client: PSK: psk_ephemeral: with matched key and identity, with psk_dhe_ke. m->G" \
2703 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2704 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2705 0 \
2706 -c "=> write client hello" \
2707 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2708 -c "client hello, adding psk_key_exchange_modes extension" \
2709 -c "client hello, adding PSK binder list" \
2710 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2711 -s "Parsing extension 'Pre Shared Key/41'" \
2712 -c "<= write client hello" \
2713 -c "HTTP/1.0 200 OK"
2714
2715requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2716requires_gnutls_tls1_3
2717requires_gnutls_next_no_ticket
2718requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2719requires_config_enabled MBEDTLS_DEBUG_C
2720requires_config_enabled MBEDTLS_SSL_CLI_C
2721run_test "TLS 1.3Client: PSK: psk_ephemeral: with mismatched identity, with psk_ke and psk_dhe_ke. m->G" \
2722 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2723 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2724 1 \
2725 -c "=> write client hello" \
2726 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2727 -c "client hello, adding psk_key_exchange_modes extension" \
2728 -c "client hello, adding PSK binder list" \
2729 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2730 -s "Parsing extension 'Pre Shared Key/41'" \
2731 -c "<= write client hello" \
2732 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
2733
2734requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2735requires_gnutls_tls1_3
2736requires_gnutls_next_no_ticket
2737requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2738requires_config_enabled MBEDTLS_DEBUG_C
2739requires_config_enabled MBEDTLS_SSL_CLI_C
2740run_test "TLS 1.3Client: PSK: psk_ephemeral: with mismatched identity, with psk_ke. m->G" \
2741 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2742 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2743 1 \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2744 -c "=> write client hello" \
2745 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2746 -c "client hello, adding psk_key_exchange_modes extension" \
2747 -c "client hello, adding PSK binder list" \
2748 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2749 -s "Parsing extension 'Pre Shared Key/41'" \
2750 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2751 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2752
2753requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2754requires_gnutls_tls1_3
2755requires_gnutls_next_no_ticket
2756requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2757requires_config_enabled MBEDTLS_DEBUG_C
2758requires_config_enabled MBEDTLS_SSL_CLI_C
2759run_test "TLS 1.3Client: PSK: psk_ephemeral: with mismatched identity, with psk_dhe_ke. m->G" \
2760 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2761 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2762 1 \
2763 -c "=> write client hello" \
2764 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
2765 -c "client hello, adding psk_key_exchange_modes extension" \
2766 -c "client hello, adding PSK binder list" \
2767 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2768 -s "Parsing extension 'Pre Shared Key/41'" \
2769 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2770 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2771
2772requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2773requires_gnutls_tls1_3
2774requires_gnutls_next_no_ticket
2775requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2776requires_config_enabled MBEDTLS_DEBUG_C
2777requires_config_enabled MBEDTLS_SSL_CLI_C
2778run_test "TLS 1.3Client: PSK: psk_ephemeral: without pre-share key, with psk_ke and psk_dhe_ke. m->G" \
2779 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2780 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0d0e0f tls13_kex_modes=psk_ephemeral" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2781 1 \
Xiaokang Qianff5705b2022-08-24 03:18:31 +0000[diff] [blame]2782 -c "=> write client hello" \
2783 -c "client hello, adding psk_key_exchange_modes extension" \
2784 -c "skip pre_shared_key extensions" \
2785 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
2786 -c "<= write client hello" \
Xiaokang Qiane0cc5842022-08-25 06:17:36 +0000[diff] [blame]2787 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2788
2789#OPENSSL-SERVER ephemeral mode
2790requires_openssl_tls1_3
2791requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2792requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2793requires_config_enabled MBEDTLS_DEBUG_C
2794requires_config_enabled MBEDTLS_SSL_CLI_C
2795requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2796 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2797run_test "TLS 1.3Client: PSK: ephemeral: with matched key and identity, with psk_ke and psk_dhe_ke. m->O" \
2798 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2799 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2800 0 \
2801 -c "=> write client hello" \
2802 -c "skip psk_key_exchange_modes extension" \
2803 -c "<= write client hello" \
2804 -c "found key_shares extension" \
2805 -c "HTTP/1.0 200 ok"
2806
2807requires_openssl_tls1_3
2808requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2809requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2810requires_config_enabled MBEDTLS_DEBUG_C
2811requires_config_enabled MBEDTLS_SSL_CLI_C
2812requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2813 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2814run_test "TLS 1.3Client: PSK: ephemeral: with matched key and identity, with psk_dhe_ke. m->O" \
2815 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
2816 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
2817 0 \
2818 -c "=> write client hello" \
2819 -c "skip psk_key_exchange_modes extension" \
2820 -c "<= write client hello" \
2821 -c "found key_shares extension" \
2822 -c "HTTP/1.0 200 ok"
2823
2824requires_openssl_tls1_3
2825requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2826requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2827requires_config_enabled MBEDTLS_DEBUG_C
2828requires_config_enabled MBEDTLS_SSL_CLI_C
2829requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2830 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2831run_test "TLS 1.3Client: PSK: ephemeral: with mismatched identity, with psk_ke and psk_dhe_ke. m->O" \
2832 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2833 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2834 0 \
2835 -c "=> write client hello" \
2836 -c "skip psk_key_exchange_modes extension" \
2837 -c "<= write client hello" \
2838 -c "found key_shares extension" \
2839 -c "HTTP/1.0 200 ok"
2840
2841requires_openssl_tls1_3
2842requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2843requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2844requires_config_enabled MBEDTLS_DEBUG_C
2845requires_config_enabled MBEDTLS_SSL_CLI_C
2846requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2847 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2848run_test "TLS 1.3Client: PSK: ephemeral: with mismatched identity, with psk_dhe_ke. m->O" \
2849 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2850 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2851 0 \
2852 -c "=> write client hello" \
2853 -c "skip psk_key_exchange_modes extension" \
2854 -c "<= write client hello" \
2855 -c "found key_shares extension" \
2856 -c "HTTP/1.0 200 ok"
2857
2858requires_openssl_tls1_3
2859requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2860requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2861requires_config_enabled MBEDTLS_DEBUG_C
2862requires_config_enabled MBEDTLS_SSL_CLI_C
2863requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2864 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2865run_test "TLS 1.3Client: PSK: ephemeral: without pre-share key, with psk_ke and psk_dhe_ke. m->O" \
2866 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2867 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2868 0 \
2869 -c "=> write client hello" \
2870 -c "skip psk_key_exchange_modes extension" \
2871 -c "<= write client hello"
2872
2873#GNUTLS-SERVER ephemeral mode
2874requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2875requires_gnutls_tls1_3
2876requires_gnutls_next_no_ticket
2877requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2878requires_config_enabled MBEDTLS_DEBUG_C
2879requires_config_enabled MBEDTLS_SSL_CLI_C
2880run_test "TLS 1.3Client: PSK: ephemeral: with matched key and identity, with psk_ke and psk_dhe_ke. m->G" \
2881 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2882 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2883 0 \
2884 -c "=> write client hello" \
2885 -c "skip psk_key_exchange_modes extension" \
2886 -s "Not sending extension (PSK Key Exchange Modes/45)" \
2887 -c "<= write client hello" \
2888 -c "HTTP/1.0 200 OK"
2889
2890requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2891requires_gnutls_tls1_3
2892requires_gnutls_next_no_ticket
2893requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2894requires_config_enabled MBEDTLS_DEBUG_C
2895requires_config_enabled MBEDTLS_SSL_CLI_C
2896run_test "TLS 1.3Client: PSK: ephemeral: with matched key and identity, with psk_ke. m->G" \
2897 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2898 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2899 0 \
2900 -c "=> write client hello" \
2901 -c "skip psk_key_exchange_modes extension" \
2902 -s "Not sending extension (PSK Key Exchange Modes/45)" \
2903 -c "<= write client hello" \
2904 -c "HTTP/1.0 200 OK"
2905
2906requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2907requires_gnutls_tls1_3
2908requires_gnutls_next_no_ticket
2909requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2910requires_config_enabled MBEDTLS_DEBUG_C
2911requires_config_enabled MBEDTLS_SSL_CLI_C
2912run_test "TLS 1.3Client: PSK: ephemeral: with matched key and identity, with psk_dhe_ke. m->G" \
2913 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2914 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2915 0 \
2916 -c "=> write client hello" \
2917 -c "skip psk_key_exchange_modes extension" \
2918 -s "Not sending extension (PSK Key Exchange Modes/45)" \
2919 -c "<= write client hello" \
2920 -c "HTTP/1.0 200 OK"
2921
2922requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2923requires_gnutls_tls1_3
2924requires_gnutls_next_no_ticket
2925requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2926requires_config_enabled MBEDTLS_DEBUG_C
2927requires_config_enabled MBEDTLS_SSL_CLI_C
2928run_test "TLS 1.3Client: PSK: ephemeral: with mismatched identity, with psk_ke and psk_dhe_ke. m->G" \
2929 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2930 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2931 0 \
2932 -c "=> write client hello" \
2933 -c "skip psk_key_exchange_modes extension" \
2934 -s "Not sending extension (PSK Key Exchange Modes/45)" \
2935 -c "<= write client hello" \
2936 -c "HTTP/1.0 200 OK"
2937
2938requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2939requires_gnutls_tls1_3
2940requires_gnutls_next_no_ticket
2941requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2942requires_config_enabled MBEDTLS_DEBUG_C
2943requires_config_enabled MBEDTLS_SSL_CLI_C
2944run_test "TLS 1.3Client: PSK: ephemeral: with mismatched identity, with psk_ke. m->G" \
2945 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2946 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2947 0 \
2948 -c "=> write client hello" \
2949 -c "skip psk_key_exchange_modes extension" \
2950 -s "Not sending extension (PSK Key Exchange Modes/45)" \
2951 -c "<= write client hello" \
2952 -c "HTTP/1.0 200 OK"
2953
2954requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2955requires_gnutls_tls1_3
2956requires_gnutls_next_no_ticket
2957requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2958requires_config_enabled MBEDTLS_DEBUG_C
2959requires_config_enabled MBEDTLS_SSL_CLI_C
2960run_test "TLS 1.3Client: PSK: ephemeral: with mismatched identity, with psk_dhe_ke. m->G" \
2961 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2962 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2963 0 \
2964 -c "=> write client hello" \
2965 -c "skip psk_key_exchange_modes extension" \
2966 -s "Not sending extension (PSK Key Exchange Modes/45)" \
2967 -c "<= write client hello" \
2968 -c "HTTP/1.0 200 OK"
2969
2970requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2971requires_gnutls_tls1_3
2972requires_gnutls_next_no_ticket
2973requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2974requires_config_enabled MBEDTLS_DEBUG_C
2975requires_config_enabled MBEDTLS_SSL_CLI_C
2976run_test "TLS 1.3Client: PSK: ephemeral: without pre-share key, with psk_ke and psk_dhe_ke. m->G" \
2977 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2978 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0d0e0f tls13_kex_modes=ephemeral" \
Xiaokang Qian01173c22022-08-24 06:29:05 +0000[diff] [blame]2979 0 \
2980 -c "=> write client hello" \
2981 -c "skip psk_key_exchange_modes extension" \
2982 -s "Not sending extension (PSK Key Exchange Modes/45)" \
2983 -c "<= write client hello" \
2984 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
2985 -c "HTTP/1.0 200 OK"
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2986
2987#OPENSSL-SERVER ephemeral_all mode
2988requires_openssl_tls1_3
2989requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2990requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2991requires_config_enabled MBEDTLS_DEBUG_C
2992requires_config_enabled MBEDTLS_SSL_CLI_C
2993requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
2994 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
2995run_test "TLS 1.3Client: PSK: ephemeral_all: with matched key and identity, with psk_ke and psk_dhe_ke. m->O" \
2996 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]2997 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]2998 0 \
2999 -c "=> write client hello" \
3000 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3001 -c "client hello, adding psk_key_exchange_modes extension" \
3002 -c "client hello, adding PSK binder list" \
3003 -c "<= write client hello" \
3004 -c "HTTP/1.0 200 ok"
3005
3006requires_openssl_tls1_3
3007requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3008requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3009requires_config_enabled MBEDTLS_DEBUG_C
3010requires_config_enabled MBEDTLS_SSL_CLI_C
3011requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3012 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3013run_test "TLS 1.3Client: PSK: ephemeral_all: with matched key and identity, with psk_dhe_ke. m->O" \
3014 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
3015 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
3016 0 \
3017 -c "=> write client hello" \
3018 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3019 -c "client hello, adding psk_key_exchange_modes extension" \
3020 -c "client hello, adding PSK binder list" \
3021 -c "<= write client hello" \
3022 -c "HTTP/1.0 200 ok"
3023
3024requires_openssl_tls1_3
3025requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3026requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3027requires_config_enabled MBEDTLS_DEBUG_C
3028requires_config_enabled MBEDTLS_SSL_CLI_C
3029requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3030 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3031run_test "TLS 1.3Client: PSK: ephemeral_all: with mismatched identity, with psk_ke and psk_dhe_ke. m->O" \
3032 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3033 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3034 0 \
3035 -c "=> write client hello" \
3036 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3037 -c "client hello, adding psk_key_exchange_modes extension" \
3038 -c "client hello, adding PSK binder list" \
3039 -c "<= write client hello" \
3040 -s "PSK warning: client identity not what we expected" \
3041 -c "HTTP/1.0 200 ok"
3042
3043requires_openssl_tls1_3
3044requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3045requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3046requires_config_enabled MBEDTLS_DEBUG_C
3047requires_config_enabled MBEDTLS_SSL_CLI_C
3048requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3049 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3050run_test "TLS 1.3Client: PSK: ephemeral_all: with mismatched identity, with psk_dhe_ke. m->O" \
3051 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3052 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3053 0 \
3054 -c "=> write client hello" \
3055 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3056 -c "client hello, adding psk_key_exchange_modes extension" \
3057 -c "client hello, adding PSK binder list" \
3058 -c "<= write client hello" \
3059 -c "HTTP/1.0 200 ok"
3060
3061requires_openssl_tls1_3
3062requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3063requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3064requires_config_enabled MBEDTLS_DEBUG_C
3065requires_config_enabled MBEDTLS_SSL_CLI_C
3066requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3067 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3068run_test "TLS 1.3Client: PSK: ephemeral_all: without pre-share key, with psk_ke and psk_dhe_ke. m->O" \
3069 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3070 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3071 1 \
3072 -c "=> write client hello" \
3073 -c "client hello, adding psk_key_exchange_modes extension" \
3074 -c "skip pre_shared_key extensions" \
3075 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
3076 -c "<= write client hello"
3077
3078#GNUTLS-SERVER ephemeral_all mode
3079requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3080requires_gnutls_tls1_3
3081requires_gnutls_next_no_ticket
3082requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3083requires_config_enabled MBEDTLS_DEBUG_C
3084requires_config_enabled MBEDTLS_SSL_CLI_C
3085run_test "TLS 1.3Client: PSK: ephemeral_all: with matched key and identity, with psk_ke and psk_dhe_ke. m->G" \
3086 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3087 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3088 0 \
3089 -c "=> write client hello" \
3090 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3091 -c "client hello, adding psk_key_exchange_modes extension" \
3092 -c "client hello, adding PSK binder list" \
3093 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3094 -s "Parsing extension 'Pre Shared Key/41'" \
3095 -c "<= write client hello" \
3096 -c "HTTP/1.0 200 OK"
3097
3098requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3099requires_gnutls_tls1_3
3100requires_gnutls_next_no_ticket
3101requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3102requires_config_enabled MBEDTLS_DEBUG_C
3103requires_config_enabled MBEDTLS_SSL_CLI_C
3104run_test "TLS 1.3Client: PSK: ephemeral_all: with matched key and identity, with psk_ke. m->G" \
3105 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3106 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3107 0 \
3108 -c "=> write client hello" \
3109 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3110 -c "client hello, adding psk_key_exchange_modes extension" \
3111 -c "client hello, adding PSK binder list" \
3112 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3113 -s "Parsing extension 'Pre Shared Key/41'" \
3114 -c "<= write client hello" \
3115 -c "HTTP/1.0 200 OK"
3116
3117requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3118requires_gnutls_tls1_3
3119requires_gnutls_next_no_ticket
3120requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3121requires_config_enabled MBEDTLS_DEBUG_C
3122requires_config_enabled MBEDTLS_SSL_CLI_C
3123run_test "TLS 1.3Client: PSK: ephemeral_all: with matched key and identity, with psk_dhe_ke. m->G" \
3124 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3125 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3126 0 \
3127 -c "=> write client hello" \
3128 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3129 -c "client hello, adding psk_key_exchange_modes extension" \
3130 -c "client hello, adding PSK binder list" \
3131 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3132 -s "Parsing extension 'Pre Shared Key/41'" \
3133 -c "<= write client hello" \
3134 -c "HTTP/1.0 200 OK"
3135
3136requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3137requires_gnutls_tls1_3
3138requires_gnutls_next_no_ticket
3139requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3140requires_config_enabled MBEDTLS_DEBUG_C
3141requires_config_enabled MBEDTLS_SSL_CLI_C
3142run_test "TLS 1.3Client: PSK: ephemeral_all: with mismatched identity, with psk_ke and psk_dhe_ke. m->G" \
3143 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3144 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3145 1 \
3146 -c "=> write client hello" \
3147 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3148 -c "client hello, adding psk_key_exchange_modes extension" \
3149 -c "client hello, adding PSK binder list" \
3150 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3151 -s "Parsing extension 'Pre Shared Key/41'" \
3152 -c "<= write client hello" \
3153 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3154
3155requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3156requires_gnutls_tls1_3
3157requires_gnutls_next_no_ticket
3158requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3159requires_config_enabled MBEDTLS_DEBUG_C
3160requires_config_enabled MBEDTLS_SSL_CLI_C
3161run_test "TLS 1.3Client: PSK: ephemeral_all: with mismatched identity, with psk_ke. m->G" \
3162 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3163 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3164 0 \
3165 -c "=> write client hello" \
3166 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3167 -c "client hello, adding psk_key_exchange_modes extension" \
3168 -c "client hello, adding PSK binder list" \
3169 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3170 -s "Parsing extension 'Pre Shared Key/41'" \
3171 -c "<= write client hello" \
3172 -c "HTTP/1.0 200 OK"
3173
3174requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3175requires_gnutls_tls1_3
3176requires_gnutls_next_no_ticket
3177requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3178requires_config_enabled MBEDTLS_DEBUG_C
3179requires_config_enabled MBEDTLS_SSL_CLI_C
3180run_test "TLS 1.3Client: PSK: ephemeral_all: with mismatched identity, with psk_dhe_ke. m->G" \
3181 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3182 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3183 1 \
3184 -c "=> write client hello" \
3185 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3186 -c "client hello, adding psk_key_exchange_modes extension" \
3187 -c "client hello, adding PSK binder list" \
3188 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3189 -s "Parsing extension 'Pre Shared Key/41'" \
3190 -c "<= write client hello" \
3191 -s "Error in handshake: An illegal parameter has been received."
3192
3193requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3194requires_gnutls_tls1_3
3195requires_gnutls_next_no_ticket
3196requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3197requires_config_enabled MBEDTLS_DEBUG_C
3198requires_config_enabled MBEDTLS_SSL_CLI_C
3199run_test "TLS 1.3Client: PSK: ephemeral_all: without pre-share key, with psk_ke and psk_dhe_ke. m->G" \
3200 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3201 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0d0e0f tls13_kex_modes=ephemeral_all" \
Xiaokang Qiana39d0d52022-08-24 06:48:07 +0000[diff] [blame]3202 0 \
3203 -c "=> write client hello" \
3204 -c "client hello, adding psk_key_exchange_modes extension" \
3205 -c "skip pre_shared_key extensions" \
3206 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3207 -c "<= write client hello" \
3208 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
3209 -c "HTTP/1.0 200 OK"
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3210
3211#OPENSSL-SERVER all mode
3212requires_openssl_tls1_3
3213requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3214requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3215requires_config_enabled MBEDTLS_DEBUG_C
3216requires_config_enabled MBEDTLS_SSL_CLI_C
3217requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3218 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3219run_test "TLS 1.3Client: PSK: all: with matched key and identity, with psk_ke and psk_dhe_ke. m->O" \
3220 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3221 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3222 0 \
3223 -c "=> write client hello" \
3224 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3225 -c "client hello, adding psk_key_exchange_modes extension" \
3226 -c "client hello, adding PSK binder list" \
3227 -c "<= write client hello" \
3228 -c "HTTP/1.0 200 ok"
3229
3230requires_openssl_tls1_3
3231requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3232requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3233requires_config_enabled MBEDTLS_DEBUG_C
3234requires_config_enabled MBEDTLS_SSL_CLI_C
3235requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3236 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3237run_test "TLS 1.3Client: PSK: all: with matched key and identity, with psk_dhe_ke. m->O" \
3238 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
3239 "$P_CLI debug_level=4 sig_algs=ecdsa_secp256r1_sha256 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
3240 0 \
3241 -c "=> write client hello" \
3242 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3243 -c "client hello, adding psk_key_exchange_modes extension" \
3244 -c "client hello, adding PSK binder list" \
3245 -c "<= write client hello" \
3246 -c "HTTP/1.0 200 ok"
3247
3248requires_openssl_tls1_3
3249requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3250requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3251requires_config_enabled MBEDTLS_DEBUG_C
3252requires_config_enabled MBEDTLS_SSL_CLI_C
3253requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3254 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3255run_test "TLS 1.3Client: PSK: all: with mismatched identity, with psk_ke and psk_dhe_ke. m->O" \
3256 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -allow_no_dhe_kex -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3257 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0c0d0e tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3258 0 \
3259 -c "=> write client hello" \
3260 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3261 -c "client hello, adding psk_key_exchange_modes extension" \
3262 -c "client hello, adding PSK binder list" \
3263 -c "<= write client hello" \
3264 -s "PSK warning: client identity not what we expected" \
3265 -c "HTTP/1.0 200 ok"
3266
3267requires_openssl_tls1_3
3268requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3269requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3270requires_config_enabled MBEDTLS_DEBUG_C
3271requires_config_enabled MBEDTLS_SSL_CLI_C
3272requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3273 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3274run_test "TLS 1.3Client: PSK: all: with mismatched identity, with psk_dhe_ke. m->O" \
3275 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3276 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3277 0 \
3278 -c "=> write client hello" \
3279 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3280 -c "client hello, adding psk_key_exchange_modes extension" \
3281 -c "client hello, adding PSK binder list" \
3282 -c "<= write client hello" \
3283 -c "HTTP/1.0 200 ok"
3284
3285requires_openssl_tls1_3
3286requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3287requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3288requires_config_enabled MBEDTLS_DEBUG_C
3289requires_config_enabled MBEDTLS_SSL_CLI_C
3290requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
3291 MBEDTLS_KEY_EXCHANGE_ECDHE_PSK_ENABLED
3292run_test "TLS 1.3Client: PSK: all: without pre-share key, with psk_ke and psk_dhe_ke. m->O" \
3293 "$O_NEXT_SRV -msg -debug -tls1_3 -psk_identity 0a0b0c -psk 010203 -nocert" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3294 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3295 1 \
3296 -c "=> write client hello" \
3297 -c "client hello, adding psk_key_exchange_modes extension" \
3298 -c "skip pre_shared_key extensions" \
3299 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer" \
3300 -c "<= write client hello"
3301
3302#GNUTLS-SERVER all mode
3303requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3304requires_gnutls_tls1_3
3305requires_gnutls_next_no_ticket
3306requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3307requires_config_enabled MBEDTLS_DEBUG_C
3308requires_config_enabled MBEDTLS_SSL_CLI_C
3309run_test "TLS 1.3Client: PSK: all: with matched key and identity, with psk_ke and psk_dhe_ke. m->G" \
3310 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3311 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3312 0 \
3313 -c "=> write client hello" \
3314 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3315 -c "client hello, adding psk_key_exchange_modes extension" \
3316 -c "client hello, adding PSK binder list" \
3317 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3318 -s "Parsing extension 'Pre Shared Key/41'" \
3319 -c "<= write client hello" \
3320 -c "HTTP/1.0 200 OK"
3321
3322requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3323requires_gnutls_tls1_3
3324requires_gnutls_next_no_ticket
3325requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3326requires_config_enabled MBEDTLS_DEBUG_C
3327requires_config_enabled MBEDTLS_SSL_CLI_C
3328run_test "TLS 1.3Client: PSK: all: with matched key and identity, with psk_ke. m->G" \
3329 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3330 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3331 0 \
3332 -c "=> write client hello" \
3333 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3334 -c "client hello, adding psk_key_exchange_modes extension" \
3335 -c "client hello, adding PSK binder list" \
3336 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3337 -s "Parsing extension 'Pre Shared Key/41'" \
3338 -c "<= write client hello" \
3339 -c "HTTP/1.0 200 OK"
3340
3341requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3342requires_gnutls_tls1_3
3343requires_gnutls_next_no_ticket
3344requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3345requires_config_enabled MBEDTLS_DEBUG_C
3346requires_config_enabled MBEDTLS_SSL_CLI_C
3347run_test "TLS 1.3Client: PSK: all: with matched key and identity, with psk_dhe_ke. m->G" \
3348 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3349 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3350 0 \
3351 -c "=> write client hello" \
3352 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3353 -c "client hello, adding psk_key_exchange_modes extension" \
3354 -c "client hello, adding PSK binder list" \
3355 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3356 -s "Parsing extension 'Pre Shared Key/41'" \
3357 -c "<= write client hello" \
3358 -c "HTTP/1.0 200 OK"
3359
3360requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3361requires_gnutls_tls1_3
3362requires_gnutls_next_no_ticket
3363requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3364requires_config_enabled MBEDTLS_DEBUG_C
3365requires_config_enabled MBEDTLS_SSL_CLI_C
3366run_test "TLS 1.3Client: PSK: all: with mismatched identity, with psk_ke and psk_dhe_ke. m->G" \
3367 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3368 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3369 1 \
3370 -c "=> write client hello" \
3371 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3372 -c "client hello, adding psk_key_exchange_modes extension" \
3373 -c "client hello, adding PSK binder list" \
3374 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3375 -s "Parsing extension 'Pre Shared Key/41'" \
3376 -c "<= write client hello" \
3377 -c "Last error was: -0x7780 - SSL - A fatal alert message was received from our peer"
3378
3379requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3380requires_gnutls_tls1_3
3381requires_gnutls_next_no_ticket
3382requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3383requires_config_enabled MBEDTLS_DEBUG_C
3384requires_config_enabled MBEDTLS_SSL_CLI_C
3385run_test "TLS 1.3Client: PSK: all: with mismatched identity, with psk_ke. m->G" \
3386 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:-ECDHE-PSK:-DHE-PSK:+PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3387 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3388 1 \
3389 -c "=> write client hello" \
3390 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3391 -c "client hello, adding psk_key_exchange_modes extension" \
3392 -c "client hello, adding PSK binder list" \
3393 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3394 -s "Parsing extension 'Pre Shared Key/41'" \
3395 -c "<= write client hello" \
3396 -s "Error in handshake: An illegal parameter has been received."
3397
3398requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3399requires_gnutls_tls1_3
3400requires_gnutls_next_no_ticket
3401requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3402requires_config_enabled MBEDTLS_DEBUG_C
3403requires_config_enabled MBEDTLS_SSL_CLI_C
3404run_test "TLS 1.3Client: PSK: all: with mismatched identity, with psk_dhe_ke. m->G" \
3405 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3406 "$P_CLI debug_level=4 force_version=tls13 psk=010203 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3407 0 \
3408 -c "=> write client hello" \
3409 -c "client hello, adding pre_shared_key extension, omitting PSK binder list" \
3410 -c "client hello, adding psk_key_exchange_modes extension" \
3411 -c "client hello, adding PSK binder list" \
3412 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3413 -s "Parsing extension 'Pre Shared Key/41'" \
3414 -c "<= write client hello" \
3415 -c "HTTP/1.0 200 OK"
3416
3417requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
3418requires_gnutls_tls1_3
3419requires_gnutls_next_no_ticket
3420requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3421requires_config_enabled MBEDTLS_DEBUG_C
3422requires_config_enabled MBEDTLS_SSL_CLI_C
3423run_test "TLS 1.3Client: PSK: all: without pre-share key, with psk_ke and psk_dhe_ke. m->G" \
3424 "$G_NEXT_SRV -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-KX-ALL:+ECDHE-PSK:+DHE-PSK:-PSK:+CIPHER-ALL:%NO_TICKETS --pskhint=0a0b0c --pskpasswd=data_files/simplepass.psk" \
Xiaokang Qian198cefd2022-08-25 10:42:56 +0000[diff] [blame]3425 "$P_CLI debug_level=4 force_version=tls13 psk_identity=0d0e0f tls13_kex_modes=all" \
Xiaokang Qiandf6a3892022-08-24 06:55:18 +0000[diff] [blame]3426 0 \
3427 -c "=> write client hello" \
3428 -c "client hello, adding psk_key_exchange_modes extension" \
3429 -c "skip pre_shared_key extensions" \
3430 -s "Parsing extension 'PSK Key Exchange Modes/45'" \
3431 -c "<= write client hello" \
3432 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
3433 -c "HTTP/1.0 200 OK"