blob: 06a6fa25bbf3566e68dcfbff3dc87be5d79da2ba [file] [log] [blame]
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001#!/bin/sh
2
Simon Butcher58eddef2016-05-19 23:43:11 +01003# ssl-opt.sh
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01004#
Bence Szépkúti1e148272020-08-07 13:07:28 +02005# Copyright The Mbed TLS Contributors
Bence Szépkútic7da1fe2020-05-26 01:54:15 +02006# SPDX-License-Identifier: Apache-2.0
7#
8# Licensed under the Apache License, Version 2.0 (the "License"); you may
9# not use this file except in compliance with the License.
10# You may obtain a copy of the License at
11#
12# http://www.apache.org/licenses/LICENSE-2.0
13#
14# Unless required by applicable law or agreed to in writing, software
15# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
16# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
17# See the License for the specific language governing permissions and
18# limitations under the License.
19#
Simon Butcher58eddef2016-05-19 23:43:11 +010020# Purpose
21#
22# Executes tests to prove various TLS/SSL options and extensions.
23#
24# The goal is not to cover every ciphersuite/version, but instead to cover
25# specific options (max fragment length, truncated hmac, etc) or procedures
26# (session resumption from cache or ticket, renego, etc).
27#
28# The tests assume a build with default options, with exceptions expressed
29# with a dependency. The tests focus on functionality and do not consider
30# performance.
31#
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010032
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010033set -u
34
Jaeden Amero6e70eb22019-07-03 13:51:04 +010035# Limit the size of each log to 10 GiB, in case of failures with this script
36# where it may output seemingly unlimited length error logs.
37ulimit -f 20971520
38
Gilles Peskine560280b2019-09-16 15:17:38 +020039ORIGINAL_PWD=$PWD
40if ! cd "$(dirname "$0")"; then
41 exit 125
Angus Grattonc4dd0732018-04-11 16:28:39 +100042fi
43
Antonin Décimo36e89b52019-01-23 15:24:37 +010044# default values, can be overridden by the environment
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +010045: ${P_SRV:=../programs/ssl/ssl_server2}
46: ${P_CLI:=../programs/ssl/ssl_client2}
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020047: ${P_PXY:=../programs/test/udp_proxy}
Jerry Yud04fd352021-12-06 16:52:57 +080048: ${P_QUERY:=../programs/test/query_compile_time_config}
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +010049: ${OPENSSL:=openssl}
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020050: ${GNUTLS_CLI:=gnutls-cli}
51: ${GNUTLS_SERV:=gnutls-serv}
Gilles Peskined50177f2017-05-16 17:53:03 +020052: ${PERL:=perl}
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010053
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +010054# The OPENSSL variable used to be OPENSSL_CMD for historical reasons.
55# To help the migration, error out if the old variable is set,
56# but only if it has a different value than the new one.
57if [ "${OPENSSL_CMD+set}" = set ]; then
58 # the variable is set, we can now check its value
59 if [ "$OPENSSL_CMD" != "$OPENSSL" ]; then
60 echo "Please use OPENSSL instead of OPENSSL_CMD." >&2
61 exit 125
62 fi
63fi
64
Gilles Peskine560280b2019-09-16 15:17:38 +020065guess_config_name() {
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +020066 if git diff --quiet ../include/mbedtls/mbedtls_config.h 2>/dev/null; then
Gilles Peskine560280b2019-09-16 15:17:38 +020067 echo "default"
68 else
69 echo "unknown"
70 fi
71}
72: ${MBEDTLS_TEST_OUTCOME_FILE=}
73: ${MBEDTLS_TEST_CONFIGURATION:="$(guess_config_name)"}
74: ${MBEDTLS_TEST_PLATFORM:="$(uname -s | tr -c \\n0-9A-Za-z _)-$(uname -m | tr -c \\n0-9A-Za-z _)"}
75
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +010076O_SRV="$OPENSSL s_server -www -cert data_files/server5.crt -key data_files/server5.key"
77O_CLI="echo 'GET / HTTP/1.0' | $OPENSSL s_client"
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020078G_SRV="$GNUTLS_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010079G_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_CLI --x509cafile data_files/test-ca_cat12.crt"
Gilles Peskined50177f2017-05-16 17:53:03 +020080TCP_CLIENT="$PERL scripts/tcp_client.pl"
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010081
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020082# alternative versions of OpenSSL and GnuTLS (no default path)
83
84if [ -n "${OPENSSL_LEGACY:-}" ]; then
85 O_LEGACY_SRV="$OPENSSL_LEGACY s_server -www -cert data_files/server5.crt -key data_files/server5.key"
86 O_LEGACY_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_LEGACY s_client"
87else
88 O_LEGACY_SRV=false
89 O_LEGACY_CLI=false
90fi
91
Jerry Yu04029792021-08-10 16:45:37 +080092if [ -n "${OPENSSL_NEXT:-}" ]; then
XiaokangQian30f55602021-11-24 01:54:50 +000093 O_NEXT_SRV="$OPENSSL_NEXT s_server -www -cert data_files/server5.crt -key data_files/server5.key"
Xiaokang Qianb0c32d82022-11-02 10:51:13 +000094 O_NEXT_SRV_EARLY_DATA="$OPENSSL_NEXT s_server -early_data -cert data_files/server5.crt -key data_files/server5.key"
Jerry Yu305bfc32021-11-24 16:04:47 +080095 O_NEXT_SRV_NO_CERT="$OPENSSL_NEXT s_server -www "
Jerry Yu66220492022-04-23 13:53:36 +080096 O_NEXT_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_NEXT s_client -CAfile data_files/test-ca_cat12.crt"
XiaokangQiand5d5b602022-05-23 09:16:20 +000097 O_NEXT_CLI_NO_CERT="echo 'GET / HTTP/1.0' | $OPENSSL_NEXT s_client"
Jerry Yu04029792021-08-10 16:45:37 +080098else
99 O_NEXT_SRV=false
Jerry Yu305bfc32021-11-24 16:04:47 +0800100 O_NEXT_SRV_NO_CERT=false
Xiaokang Qianb0c32d82022-11-02 10:51:13 +0000101 O_NEXT_SRV_EARLY_DATA=false
XiaokangQianb1847a22022-06-08 07:49:31 +0000102 O_NEXT_CLI_NO_CERT=false
Jerry Yu04029792021-08-10 16:45:37 +0800103 O_NEXT_CLI=false
104fi
105
Hanno Becker58e9dc32018-08-17 15:53:21 +0100106if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200107 G_NEXT_SRV="$GNUTLS_NEXT_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
Jerry Yu305bfc32021-11-24 16:04:47 +0800108 G_NEXT_SRV_NO_CERT="$GNUTLS_NEXT_SERV"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200109else
110 G_NEXT_SRV=false
Jerry Yu305bfc32021-11-24 16:04:47 +0800111 G_NEXT_SRV_NO_CERT=false
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200112fi
113
Hanno Becker58e9dc32018-08-17 15:53:21 +0100114if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200115 G_NEXT_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_NEXT_CLI --x509cafile data_files/test-ca_cat12.crt"
XiaokangQiand5d5b602022-05-23 09:16:20 +0000116 G_NEXT_CLI_NO_CERT="echo 'GET / HTTP/1.0' | $GNUTLS_NEXT_CLI"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200117else
118 G_NEXT_CLI=false
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000119 G_NEXT_CLI_NO_CERT=false
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200120fi
121
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100122TESTS=0
123FAILS=0
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200124SKIPS=0
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100125
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200126CONFIG_H='../include/mbedtls/mbedtls_config.h'
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +0200127
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100128MEMCHECK=0
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100129FILTER='.*'
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200130EXCLUDE='^$'
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100131
Paul Bakkere20310a2016-05-10 11:18:17 +0100132SHOW_TEST_NUMBER=0
Paul Bakkerb7584a52016-05-10 10:50:43 +0100133RUN_TEST_NUMBER=''
134
Paul Bakkeracaac852016-05-10 11:47:13 +0100135PRESERVE_LOGS=0
136
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200137# Pick a "unique" server port in the range 10000-19999, and a proxy
138# port which is this plus 10000. Each port number may be independently
139# overridden by a command line option.
140SRV_PORT=$(($$ % 10000 + 10000))
141PXY_PORT=$((SRV_PORT + 10000))
142
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100143print_usage() {
144 echo "Usage: $0 [options]"
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +0100145 printf " -h|--help\tPrint this help.\n"
146 printf " -m|--memcheck\tCheck memory leaks and errors.\n"
Gilles Peskine9fa4ed62020-08-26 22:35:46 +0200147 printf " -f|--filter\tOnly matching tests are executed (substring or BRE)\n"
148 printf " -e|--exclude\tMatching tests are excluded (substring or BRE)\n"
Paul Bakkerb7584a52016-05-10 10:50:43 +0100149 printf " -n|--number\tExecute only numbered test (comma-separated, e.g. '245,256')\n"
Paul Bakkere20310a2016-05-10 11:18:17 +0100150 printf " -s|--show-numbers\tShow test numbers in front of test names\n"
Paul Bakkeracaac852016-05-10 11:47:13 +0100151 printf " -p|--preserve-logs\tPreserve logs of successful tests as well\n"
Gilles Peskine560280b2019-09-16 15:17:38 +0200152 printf " --outcome-file\tFile where test outcomes are written\n"
153 printf " \t(default: \$MBEDTLS_TEST_OUTCOME_FILE, none if empty)\n"
154 printf " --port \tTCP/UDP port (default: randomish 1xxxx)\n"
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200155 printf " --proxy-port\tTCP/UDP proxy port (default: randomish 2xxxx)\n"
Gilles Peskine560280b2019-09-16 15:17:38 +0200156 printf " --seed \tInteger seed value to use for this test run\n"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100157}
158
159get_options() {
160 while [ $# -gt 0 ]; do
161 case "$1" in
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100162 -f|--filter)
163 shift; FILTER=$1
164 ;;
165 -e|--exclude)
166 shift; EXCLUDE=$1
167 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100168 -m|--memcheck)
169 MEMCHECK=1
170 ;;
Paul Bakkerb7584a52016-05-10 10:50:43 +0100171 -n|--number)
172 shift; RUN_TEST_NUMBER=$1
173 ;;
Paul Bakkere20310a2016-05-10 11:18:17 +0100174 -s|--show-numbers)
175 SHOW_TEST_NUMBER=1
176 ;;
Paul Bakkeracaac852016-05-10 11:47:13 +0100177 -p|--preserve-logs)
178 PRESERVE_LOGS=1
179 ;;
Yanray Wang5b33f642023-02-28 11:56:59 +0800180 --outcome-file)
181 shift; MBEDTLS_TEST_OUTCOME_FILE=$1
182 ;;
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200183 --port)
184 shift; SRV_PORT=$1
185 ;;
186 --proxy-port)
187 shift; PXY_PORT=$1
188 ;;
Andres AGf04f54d2016-10-10 15:46:20 +0100189 --seed)
190 shift; SEED="$1"
191 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100192 -h|--help)
193 print_usage
194 exit 0
195 ;;
196 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200197 echo "Unknown argument: '$1'"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100198 print_usage
199 exit 1
200 ;;
201 esac
202 shift
203 done
204}
205
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200206# Read boolean configuration options from mbedtls_config.h for easy and quick
Gilles Peskine64457492020-08-26 21:53:33 +0200207# testing. Skip non-boolean options (with something other than spaces
208# and a comment after "#define SYMBOL"). The variable contains a
209# space-separated list of symbols.
Jerry Yud0fcf7f2021-12-10 18:45:51 +0800210CONFIGS_ENABLED=" $(echo `$P_QUERY -l` )"
Hanno Becker3b8b40c2018-08-28 10:25:41 +0100211# Skip next test; use this macro to skip tests which are legitimate
212# in theory and expected to be re-introduced at some point, but
213# aren't expected to succeed at the moment due to problems outside
214# our control (such as bugs in other TLS implementations).
215skip_next_test() {
216 SKIP_NEXT="YES"
217}
218
Valerio Settid1f991c2023-02-22 12:54:13 +0100219# Check if the required configuration ($1) is enabled
220is_config_enabled()
221{
222 case $CONFIGS_ENABLED in
223 *" $1"[\ =]*) return 0;;
224 *) return 1;;
225 esac
226}
227
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200228# skip next test if the flag is not enabled in mbedtls_config.h
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100229requires_config_enabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200230 case $CONFIGS_ENABLED in
Jerry Yu2e8b0012021-12-10 20:29:02 +0800231 *" $1"[\ =]*) :;;
Gilles Peskine64457492020-08-26 21:53:33 +0200232 *) SKIP_NEXT="YES";;
233 esac
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100234}
235
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +0200236# skip next test if the flag is enabled in mbedtls_config.h
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200237requires_config_disabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200238 case $CONFIGS_ENABLED in
Jerry Yu2e8b0012021-12-10 20:29:02 +0800239 *" $1"[\ =]*) SKIP_NEXT="YES";;
Gilles Peskine64457492020-08-26 21:53:33 +0200240 esac
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200241}
242
Jerry Yu2fcb0562022-07-27 17:30:49 +0800243requires_all_configs_enabled() {
244 if ! $P_QUERY -all $*
245 then
246 SKIP_NEXT="YES"
247 fi
248}
249
250requires_all_configs_disabled() {
251 if $P_QUERY -any $*
252 then
253 SKIP_NEXT="YES"
254 fi
255}
256
257requires_any_configs_enabled() {
258 if ! $P_QUERY -any $*
259 then
260 SKIP_NEXT="YES"
261 fi
262}
263
264requires_any_configs_disabled() {
265 if $P_QUERY -all $*
266 then
267 SKIP_NEXT="YES"
268 fi
269}
270
Ronald Cron454eb912022-10-21 08:56:04 +0200271TLS1_2_KEY_EXCHANGES_WITH_CERT="MBEDTLS_KEY_EXCHANGE_RSA_ENABLED \
Ronald Cronbc5adf42022-10-04 11:06:14 +0200272 MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED \
273 MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
274 MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED \
275 MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED \
276 MBEDTLS_KEY_EXCHANGE_ECDH_RSA_ENABLED \
277 MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED"
278
Valerio Settid1f991c2023-02-22 12:54:13 +0100279TLS1_2_KEY_EXCHANGES_WITH_ECDSA_CERT="MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED \
280 MBEDTLS_KEY_EXCHANGE_ECDH_ECDSA_ENABLED"
281
Valerio Setti6ba247c2023-03-14 17:13:43 +0100282TLS1_2_KEY_EXCHANGES_WITH_CERT_WO_ECDH="MBEDTLS_KEY_EXCHANGE_RSA_ENABLED \
283 MBEDTLS_KEY_EXCHANGE_DHE_RSA_ENABLED \
284 MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED \
285 MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED \
286 MBEDTLS_KEY_EXCHANGE_RSA_PSK_ENABLED"
287
Ronald Cronbc5adf42022-10-04 11:06:14 +0200288requires_key_exchange_with_cert_in_tls12_or_tls13_enabled() {
Ronald Cron928cbd32022-10-04 16:14:26 +0200289 if $P_QUERY -all MBEDTLS_SSL_PROTO_TLS1_2
290 then
Valerio Settie7f896d2023-03-13 13:55:28 +0100291 requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron928cbd32022-10-04 16:14:26 +0200292 elif ! $P_QUERY -all MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
293 then
294 SKIP_NEXT="YES"
295 fi
Ronald Cronbc5adf42022-10-04 11:06:14 +0200296}
297
Hanno Becker7c48dd12018-08-28 16:09:22 +0100298get_config_value_or_default() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100299 # This function uses the query_config command line option to query the
300 # required Mbed TLS compile time configuration from the ssl_server2
301 # program. The command will always return a success value if the
302 # configuration is defined and the value will be printed to stdout.
303 #
304 # Note that if the configuration is not defined or is defined to nothing,
305 # the output of this function will be an empty string.
306 ${P_SRV} "query_config=${1}"
Hanno Becker7c48dd12018-08-28 16:09:22 +0100307}
308
309requires_config_value_at_least() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100310 VAL="$( get_config_value_or_default "$1" )"
311 if [ -z "$VAL" ]; then
312 # Should never happen
313 echo "Mbed TLS configuration $1 is not defined"
314 exit 1
315 elif [ "$VAL" -lt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100316 SKIP_NEXT="YES"
317 fi
318}
319
320requires_config_value_at_most() {
Hanno Becker7c48dd12018-08-28 16:09:22 +0100321 VAL=$( get_config_value_or_default "$1" )
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100322 if [ -z "$VAL" ]; then
323 # Should never happen
324 echo "Mbed TLS configuration $1 is not defined"
325 exit 1
326 elif [ "$VAL" -gt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100327 SKIP_NEXT="YES"
328 fi
329}
330
Yuto Takano6f657432021-07-02 13:10:41 +0100331requires_config_value_equals() {
332 VAL=$( get_config_value_or_default "$1" )
333 if [ -z "$VAL" ]; then
334 # Should never happen
335 echo "Mbed TLS configuration $1 is not defined"
336 exit 1
337 elif [ "$VAL" -ne "$2" ]; then
338 SKIP_NEXT="YES"
339 fi
340}
341
Gilles Peskinec9126732022-04-08 19:33:07 +0200342# Require Mbed TLS to support the given protocol version.
343#
344# Inputs:
345# * $1: protocol version in mbedtls syntax (argument to force_version=)
346requires_protocol_version() {
347 # Support for DTLS is detected separately in detect_dtls().
348 case "$1" in
349 tls12|dtls12) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2;;
350 tls13|dtls13) requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3;;
351 *) echo "Unknown required protocol version: $1"; exit 1;;
352 esac
353}
354
Gilles Peskine64457492020-08-26 21:53:33 +0200355# Space-separated list of ciphersuites supported by this build of
356# Mbed TLS.
357P_CIPHERSUITES=" $($P_CLI --help 2>/dev/null |
XiaokangQian4b82ca12021-11-18 08:27:17 +0000358 grep 'TLS-\|TLS1-3' |
Gilles Peskine64457492020-08-26 21:53:33 +0200359 tr -s ' \n' ' ')"
Hanno Becker9d76d562018-11-16 17:27:29 +0000360requires_ciphersuite_enabled() {
Gilles Peskine64457492020-08-26 21:53:33 +0200361 case $P_CIPHERSUITES in
362 *" $1 "*) :;;
363 *) SKIP_NEXT="YES";;
364 esac
Hanno Becker9d76d562018-11-16 17:27:29 +0000365}
366
Valerio Setti1af76d12023-02-23 15:55:10 +0100367# Automatically detect required features based on command line parameters.
368# Parameters are:
369# - $1 = command line (call to a TLS client or server program)
370# - $2 = client/server
371# - $3 = TLS version (TLS12 or TLS13)
Valerio Setti6ba247c2023-03-14 17:13:43 +0100372# - $4 = Use an external tool without ECDH support
373# - $5 = run test options
Gilles Peskineb898b3d2022-04-08 19:26:26 +0200374detect_required_features() {
Valerio Setti6ba247c2023-03-14 17:13:43 +0100375 CMD_LINE=$1
376 ROLE=$2
377 TLS_VERSION=$3
378 EXT_WO_ECDH=$4
379 TEST_OPTIONS=${5:-}
380
381 case "$CMD_LINE" in
Gilles Peskinec9126732022-04-08 19:33:07 +0200382 *\ force_version=*)
Valerio Setti6ba247c2023-03-14 17:13:43 +0100383 tmp="${CMD_LINE##*\ force_version=}"
Gilles Peskinec9126732022-04-08 19:33:07 +0200384 tmp="${tmp%%[!-0-9A-Z_a-z]*}"
385 requires_protocol_version "$tmp";;
Gilles Peskine0d721652020-06-26 23:35:53 +0200386 esac
Gilles Peskine0d721652020-06-26 23:35:53 +0200387
Valerio Setti6ba247c2023-03-14 17:13:43 +0100388 case "$CMD_LINE" in
Gilles Peskineb898b3d2022-04-08 19:26:26 +0200389 *\ force_ciphersuite=*)
Valerio Setti6ba247c2023-03-14 17:13:43 +0100390 tmp="${CMD_LINE##*\ force_ciphersuite=}"
Gilles Peskineb898b3d2022-04-08 19:26:26 +0200391 tmp="${tmp%%[!-0-9A-Z_a-z]*}"
392 requires_ciphersuite_enabled "$tmp";;
Gilles Peskine0d721652020-06-26 23:35:53 +0200393 esac
Gilles Peskine0d721652020-06-26 23:35:53 +0200394
Valerio Setti6ba247c2023-03-14 17:13:43 +0100395 case " $CMD_LINE " in
Gilles Peskine740b7342022-04-08 19:29:27 +0200396 *[-_\ =]tickets=[^0]*)
397 requires_config_enabled MBEDTLS_SSL_TICKET_C;;
398 esac
Valerio Setti6ba247c2023-03-14 17:13:43 +0100399 case " $CMD_LINE " in
Gilles Peskine740b7342022-04-08 19:29:27 +0200400 *[-_\ =]alpn=*)
401 requires_config_enabled MBEDTLS_SSL_ALPN;;
402 esac
403
Valerio Setti6ba247c2023-03-14 17:13:43 +0100404 case "$CMD_LINE" in
Valerio Setticcfad9a2023-03-08 10:25:05 +0100405 *server5*|\
Valerio Setti80318d22023-03-13 12:26:42 +0100406 *server7*|\
407 *dir-maxpath*)
Valerio Setti6ba247c2023-03-14 17:13:43 +0100408 if [ "$TLS_VERSION" = "TLS13" ]; then
Valerio Setti1af76d12023-02-23 15:55:10 +0100409 # In case of TLS13 the support for ECDSA is enough
410 requires_pk_alg "ECDSA"
411 else
412 # For TLS12 requirements are different between server and client
Valerio Setti6ba247c2023-03-14 17:13:43 +0100413 if [ "$ROLE" = "server" ]; then
Valerio Setti194e2bd2023-03-02 17:18:10 +0100414 # If the server uses "server5*" certificates, then an ECDSA based
Valerio Setti6ba247c2023-03-14 17:13:43 +0100415 # key exchange is required. However gnutls also does not
416 # support ECDH, so this limit the choice to ECDHE-ECDSA
417 if [ "$EXT_WO_ECDH" = "yes" ]; then
418 requires_any_configs_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
419 else
420 requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_ECDSA_CERT
421 fi
422 elif [ "$ROLE" = "client" ]; then
423 # On the client side it is enough to have any certificate
424 # based authentication together with support for ECDSA.
425 # Of course the GnuTLS limitation mentioned above applies
426 # also here.
427 if [ "$EXT_WO_ECDH" = "yes" ]; then
428 requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT_WO_ECDH
429 else
430 requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
431 fi
Valerio Setti1af76d12023-02-23 15:55:10 +0100432 requires_pk_alg "ECDSA"
433 fi
434 fi
435 ;;
436 esac
437
Gilles Peskineb898b3d2022-04-08 19:26:26 +0200438 unset tmp
Gilles Peskine0d721652020-06-26 23:35:53 +0200439}
440
Gilles Peskine6f160ca2022-03-14 18:21:24 +0100441requires_certificate_authentication () {
442 if [ "$PSK_ONLY" = "YES" ]; then
443 SKIP_NEXT="YES"
444 fi
445}
446
Gilles Peskine6e86e542022-02-25 19:52:52 +0100447adapt_cmd_for_psk () {
448 case "$2" in
449 *openssl*) s='-psk abc123 -nocert';;
450 *gnutls-*) s='--pskkey=abc123';;
451 *) s='psk=abc123';;
452 esac
453 eval $1='"$2 $s"'
454 unset s
455}
456
457# maybe_adapt_for_psk [RUN_TEST_OPTION...]
458# If running in a PSK-only build, maybe adapt the test to use a pre-shared key.
459#
460# If not running in a PSK-only build, do nothing.
461# If the test looks like it doesn't use a pre-shared key but can run with a
462# pre-shared key, pass a pre-shared key. If the test looks like it can't run
463# with a pre-shared key, skip it. If the test looks like it's already using
464# a pre-shared key, do nothing.
465#
Gilles Peskine59601d72022-04-05 22:00:17 +0200466# This code does not consider builds with ECDHE-PSK or RSA-PSK.
Gilles Peskine6e86e542022-02-25 19:52:52 +0100467#
468# Inputs:
469# * $CLI_CMD, $SRV_CMD, $PXY_CMD: client/server/proxy commands.
470# * $PSK_ONLY: YES if running in a PSK-only build (no asymmetric key exchanges).
471# * "$@": options passed to run_test.
472#
473# Outputs:
474# * $CLI_CMD, $SRV_CMD: may be modified to add PSK-relevant arguments.
475# * $SKIP_NEXT: set to YES if the test can't run with PSK.
476maybe_adapt_for_psk() {
477 if [ "$PSK_ONLY" != "YES" ]; then
478 return
479 fi
480 if [ "$SKIP_NEXT" = "YES" ]; then
481 return
482 fi
483 case "$CLI_CMD $SRV_CMD" in
484 *[-_\ =]psk*|*[-_\ =]PSK*)
485 return;;
486 *force_ciphersuite*)
487 # The test case forces a non-PSK cipher suite. In some cases, a
488 # PSK cipher suite could be substituted, but we're not ready for
489 # that yet.
490 SKIP_NEXT="YES"
491 return;;
492 *\ auth_mode=*|*[-_\ =]crt[_=]*)
493 # The test case involves certificates. PSK won't do.
494 SKIP_NEXT="YES"
495 return;;
496 esac
497 adapt_cmd_for_psk CLI_CMD "$CLI_CMD"
498 adapt_cmd_for_psk SRV_CMD "$SRV_CMD"
499}
500
501case " $CONFIGS_ENABLED " in
502 *\ MBEDTLS_KEY_EXCHANGE_[^P]*) PSK_ONLY="NO";;
503 *\ MBEDTLS_KEY_EXCHANGE_P[^S]*) PSK_ONLY="NO";;
504 *\ MBEDTLS_KEY_EXCHANGE_PS[^K]*) PSK_ONLY="NO";;
505 *\ MBEDTLS_KEY_EXCHANGE_PSK[^_]*) PSK_ONLY="NO";;
506 *\ MBEDTLS_KEY_EXCHANGE_PSK_ENABLED\ *) PSK_ONLY="YES";;
507 *) PSK_ONLY="NO";;
508esac
509
Andrzej Kurek9c061a22022-09-05 10:51:19 -0400510HAS_ALG_SHA_1="NO"
511HAS_ALG_SHA_224="NO"
512HAS_ALG_SHA_256="NO"
513HAS_ALG_SHA_384="NO"
514HAS_ALG_SHA_512="NO"
515
516check_for_hash_alg()
517{
518 CURR_ALG="INVALID";
519 USE_PSA="NO"
Valerio Settid1f991c2023-02-22 12:54:13 +0100520 if is_config_enabled "MBEDTLS_USE_PSA_CRYPTO"; then
521 USE_PSA="YES";
522 fi
Andrzej Kurek9c061a22022-09-05 10:51:19 -0400523 if [ $USE_PSA = "YES" ]; then
524 CURR_ALG=PSA_WANT_ALG_${1}
525 else
526 CURR_ALG=MBEDTLS_${1}_C
527 # Remove the second underscore to match MBEDTLS_* naming convention
528 CURR_ALG=$(echo "$CURR_ALG" | sed 's/_//2')
529 fi
530
531 case $CONFIGS_ENABLED in
532 *" $CURR_ALG"[\ =]*)
533 return 0
534 ;;
535 *) :;;
536 esac
537 return 1
538}
539
540populate_enabled_hash_algs()
541{
542 for hash_alg in SHA_1 SHA_224 SHA_256 SHA_384 SHA_512; do
543 if check_for_hash_alg "$hash_alg"; then
544 hash_alg_variable=HAS_ALG_${hash_alg}
545 eval ${hash_alg_variable}=YES
546 fi
Valerio Settie7f896d2023-03-13 13:55:28 +0100547 done
Andrzej Kurek9c061a22022-09-05 10:51:19 -0400548}
549
550# skip next test if the given hash alg is not supported
551requires_hash_alg() {
552 HASH_DEFINE="Invalid"
553 HAS_HASH_ALG="NO"
554 case $1 in
555 SHA_1):;;
556 SHA_224):;;
557 SHA_256):;;
558 SHA_384):;;
559 SHA_512):;;
560 *)
561 echo "Unsupported hash alg - $1"
562 exit 1
563 ;;
564 esac
565
566 HASH_DEFINE=HAS_ALG_${1}
567 eval "HAS_HASH_ALG=\${${HASH_DEFINE}}"
568 if [ "$HAS_HASH_ALG" = "NO" ]
569 then
570 SKIP_NEXT="YES"
571 fi
572}
573
Valerio Settid1f991c2023-02-22 12:54:13 +0100574# Skip next test if the given pk alg is not enabled
575requires_pk_alg() {
576 case $1 in
577 ECDSA)
578 if is_config_enabled MBEDTLS_USE_PSA_CRYPTO; then
579 requires_config_enabled PSA_WANT_ALG_ECDSA
580 else
581 requires_config_enabled MBEDTLS_ECDSA_C
582 fi
583 ;;
584 *)
585 echo "Unknown/unimplemented case $1 in requires_pk_alg"
586 exit 1
587 ;;
588 esac
589}
590
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200591# skip next test if OpenSSL doesn't support FALLBACK_SCSV
592requires_openssl_with_fallback_scsv() {
593 if [ -z "${OPENSSL_HAS_FBSCSV:-}" ]; then
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +0100594 if $OPENSSL s_client -help 2>&1 | grep fallback_scsv >/dev/null
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200595 then
596 OPENSSL_HAS_FBSCSV="YES"
597 else
598 OPENSSL_HAS_FBSCSV="NO"
599 fi
600 fi
601 if [ "$OPENSSL_HAS_FBSCSV" = "NO" ]; then
602 SKIP_NEXT="YES"
603 fi
604}
605
Yuto Takanob0a1c5b2021-07-02 10:10:49 +0100606# skip next test if either IN_CONTENT_LEN or MAX_CONTENT_LEN are below a value
607requires_max_content_len() {
608 requires_config_value_at_least "MBEDTLS_SSL_IN_CONTENT_LEN" $1
609 requires_config_value_at_least "MBEDTLS_SSL_OUT_CONTENT_LEN" $1
610}
611
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200612# skip next test if GnuTLS isn't available
613requires_gnutls() {
614 if [ -z "${GNUTLS_AVAILABLE:-}" ]; then
Manuel Pégourié-Gonnard03db6b02015-06-26 15:45:30 +0200615 if ( which "$GNUTLS_CLI" && which "$GNUTLS_SERV" ) >/dev/null 2>&1; then
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200616 GNUTLS_AVAILABLE="YES"
617 else
618 GNUTLS_AVAILABLE="NO"
619 fi
620 fi
621 if [ "$GNUTLS_AVAILABLE" = "NO" ]; then
622 SKIP_NEXT="YES"
623 fi
624}
625
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200626# skip next test if GnuTLS-next isn't available
627requires_gnutls_next() {
628 if [ -z "${GNUTLS_NEXT_AVAILABLE:-}" ]; then
629 if ( which "${GNUTLS_NEXT_CLI:-}" && which "${GNUTLS_NEXT_SERV:-}" ) >/dev/null 2>&1; then
630 GNUTLS_NEXT_AVAILABLE="YES"
631 else
632 GNUTLS_NEXT_AVAILABLE="NO"
633 fi
634 fi
635 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
636 SKIP_NEXT="YES"
637 fi
638}
639
640# skip next test if OpenSSL-legacy isn't available
641requires_openssl_legacy() {
642 if [ -z "${OPENSSL_LEGACY_AVAILABLE:-}" ]; then
643 if which "${OPENSSL_LEGACY:-}" >/dev/null 2>&1; then
644 OPENSSL_LEGACY_AVAILABLE="YES"
645 else
646 OPENSSL_LEGACY_AVAILABLE="NO"
647 fi
648 fi
649 if [ "$OPENSSL_LEGACY_AVAILABLE" = "NO" ]; then
650 SKIP_NEXT="YES"
651 fi
652}
653
Jerry Yu04029792021-08-10 16:45:37 +0800654requires_openssl_next() {
655 if [ -z "${OPENSSL_NEXT_AVAILABLE:-}" ]; then
656 if which "${OPENSSL_NEXT:-}" >/dev/null 2>&1; then
657 OPENSSL_NEXT_AVAILABLE="YES"
658 else
659 OPENSSL_NEXT_AVAILABLE="NO"
660 fi
661 fi
662 if [ "$OPENSSL_NEXT_AVAILABLE" = "NO" ]; then
663 SKIP_NEXT="YES"
664 fi
665}
666
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200667# skip next test if openssl version is lower than 3.0
668requires_openssl_3_x() {
669 requires_openssl_next
670 if [ "$OPENSSL_NEXT_AVAILABLE" = "NO" ]; then
671 OPENSSL_3_X_AVAILABLE="NO"
672 fi
673 if [ -z "${OPENSSL_3_X_AVAILABLE:-}" ]; then
Przemek Stekiela53dca12023-06-14 20:53:09 +0200674 if $OPENSSL_NEXT version 2>&1 | grep "OpenSSL 3." >/dev/null
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200675 then
676 OPENSSL_3_X_AVAILABLE="YES"
677 else
678 OPENSSL_3_X_AVAILABLE="NO"
679 fi
680 fi
681 if [ "$OPENSSL_3_X_AVAILABLE" = "NO" ]; then
682 SKIP_NEXT="YES"
683 fi
684}
685
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200686# skip next test if openssl does not support ffdh keys
687requires_openssl_tls1_3_with_ffdh() {
688 requires_openssl_3_x
689}
690
Przemek Stekiel7dda2712023-06-27 14:43:33 +0200691# skip next test if openssl cannot handle ephemeral key exchange
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200692requires_openssl_tls1_3_with_compatible_ephemeral() {
693 requires_openssl_next
694
695 if !(is_config_enabled "PSA_WANT_ALG_ECDH"); then
696 requires_openssl_tls1_3_with_ffdh
697 fi
698}
699
Jerry Yu04029792021-08-10 16:45:37 +0800700# skip next test if tls1_3 is not available
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +0200701requires_openssl_tls1_3() {
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200702 requires_openssl_next
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +0200703 if [ "$OPENSSL_NEXT_AVAILABLE" = "NO" ]; then
704 OPENSSL_TLS1_3_AVAILABLE="NO"
705 fi
706 if [ -z "${OPENSSL_TLS1_3_AVAILABLE:-}" ]; then
707 if $OPENSSL_NEXT s_client -help 2>&1 | grep tls1_3 >/dev/null
708 then
709 OPENSSL_TLS1_3_AVAILABLE="YES"
710 else
711 OPENSSL_TLS1_3_AVAILABLE="NO"
712 fi
713 fi
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +0200714 if [ "$OPENSSL_TLS1_3_AVAILABLE" = "NO" ]; then
715 SKIP_NEXT="YES"
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +0200716 fi
717}
718
719# skip next test if tls1_3 is not available
Jerry Yu04029792021-08-10 16:45:37 +0800720requires_gnutls_tls1_3() {
721 requires_gnutls_next
722 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
723 GNUTLS_TLS1_3_AVAILABLE="NO"
724 fi
725 if [ -z "${GNUTLS_TLS1_3_AVAILABLE:-}" ]; then
726 if $GNUTLS_NEXT_CLI -l 2>&1 | grep VERS-TLS1.3 >/dev/null
727 then
728 GNUTLS_TLS1_3_AVAILABLE="YES"
729 else
730 GNUTLS_TLS1_3_AVAILABLE="NO"
731 fi
732 fi
733 if [ "$GNUTLS_TLS1_3_AVAILABLE" = "NO" ]; then
734 SKIP_NEXT="YES"
735 fi
736}
737
Jerry Yu75261df2021-09-02 17:40:08 +0800738# Check %NO_TICKETS option
Jerry Yub12d81d2021-08-17 10:56:08 +0800739requires_gnutls_next_no_ticket() {
740 requires_gnutls_next
741 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
742 GNUTLS_NO_TICKETS_AVAILABLE="NO"
743 fi
744 if [ -z "${GNUTLS_NO_TICKETS_AVAILABLE:-}" ]; then
745 if $GNUTLS_NEXT_CLI --priority-list 2>&1 | grep NO_TICKETS >/dev/null
746 then
747 GNUTLS_NO_TICKETS_AVAILABLE="YES"
748 else
749 GNUTLS_NO_TICKETS_AVAILABLE="NO"
750 fi
751 fi
752 if [ "$GNUTLS_NO_TICKETS_AVAILABLE" = "NO" ]; then
753 SKIP_NEXT="YES"
754 fi
755}
756
Jerry Yu75261df2021-09-02 17:40:08 +0800757# Check %DISABLE_TLS13_COMPAT_MODE option
Jerry Yub12d81d2021-08-17 10:56:08 +0800758requires_gnutls_next_disable_tls13_compat() {
759 requires_gnutls_next
760 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
761 GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE="NO"
762 fi
763 if [ -z "${GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE:-}" ]; then
764 if $GNUTLS_NEXT_CLI --priority-list 2>&1 | grep DISABLE_TLS13_COMPAT_MODE >/dev/null
765 then
766 GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE="YES"
767 else
768 GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE="NO"
769 fi
770 fi
771 if [ "$GNUTLS_DISABLE_TLS13_COMPAT_MODE_AVAILABLE" = "NO" ]; then
772 SKIP_NEXT="YES"
773 fi
774}
775
Jan Bruckneraa31b192023-02-06 12:54:29 +0100776# skip next test if GnuTLS does not support the record size limit extension
777requires_gnutls_record_size_limit() {
778 requires_gnutls_next
779 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
780 GNUTLS_RECORD_SIZE_LIMIT_AVAILABLE="NO"
781 else
782 GNUTLS_RECORD_SIZE_LIMIT_AVAILABLE="YES"
783 fi
784 if [ "$GNUTLS_RECORD_SIZE_LIMIT_AVAILABLE" = "NO" ]; then
785 SKIP_NEXT="YES"
786 fi
787}
788
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200789# skip next test if IPv6 isn't available on this host
790requires_ipv6() {
791 if [ -z "${HAS_IPV6:-}" ]; then
792 $P_SRV server_addr='::1' > $SRV_OUT 2>&1 &
793 SRV_PID=$!
794 sleep 1
795 kill $SRV_PID >/dev/null 2>&1
796 if grep "NET - Binding of the socket failed" $SRV_OUT >/dev/null; then
797 HAS_IPV6="NO"
798 else
799 HAS_IPV6="YES"
800 fi
801 rm -r $SRV_OUT
802 fi
803
804 if [ "$HAS_IPV6" = "NO" ]; then
805 SKIP_NEXT="YES"
806 fi
807}
808
Andrzej Kurekb4593462018-10-11 08:43:30 -0400809# skip next test if it's i686 or uname is not available
810requires_not_i686() {
811 if [ -z "${IS_I686:-}" ]; then
812 IS_I686="YES"
813 if which "uname" >/dev/null 2>&1; then
814 if [ -z "$(uname -a | grep i686)" ]; then
815 IS_I686="NO"
816 fi
817 fi
818 fi
819 if [ "$IS_I686" = "YES" ]; then
820 SKIP_NEXT="YES"
821 fi
822}
823
Angus Grattonc4dd0732018-04-11 16:28:39 +1000824# Calculate the input & output maximum content lengths set in the config
David Horstmann95d516f2021-05-04 18:36:56 +0100825MAX_CONTENT_LEN=16384
Yuto Takano2be6f1a2021-06-22 07:16:40 +0100826MAX_IN_LEN=$( get_config_value_or_default "MBEDTLS_SSL_IN_CONTENT_LEN" )
827MAX_OUT_LEN=$( get_config_value_or_default "MBEDTLS_SSL_OUT_CONTENT_LEN" )
Angus Grattonc4dd0732018-04-11 16:28:39 +1000828
Yuto Takano0509fea2021-06-21 19:43:33 +0100829# Calculate the maximum content length that fits both
Angus Grattonc4dd0732018-04-11 16:28:39 +1000830if [ "$MAX_IN_LEN" -lt "$MAX_CONTENT_LEN" ]; then
831 MAX_CONTENT_LEN="$MAX_IN_LEN"
832fi
833if [ "$MAX_OUT_LEN" -lt "$MAX_CONTENT_LEN" ]; then
834 MAX_CONTENT_LEN="$MAX_OUT_LEN"
835fi
836
837# skip the next test if the SSL output buffer is less than 16KB
838requires_full_size_output_buffer() {
839 if [ "$MAX_OUT_LEN" -ne 16384 ]; then
840 SKIP_NEXT="YES"
841 fi
842}
843
Manuel Pégourié-Gonnard76fe9e42014-09-24 15:17:31 +0200844# skip the next test if valgrind is in use
845not_with_valgrind() {
846 if [ "$MEMCHECK" -gt 0 ]; then
847 SKIP_NEXT="YES"
848 fi
849}
850
Paul Bakker362689d2016-05-13 10:33:25 +0100851# skip the next test if valgrind is NOT in use
852only_with_valgrind() {
853 if [ "$MEMCHECK" -eq 0 ]; then
854 SKIP_NEXT="YES"
855 fi
856}
857
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200858# multiply the client timeout delay by the given factor for the next test
Janos Follath74537a62016-09-02 13:45:28 +0100859client_needs_more_time() {
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200860 CLI_DELAY_FACTOR=$1
861}
862
Janos Follath74537a62016-09-02 13:45:28 +0100863# wait for the given seconds after the client finished in the next test
864server_needs_more_time() {
865 SRV_DELAY_SECONDS=$1
866}
867
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100868# print_name <name>
869print_name() {
Paul Bakkere20310a2016-05-10 11:18:17 +0100870 TESTS=$(( $TESTS + 1 ))
871 LINE=""
872
873 if [ "$SHOW_TEST_NUMBER" -gt 0 ]; then
874 LINE="$TESTS "
875 fi
876
877 LINE="$LINE$1"
Gilles Peskine231befa2020-08-26 20:05:11 +0200878 printf "%s " "$LINE"
Paul Bakkere20310a2016-05-10 11:18:17 +0100879 LEN=$(( 72 - `echo "$LINE" | wc -c` ))
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +0100880 for i in `seq 1 $LEN`; do printf '.'; done
881 printf ' '
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100882
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100883}
884
Gilles Peskine560280b2019-09-16 15:17:38 +0200885# record_outcome <outcome> [<failure-reason>]
886# The test name must be in $NAME.
Gilles Peskine5eb2b022022-01-07 15:47:02 +0100887# Use $TEST_SUITE_NAME as the test suite name if set.
Gilles Peskine560280b2019-09-16 15:17:38 +0200888record_outcome() {
889 echo "$1"
890 if [ -n "$MBEDTLS_TEST_OUTCOME_FILE" ]; then
891 printf '%s;%s;%s;%s;%s;%s\n' \
892 "$MBEDTLS_TEST_PLATFORM" "$MBEDTLS_TEST_CONFIGURATION" \
Gilles Peskine5eb2b022022-01-07 15:47:02 +0100893 "${TEST_SUITE_NAME:-ssl-opt}" "$NAME" \
Gilles Peskine560280b2019-09-16 15:17:38 +0200894 "$1" "${2-}" \
895 >>"$MBEDTLS_TEST_OUTCOME_FILE"
896 fi
897}
Gilles Peskine5eb2b022022-01-07 15:47:02 +0100898unset TEST_SUITE_NAME
Gilles Peskine560280b2019-09-16 15:17:38 +0200899
Gilles Peskine788ad332021-10-20 14:17:02 +0200900# True if the presence of the given pattern in a log definitely indicates
901# that the test has failed. False if the presence is inconclusive.
902#
903# Inputs:
904# * $1: pattern found in the logs
905# * $TIMES_LEFT: >0 if retrying is an option
906#
907# Outputs:
908# * $outcome: set to a retry reason if the pattern is inconclusive,
909# unchanged otherwise.
910# * Return value: 1 if the pattern is inconclusive,
911# 0 if the failure is definitive.
912log_pattern_presence_is_conclusive() {
913 # If we've run out of attempts, then don't retry no matter what.
914 if [ $TIMES_LEFT -eq 0 ]; then
915 return 0
916 fi
917 case $1 in
918 "resend")
919 # An undesired resend may have been caused by the OS dropping or
920 # delaying a packet at an inopportune time.
921 outcome="RETRY(resend)"
922 return 1;;
923 esac
924}
925
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100926# fail <message>
927fail() {
Gilles Peskine560280b2019-09-16 15:17:38 +0200928 record_outcome "FAIL" "$1"
Manuel Pégourié-Gonnard3eec6042014-02-27 15:37:24 +0100929 echo " ! $1"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100930
Manuel Pégourié-Gonnardc2b00922014-08-31 16:46:04 +0200931 mv $SRV_OUT o-srv-${TESTS}.log
932 mv $CLI_OUT o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200933 if [ -n "$PXY_CMD" ]; then
934 mv $PXY_OUT o-pxy-${TESTS}.log
935 fi
936 echo " ! outputs saved to o-XXX-${TESTS}.log"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100937
Manuel Pégourié-Gonnard3f3302f2020-06-08 11:49:05 +0200938 if [ "${LOG_FAILURE_ON_STDOUT:-0}" != 0 ]; then
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200939 echo " ! server output:"
940 cat o-srv-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200941 echo " ! ========================================================"
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200942 echo " ! client output:"
943 cat o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200944 if [ -n "$PXY_CMD" ]; then
945 echo " ! ========================================================"
946 echo " ! proxy output:"
947 cat o-pxy-${TESTS}.log
948 fi
949 echo ""
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200950 fi
951
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +0200952 FAILS=$(( $FAILS + 1 ))
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100953}
954
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100955# is_polar <cmd_line>
956is_polar() {
Gilles Peskine64457492020-08-26 21:53:33 +0200957 case "$1" in
958 *ssl_client2*) true;;
959 *ssl_server2*) true;;
960 *) false;;
961 esac
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100962}
963
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +0200964# openssl s_server doesn't have -www with DTLS
965check_osrv_dtls() {
Gilles Peskine64457492020-08-26 21:53:33 +0200966 case "$SRV_CMD" in
967 *s_server*-dtls*)
968 NEEDS_INPUT=1
969 SRV_CMD="$( echo $SRV_CMD | sed s/-www// )";;
970 *) NEEDS_INPUT=0;;
971 esac
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +0200972}
973
974# provide input to commands that need it
975provide_input() {
976 if [ $NEEDS_INPUT -eq 0 ]; then
977 return
978 fi
979
980 while true; do
981 echo "HTTP/1.0 200 OK"
982 sleep 1
983 done
984}
985
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100986# has_mem_err <log_file_name>
987has_mem_err() {
988 if ( grep -F 'All heap blocks were freed -- no leaks are possible' "$1" &&
989 grep -F 'ERROR SUMMARY: 0 errors from 0 contexts' "$1" ) > /dev/null
990 then
991 return 1 # false: does not have errors
992 else
993 return 0 # true: has errors
994 fi
995}
996
Unknownd364f4c2019-09-02 10:42:57 -0400997# Wait for process $2 named $3 to be listening on port $1. Print error to $4.
Gilles Peskine418b5362017-12-14 18:58:42 +0100998if type lsof >/dev/null 2>/dev/null; then
Unknownd364f4c2019-09-02 10:42:57 -0400999 wait_app_start() {
Paul Elliotte05e1262021-10-20 15:59:33 +01001000 newline='
1001'
Gilles Peskine418b5362017-12-14 18:58:42 +01001002 START_TIME=$(date +%s)
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001003 if [ "$DTLS" -eq 1 ]; then
Gilles Peskine418b5362017-12-14 18:58:42 +01001004 proto=UDP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001005 else
Gilles Peskine418b5362017-12-14 18:58:42 +01001006 proto=TCP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001007 fi
Gilles Peskine418b5362017-12-14 18:58:42 +01001008 # Make a tight loop, server normally takes less than 1s to start.
Paul Elliott58ed8a72021-10-19 17:56:39 +01001009 while true; do
Gilles Peskine5bd0b512022-04-15 22:53:18 +02001010 SERVER_PIDS=$(lsof -a -n -b -i "$proto:$1" -t)
Paul Elliotte05e1262021-10-20 15:59:33 +01001011 # When we use a proxy, it will be listening on the same port we
1012 # are checking for as well as the server and lsof will list both.
Paul Elliotte05e1262021-10-20 15:59:33 +01001013 case ${newline}${SERVER_PIDS}${newline} in
Gilles Peskine5bd0b512022-04-15 22:53:18 +02001014 *${newline}${2}${newline}*) break;;
Paul Elliotte05e1262021-10-20 15:59:33 +01001015 esac
Gilles Peskine418b5362017-12-14 18:58:42 +01001016 if [ $(( $(date +%s) - $START_TIME )) -gt $DOG_DELAY ]; then
Unknownd364f4c2019-09-02 10:42:57 -04001017 echo "$3 START TIMEOUT"
1018 echo "$3 START TIMEOUT" >> $4
Gilles Peskine418b5362017-12-14 18:58:42 +01001019 break
1020 fi
1021 # Linux and *BSD support decimal arguments to sleep. On other
1022 # OSes this may be a tight loop.
1023 sleep 0.1 2>/dev/null || true
1024 done
1025 }
1026else
Unknownd364f4c2019-09-02 10:42:57 -04001027 echo "Warning: lsof not available, wait_app_start = sleep"
1028 wait_app_start() {
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001029 sleep "$START_DELAY"
Gilles Peskine418b5362017-12-14 18:58:42 +01001030 }
1031fi
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001032
Unknownd364f4c2019-09-02 10:42:57 -04001033# Wait for server process $2 to be listening on port $1.
1034wait_server_start() {
1035 wait_app_start $1 $2 "SERVER" $SRV_OUT
1036}
1037
1038# Wait for proxy process $2 to be listening on port $1.
1039wait_proxy_start() {
1040 wait_app_start $1 $2 "PROXY" $PXY_OUT
1041}
1042
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001043# Given the client or server debug output, parse the unix timestamp that is
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +01001044# included in the first 4 bytes of the random bytes and check that it's within
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001045# acceptable bounds
1046check_server_hello_time() {
1047 # Extract the time from the debug (lvl 3) output of the client
Andres Amaya Garcia67d8da52017-09-15 15:49:24 +01001048 SERVER_HELLO_TIME="$(sed -n 's/.*server hello, current time: //p' < "$1")"
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001049 # Get the Unix timestamp for now
1050 CUR_TIME=$(date +'%s')
1051 THRESHOLD_IN_SECS=300
1052
1053 # Check if the ServerHello time was printed
1054 if [ -z "$SERVER_HELLO_TIME" ]; then
1055 return 1
1056 fi
1057
1058 # Check the time in ServerHello is within acceptable bounds
1059 if [ $SERVER_HELLO_TIME -lt $(( $CUR_TIME - $THRESHOLD_IN_SECS )) ]; then
1060 # The time in ServerHello is at least 5 minutes before now
1061 return 1
1062 elif [ $SERVER_HELLO_TIME -gt $(( $CUR_TIME + $THRESHOLD_IN_SECS )) ]; then
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +01001063 # The time in ServerHello is at least 5 minutes later than now
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001064 return 1
1065 else
1066 return 0
1067 fi
1068}
1069
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001070# Get handshake memory usage from server or client output and put it into the variable specified by the first argument
1071handshake_memory_get() {
1072 OUTPUT_VARIABLE="$1"
1073 OUTPUT_FILE="$2"
1074
1075 # Get memory usage from a pattern like "Heap memory usage after handshake: 23112 bytes. Peak memory usage was 33112"
1076 MEM_USAGE=$(sed -n 's/.*Heap memory usage after handshake: //p' < "$OUTPUT_FILE" | grep -o "[0-9]*" | head -1)
1077
1078 # Check if memory usage was read
1079 if [ -z "$MEM_USAGE" ]; then
1080 echo "Error: Can not read the value of handshake memory usage"
1081 return 1
1082 else
1083 eval "$OUTPUT_VARIABLE=$MEM_USAGE"
1084 return 0
1085 fi
1086}
1087
1088# Get handshake memory usage from server or client output and check if this value
1089# is not higher than the maximum given by the first argument
1090handshake_memory_check() {
1091 MAX_MEMORY="$1"
1092 OUTPUT_FILE="$2"
1093
1094 # Get memory usage
1095 if ! handshake_memory_get "MEMORY_USAGE" "$OUTPUT_FILE"; then
1096 return 1
1097 fi
1098
1099 # Check if memory usage is below max value
1100 if [ "$MEMORY_USAGE" -gt "$MAX_MEMORY" ]; then
1101 echo "\nFailed: Handshake memory usage was $MEMORY_USAGE bytes," \
1102 "but should be below $MAX_MEMORY bytes"
1103 return 1
1104 else
1105 return 0
1106 fi
1107}
1108
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001109# wait for client to terminate and set CLI_EXIT
1110# must be called right after starting the client
1111wait_client_done() {
1112 CLI_PID=$!
1113
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +02001114 CLI_DELAY=$(( $DOG_DELAY * $CLI_DELAY_FACTOR ))
1115 CLI_DELAY_FACTOR=1
1116
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +02001117 ( sleep $CLI_DELAY; echo "===CLIENT_TIMEOUT===" >> $CLI_OUT; kill $CLI_PID ) &
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001118 DOG_PID=$!
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001119
Jerry Yud2d41102022-07-26 17:34:42 +08001120 # For Ubuntu 22.04, `Terminated` message is outputed by wait command.
1121 # To remove it from stdout, redirect stdout/stderr to CLI_OUT
1122 wait $CLI_PID >> $CLI_OUT 2>&1
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001123 CLI_EXIT=$?
1124
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001125 kill $DOG_PID >/dev/null 2>&1
Jerry Yufe52e552022-07-09 04:23:43 +00001126 wait $DOG_PID >> $CLI_OUT 2>&1
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001127
1128 echo "EXIT: $CLI_EXIT" >> $CLI_OUT
Janos Follath74537a62016-09-02 13:45:28 +01001129
1130 sleep $SRV_DELAY_SECONDS
1131 SRV_DELAY_SECONDS=0
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +02001132}
1133
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001134# check if the given command uses dtls and sets global variable DTLS
1135detect_dtls() {
Gilles Peskine64457492020-08-26 21:53:33 +02001136 case "$1" in
Paul Elliott1428f252021-10-12 16:02:55 +01001137 *dtls=1*|*-dtls*|*-u*) DTLS=1;;
Gilles Peskine64457492020-08-26 21:53:33 +02001138 *) DTLS=0;;
1139 esac
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001140}
1141
Dave Rodgman0279c2f2021-02-10 12:45:41 +00001142# check if the given command uses gnutls and sets global variable CMD_IS_GNUTLS
1143is_gnutls() {
1144 case "$1" in
1145 *gnutls-cli*)
1146 CMD_IS_GNUTLS=1
1147 ;;
1148 *gnutls-serv*)
1149 CMD_IS_GNUTLS=1
1150 ;;
1151 *)
1152 CMD_IS_GNUTLS=0
1153 ;;
1154 esac
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001155}
1156
Valerio Setti2f8eb622023-03-16 13:04:44 +01001157# Some external tools (gnutls or openssl) might not have support for static ECDH
1158# and this limit the tests that can be run with them. This function checks server
Valerio Setti6ba247c2023-03-14 17:13:43 +01001159# and client command lines, given as input, to verify if the current test
1160# is using one of these tools.
1161use_ext_tool_without_ecdh_support() {
1162 case "$1" in
1163 *$GNUTLS_SERV*|\
1164 *${GNUTLS_NEXT_SERV:-"gnutls-serv-dummy"}*|\
1165 *${OPENSSL_NEXT:-"openssl-dummy"}*)
1166 echo "yes"
1167 return;;
1168 esac
1169 case "$2" in
1170 *$GNUTLS_CLI*|\
1171 *${GNUTLS_NEXT_CLI:-"gnutls-cli-dummy"}*|\
1172 *${OPENSSL_NEXT:-"openssl-dummy"}*)
1173 echo "yes"
1174 return;;
1175 esac
1176 echo "no"
1177}
1178
Jerry Yuf467d462022-11-07 13:12:44 +08001179# Generate random psk_list argument for ssl_server2
1180get_srv_psk_list ()
1181{
1182 case $(( TESTS % 3 )) in
1183 0) echo "psk_list=abc,dead,def,beef,Client_identity,6162636465666768696a6b6c6d6e6f70";;
1184 1) echo "psk_list=abc,dead,Client_identity,6162636465666768696a6b6c6d6e6f70,def,beef";;
1185 2) echo "psk_list=Client_identity,6162636465666768696a6b6c6d6e6f70,abc,dead,def,beef";;
1186 esac
1187}
1188
Gilles Peskine309ca652022-03-14 17:55:04 +01001189# Determine what calc_verify trace is to be expected, if any.
1190#
1191# calc_verify is only called for two things: to calculate the
1192# extended master secret, and to process client authentication.
1193#
1194# Warning: the current implementation assumes that extended_ms is not
1195# disabled on the client or on the server.
1196#
1197# Inputs:
Gilles Peskinec8d242f2022-04-06 22:23:45 +02001198# * $1: the value of the server auth_mode parameter.
1199# 'required' if client authentication is expected,
1200# 'none' or absent if not.
Gilles Peskine309ca652022-03-14 17:55:04 +01001201# * $CONFIGS_ENABLED
1202#
1203# Outputs:
1204# * $maybe_calc_verify: set to a trace expected in the debug logs
1205set_maybe_calc_verify() {
1206 maybe_calc_verify=
1207 case $CONFIGS_ENABLED in
1208 *\ MBEDTLS_SSL_EXTENDED_MASTER_SECRET\ *) :;;
1209 *)
1210 case ${1-} in
Gilles Peskinec8d242f2022-04-06 22:23:45 +02001211 ''|none) return;;
1212 required) :;;
Gilles Peskine309ca652022-03-14 17:55:04 +01001213 *) echo "Bad parameter 1 to set_maybe_calc_verify: $1"; exit 1;;
1214 esac
1215 esac
1216 case $CONFIGS_ENABLED in
1217 *\ MBEDTLS_USE_PSA_CRYPTO\ *) maybe_calc_verify="PSA calc verify";;
1218 *) maybe_calc_verify="<= calc verify";;
1219 esac
1220}
1221
Johan Pascal9bc50b02020-09-24 12:01:13 +02001222# Compare file content
1223# Usage: find_in_both pattern file1 file2
1224# extract from file1 the first line matching the pattern
1225# check in file2 that the same line can be found
1226find_in_both() {
1227 srv_pattern=$(grep -m 1 "$1" "$2");
1228 if [ -z "$srv_pattern" ]; then
1229 return 1;
1230 fi
1231
1232 if grep "$srv_pattern" $3 >/dev/null; then :
Johan Pascal10403152020-10-09 20:43:51 +02001233 return 0;
Johan Pascal9bc50b02020-09-24 12:01:13 +02001234 else
1235 return 1;
1236 fi
1237}
1238
Jerry Yuc46e9b42021-08-06 11:22:24 +08001239SKIP_HANDSHAKE_CHECK="NO"
1240skip_handshake_stage_check() {
1241 SKIP_HANDSHAKE_CHECK="YES"
1242}
1243
Gilles Peskine236bf982021-10-19 16:25:10 +02001244# Analyze the commands that will be used in a test.
1245#
1246# Analyze and possibly instrument $PXY_CMD, $CLI_CMD, $SRV_CMD to pass
1247# extra arguments or go through wrappers.
Gilles Peskine59601d72022-04-05 22:00:17 +02001248#
1249# Inputs:
1250# * $@: supplemental options to run_test() (after the mandatory arguments).
1251# * $CLI_CMD, $PXY_CMD, $SRV_CMD: the client, proxy and server commands.
1252# * $DTLS: 1 if DTLS, otherwise 0.
1253#
1254# Outputs:
1255# * $CLI_CMD, $PXY_CMD, $SRV_CMD: may be tweaked.
Gilles Peskine236bf982021-10-19 16:25:10 +02001256analyze_test_commands() {
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +02001257 # if the test uses DTLS but no custom proxy, add a simple proxy
1258 # as it provides timing info that's useful to debug failures
Manuel Pégourié-Gonnard70fce982020-06-25 09:54:46 +02001259 if [ -z "$PXY_CMD" ] && [ "$DTLS" -eq 1 ]; then
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +02001260 PXY_CMD="$P_PXY"
Manuel Pégourié-Gonnard8779e9a2020-07-16 10:19:32 +02001261 case " $SRV_CMD " in
1262 *' server_addr=::1 '*)
1263 PXY_CMD="$PXY_CMD server_addr=::1 listen_addr=::1";;
1264 esac
Manuel Pégourié-Gonnardf4557862020-06-08 11:40:06 +02001265 fi
1266
Dave Rodgman0279c2f2021-02-10 12:45:41 +00001267 # update CMD_IS_GNUTLS variable
1268 is_gnutls "$SRV_CMD"
1269
1270 # if the server uses gnutls but doesn't set priority, explicitly
1271 # set the default priority
1272 if [ "$CMD_IS_GNUTLS" -eq 1 ]; then
1273 case "$SRV_CMD" in
1274 *--priority*) :;;
1275 *) SRV_CMD="$SRV_CMD --priority=NORMAL";;
1276 esac
1277 fi
1278
1279 # update CMD_IS_GNUTLS variable
1280 is_gnutls "$CLI_CMD"
1281
1282 # if the client uses gnutls but doesn't set priority, explicitly
1283 # set the default priority
1284 if [ "$CMD_IS_GNUTLS" -eq 1 ]; then
1285 case "$CLI_CMD" in
1286 *--priority*) :;;
1287 *) CLI_CMD="$CLI_CMD --priority=NORMAL";;
1288 esac
1289 fi
1290
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001291 # fix client port
1292 if [ -n "$PXY_CMD" ]; then
1293 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$PXY_PORT/g )
1294 else
1295 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$SRV_PORT/g )
1296 fi
1297
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001298 # prepend valgrind to our commands if active
1299 if [ "$MEMCHECK" -gt 0 ]; then
1300 if is_polar "$SRV_CMD"; then
1301 SRV_CMD="valgrind --leak-check=full $SRV_CMD"
1302 fi
1303 if is_polar "$CLI_CMD"; then
1304 CLI_CMD="valgrind --leak-check=full $CLI_CMD"
1305 fi
1306 fi
Gilles Peskine236bf982021-10-19 16:25:10 +02001307}
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001308
Gilles Peskine236bf982021-10-19 16:25:10 +02001309# Check for failure conditions after a test case.
1310#
1311# Inputs from run_test:
1312# * positional parameters: test options (see run_test documentation)
1313# * $CLI_EXIT: client return code
1314# * $CLI_EXPECT: expected client return code
1315# * $SRV_RET: server return code
1316# * $CLI_OUT, $SRV_OUT, $PXY_OUT: files containing client/server/proxy logs
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001317# * $TIMES_LEFT: if nonzero, a RETRY outcome is allowed
Gilles Peskine236bf982021-10-19 16:25:10 +02001318#
1319# Outputs:
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001320# * $outcome: one of PASS/RETRY*/FAIL
Gilles Peskine236bf982021-10-19 16:25:10 +02001321check_test_failure() {
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001322 outcome=FAIL
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +02001323
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001324 if [ $TIMES_LEFT -gt 0 ] &&
1325 grep '===CLIENT_TIMEOUT===' $CLI_OUT >/dev/null
1326 then
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001327 outcome="RETRY(client-timeout)"
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001328 return
1329 fi
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +02001330
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001331 # check if the client and server went at least to the handshake stage
Paul Bakker1ebc0c52014-05-22 15:47:58 +02001332 # (useful to avoid tests with only negative assertions and non-zero
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001333 # expected client exit to incorrectly succeed in case of catastrophic
1334 # failure)
Jerry Yuc46e9b42021-08-06 11:22:24 +08001335 if [ "X$SKIP_HANDSHAKE_CHECK" != "XYES" ]
1336 then
1337 if is_polar "$SRV_CMD"; then
1338 if grep "Performing the SSL/TLS handshake" $SRV_OUT >/dev/null; then :;
1339 else
1340 fail "server or client failed to reach handshake stage"
1341 return
1342 fi
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001343 fi
Jerry Yuc46e9b42021-08-06 11:22:24 +08001344 if is_polar "$CLI_CMD"; then
1345 if grep "Performing the SSL/TLS handshake" $CLI_OUT >/dev/null; then :;
1346 else
1347 fail "server or client failed to reach handshake stage"
1348 return
1349 fi
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +01001350 fi
1351 fi
1352
Jerry Yuc46e9b42021-08-06 11:22:24 +08001353 SKIP_HANDSHAKE_CHECK="NO"
Gilles Peskineaaf866e2021-02-09 21:01:33 +01001354 # Check server exit code (only for Mbed TLS: GnuTLS and OpenSSL don't
1355 # exit with status 0 when interrupted by a signal, and we don't really
1356 # care anyway), in case e.g. the server reports a memory leak.
1357 if [ $SRV_RET != 0 ] && is_polar "$SRV_CMD"; then
Gilles Peskine7f919de2021-02-02 23:29:03 +01001358 fail "Server exited with status $SRV_RET"
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +01001359 return
1360 fi
1361
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001362 # check client exit code
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01001363 if [ \( "$CLI_EXPECT" = 0 -a "$CLI_EXIT" != 0 \) -o \
1364 \( "$CLI_EXPECT" != 0 -a "$CLI_EXIT" = 0 \) ]
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001365 then
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001366 fail "bad client exit code (expected $CLI_EXPECT, got $CLI_EXIT)"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001367 return
1368 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001369
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001370 # check other assertions
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001371 # lines beginning with == are added by valgrind, ignore them
Paul Bakker1f650922016-05-13 10:16:46 +01001372 # lines with 'Serious error when reading debug info', are valgrind issues as well
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001373 while [ $# -gt 0 ]
1374 do
1375 case $1 in
1376 "-s")
Paul Bakker1f650922016-05-13 10:16:46 +01001377 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +01001378 fail "pattern '$2' MUST be present in the Server output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001379 return
1380 fi
1381 ;;
1382
1383 "-c")
Paul Bakker1f650922016-05-13 10:16:46 +01001384 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +01001385 fail "pattern '$2' MUST be present in the Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001386 return
1387 fi
1388 ;;
1389
1390 "-S")
Paul Bakker1f650922016-05-13 10:16:46 +01001391 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Gilles Peskine788ad332021-10-20 14:17:02 +02001392 if log_pattern_presence_is_conclusive "$2"; then
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001393 fail "pattern '$2' MUST NOT be present in the Server output"
1394 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001395 return
1396 fi
1397 ;;
1398
1399 "-C")
Paul Bakker1f650922016-05-13 10:16:46 +01001400 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Gilles Peskine788ad332021-10-20 14:17:02 +02001401 if log_pattern_presence_is_conclusive "$2"; then
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001402 fail "pattern '$2' MUST NOT be present in the Client output"
1403 fi
Simon Butcher8e004102016-10-14 00:48:33 +01001404 return
1405 fi
1406 ;;
1407
1408 # The filtering in the following two options (-u and -U) do the following
1409 # - ignore valgrind output
Antonin Décimo36e89b52019-01-23 15:24:37 +01001410 # - filter out everything but lines right after the pattern occurrences
Simon Butcher8e004102016-10-14 00:48:33 +01001411 # - keep one of each non-unique line
1412 # - count how many lines remain
1413 # A line with '--' will remain in the result from previous outputs, so the number of lines in the result will be 1
1414 # if there were no duplicates.
1415 "-U")
1416 if [ $(grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
1417 fail "lines following pattern '$2' must be unique in Server output"
1418 return
1419 fi
1420 ;;
1421
1422 "-u")
1423 if [ $(grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
1424 fail "lines following pattern '$2' must be unique in Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001425 return
1426 fi
1427 ;;
Andres Amaya Garcia93993de2017-09-06 15:38:07 +01001428 "-F")
1429 if ! $2 "$SRV_OUT"; then
1430 fail "function call to '$2' failed on Server output"
1431 return
1432 fi
1433 ;;
1434 "-f")
1435 if ! $2 "$CLI_OUT"; then
1436 fail "function call to '$2' failed on Client output"
1437 return
1438 fi
1439 ;;
Johan Pascal9bc50b02020-09-24 12:01:13 +02001440 "-g")
1441 if ! eval "$2 '$SRV_OUT' '$CLI_OUT'"; then
1442 fail "function call to '$2' failed on Server and Client output"
1443 return
1444 fi
1445 ;;
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001446
1447 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +02001448 echo "Unknown test: $1" >&2
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001449 exit 1
1450 esac
1451 shift 2
1452 done
1453
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001454 # check valgrind's results
1455 if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001456 if is_polar "$SRV_CMD" && has_mem_err $SRV_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001457 fail "Server has memory errors"
1458 return
1459 fi
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001460 if is_polar "$CLI_CMD" && has_mem_err $CLI_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01001461 fail "Client has memory errors"
1462 return
1463 fi
1464 fi
1465
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001466 # if we're here, everything is ok
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001467 outcome=PASS
Gilles Peskine236bf982021-10-19 16:25:10 +02001468}
1469
Gilles Peskine196d73b2021-10-19 16:35:35 +02001470# Run the current test case: start the server and if applicable the proxy, run
1471# the client, wait for all processes to finish or time out.
1472#
1473# Inputs:
1474# * $NAME: test case name
1475# * $CLI_CMD, $SRV_CMD, $PXY_CMD: commands to run
1476# * $CLI_OUT, $SRV_OUT, $PXY_OUT: files to contain client/server/proxy logs
1477#
1478# Outputs:
1479# * $CLI_EXIT: client return code
1480# * $SRV_RET: server return code
1481do_run_test_once() {
1482 # run the commands
1483 if [ -n "$PXY_CMD" ]; then
1484 printf "# %s\n%s\n" "$NAME" "$PXY_CMD" > $PXY_OUT
1485 $PXY_CMD >> $PXY_OUT 2>&1 &
1486 PXY_PID=$!
1487 wait_proxy_start "$PXY_PORT" "$PXY_PID"
1488 fi
1489
1490 check_osrv_dtls
1491 printf '# %s\n%s\n' "$NAME" "$SRV_CMD" > $SRV_OUT
1492 provide_input | $SRV_CMD >> $SRV_OUT 2>&1 &
1493 SRV_PID=$!
1494 wait_server_start "$SRV_PORT" "$SRV_PID"
1495
1496 printf '# %s\n%s\n' "$NAME" "$CLI_CMD" > $CLI_OUT
Andrzej Kurek140b5892022-05-27 06:44:19 -04001497 # The client must be a subprocess of the script in order for killing it to
1498 # work properly, that's why the ampersand is placed inside the eval command,
1499 # not at the end of the line: the latter approach will spawn eval as a
1500 # subprocess, and the $CLI_CMD as a grandchild.
1501 eval "$CLI_CMD &" >> $CLI_OUT 2>&1
Gilles Peskine196d73b2021-10-19 16:35:35 +02001502 wait_client_done
1503
1504 sleep 0.05
1505
1506 # terminate the server (and the proxy)
1507 kill $SRV_PID
Jerry Yud2d41102022-07-26 17:34:42 +08001508 # For Ubuntu 22.04, `Terminated` message is outputed by wait command.
Jerry Yu27d80922022-08-02 21:28:55 +08001509 # To remove it from stdout, redirect stdout/stderr to SRV_OUT
Jerry Yud2d41102022-07-26 17:34:42 +08001510 wait $SRV_PID >> $SRV_OUT 2>&1
Gilles Peskine196d73b2021-10-19 16:35:35 +02001511 SRV_RET=$?
1512
1513 if [ -n "$PXY_CMD" ]; then
1514 kill $PXY_PID >/dev/null 2>&1
Jerry Yu6969eee2022-10-10 10:25:26 +08001515 wait $PXY_PID >> $PXY_OUT 2>&1
Gilles Peskine196d73b2021-10-19 16:35:35 +02001516 fi
1517}
1518
Ronald Cron097ba142023-03-08 16:18:00 +01001519# Detect if the current test is going to use TLS 1.3 or TLS 1.2.
Valerio Setti194e2bd2023-03-02 17:18:10 +01001520# $1 and $2 contain the server and client command lines, respectively.
Valerio Setti213c4ea2023-03-07 19:29:57 +01001521#
1522# Note: this function only provides some guess about TLS version by simply
1523# looking at the server/client command lines. Even thought this works
1524# for the sake of tests' filtering (especially in conjunction with the
1525# detect_required_features() function), it does NOT guarantee that the
1526# result is accurate. It does not check other conditions, such as:
Valerio Setti213c4ea2023-03-07 19:29:57 +01001527# - we can force a ciphersuite which contains "WITH" in its name, meaning
1528# that we are going to use TLS 1.2
1529# - etc etc
Valerio Setti1af76d12023-02-23 15:55:10 +01001530get_tls_version() {
Ronald Cron097ba142023-03-08 16:18:00 +01001531 # First check if the version is forced on an Mbed TLS peer
Valerio Setti1af76d12023-02-23 15:55:10 +01001532 case $1 in
Ronald Cron097ba142023-03-08 16:18:00 +01001533 *tls12*)
1534 echo "TLS12"
1535 return;;
1536 *tls13*)
Valerio Setti1af76d12023-02-23 15:55:10 +01001537 echo "TLS13"
1538 return;;
1539 esac
1540 case $2 in
Ronald Cron097ba142023-03-08 16:18:00 +01001541 *tls12*)
1542 echo "TLS12"
1543 return;;
1544 *tls13*)
Valerio Setti1af76d12023-02-23 15:55:10 +01001545 echo "TLS13"
1546 return;;
1547 esac
Ronald Cron097ba142023-03-08 16:18:00 +01001548 # Second check if the version is forced on an OpenSSL or GnuTLS peer
1549 case $1 in
1550 tls1_2*)
1551 echo "TLS12"
1552 return;;
1553 *tls1_3)
1554 echo "TLS13"
1555 return;;
1556 esac
1557 case $2 in
1558 *tls1_2)
1559 echo "TLS12"
1560 return;;
1561 *tls1_3)
1562 echo "TLS13"
1563 return;;
1564 esac
1565 # Third if the version is not forced, if TLS 1.3 is enabled then the test
1566 # is aimed to run a TLS 1.3 handshake.
1567 if $P_QUERY -all MBEDTLS_SSL_PROTO_TLS1_3
1568 then
1569 echo "TLS13"
1570 else
1571 echo "TLS12"
1572 fi
Valerio Setti1af76d12023-02-23 15:55:10 +01001573}
1574
Gilles Peskine236bf982021-10-19 16:25:10 +02001575# Usage: run_test name [-p proxy_cmd] srv_cmd cli_cmd cli_exit [option [...]]
1576# Options: -s pattern pattern that must be present in server output
1577# -c pattern pattern that must be present in client output
1578# -u pattern lines after pattern must be unique in client output
1579# -f call shell function on client output
1580# -S pattern pattern that must be absent in server output
1581# -C pattern pattern that must be absent in client output
1582# -U pattern lines after pattern must be unique in server output
1583# -F call shell function on server output
1584# -g call shell function on server and client output
1585run_test() {
1586 NAME="$1"
1587 shift 1
1588
1589 if is_excluded "$NAME"; then
1590 SKIP_NEXT="NO"
1591 # There was no request to run the test, so don't record its outcome.
1592 return
1593 fi
1594
1595 print_name "$NAME"
1596
1597 # Do we only run numbered tests?
1598 if [ -n "$RUN_TEST_NUMBER" ]; then
1599 case ",$RUN_TEST_NUMBER," in
1600 *",$TESTS,"*) :;;
1601 *) SKIP_NEXT="YES";;
1602 esac
1603 fi
1604
1605 # does this test use a proxy?
1606 if [ "X$1" = "X-p" ]; then
1607 PXY_CMD="$2"
1608 shift 2
1609 else
1610 PXY_CMD=""
1611 fi
1612
1613 # get commands and client output
1614 SRV_CMD="$1"
1615 CLI_CMD="$2"
1616 CLI_EXPECT="$3"
1617 shift 3
1618
1619 # Check if test uses files
1620 case "$SRV_CMD $CLI_CMD" in
1621 *data_files/*)
1622 requires_config_enabled MBEDTLS_FS_IO;;
1623 esac
1624
Gilles Peskine82a4ab22022-02-25 19:46:30 +01001625 # Check if the test uses DTLS.
1626 detect_dtls "$SRV_CMD"
1627 if [ "$DTLS" -eq 1 ]; then
1628 requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
1629 fi
1630
Valerio Setti6ba247c2023-03-14 17:13:43 +01001631 # Check if we are trying to use an external tool wich does not support ECDH
1632 EXT_WO_ECDH=$(use_ext_tool_without_ecdh_support "$SRV_CMD" "$CLI_CMD")
1633
Valerio Setti726ffbf2023-08-02 20:02:44 +02001634 # Guess the TLS version which is going to be used
1635 if [ "$EXT_WO_ECDH" = "no" ]; then
1636 TLS_VERSION=$(get_tls_version "$SRV_CMD" "$CLI_CMD")
1637 else
1638 TLS_VERSION="TLS12"
1639 fi
1640
1641 # If the client or server requires certain features that can be detected
Manuel Pégourié-Gonnardf299efd2023-09-18 11:19:04 +02001642 # from their command-line arguments, check whether they're enabled.
Valerio Setti6ba247c2023-03-14 17:13:43 +01001643 detect_required_features "$SRV_CMD" "server" "$TLS_VERSION" "$EXT_WO_ECDH" "$@"
1644 detect_required_features "$CLI_CMD" "client" "$TLS_VERSION" "$EXT_WO_ECDH" "$@"
Gilles Peskine236bf982021-10-19 16:25:10 +02001645
Gilles Peskine6e86e542022-02-25 19:52:52 +01001646 # If we're in a PSK-only build and the test can be adapted to PSK, do that.
1647 maybe_adapt_for_psk "$@"
Gilles Peskine236bf982021-10-19 16:25:10 +02001648
1649 # should we skip?
1650 if [ "X$SKIP_NEXT" = "XYES" ]; then
1651 SKIP_NEXT="NO"
1652 record_outcome "SKIP"
1653 SKIPS=$(( $SKIPS + 1 ))
1654 return
1655 fi
1656
1657 analyze_test_commands "$@"
1658
Andrzej Kurek8db7c0e2022-04-01 08:52:06 -04001659 # One regular run and two retries
1660 TIMES_LEFT=3
Gilles Peskine236bf982021-10-19 16:25:10 +02001661 while [ $TIMES_LEFT -gt 0 ]; do
1662 TIMES_LEFT=$(( $TIMES_LEFT - 1 ))
1663
Gilles Peskine196d73b2021-10-19 16:35:35 +02001664 do_run_test_once
Gilles Peskine236bf982021-10-19 16:25:10 +02001665
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001666 check_test_failure "$@"
1667 case $outcome in
1668 PASS) break;;
Gilles Peskinef11d30e2021-10-19 18:00:10 +02001669 RETRY*) printf "$outcome ";;
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001670 FAIL) return;;
1671 esac
Gilles Peskine236bf982021-10-19 16:25:10 +02001672 done
1673
Gilles Peskine0e3534c2021-10-19 17:23:25 +02001674 # If we get this far, the test case passed.
Gilles Peskine560280b2019-09-16 15:17:38 +02001675 record_outcome "PASS"
Paul Bakkeracaac852016-05-10 11:47:13 +01001676 if [ "$PRESERVE_LOGS" -gt 0 ]; then
1677 mv $SRV_OUT o-srv-${TESTS}.log
1678 mv $CLI_OUT o-cli-${TESTS}.log
Hanno Becker7be2e5b2018-08-20 12:21:35 +01001679 if [ -n "$PXY_CMD" ]; then
1680 mv $PXY_OUT o-pxy-${TESTS}.log
1681 fi
Paul Bakkeracaac852016-05-10 11:47:13 +01001682 fi
1683
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001684 rm -f $SRV_OUT $CLI_OUT $PXY_OUT
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001685}
1686
Hanno Becker9b5853c2018-11-16 17:28:40 +00001687run_test_psa() {
1688 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine309ca652022-03-14 17:55:04 +01001689 set_maybe_calc_verify none
Hanno Beckere9420c22018-11-20 11:37:34 +00001690 run_test "PSA-supported ciphersuite: $1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001691 "$P_SRV debug_level=3 force_version=tls12" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01001692 "$P_CLI debug_level=3 force_ciphersuite=$1" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001693 0 \
Gilles Peskine309ca652022-03-14 17:55:04 +01001694 -c "$maybe_calc_verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -05001695 -c "calc PSA finished" \
Gilles Peskine309ca652022-03-14 17:55:04 +01001696 -s "$maybe_calc_verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -05001697 -s "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001698 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +00001699 -c "Perform PSA-based ECDH computation."\
Andrzej Kureke85414e2019-01-15 05:23:59 -05001700 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Hanno Becker9b5853c2018-11-16 17:28:40 +00001701 -S "error" \
1702 -C "error"
Gilles Peskine309ca652022-03-14 17:55:04 +01001703 unset maybe_calc_verify
Hanno Becker9b5853c2018-11-16 17:28:40 +00001704}
1705
Hanno Becker354e2482019-01-08 11:40:25 +00001706run_test_psa_force_curve() {
1707 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Gilles Peskine309ca652022-03-14 17:55:04 +01001708 set_maybe_calc_verify none
Hanno Becker354e2482019-01-08 11:40:25 +00001709 run_test "PSA - ECDH with $1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02001710 "$P_SRV debug_level=4 force_version=tls12 groups=$1" \
1711 "$P_CLI debug_level=4 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 groups=$1" \
Hanno Becker354e2482019-01-08 11:40:25 +00001712 0 \
Gilles Peskine309ca652022-03-14 17:55:04 +01001713 -c "$maybe_calc_verify" \
Hanno Becker28f78442019-02-18 16:47:50 +00001714 -c "calc PSA finished" \
Gilles Peskine309ca652022-03-14 17:55:04 +01001715 -s "$maybe_calc_verify" \
Hanno Becker28f78442019-02-18 16:47:50 +00001716 -s "calc PSA finished" \
Hanno Becker354e2482019-01-08 11:40:25 +00001717 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +00001718 -c "Perform PSA-based ECDH computation."\
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001719 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001720 -S "error" \
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001721 -C "error"
Gilles Peskine309ca652022-03-14 17:55:04 +01001722 unset maybe_calc_verify
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001723}
1724
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001725# Test that the server's memory usage after a handshake is reduced when a client specifies
1726# a maximum fragment length.
1727# first argument ($1) is MFL for SSL client
1728# second argument ($2) is memory usage for SSL client with default MFL (16k)
1729run_test_memory_after_hanshake_with_mfl()
1730{
1731 # The test passes if the difference is around 2*(16k-MFL)
Gilles Peskine5b428d72020-08-26 21:52:23 +02001732 MEMORY_USAGE_LIMIT="$(( $2 - ( 2 * ( 16384 - $1 )) ))"
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001733
1734 # Leave some margin for robustness
1735 MEMORY_USAGE_LIMIT="$(( ( MEMORY_USAGE_LIMIT * 110 ) / 100 ))"
1736
1737 run_test "Handshake memory usage (MFL $1)" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001738 "$P_SRV debug_level=3 auth_mode=required force_version=tls12" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01001739 "$P_CLI debug_level=3 \
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001740 crt_file=data_files/server5.crt key_file=data_files/server5.key \
1741 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM max_frag_len=$1" \
1742 0 \
1743 -F "handshake_memory_check $MEMORY_USAGE_LIMIT"
1744}
1745
1746
1747# Test that the server's memory usage after a handshake is reduced when a client specifies
1748# different values of Maximum Fragment Length: default (16k), 4k, 2k, 1k and 512 bytes
1749run_tests_memory_after_hanshake()
1750{
1751 # all tests in this sequence requires the same configuration (see requires_config_enabled())
1752 SKIP_THIS_TESTS="$SKIP_NEXT"
1753
1754 # first test with default MFU is to get reference memory usage
1755 MEMORY_USAGE_MFL_16K=0
1756 run_test "Handshake memory usage initial (MFL 16384 - default)" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00001757 "$P_SRV debug_level=3 auth_mode=required force_version=tls12" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01001758 "$P_CLI debug_level=3 \
Piotr Nowicki0937ed22019-11-26 16:32:40 +01001759 crt_file=data_files/server5.crt key_file=data_files/server5.key \
1760 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM" \
1761 0 \
1762 -F "handshake_memory_get MEMORY_USAGE_MFL_16K"
1763
1764 SKIP_NEXT="$SKIP_THIS_TESTS"
1765 run_test_memory_after_hanshake_with_mfl 4096 "$MEMORY_USAGE_MFL_16K"
1766
1767 SKIP_NEXT="$SKIP_THIS_TESTS"
1768 run_test_memory_after_hanshake_with_mfl 2048 "$MEMORY_USAGE_MFL_16K"
1769
1770 SKIP_NEXT="$SKIP_THIS_TESTS"
1771 run_test_memory_after_hanshake_with_mfl 1024 "$MEMORY_USAGE_MFL_16K"
1772
1773 SKIP_NEXT="$SKIP_THIS_TESTS"
1774 run_test_memory_after_hanshake_with_mfl 512 "$MEMORY_USAGE_MFL_16K"
1775}
1776
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001777cleanup() {
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001778 rm -f $CLI_OUT $SRV_OUT $PXY_OUT $SESSION
Piotr Nowicki3de298f2020-04-16 14:35:19 +02001779 rm -f context_srv.txt
1780 rm -f context_cli.txt
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +02001781 test -n "${SRV_PID:-}" && kill $SRV_PID >/dev/null 2>&1
1782 test -n "${PXY_PID:-}" && kill $PXY_PID >/dev/null 2>&1
1783 test -n "${CLI_PID:-}" && kill $CLI_PID >/dev/null 2>&1
1784 test -n "${DOG_PID:-}" && kill $DOG_PID >/dev/null 2>&1
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +01001785 exit 1
1786}
1787
Manuel Pégourié-Gonnard9dea8bd2014-02-26 18:21:02 +01001788#
1789# MAIN
1790#
1791
Manuel Pégourié-Gonnard913030c2014-03-28 10:12:38 +01001792get_options "$@"
1793
Yanray Wang5b33f642023-02-28 11:56:59 +08001794# Make the outcome file path relative to the original directory, not
1795# to .../tests
1796case "$MBEDTLS_TEST_OUTCOME_FILE" in
1797 [!/]*)
1798 MBEDTLS_TEST_OUTCOME_FILE="$ORIGINAL_PWD/$MBEDTLS_TEST_OUTCOME_FILE"
1799 ;;
1800esac
1801
Andrzej Kurek9c061a22022-09-05 10:51:19 -04001802populate_enabled_hash_algs
1803
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001804# Optimize filters: if $FILTER and $EXCLUDE can be expressed as shell
1805# patterns rather than regular expressions, use a case statement instead
1806# of calling grep. To keep the optimizer simple, it is incomplete and only
1807# detects simple cases: plain substring, everything, nothing.
1808#
1809# As an exception, the character '.' is treated as an ordinary character
1810# if it is the only special character in the string. This is because it's
1811# rare to need "any one character", but needing a literal '.' is common
1812# (e.g. '-f "DTLS 1.2"').
1813need_grep=
1814case "$FILTER" in
1815 '^$') simple_filter=;;
1816 '.*') simple_filter='*';;
Gilles Peskineb09e0012020-09-29 23:48:39 +02001817 *[][$+*?\\^{\|}]*) # Regexp special characters (other than .), we need grep
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001818 need_grep=1;;
1819 *) # No regexp or shell-pattern special character
1820 simple_filter="*$FILTER*";;
1821esac
1822case "$EXCLUDE" in
1823 '^$') simple_exclude=;;
1824 '.*') simple_exclude='*';;
Gilles Peskineb09e0012020-09-29 23:48:39 +02001825 *[][$+*?\\^{\|}]*) # Regexp special characters (other than .), we need grep
Gilles Peskine9fa4ed62020-08-26 22:35:46 +02001826 need_grep=1;;
1827 *) # No regexp or shell-pattern special character
1828 simple_exclude="*$EXCLUDE*";;
1829esac
1830if [ -n "$need_grep" ]; then
1831 is_excluded () {
1832 ! echo "$1" | grep "$FILTER" | grep -q -v "$EXCLUDE"
1833 }
1834else
1835 is_excluded () {
1836 case "$1" in
1837 $simple_exclude) true;;
1838 $simple_filter) false;;
1839 *) true;;
1840 esac
1841 }
1842fi
1843
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001844# sanity checks, avoid an avalanche of errors
Hanno Becker4ac73e72017-10-23 15:27:37 +01001845P_SRV_BIN="${P_SRV%%[ ]*}"
1846P_CLI_BIN="${P_CLI%%[ ]*}"
1847P_PXY_BIN="${P_PXY%%[ ]*}"
Hanno Becker17c04932017-10-10 14:44:53 +01001848if [ ! -x "$P_SRV_BIN" ]; then
1849 echo "Command '$P_SRV_BIN' is not an executable file"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001850 exit 1
1851fi
Hanno Becker17c04932017-10-10 14:44:53 +01001852if [ ! -x "$P_CLI_BIN" ]; then
1853 echo "Command '$P_CLI_BIN' is not an executable file"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001854 exit 1
1855fi
Hanno Becker17c04932017-10-10 14:44:53 +01001856if [ ! -x "$P_PXY_BIN" ]; then
1857 echo "Command '$P_PXY_BIN' is not an executable file"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001858 exit 1
1859fi
Simon Butcher3c0d7b82016-05-23 11:13:17 +01001860if [ "$MEMCHECK" -gt 0 ]; then
1861 if which valgrind >/dev/null 2>&1; then :; else
1862 echo "Memcheck not possible. Valgrind not found"
1863 exit 1
1864 fi
1865fi
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +01001866if which $OPENSSL >/dev/null 2>&1; then :; else
1867 echo "Command '$OPENSSL' not found"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01001868 exit 1
1869fi
1870
Manuel Pégourié-Gonnard32f8f4d2014-05-29 11:31:20 +02001871# used by watchdog
1872MAIN_PID="$$"
1873
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001874# We use somewhat arbitrary delays for tests:
1875# - how long do we wait for the server to start (when lsof not available)?
1876# - how long do we allow for the client to finish?
1877# (not to check performance, just to avoid waiting indefinitely)
1878# Things are slower with valgrind, so give extra time here.
1879#
1880# Note: without lsof, there is a trade-off between the running time of this
1881# script and the risk of spurious errors because we didn't wait long enough.
1882# The watchdog delay on the other hand doesn't affect normal running time of
1883# the script, only the case where a client or server gets stuck.
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001884if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001885 START_DELAY=6
1886 DOG_DELAY=60
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001887else
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001888 START_DELAY=2
1889 DOG_DELAY=20
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001890fi
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +01001891
1892# some particular tests need more time:
1893# - for the client, we multiply the usual watchdog limit by a factor
1894# - for the server, we sleep for a number of seconds after the client exits
1895# see client_need_more_time() and server_needs_more_time()
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +02001896CLI_DELAY_FACTOR=1
Janos Follath74537a62016-09-02 13:45:28 +01001897SRV_DELAY_SECONDS=0
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +02001898
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02001899# fix commands to use this port, force IPv4 while at it
Manuel Pégourié-Gonnard0af1ba32015-01-21 11:44:33 +00001900# +SRV_PORT will be replaced by either $SRV_PORT or $PXY_PORT later
Paul Elliott04217152021-10-12 16:10:37 +01001901# Note: Using 'localhost' rather than 127.0.0.1 here is unwise, as on many
1902# machines that will resolve to ::1, and we don't want ipv6 here.
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001903P_SRV="$P_SRV server_addr=127.0.0.1 server_port=$SRV_PORT"
1904P_CLI="$P_CLI server_addr=127.0.0.1 server_port=+SRV_PORT"
Andres AGf04f54d2016-10-10 15:46:20 +01001905P_PXY="$P_PXY server_addr=127.0.0.1 server_port=$SRV_PORT listen_addr=127.0.0.1 listen_port=$PXY_PORT ${SEED:+"seed=$SEED"}"
Gilles Peskine96f5bae2021-04-01 14:00:11 +02001906O_SRV="$O_SRV -accept $SRV_PORT"
Paul Elliott04217152021-10-12 16:10:37 +01001907O_CLI="$O_CLI -connect 127.0.0.1:+SRV_PORT"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001908G_SRV="$G_SRV -p $SRV_PORT"
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02001909G_CLI="$G_CLI -p +SRV_PORT"
Manuel Pégourié-Gonnard8066b812014-05-28 22:59:30 +02001910
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001911if [ -n "${OPENSSL_LEGACY:-}" ]; then
1912 O_LEGACY_SRV="$O_LEGACY_SRV -accept $SRV_PORT -dhparam data_files/dhparams.pem"
Paul Elliott04217152021-10-12 16:10:37 +01001913 O_LEGACY_CLI="$O_LEGACY_CLI -connect 127.0.0.1:+SRV_PORT"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001914fi
1915
Gilles Peskine4bdb9fb2022-11-24 22:21:15 +01001916# Newer versions of OpenSSL have a syntax to enable all "ciphers", even
1917# low-security ones. This covers not just cipher suites but also protocol
1918# versions. It is necessary, for example, to use (D)TLS 1.0/1.1 on
1919# OpenSSL 1.1.1f from Ubuntu 20.04. The syntax was only introduced in
1920# OpenSSL 1.1.0 (21e0c1d23afff48601eb93135defddae51f7e2e3) and I can't find
1921# a way to discover it from -help, so check the openssl version.
Manuel Pégourié-Gonnardc5722462022-12-19 11:42:12 +01001922case $($OPENSSL version) in
Gilles Peskine4bdb9fb2022-11-24 22:21:15 +01001923 "OpenSSL 0"*|"OpenSSL 1.0"*) :;;
1924 *)
1925 O_CLI="$O_CLI -cipher ALL@SECLEVEL=0"
1926 O_SRV="$O_SRV -cipher ALL@SECLEVEL=0"
1927 ;;
1928esac
1929
Jerry Yued2ef2d2021-08-19 18:11:43 +08001930if [ -n "${OPENSSL_NEXT:-}" ]; then
1931 O_NEXT_SRV="$O_NEXT_SRV -accept $SRV_PORT"
Jerry Yu305bfc32021-11-24 16:04:47 +08001932 O_NEXT_SRV_NO_CERT="$O_NEXT_SRV_NO_CERT -accept $SRV_PORT"
Xiaokang Qianb0c32d82022-11-02 10:51:13 +00001933 O_NEXT_SRV_EARLY_DATA="$O_NEXT_SRV_EARLY_DATA -accept $SRV_PORT"
Paul Elliott04217152021-10-12 16:10:37 +01001934 O_NEXT_CLI="$O_NEXT_CLI -connect 127.0.0.1:+SRV_PORT"
XiaokangQiand5d5b602022-05-23 09:16:20 +00001935 O_NEXT_CLI_NO_CERT="$O_NEXT_CLI_NO_CERT -connect 127.0.0.1:+SRV_PORT"
Jerry Yued2ef2d2021-08-19 18:11:43 +08001936fi
1937
Hanno Becker58e9dc32018-08-17 15:53:21 +01001938if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001939 G_NEXT_SRV="$G_NEXT_SRV -p $SRV_PORT"
Jerry Yu305bfc32021-11-24 16:04:47 +08001940 G_NEXT_SRV_NO_CERT="$G_NEXT_SRV_NO_CERT -p $SRV_PORT"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001941fi
1942
Hanno Becker58e9dc32018-08-17 15:53:21 +01001943if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02001944 G_NEXT_CLI="$G_NEXT_CLI -p +SRV_PORT"
Jerry Yub7c12a42022-06-12 20:53:02 +08001945 G_NEXT_CLI_NO_CERT="$G_NEXT_CLI_NO_CERT -p +SRV_PORT localhost"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02001946fi
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01001947
Gilles Peskine62469d92017-05-10 10:13:59 +02001948# Allow SHA-1, because many of our test certificates use it
1949P_SRV="$P_SRV allow_sha1=1"
1950P_CLI="$P_CLI allow_sha1=1"
1951
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001952# Also pick a unique name for intermediate files
1953SRV_OUT="srv_out.$$"
1954CLI_OUT="cli_out.$$"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02001955PXY_OUT="pxy_out.$$"
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02001956SESSION="session.$$"
1957
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +02001958SKIP_NEXT="NO"
1959
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01001960trap cleanup INT TERM HUP
1961
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001962# Basic test
1963
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001964# Checks that:
1965# - things work with all ciphersuites active (used with config-full in all.sh)
Gilles Peskine799eee62021-06-02 22:14:15 +02001966# - the expected parameters are selected
Gilles Peskine35615262022-02-25 19:50:38 +01001967requires_ciphersuite_enabled TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04001968requires_hash_alg SHA_512 # "signature_algorithm ext: 6"
Gilles Peskine1438e162022-04-05 22:00:32 +02001969requires_config_enabled MBEDTLS_ECP_DP_CURVE25519_ENABLED
Ronald Cronf95d1692023-03-14 17:19:42 +01001970run_test "Default, TLS 1.2" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001971 "$P_SRV debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +01001972 "$P_CLI force_version=tls12" \
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001973 0 \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001974 -s "Protocol is TLSv1.2" \
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001975 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001976 -s "client hello v3, signature_algorithm ext: 6" \
Gilles Peskine799eee62021-06-02 22:14:15 +02001977 -s "ECDHE curve: x25519" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +02001978 -S "error" \
1979 -C "error"
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +02001980
Jerry Yuab082902021-12-23 18:02:22 +08001981requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine35615262022-02-25 19:50:38 +01001982requires_ciphersuite_enabled TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +00001983run_test "Default, DTLS" \
1984 "$P_SRV dtls=1" \
1985 "$P_CLI dtls=1" \
1986 0 \
1987 -s "Protocol is DTLSv1.2" \
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001988 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256"
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +00001989
Ronald Cronc5649382023-04-04 15:33:42 +02001990# GnuTLS can be setup to send a ClientHello containing a supported versions
1991# extension proposing TLS 1.2 (preferred) and then TLS 1.3. In that case,
1992# a TLS 1.3 and TLS 1.2 capable server is supposed to negotiate TLS 1.2 and
1993# to indicate in the ServerHello that it downgrades from TLS 1.3. The GnuTLS
1994# client then detects the downgrade indication and aborts the handshake even
1995# if TLS 1.2 was its preferred version. Keeping the test even if the
1996# handshake fails eventually as it exercices parts of the Mbed TLS
1997# implementation that are otherwise not exercised.
Ronald Crond120bd62023-03-14 15:43:17 +01001998requires_gnutls_tls1_3
1999requires_config_enabled MBEDTLS_DEBUG_C
2000requires_config_enabled MBEDTLS_SSL_SRV_C
2001requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ronald Cronc5649382023-04-04 15:33:42 +02002002requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Crond120bd62023-03-14 15:43:17 +01002003requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Ronald Cronc5649382023-04-04 15:33:42 +02002004run_test "Server selecting TLS 1.2 over TLS 1.3" \
2005 "$P_SRV crt_file=data_files/server5.crt key_file=data_files/server5.key" \
2006 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:+VERS-TLS1.3" \
2007 1 \
2008 -c "Detected downgrade to TLS 1.2 from TLS 1.3"
2009
2010requires_gnutls_tls1_3
2011requires_config_enabled MBEDTLS_DEBUG_C
2012requires_config_enabled MBEDTLS_SSL_SRV_C
2013requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
2014requires_config_disabled MBEDTLS_SSL_PROTO_TLS1_3
2015requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
2016run_test "Server selecting TLS 1.2" \
Ronald Crond120bd62023-03-14 15:43:17 +01002017 "$P_SRV crt_file=data_files/server5.crt key_file=data_files/server5.key" \
2018 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:+VERS-TLS1.3" \
2019 0 \
2020 -s "Protocol is TLSv1.2" \
2021 -c "HTTP/1.0 200 OK"
2022
2023requires_gnutls_tls1_3
2024requires_config_enabled MBEDTLS_DEBUG_C
2025requires_config_enabled MBEDTLS_SSL_SRV_C
2026requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2027requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron1a353ea2023-04-04 14:55:57 +02002028run_test "Server selecting TLS 1.3, over TLS 1.2 if supported" \
Ronald Crond120bd62023-03-14 15:43:17 +01002029 "$P_SRV crt_file=data_files/server5.crt key_file=data_files/server5.key" \
2030 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+VERS-TLS1.2:%DISABLE_TLS13_COMPAT_MODE" \
2031 0 \
2032 -s "Protocol is TLSv1.3" \
2033 -c "HTTP/1.0 200 OK"
2034
2035requires_gnutls_tls1_3
2036requires_config_enabled MBEDTLS_DEBUG_C
2037requires_config_enabled MBEDTLS_SSL_SRV_C
2038requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2039requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2040requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron1a353ea2023-04-04 14:55:57 +02002041run_test "Server selecting TLS 1.3, over TLS 1.2 if supported - compat mode enabled" \
Ronald Crond120bd62023-03-14 15:43:17 +01002042 "$P_SRV crt_file=data_files/server5.crt key_file=data_files/server5.key" \
2043 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+VERS-TLS1.2" \
2044 0 \
2045 -s "Protocol is TLSv1.3" \
2046 -c "HTTP/1.0 200 OK"
2047
Ronald Cron92dca392023-03-10 16:11:15 +01002048requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Hanno Becker721f7c12020-08-17 12:17:32 +01002049run_test "TLS client auth: required" \
2050 "$P_SRV auth_mode=required" \
2051 "$P_CLI" \
2052 0 \
2053 -s "Verifying peer X.509 certificate... ok"
2054
Glenn Strauss6eef5632022-01-23 08:37:02 -05002055run_test "key size: TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2056 "$P_SRV" \
2057 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2058 0 \
2059 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2060 -c "Key size is 256"
2061
2062run_test "key size: TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2063 "$P_SRV" \
2064 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2065 0 \
2066 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2067 -c "Key size is 128"
2068
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002069requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002070requires_hash_alg SHA_256
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002071run_test "TLS: password protected client key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002072 "$P_SRV force_version=tls12 auth_mode=required" \
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002073 "$P_CLI crt_file=data_files/server5.crt key_file=data_files/server5.key.enc key_pwd=PolarSSLTest" \
2074 0
2075
2076requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002077requires_hash_alg SHA_256
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002078run_test "TLS: password protected server key" \
2079 "$P_SRV crt_file=data_files/server5.crt key_file=data_files/server5.key.enc key_pwd=PolarSSLTest" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002080 "$P_CLI force_version=tls12" \
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002081 0
2082
2083requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002084requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002085requires_hash_alg SHA_256
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002086run_test "TLS: password protected server key, two certificates" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002087 "$P_SRV force_version=tls12\
Hanno Becker2f54a3c2020-08-17 12:14:06 +01002088 key_file=data_files/server5.key.enc key_pwd=PolarSSLTest crt_file=data_files/server5.crt \
2089 key_file2=data_files/server2.key.enc key_pwd2=PolarSSLTest crt_file2=data_files/server2.crt" \
2090 "$P_CLI" \
2091 0
2092
Hanno Becker746aaf32019-03-28 15:25:23 +00002093requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
2094run_test "CA callback on client" \
2095 "$P_SRV debug_level=3" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01002096 "$P_CLI force_version=tls12 ca_callback=1 debug_level=3 " \
Hanno Becker746aaf32019-03-28 15:25:23 +00002097 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01002098 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00002099 -S "error" \
2100 -C "error"
2101
2102requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
2103requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002104requires_hash_alg SHA_256
Hanno Becker746aaf32019-03-28 15:25:23 +00002105run_test "CA callback on server" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01002106 "$P_SRV force_version=tls12 auth_mode=required" \
Hanno Becker746aaf32019-03-28 15:25:23 +00002107 "$P_CLI ca_callback=1 debug_level=3 crt_file=data_files/server5.crt \
2108 key_file=data_files/server5.key" \
2109 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01002110 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00002111 -s "Verifying peer X.509 certificate... ok" \
2112 -S "error" \
2113 -C "error"
2114
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002115# Test using an EC opaque private key for client authentication
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002116requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2117requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002118requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002119requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002120run_test "Opaque key for client authentication: ECDHE-ECDSA" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002121 "$P_SRV force_version=tls12 auth_mode=required crt_file=data_files/server5.crt \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002122 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002123 "$P_CLI key_opaque=1 crt_file=data_files/server5.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002124 key_file=data_files/server5.key key_opaque_algs=ecdsa-sign,none" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002125 0 \
2126 -c "key type: Opaque" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002127 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002128 -s "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002129 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +01002130 -S "error" \
2131 -C "error"
2132
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002133# Test using a RSA opaque private key for client authentication
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002134requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2135requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002136requires_config_enabled MBEDTLS_RSA_C
valeriof27472b2023-03-09 16:19:35 +01002137requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002138requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002139run_test "Opaque key for client authentication: ECDHE-RSA" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002140 "$P_SRV force_version=tls12 auth_mode=required crt_file=data_files/server2-sha256.crt \
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002141 key_file=data_files/server2.key" \
2142 "$P_CLI key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002143 key_file=data_files/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002144 0 \
2145 -c "key type: Opaque" \
2146 -c "Ciphersuite is TLS-ECDHE-RSA" \
2147 -s "Verifying peer X.509 certificate... ok" \
2148 -s "Ciphersuite is TLS-ECDHE-RSA" \
2149 -S "error" \
2150 -C "error"
2151
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002152requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2153requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
2154requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002155requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002156run_test "Opaque key for client authentication: DHE-RSA" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002157 "$P_SRV force_version=tls12 auth_mode=required crt_file=data_files/server2-sha256.crt \
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002158 key_file=data_files/server2.key" \
2159 "$P_CLI key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002160 key_file=data_files/server2.key force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
2161 key_opaque_algs=rsa-sign-pkcs1,none" \
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002162 0 \
2163 -c "key type: Opaque" \
2164 -c "Ciphersuite is TLS-DHE-RSA" \
2165 -s "Verifying peer X.509 certificate... ok" \
2166 -s "Ciphersuite is TLS-DHE-RSA" \
2167 -S "error" \
2168 -C "error"
2169
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002170# Test using an EC opaque private key for server authentication
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02002171requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2172requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002173requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002174requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002175run_test "Opaque key for server authentication: ECDHE-ECDSA" \
Neil Armstrong7999cb32022-07-01 09:51:33 +02002176 "$P_SRV key_opaque=1 crt_file=data_files/server5.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002177 key_file=data_files/server5.key key_opaque_algs=ecdsa-sign,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002178 "$P_CLI force_version=tls12" \
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02002179 0 \
2180 -c "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002181 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Gilles Peskine05bf89d2022-01-25 17:50:25 +01002182 -s "key types: Opaque, none" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002183 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Przemyslaw Stekiel0483e3d2021-10-04 11:13:22 +02002184 -S "error" \
2185 -C "error"
2186
Neil Armstrong023bf8d2022-03-23 14:04:04 +01002187requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2188requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002189requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002190run_test "Opaque key for server authentication: ECDH-" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002191 "$P_SRV auth_mode=required key_opaque=1\
Neil Armstrongb7b549a2022-03-25 15:13:02 +01002192 crt_file=data_files/server5.ku-ka.crt\
Neil Armstrong1948a202022-06-30 18:05:57 +02002193 key_file=data_files/server5.key key_opaque_algs=ecdh,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002194 "$P_CLI force_version=tls12" \
Neil Armstrong023bf8d2022-03-23 14:04:04 +01002195 0 \
2196 -c "Verifying peer X.509 certificate... ok" \
2197 -c "Ciphersuite is TLS-ECDH-" \
2198 -s "key types: Opaque, none" \
2199 -s "Ciphersuite is TLS-ECDH-" \
2200 -S "error" \
2201 -C "error"
2202
Neil Armstrong1948a202022-06-30 18:05:57 +02002203requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2204requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurekd6817462022-09-06 14:32:00 -04002205requires_config_disabled MBEDTLS_SSL_ASYNC_PRIVATE
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002206requires_hash_alg SHA_256
Andrzej Kurekd6817462022-09-06 14:32:00 -04002207run_test "Opaque key for server authentication: invalid key: decrypt with ECC key, no async" \
2208 "$P_SRV key_opaque=1 crt_file=data_files/server5.crt \
2209 key_file=data_files/server5.key key_opaque_algs=rsa-decrypt,none \
2210 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002211 "$P_CLI force_version=tls12" \
Andrzej Kurekd6817462022-09-06 14:32:00 -04002212 1 \
2213 -s "key types: Opaque, none" \
2214 -s "error" \
2215 -c "error" \
2216 -c "Public key type mismatch"
2217
Andrzej Kurekd6817462022-09-06 14:32:00 -04002218requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2219requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
2220requires_config_enabled MBEDTLS_ECDSA_C
2221requires_config_enabled MBEDTLS_RSA_C
2222requires_config_disabled MBEDTLS_SSL_ASYNC_PRIVATE
2223requires_hash_alg SHA_256
2224run_test "Opaque key for server authentication: invalid key: ecdh with RSA key, no async" \
2225 "$P_SRV key_opaque=1 crt_file=data_files/server2-sha256.crt \
2226 key_file=data_files/server2.key key_opaque_algs=ecdh,none \
2227 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002228 "$P_CLI force_version=tls12" \
Andrzej Kurekd6817462022-09-06 14:32:00 -04002229 1 \
2230 -s "key types: Opaque, none" \
2231 -s "error" \
2232 -c "error" \
2233 -c "Public key type mismatch"
2234
Andrzej Kurekd6817462022-09-06 14:32:00 -04002235requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2236requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurekd6817462022-09-06 14:32:00 -04002237requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
2238requires_hash_alg SHA_256
2239run_test "Opaque key for server authentication: invalid alg: decrypt with ECC key, async" \
Neil Armstrong7999cb32022-07-01 09:51:33 +02002240 "$P_SRV key_opaque=1 crt_file=data_files/server5.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002241 key_file=data_files/server5.key key_opaque_algs=rsa-decrypt,none \
2242 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002243 "$P_CLI force_version=tls12" \
Neil Armstrong36b02232022-06-30 11:16:53 +02002244 1 \
2245 -s "key types: Opaque, none" \
2246 -s "got ciphersuites in common, but none of them usable" \
2247 -s "error" \
2248 -c "error"
2249
Neil Armstrong36b02232022-06-30 11:16:53 +02002250requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2251requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrongeb4390b2022-05-27 10:26:02 +02002252requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurekd6817462022-09-06 14:32:00 -04002253requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002254requires_hash_alg SHA_256
Andrzej Kurekd6817462022-09-06 14:32:00 -04002255run_test "Opaque key for server authentication: invalid alg: ecdh with RSA key, async" \
Neil Armstrong7999cb32022-07-01 09:51:33 +02002256 "$P_SRV key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrongeb4390b2022-05-27 10:26:02 +02002257 key_file=data_files/server2.key key_opaque_algs=ecdh,none \
2258 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002259 "$P_CLI force_version=tls12" \
Neil Armstrongeb4390b2022-05-27 10:26:02 +02002260 1 \
2261 -s "key types: Opaque, none" \
2262 -s "got ciphersuites in common, but none of them usable" \
2263 -s "error" \
2264 -c "error"
2265
Neil Armstrongeb4390b2022-05-27 10:26:02 +02002266requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2267requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002268requires_hash_alg SHA_256
Neil Armstrong36b02232022-06-30 11:16:53 +02002269requires_config_enabled MBEDTLS_CCM_C
Neil Armstrong1948a202022-06-30 18:05:57 +02002270run_test "Opaque key for server authentication: invalid alg: ECDHE-ECDSA with ecdh" \
Neil Armstrong7999cb32022-07-01 09:51:33 +02002271 "$P_SRV key_opaque=1 crt_file=data_files/server5.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002272 key_file=data_files/server5.key key_opaque_algs=ecdh,none \
2273 debug_level=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002274 "$P_CLI force_version=tls12 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-CCM" \
Neil Armstrong36b02232022-06-30 11:16:53 +02002275 1 \
2276 -s "key types: Opaque, none" \
2277 -s "got ciphersuites in common, but none of them usable" \
2278 -s "error" \
2279 -c "error"
2280
Neil Armstrong167d82c2022-06-30 11:32:00 +02002281requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2282requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002283requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002284requires_hash_alg SHA_256
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002285requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Neil Armstrong4b102092022-07-01 09:42:29 +02002286run_test "Opaque keys for server authentication: EC keys with different algs, force ECDHE-ECDSA" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002287 "$P_SRV force_version=tls12 key_opaque=1 crt_file=data_files/server7.crt \
Neil Armstrong4b102092022-07-01 09:42:29 +02002288 key_file=data_files/server7.key key_opaque_algs=ecdh,none \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002289 crt_file2=data_files/server5.crt key_file2=data_files/server5.key \
2290 key_opaque_algs2=ecdsa-sign,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002291 "$P_CLI force_version=tls12" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002292 0 \
2293 -c "Verifying peer X.509 certificate... ok" \
2294 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002295 -c "CN=Polarssl Test EC CA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002296 -s "key types: Opaque, Opaque" \
2297 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
2298 -S "error" \
2299 -C "error"
2300
Neil Armstrong167d82c2022-06-30 11:32:00 +02002301requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2302requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002303requires_hash_alg SHA_384
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002304requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Neil Armstrong4b102092022-07-01 09:42:29 +02002305run_test "Opaque keys for server authentication: EC keys with different algs, force ECDH-ECDSA" \
Neil Armstrong7999cb32022-07-01 09:51:33 +02002306 "$P_SRV key_opaque=1 crt_file=data_files/server7.crt \
Neil Armstrong4b102092022-07-01 09:42:29 +02002307 key_file=data_files/server7.key key_opaque_algs=ecdsa-sign,none \
2308 crt_file2=data_files/server5.crt key_file2=data_files/server5.key \
2309 key_opaque_algs2=ecdh,none debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002310 "$P_CLI force_version=tls12 force_ciphersuite=TLS-ECDH-ECDSA-WITH-CAMELLIA-256-CBC-SHA384" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002311 0 \
2312 -c "Verifying peer X.509 certificate... ok" \
2313 -c "Ciphersuite is TLS-ECDH-ECDSA" \
2314 -c "CN=Polarssl Test EC CA" \
2315 -s "key types: Opaque, Opaque" \
2316 -s "Ciphersuite is TLS-ECDH-ECDSA" \
2317 -S "error" \
2318 -C "error"
2319
Neil Armstrong4b102092022-07-01 09:42:29 +02002320requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2321requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002322requires_hash_alg SHA_384
Neil Armstrong167d82c2022-06-30 11:32:00 +02002323requires_config_enabled MBEDTLS_CCM_C
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002324requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Neil Armstrong1948a202022-06-30 18:05:57 +02002325run_test "Opaque keys for server authentication: EC + RSA, force ECDHE-ECDSA" \
Neil Armstrong7999cb32022-07-01 09:51:33 +02002326 "$P_SRV key_opaque=1 crt_file=data_files/server5.crt \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002327 key_file=data_files/server5.key key_opaque_algs=ecdsa-sign,none \
2328 crt_file2=data_files/server2-sha256.crt \
2329 key_file2=data_files/server2.key key_opaque_algs2=rsa-sign-pkcs1,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002330 "$P_CLI force_version=tls12 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-CCM" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002331 0 \
2332 -c "Verifying peer X.509 certificate... ok" \
2333 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002334 -c "CN=Polarssl Test EC CA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002335 -s "key types: Opaque, Opaque" \
2336 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
2337 -S "error" \
2338 -C "error"
2339
Przemek Stekielc454aba2022-07-07 09:56:13 +02002340requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2341requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2342requires_config_enabled MBEDTLS_RSA_C
Jerry Yuddda0502022-12-01 19:43:12 +08002343requires_config_enabled MBEDTLS_SSL_SRV_C
2344requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron6ec21232022-09-16 16:41:53 +02002345run_test "TLS 1.3 opaque key: no suitable algorithm found" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01002346 "$P_SRV debug_level=4 auth_mode=required key_opaque=1 key_opaque_algs=rsa-decrypt,none" \
Ronald Crone3196d22022-09-16 16:43:35 +02002347 "$P_CLI debug_level=4 key_opaque=1 key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002348 1 \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002349 -c "key type: Opaque" \
2350 -s "key types: Opaque, Opaque" \
2351 -c "error" \
Ronald Cron067a1e72022-09-16 13:44:49 +02002352 -s "no suitable signature algorithm"
Przemek Stekielc454aba2022-07-07 09:56:13 +02002353
2354requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2355requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2356requires_config_enabled MBEDTLS_RSA_C
Jerry Yuddda0502022-12-01 19:43:12 +08002357requires_config_enabled MBEDTLS_SSL_SRV_C
2358requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron6ec21232022-09-16 16:41:53 +02002359run_test "TLS 1.3 opaque key: suitable algorithm found" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01002360 "$P_SRV debug_level=4 auth_mode=required key_opaque=1 key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Ronald Crone3196d22022-09-16 16:43:35 +02002361 "$P_CLI debug_level=4 key_opaque=1 key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002362 0 \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002363 -c "key type: Opaque" \
2364 -s "key types: Opaque, Opaque" \
2365 -C "error" \
Jerry Yuddda0502022-12-01 19:43:12 +08002366 -S "error"
Przemek Stekielc454aba2022-07-07 09:56:13 +02002367
2368requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2369requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2370requires_config_enabled MBEDTLS_RSA_C
Jerry Yuddda0502022-12-01 19:43:12 +08002371requires_config_enabled MBEDTLS_SSL_SRV_C
2372requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron50969e32022-09-16 15:54:33 +02002373run_test "TLS 1.3 opaque key: first client sig alg not suitable" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01002374 "$P_SRV debug_level=4 auth_mode=required key_opaque=1 key_opaque_algs=rsa-sign-pss-sha512,none" \
Ronald Cron50969e32022-09-16 15:54:33 +02002375 "$P_CLI debug_level=4 sig_algs=rsa_pss_rsae_sha256,rsa_pss_rsae_sha512" \
2376 0 \
Ronald Cron50969e32022-09-16 15:54:33 +02002377 -s "key types: Opaque, Opaque" \
2378 -s "CertificateVerify signature failed with rsa_pss_rsae_sha256" \
2379 -s "CertificateVerify signature with rsa_pss_rsae_sha512" \
2380 -C "error" \
2381 -S "error" \
2382
2383requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
2384requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2385requires_config_enabled MBEDTLS_RSA_C
Jerry Yuddda0502022-12-01 19:43:12 +08002386requires_config_enabled MBEDTLS_SSL_SRV_C
2387requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron6ec21232022-09-16 16:41:53 +02002388run_test "TLS 1.3 opaque key: 2 keys on server, suitable algorithm found" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01002389 "$P_SRV debug_level=4 auth_mode=required key_opaque=1 key_opaque_algs2=ecdsa-sign,none key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Ronald Crone3196d22022-09-16 16:43:35 +02002390 "$P_CLI debug_level=4 key_opaque=1 key_opaque_algs=rsa-decrypt,rsa-sign-pss" \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002391 0 \
Przemek Stekielc454aba2022-07-07 09:56:13 +02002392 -c "key type: Opaque" \
2393 -s "key types: Opaque, Opaque" \
2394 -C "error" \
2395 -S "error" \
2396
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002397# Test using a RSA opaque private key for server authentication
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002398requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2399requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002400requires_config_enabled MBEDTLS_RSA_C
valeriof27472b2023-03-09 16:19:35 +01002401requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002402requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002403run_test "Opaque key for server authentication: ECDHE-RSA" \
Neil Armstrong7999cb32022-07-01 09:51:33 +02002404 "$P_SRV key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002405 key_file=data_files/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002406 "$P_CLI force_version=tls12" \
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002407 0 \
2408 -c "Verifying peer X.509 certificate... ok" \
2409 -c "Ciphersuite is TLS-ECDHE-RSA" \
2410 -s "key types: Opaque, none" \
2411 -s "Ciphersuite is TLS-ECDHE-RSA" \
2412 -S "error" \
2413 -C "error"
2414
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002415requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2416requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002417requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002418requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002419run_test "Opaque key for server authentication: DHE-RSA" \
Neil Armstrong7999cb32022-07-01 09:51:33 +02002420 "$P_SRV key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002421 key_file=data_files/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002422 "$P_CLI force_version=tls12 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002423 0 \
2424 -c "Verifying peer X.509 certificate... ok" \
2425 -c "Ciphersuite is TLS-DHE-RSA" \
2426 -s "key types: Opaque, none" \
2427 -s "Ciphersuite is TLS-DHE-RSA" \
2428 -S "error" \
2429 -C "error"
2430
Neil Armstrong36b02232022-06-30 11:16:53 +02002431requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2432requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong1948a202022-06-30 18:05:57 +02002433requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002434requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002435run_test "Opaque key for server authentication: RSA-PSK" \
2436 "$P_SRV debug_level=1 key_opaque=1 key_opaque_algs=rsa-decrypt,none \
2437 psk=abc123 psk_identity=foo" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002438 "$P_CLI force_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256 \
Neil Armstrong1948a202022-06-30 18:05:57 +02002439 psk=abc123 psk_identity=foo" \
2440 0 \
2441 -c "Verifying peer X.509 certificate... ok" \
2442 -c "Ciphersuite is TLS-RSA-PSK-" \
2443 -s "key types: Opaque, Opaque" \
2444 -s "Ciphersuite is TLS-RSA-PSK-" \
2445 -S "error" \
2446 -C "error"
2447
Neil Armstrong1948a202022-06-30 18:05:57 +02002448requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2449requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
2450requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002451requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002452run_test "Opaque key for server authentication: RSA-" \
2453 "$P_SRV debug_level=3 key_opaque=1 key_opaque_algs=rsa-decrypt,none " \
Ronald Cronf95d1692023-03-14 17:19:42 +01002454 "$P_CLI force_version=tls12 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA256" \
Neil Armstrong1948a202022-06-30 18:05:57 +02002455 0 \
2456 -c "Verifying peer X.509 certificate... ok" \
2457 -c "Ciphersuite is TLS-RSA-" \
2458 -s "key types: Opaque, Opaque" \
2459 -s "Ciphersuite is TLS-RSA-" \
2460 -S "error" \
2461 -C "error"
2462
Neil Armstrong1948a202022-06-30 18:05:57 +02002463requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2464requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong36b02232022-06-30 11:16:53 +02002465requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002466requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002467run_test "Opaque key for server authentication: DHE-RSA, PSS instead of PKCS1" \
Neil Armstrong36b02232022-06-30 11:16:53 +02002468 "$P_SRV auth_mode=required key_opaque=1 crt_file=data_files/server2-sha256.crt \
2469 key_file=data_files/server2.key key_opaque_algs=rsa-sign-pss,none debug_level=1" \
2470 "$P_CLI crt_file=data_files/server2-sha256.crt \
2471 key_file=data_files/server2.key force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
2472 1 \
2473 -s "key types: Opaque, none" \
2474 -s "got ciphersuites in common, but none of them usable" \
2475 -s "error" \
2476 -c "error"
2477
Neil Armstrong167d82c2022-06-30 11:32:00 +02002478requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2479requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong167d82c2022-06-30 11:32:00 +02002480requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002481requires_hash_alg SHA_256
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002482requires_config_disabled MBEDTLS_X509_REMOVE_INFO
valeriof27472b2023-03-09 16:19:35 +01002483requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Neil Armstrong1948a202022-06-30 18:05:57 +02002484run_test "Opaque keys for server authentication: RSA keys with different algs" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002485 "$P_SRV force_version=tls12 auth_mode=required key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002486 key_file=data_files/server2.key key_opaque_algs=rsa-sign-pss,none \
Neil Armstrong4b102092022-07-01 09:42:29 +02002487 crt_file2=data_files/server4.crt \
2488 key_file2=data_files/server4.key key_opaque_algs2=rsa-sign-pkcs1,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002489 "$P_CLI force_version=tls12" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002490 0 \
2491 -c "Verifying peer X.509 certificate... ok" \
2492 -c "Ciphersuite is TLS-ECDHE-RSA" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002493 -c "CN=Polarssl Test EC CA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002494 -s "key types: Opaque, Opaque" \
2495 -s "Ciphersuite is TLS-ECDHE-RSA" \
2496 -S "error" \
2497 -C "error"
2498
Neil Armstrong167d82c2022-06-30 11:32:00 +02002499requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2500requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong167d82c2022-06-30 11:32:00 +02002501requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002502requires_hash_alg SHA_384
Neil Armstrong167d82c2022-06-30 11:32:00 +02002503requires_config_enabled MBEDTLS_GCM_C
Neil Armstrongc67e6e92022-07-01 15:48:10 +02002504requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Neil Armstrong1948a202022-06-30 18:05:57 +02002505run_test "Opaque keys for server authentication: EC + RSA, force DHE-RSA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002506 "$P_SRV auth_mode=required key_opaque=1 crt_file=data_files/server5.crt \
2507 key_file=data_files/server5.key key_opaque_algs=ecdsa-sign,none \
Neil Armstrong4b102092022-07-01 09:42:29 +02002508 crt_file2=data_files/server4.crt \
2509 key_file2=data_files/server4.key key_opaque_algs2=rsa-sign-pkcs1,none" \
2510 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002511 0 \
2512 -c "Verifying peer X.509 certificate... ok" \
2513 -c "Ciphersuite is TLS-DHE-RSA" \
Neil Armstrong4b102092022-07-01 09:42:29 +02002514 -c "CN=Polarssl Test EC CA" \
Neil Armstrong167d82c2022-06-30 11:32:00 +02002515 -s "key types: Opaque, Opaque" \
2516 -s "Ciphersuite is TLS-DHE-RSA" \
2517 -S "error" \
2518 -C "error"
2519
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002520# Test using an EC opaque private key for client/server authentication
Przemyslaw Stekiel575f23c2021-10-06 11:31:49 +02002521requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2522requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002523requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002524requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002525run_test "Opaque key for client/server authentication: ECDHE-ECDSA" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002526 "$P_SRV force_version=tls12 auth_mode=required key_opaque=1 crt_file=data_files/server5.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002527 key_file=data_files/server5.key key_opaque_algs=ecdsa-sign,none" \
Przemyslaw Stekiel575f23c2021-10-06 11:31:49 +02002528 "$P_CLI key_opaque=1 crt_file=data_files/server5.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002529 key_file=data_files/server5.key key_opaque_algs=ecdsa-sign,none" \
Przemyslaw Stekiel575f23c2021-10-06 11:31:49 +02002530 0 \
2531 -c "key type: Opaque" \
2532 -c "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002533 -c "Ciphersuite is TLS-ECDHE-ECDSA" \
Gilles Peskine05bf89d2022-01-25 17:50:25 +01002534 -s "key types: Opaque, none" \
Przemyslaw Stekiel575f23c2021-10-06 11:31:49 +02002535 -s "Verifying peer X.509 certificate... ok" \
Przemyslaw Stekielbb5d4832021-10-26 12:25:27 +02002536 -s "Ciphersuite is TLS-ECDHE-ECDSA" \
Simon Butcher8e004102016-10-14 00:48:33 +01002537 -S "error" \
2538 -C "error"
2539
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002540# Test using a RSA opaque private key for client/server authentication
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002541requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2542requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002543requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002544requires_hash_alg SHA_256
valeriof27472b2023-03-09 16:19:35 +01002545requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_RSA_ENABLED
Neil Armstrong1948a202022-06-30 18:05:57 +02002546run_test "Opaque key for client/server authentication: ECDHE-RSA" \
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002547 "$P_SRV auth_mode=required key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002548 key_file=data_files/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002549 "$P_CLI force_version=tls12 key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002550 key_file=data_files/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Neil Armstrong3e9a1422022-03-21 10:03:46 +01002551 0 \
2552 -c "key type: Opaque" \
2553 -c "Verifying peer X.509 certificate... ok" \
2554 -c "Ciphersuite is TLS-ECDHE-RSA" \
2555 -s "key types: Opaque, none" \
2556 -s "Verifying peer X.509 certificate... ok" \
2557 -s "Ciphersuite is TLS-ECDHE-RSA" \
2558 -S "error" \
2559 -C "error"
2560
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002561requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
2562requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002563requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04002564requires_hash_alg SHA_256
Neil Armstrong1948a202022-06-30 18:05:57 +02002565run_test "Opaque key for client/server authentication: DHE-RSA" \
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002566 "$P_SRV auth_mode=required key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002567 key_file=data_files/server2.key key_opaque_algs=rsa-sign-pkcs1,none" \
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002568 "$P_CLI key_opaque=1 crt_file=data_files/server2-sha256.crt \
Neil Armstrong36b02232022-06-30 11:16:53 +02002569 key_file=data_files/server2.key key_opaque_algs=rsa-sign-pkcs1,none \
2570 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
Neil Armstronga4dbfdd2022-03-21 10:11:07 +01002571 0 \
2572 -c "key type: Opaque" \
2573 -c "Verifying peer X.509 certificate... ok" \
2574 -c "Ciphersuite is TLS-DHE-RSA" \
2575 -s "key types: Opaque, none" \
2576 -s "Verifying peer X.509 certificate... ok" \
2577 -s "Ciphersuite is TLS-DHE-RSA" \
2578 -S "error" \
2579 -C "error"
2580
Neil Armstrong36b02232022-06-30 11:16:53 +02002581
Hanno Becker9b5853c2018-11-16 17:28:40 +00002582# Test ciphersuites which we expect to be fully supported by PSA Crypto
2583# and check that we don't fall back to Mbed TLS' internal crypto primitives.
2584run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM
2585run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8
2586run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM
2587run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8
2588run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
2589run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
2590run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA
2591run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
2592run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384
2593
Hanno Becker354e2482019-01-08 11:40:25 +00002594requires_config_enabled MBEDTLS_ECP_DP_SECP521R1_ENABLED
2595run_test_psa_force_curve "secp521r1"
2596requires_config_enabled MBEDTLS_ECP_DP_BP512R1_ENABLED
2597run_test_psa_force_curve "brainpoolP512r1"
2598requires_config_enabled MBEDTLS_ECP_DP_SECP384R1_ENABLED
2599run_test_psa_force_curve "secp384r1"
2600requires_config_enabled MBEDTLS_ECP_DP_BP384R1_ENABLED
2601run_test_psa_force_curve "brainpoolP384r1"
2602requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
2603run_test_psa_force_curve "secp256r1"
2604requires_config_enabled MBEDTLS_ECP_DP_SECP256K1_ENABLED
2605run_test_psa_force_curve "secp256k1"
2606requires_config_enabled MBEDTLS_ECP_DP_BP256R1_ENABLED
2607run_test_psa_force_curve "brainpoolP256r1"
2608requires_config_enabled MBEDTLS_ECP_DP_SECP224R1_ENABLED
2609run_test_psa_force_curve "secp224r1"
Gilles Peskinedefdc3b2021-03-23 13:59:58 +01002610## SECP224K1 is buggy via the PSA API
Dave Rodgman017a1992022-03-31 14:07:01 +01002611## (https://github.com/Mbed-TLS/mbedtls/issues/3541),
Gilles Peskinedefdc3b2021-03-23 13:59:58 +01002612## so it is disabled in PSA even when it's enabled in Mbed TLS.
2613## The proper dependency would be on PSA_WANT_ECC_SECP_K1_224 but
2614## dependencies on PSA symbols in ssl-opt.sh are not implemented yet.
2615#requires_config_enabled MBEDTLS_ECP_DP_SECP224K1_ENABLED
2616#run_test_psa_force_curve "secp224k1"
Hanno Becker354e2482019-01-08 11:40:25 +00002617requires_config_enabled MBEDTLS_ECP_DP_SECP192R1_ENABLED
2618run_test_psa_force_curve "secp192r1"
2619requires_config_enabled MBEDTLS_ECP_DP_SECP192K1_ENABLED
2620run_test_psa_force_curve "secp192k1"
2621
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01002622# Test current time in ServerHello
2623requires_config_enabled MBEDTLS_HAVE_TIME
2624run_test "ServerHello contains gmt_unix_time" \
2625 "$P_SRV debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002626 "$P_CLI force_version=tls12 debug_level=3" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01002627 0 \
2628 -f "check_server_hello_time" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002629 -F "check_server_hello_time"
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01002630
2631# Test for uniqueness of IVs in AEAD ciphersuites
Gilles Peskinebc70a182017-05-09 15:59:24 +02002632run_test "Unique IV in GCM" \
2633 "$P_SRV exchanges=20 debug_level=4" \
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02002634 "$P_CLI exchanges=20 debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002635 0 \
2636 -u "IV used" \
2637 -U "IV used"
2638
Andrzej Kurekec71b092022-11-15 10:21:50 -05002639# Test for correctness of sent single supported algorithm
2640requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Andrzej Kurekec71b092022-11-15 10:21:50 -05002641requires_config_enabled MBEDTLS_DEBUG_C
2642requires_config_enabled MBEDTLS_SSL_CLI_C
Paul Elliott3b4ceda2022-11-17 12:47:10 +00002643requires_config_enabled MBEDTLS_SSL_SRV_C
Valerio Settid1f991c2023-02-22 12:54:13 +01002644requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
2645requires_pk_alg "ECDSA"
Andrzej Kurekec71b092022-11-15 10:21:50 -05002646requires_hash_alg SHA_256
Paul Elliottf6e342c2022-11-17 12:50:29 +00002647run_test "Single supported algorithm sending: mbedtls client" \
Andrzej Kurekec71b092022-11-15 10:21:50 -05002648 "$P_SRV sig_algs=ecdsa_secp256r1_sha256 auth_mode=required" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002649 "$P_CLI force_version=tls12 sig_algs=ecdsa_secp256r1_sha256 debug_level=3" \
Andrzej Kurekec71b092022-11-15 10:21:50 -05002650 0 \
2651 -c "Supported Signature Algorithm found: 04 03"
2652
Paul Elliottf6e342c2022-11-17 12:50:29 +00002653requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
2654requires_config_enabled MBEDTLS_SSL_SRV_C
Paul Elliottf6e342c2022-11-17 12:50:29 +00002655requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
2656requires_hash_alg SHA_256
2657run_test "Single supported algorithm sending: openssl client" \
2658 "$P_SRV sig_algs=ecdsa_secp256r1_sha256 auth_mode=required" \
2659 "$O_CLI -cert data_files/server6.crt \
2660 -key data_files/server6.key" \
2661 0
2662
Janos Follathee11be62019-04-04 12:03:30 +01002663# Tests for certificate verification callback
2664run_test "Configuration-specific CRT verification callback" \
2665 "$P_SRV debug_level=3" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01002666 "$P_CLI force_version=tls12 context_crt_cb=0 debug_level=3" \
Janos Follathee11be62019-04-04 12:03:30 +01002667 0 \
Janos Follathee11be62019-04-04 12:03:30 +01002668 -S "error" \
2669 -c "Verify requested for " \
2670 -c "Use configuration-specific verification callback" \
2671 -C "Use context-specific verification callback" \
2672 -C "error"
2673
Hanno Beckerefb440a2019-04-03 13:04:33 +01002674run_test "Context-specific CRT verification callback" \
2675 "$P_SRV debug_level=3" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01002676 "$P_CLI force_version=tls12 context_crt_cb=1 debug_level=3" \
Hanno Beckerefb440a2019-04-03 13:04:33 +01002677 0 \
Hanno Beckerefb440a2019-04-03 13:04:33 +01002678 -S "error" \
Janos Follathee11be62019-04-04 12:03:30 +01002679 -c "Verify requested for " \
2680 -c "Use context-specific verification callback" \
2681 -C "Use configuration-specific verification callback" \
Hanno Beckerefb440a2019-04-03 13:04:33 +01002682 -C "error"
2683
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01002684# Tests for SHA-1 support
Gilles Peskinebc70a182017-05-09 15:59:24 +02002685run_test "SHA-1 forbidden by default in server certificate" \
2686 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002687 "$P_CLI debug_level=2 force_version=tls12 allow_sha1=0" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002688 1 \
2689 -c "The certificate is signed with an unacceptable hash"
2690
2691run_test "SHA-1 explicitly allowed in server certificate" \
2692 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002693 "$P_CLI force_version=tls12 allow_sha1=1" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002694 0
2695
2696run_test "SHA-256 allowed by default in server certificate" \
2697 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2-sha256.crt" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002698 "$P_CLI force_version=tls12 allow_sha1=0" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002699 0
2700
2701run_test "SHA-1 forbidden by default in client certificate" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002702 "$P_SRV force_version=tls12 auth_mode=required allow_sha1=0" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002703 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
2704 1 \
2705 -s "The certificate is signed with an unacceptable hash"
2706
2707run_test "SHA-1 explicitly allowed in client certificate" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002708 "$P_SRV force_version=tls12 auth_mode=required allow_sha1=1" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002709 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
2710 0
2711
2712run_test "SHA-256 allowed by default in client certificate" \
Ronald Cronf95d1692023-03-14 17:19:42 +01002713 "$P_SRV force_version=tls12 auth_mode=required allow_sha1=0" \
Gilles Peskinebc70a182017-05-09 15:59:24 +02002714 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha256.crt" \
2715 0
2716
Hanno Becker7ae8a762018-08-14 15:43:35 +01002717# Tests for datagram packing
Jerry Yuab082902021-12-23 18:02:22 +08002718requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker7ae8a762018-08-14 15:43:35 +01002719run_test "DTLS: multiple records in same datagram, client and server" \
2720 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
2721 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
2722 0 \
2723 -c "next record in same datagram" \
2724 -s "next record in same datagram"
2725
Jerry Yuab082902021-12-23 18:02:22 +08002726requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker7ae8a762018-08-14 15:43:35 +01002727run_test "DTLS: multiple records in same datagram, client only" \
2728 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
2729 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
2730 0 \
2731 -s "next record in same datagram" \
2732 -C "next record in same datagram"
2733
Jerry Yuab082902021-12-23 18:02:22 +08002734requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker7ae8a762018-08-14 15:43:35 +01002735run_test "DTLS: multiple records in same datagram, server only" \
2736 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
2737 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
2738 0 \
2739 -S "next record in same datagram" \
2740 -c "next record in same datagram"
2741
Jerry Yuab082902021-12-23 18:02:22 +08002742requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker7ae8a762018-08-14 15:43:35 +01002743run_test "DTLS: multiple records in same datagram, neither client nor server" \
2744 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
2745 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
2746 0 \
2747 -S "next record in same datagram" \
2748 -C "next record in same datagram"
2749
Jarno Lamsa2937d812019-06-04 11:33:23 +03002750# Tests for Context serialization
2751
2752requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002753run_test "Context serialization, client serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002754 "$P_SRV dtls=1 serialize=0 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002755 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2756 0 \
2757 -c "Deserializing connection..." \
2758 -S "Deserializing connection..."
2759
2760requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2761run_test "Context serialization, client serializes, ChaChaPoly" \
2762 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2763 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2764 0 \
2765 -c "Deserializing connection..." \
2766 -S "Deserializing connection..."
2767
2768requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2769run_test "Context serialization, client serializes, GCM" \
2770 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2771 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002772 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002773 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002774 -S "Deserializing connection..."
2775
Jerry Yuab082902021-12-23 18:02:22 +08002776requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsa2937d812019-06-04 11:33:23 +03002777requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002778requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2779run_test "Context serialization, client serializes, with CID" \
2780 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
2781 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
2782 0 \
2783 -c "Deserializing connection..." \
2784 -S "Deserializing connection..."
2785
2786requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002787run_test "Context serialization, server serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002788 "$P_SRV dtls=1 serialize=1 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002789 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2790 0 \
2791 -C "Deserializing connection..." \
2792 -s "Deserializing connection..."
2793
2794requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2795run_test "Context serialization, server serializes, ChaChaPoly" \
2796 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2797 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2798 0 \
2799 -C "Deserializing connection..." \
2800 -s "Deserializing connection..."
2801
2802requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2803run_test "Context serialization, server serializes, GCM" \
2804 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2805 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002806 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002807 -C "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002808 -s "Deserializing connection..."
2809
Jerry Yuab082902021-12-23 18:02:22 +08002810requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsa2937d812019-06-04 11:33:23 +03002811requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002812requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2813run_test "Context serialization, server serializes, with CID" \
2814 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
2815 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
2816 0 \
2817 -C "Deserializing connection..." \
2818 -s "Deserializing connection..."
2819
2820requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002821run_test "Context serialization, both serialize, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002822 "$P_SRV dtls=1 serialize=1 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002823 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2824 0 \
2825 -c "Deserializing connection..." \
2826 -s "Deserializing connection..."
2827
2828requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2829run_test "Context serialization, both serialize, ChaChaPoly" \
2830 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2831 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2832 0 \
2833 -c "Deserializing connection..." \
2834 -s "Deserializing connection..."
2835
2836requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2837run_test "Context serialization, both serialize, GCM" \
2838 "$P_SRV dtls=1 serialize=1 exchanges=2" \
2839 "$P_CLI dtls=1 serialize=1 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002840 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03002841 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03002842 -s "Deserializing connection..."
2843
Jerry Yuab082902021-12-23 18:02:22 +08002844requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsac2376f02019-06-06 10:44:14 +03002845requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002846requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2847run_test "Context serialization, both serialize, with CID" \
2848 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
2849 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
2850 0 \
2851 -c "Deserializing connection..." \
2852 -s "Deserializing connection..."
2853
2854requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002855run_test "Context serialization, re-init, client serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002856 "$P_SRV dtls=1 serialize=0 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002857 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2858 0 \
2859 -c "Deserializing connection..." \
2860 -S "Deserializing connection..."
2861
Jerry Yuab082902021-12-23 18:02:22 +08002862requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002863requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2864run_test "Context serialization, re-init, client serializes, ChaChaPoly" \
2865 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2866 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2867 0 \
2868 -c "Deserializing connection..." \
2869 -S "Deserializing connection..."
2870
2871requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2872run_test "Context serialization, re-init, client serializes, GCM" \
2873 "$P_SRV dtls=1 serialize=0 exchanges=2" \
2874 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002875 0 \
2876 -c "Deserializing connection..." \
2877 -S "Deserializing connection..."
2878
Jerry Yuab082902021-12-23 18:02:22 +08002879requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsac2376f02019-06-06 10:44:14 +03002880requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002881requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2882run_test "Context serialization, re-init, client serializes, with CID" \
2883 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
2884 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
2885 0 \
2886 -c "Deserializing connection..." \
2887 -S "Deserializing connection..."
2888
2889requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002890run_test "Context serialization, re-init, server serializes, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002891 "$P_SRV dtls=1 serialize=2 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002892 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2893 0 \
2894 -C "Deserializing connection..." \
2895 -s "Deserializing connection..."
2896
2897requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2898run_test "Context serialization, re-init, server serializes, ChaChaPoly" \
2899 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2900 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2901 0 \
2902 -C "Deserializing connection..." \
2903 -s "Deserializing connection..."
2904
2905requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2906run_test "Context serialization, re-init, server serializes, GCM" \
2907 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2908 "$P_CLI dtls=1 serialize=0 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002909 0 \
2910 -C "Deserializing connection..." \
2911 -s "Deserializing connection..."
2912
Jerry Yuab082902021-12-23 18:02:22 +08002913requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Jarno Lamsac2376f02019-06-06 10:44:14 +03002914requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01002915requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2916run_test "Context serialization, re-init, server serializes, with CID" \
2917 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
2918 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
2919 0 \
2920 -C "Deserializing connection..." \
2921 -s "Deserializing connection..."
2922
2923requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002924run_test "Context serialization, re-init, both serialize, CCM" \
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02002925 "$P_SRV dtls=1 serialize=2 exchanges=2" \
Hanno Beckere0b90ec2019-08-30 11:32:12 +01002926 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
2927 0 \
2928 -c "Deserializing connection..." \
2929 -s "Deserializing connection..."
2930
2931requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2932run_test "Context serialization, re-init, both serialize, ChaChaPoly" \
2933 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2934 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
2935 0 \
2936 -c "Deserializing connection..." \
2937 -s "Deserializing connection..."
2938
2939requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2940run_test "Context serialization, re-init, both serialize, GCM" \
2941 "$P_SRV dtls=1 serialize=2 exchanges=2" \
2942 "$P_CLI dtls=1 serialize=2 exchanges=2 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-CHACHA20-POLY1305-SHA256" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03002943 0 \
2944 -c "Deserializing connection..." \
2945 -s "Deserializing connection..."
2946
Jerry Yuab082902021-12-23 18:02:22 +08002947requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker1b18fd32019-08-30 11:18:59 +01002948requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2949requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
2950run_test "Context serialization, re-init, both serialize, with CID" \
2951 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
2952 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
2953 0 \
2954 -c "Deserializing connection..." \
2955 -s "Deserializing connection..."
2956
Jerry Yuab082902021-12-23 18:02:22 +08002957requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Piotr Nowicki3de298f2020-04-16 14:35:19 +02002958requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
2959run_test "Saving the serialized context to a file" \
2960 "$P_SRV dtls=1 serialize=1 context_file=context_srv.txt" \
2961 "$P_CLI dtls=1 serialize=1 context_file=context_cli.txt" \
2962 0 \
2963 -s "Save serialized context to a file... ok" \
2964 -c "Save serialized context to a file... ok"
2965rm -f context_srv.txt
2966rm -f context_cli.txt
2967
Hanno Becker7cf463e2019-04-09 18:08:47 +01002968# Tests for DTLS Connection ID extension
2969
Hanno Becker7cf463e2019-04-09 18:08:47 +01002970# So far, the CID API isn't implemented, so we can't
2971# grep for output witnessing its use. This needs to be
2972# changed once the CID extension is implemented.
2973
Jerry Yuab082902021-12-23 18:02:22 +08002974requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01002975requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002976run_test "Connection ID: Cli enabled, Srv disabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002977 "$P_SRV debug_level=3 dtls=1 cid=0" \
2978 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2979 0 \
2980 -s "Disable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002981 -s "found CID extension" \
2982 -s "Client sent CID extension, but CID disabled" \
Hanno Becker6b78c832019-04-25 17:01:43 +01002983 -c "Enable use of CID extension." \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01002984 -c "client hello, adding CID extension" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01002985 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01002986 -C "found CID extension" \
2987 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01002988 -C "Copy CIDs into SSL transform" \
2989 -c "Use of Connection ID was rejected by the server"
Hanno Becker7cf463e2019-04-09 18:08:47 +01002990
Jerry Yuab082902021-12-23 18:02:22 +08002991requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01002992requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01002993run_test "Connection ID: Cli disabled, Srv enabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01002994 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
2995 "$P_CLI debug_level=3 dtls=1 cid=0" \
2996 0 \
2997 -c "Disable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01002998 -C "client hello, adding CID extension" \
Hanno Becker7dee2c62019-04-26 14:17:56 +01002999 -S "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003000 -s "Enable use of CID extension." \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003001 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003002 -C "found CID extension" \
3003 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01003004 -C "Copy CIDs into SSL transform" \
Hanno Beckerb3e9dd52019-05-08 13:19:53 +01003005 -s "Use of Connection ID was not offered by client"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003006
Jerry Yuab082902021-12-23 18:02:22 +08003007requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003008requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003009run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003010 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
3011 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef" \
3012 0 \
3013 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003014 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003015 -c "client hello, adding CID extension" \
3016 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003017 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003018 -s "server hello, adding CID extension" \
3019 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003020 -c "Use of CID extension negotiated" \
3021 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003022 -c "Copy CIDs into SSL transform" \
3023 -c "Peer CID (length 2 Bytes): de ad" \
3024 -s "Peer CID (length 2 Bytes): be ef" \
3025 -s "Use of Connection ID has been negotiated" \
3026 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003027
Jerry Yuab082902021-12-23 18:02:22 +08003028requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003029requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003030run_test "Connection ID, 3D: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003031 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003032 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead" \
3033 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef" \
3034 0 \
3035 -c "Enable use of CID extension." \
3036 -s "Enable use of CID extension." \
3037 -c "client hello, adding CID extension" \
3038 -s "found CID extension" \
3039 -s "Use of CID extension negotiated" \
3040 -s "server hello, adding CID extension" \
3041 -c "found CID extension" \
3042 -c "Use of CID extension negotiated" \
3043 -s "Copy CIDs into SSL transform" \
3044 -c "Copy CIDs into SSL transform" \
3045 -c "Peer CID (length 2 Bytes): de ad" \
3046 -s "Peer CID (length 2 Bytes): be ef" \
3047 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003048 -c "Use of Connection ID has been negotiated" \
3049 -c "ignoring unexpected CID" \
3050 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003051
Jerry Yuab082902021-12-23 18:02:22 +08003052requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003053requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003054run_test "Connection ID, MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
3055 -p "$P_PXY mtu=800" \
3056 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
3057 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
3058 0 \
3059 -c "Enable use of CID extension." \
3060 -s "Enable use of CID extension." \
3061 -c "client hello, adding CID extension" \
3062 -s "found CID extension" \
3063 -s "Use of CID extension negotiated" \
3064 -s "server hello, adding CID extension" \
3065 -c "found CID extension" \
3066 -c "Use of CID extension negotiated" \
3067 -s "Copy CIDs into SSL transform" \
3068 -c "Copy CIDs into SSL transform" \
3069 -c "Peer CID (length 2 Bytes): de ad" \
3070 -s "Peer CID (length 2 Bytes): be ef" \
3071 -s "Use of Connection ID has been negotiated" \
3072 -c "Use of Connection ID has been negotiated"
3073
Jerry Yuab082902021-12-23 18:02:22 +08003074requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003075requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003076run_test "Connection ID, 3D+MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003077 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003078 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
3079 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
3080 0 \
3081 -c "Enable use of CID extension." \
3082 -s "Enable use of CID extension." \
3083 -c "client hello, adding CID extension" \
3084 -s "found CID extension" \
3085 -s "Use of CID extension negotiated" \
3086 -s "server hello, adding CID extension" \
3087 -c "found CID extension" \
3088 -c "Use of CID extension negotiated" \
3089 -s "Copy CIDs into SSL transform" \
3090 -c "Copy CIDs into SSL transform" \
3091 -c "Peer CID (length 2 Bytes): de ad" \
3092 -s "Peer CID (length 2 Bytes): be ef" \
3093 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003094 -c "Use of Connection ID has been negotiated" \
3095 -c "ignoring unexpected CID" \
3096 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003097
Jerry Yuab082902021-12-23 18:02:22 +08003098requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003099requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003100run_test "Connection ID: Cli+Srv enabled, Cli CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003101 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3102 "$P_CLI debug_level=3 dtls=1 cid=1" \
3103 0 \
3104 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003105 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003106 -c "client hello, adding CID extension" \
3107 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003108 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003109 -s "server hello, adding CID extension" \
3110 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003111 -c "Use of CID extension negotiated" \
3112 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003113 -c "Copy CIDs into SSL transform" \
3114 -c "Peer CID (length 4 Bytes): de ad be ef" \
3115 -s "Peer CID (length 0 Bytes):" \
3116 -s "Use of Connection ID has been negotiated" \
3117 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003118
Jerry Yuab082902021-12-23 18:02:22 +08003119requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003120requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003121run_test "Connection ID: Cli+Srv enabled, Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003122 "$P_SRV debug_level=3 dtls=1 cid=1" \
3123 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3124 0 \
3125 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003126 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003127 -c "client hello, adding CID extension" \
3128 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003129 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003130 -s "server hello, adding CID extension" \
3131 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003132 -c "Use of CID extension negotiated" \
3133 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003134 -c "Copy CIDs into SSL transform" \
3135 -s "Peer CID (length 4 Bytes): de ad be ef" \
3136 -c "Peer CID (length 0 Bytes):" \
3137 -s "Use of Connection ID has been negotiated" \
3138 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003139
Jerry Yuab082902021-12-23 18:02:22 +08003140requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003141requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003142run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003143 "$P_SRV debug_level=3 dtls=1 cid=1" \
3144 "$P_CLI debug_level=3 dtls=1 cid=1" \
3145 0 \
3146 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003147 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003148 -c "client hello, adding CID extension" \
3149 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003150 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003151 -s "server hello, adding CID extension" \
3152 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003153 -c "Use of CID extension negotiated" \
3154 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01003155 -c "Copy CIDs into SSL transform" \
3156 -S "Use of Connection ID has been negotiated" \
3157 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003158
Hanno Beckera0e20d02019-05-15 14:03:01 +01003159requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003160run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003161 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
3162 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
3163 0 \
3164 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003165 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003166 -c "client hello, adding CID extension" \
3167 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003168 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003169 -s "server hello, adding CID extension" \
3170 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003171 -c "Use of CID extension negotiated" \
3172 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003173 -c "Copy CIDs into SSL transform" \
3174 -c "Peer CID (length 2 Bytes): de ad" \
3175 -s "Peer CID (length 2 Bytes): be ef" \
3176 -s "Use of Connection ID has been negotiated" \
3177 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003178
Hanno Beckera0e20d02019-05-15 14:03:01 +01003179requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003180run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003181 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3182 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
3183 0 \
3184 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003185 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003186 -c "client hello, adding CID extension" \
3187 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003188 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003189 -s "server hello, adding CID extension" \
3190 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003191 -c "Use of CID extension negotiated" \
3192 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003193 -c "Copy CIDs into SSL transform" \
3194 -c "Peer CID (length 4 Bytes): de ad be ef" \
3195 -s "Peer CID (length 0 Bytes):" \
3196 -s "Use of Connection ID has been negotiated" \
3197 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003198
Hanno Beckera0e20d02019-05-15 14:03:01 +01003199requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003200run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003201 "$P_SRV debug_level=3 dtls=1 cid=1" \
3202 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
3203 0 \
3204 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003205 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003206 -c "client hello, adding CID extension" \
3207 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003208 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003209 -s "server hello, adding CID extension" \
3210 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003211 -c "Use of CID extension negotiated" \
3212 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003213 -c "Copy CIDs into SSL transform" \
3214 -s "Peer CID (length 4 Bytes): de ad be ef" \
3215 -c "Peer CID (length 0 Bytes):" \
3216 -s "Use of Connection ID has been negotiated" \
3217 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003218
Hanno Beckera0e20d02019-05-15 14:03:01 +01003219requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003220run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003221 "$P_SRV debug_level=3 dtls=1 cid=1" \
3222 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
3223 0 \
3224 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003225 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003226 -c "client hello, adding CID extension" \
3227 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003228 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003229 -s "server hello, adding CID extension" \
3230 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003231 -c "Use of CID extension negotiated" \
3232 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01003233 -c "Copy CIDs into SSL transform" \
3234 -S "Use of Connection ID has been negotiated" \
3235 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003236
Hanno Beckera0e20d02019-05-15 14:03:01 +01003237requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003238run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003239 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
3240 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
3241 0 \
3242 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003243 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003244 -c "client hello, adding CID extension" \
3245 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003246 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003247 -s "server hello, adding CID extension" \
3248 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003249 -c "Use of CID extension negotiated" \
3250 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003251 -c "Copy CIDs into SSL transform" \
3252 -c "Peer CID (length 2 Bytes): de ad" \
3253 -s "Peer CID (length 2 Bytes): be ef" \
3254 -s "Use of Connection ID has been negotiated" \
3255 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003256
Hanno Beckera0e20d02019-05-15 14:03:01 +01003257requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003258run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003259 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
3260 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
3261 0 \
3262 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003263 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003264 -c "client hello, adding CID extension" \
3265 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003266 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003267 -s "server hello, adding CID extension" \
3268 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003269 -c "Use of CID extension negotiated" \
3270 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003271 -c "Copy CIDs into SSL transform" \
3272 -c "Peer CID (length 4 Bytes): de ad be ef" \
3273 -s "Peer CID (length 0 Bytes):" \
3274 -s "Use of Connection ID has been negotiated" \
3275 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003276
Hanno Beckera0e20d02019-05-15 14:03:01 +01003277requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003278run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003279 "$P_SRV debug_level=3 dtls=1 cid=1" \
3280 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
3281 0 \
3282 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003283 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003284 -c "client hello, adding CID extension" \
3285 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003286 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003287 -s "server hello, adding CID extension" \
3288 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003289 -c "Use of CID extension negotiated" \
3290 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01003291 -c "Copy CIDs into SSL transform" \
3292 -s "Peer CID (length 4 Bytes): de ad be ef" \
3293 -c "Peer CID (length 0 Bytes):" \
3294 -s "Use of Connection ID has been negotiated" \
3295 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003296
Hanno Beckera0e20d02019-05-15 14:03:01 +01003297requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003298run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003299 "$P_SRV debug_level=3 dtls=1 cid=1" \
3300 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
3301 0 \
3302 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01003303 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01003304 -c "client hello, adding CID extension" \
3305 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01003306 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01003307 -s "server hello, adding CID extension" \
3308 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01003309 -c "Use of CID extension negotiated" \
3310 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01003311 -c "Copy CIDs into SSL transform" \
3312 -S "Use of Connection ID has been negotiated" \
3313 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003314
Jerry Yuab082902021-12-23 18:02:22 +08003315requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003316requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker9bae30d2019-04-23 11:52:44 +01003317requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003318run_test "Connection ID: Cli+Srv enabled, renegotiate without change of CID" \
Hanno Beckerf157a972019-04-25 16:05:45 +01003319 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
3320 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
3321 0 \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003322 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3323 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3324 -s "(initial handshake) Use of Connection ID has been negotiated" \
3325 -c "(initial handshake) Use of Connection ID has been negotiated" \
3326 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3327 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3328 -s "(after renegotiation) Use of Connection ID has been negotiated" \
3329 -c "(after renegotiation) Use of Connection ID has been negotiated"
3330
Jerry Yuab082902021-12-23 18:02:22 +08003331requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003332requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003333requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003334run_test "Connection ID: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003335 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
3336 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
3337 0 \
3338 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3339 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3340 -s "(initial handshake) Use of Connection ID has been negotiated" \
3341 -c "(initial handshake) Use of Connection ID has been negotiated" \
3342 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3343 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3344 -s "(after renegotiation) Use of Connection ID has been negotiated" \
3345 -c "(after renegotiation) Use of Connection ID has been negotiated"
3346
Jerry Yuab082902021-12-23 18:02:22 +08003347requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003348requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003349requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01003350run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate with different CID" \
3351 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead cid_val_renego=beef renegotiation=1" \
3352 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
3353 0 \
3354 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3355 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3356 -s "(initial handshake) Use of Connection ID has been negotiated" \
3357 -c "(initial handshake) Use of Connection ID has been negotiated" \
3358 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3359 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3360 -s "(after renegotiation) Use of Connection ID has been negotiated" \
3361 -c "(after renegotiation) Use of Connection ID has been negotiated"
3362
Jerry Yuab082902021-12-23 18:02:22 +08003363requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003364requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01003365requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003366run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003367 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003368 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
3369 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
3370 0 \
3371 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3372 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3373 -s "(initial handshake) Use of Connection ID has been negotiated" \
3374 -c "(initial handshake) Use of Connection ID has been negotiated" \
3375 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3376 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3377 -s "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003378 -c "(after renegotiation) Use of Connection ID has been negotiated" \
3379 -c "ignoring unexpected CID" \
3380 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003381
Jerry Yuab082902021-12-23 18:02:22 +08003382requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003383requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003384requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3385run_test "Connection ID: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003386 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3387 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3388 0 \
3389 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3390 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3391 -s "(initial handshake) Use of Connection ID has been negotiated" \
3392 -c "(initial handshake) Use of Connection ID has been negotiated" \
3393 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3394 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3395 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3396 -S "(after renegotiation) Use of Connection ID has been negotiated"
3397
Jerry Yuab082902021-12-23 18:02:22 +08003398requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003399requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003400requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01003401run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate without CID" \
3402 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3403 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3404 0 \
3405 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3406 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3407 -s "(initial handshake) Use of Connection ID has been negotiated" \
3408 -c "(initial handshake) Use of Connection ID has been negotiated" \
3409 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3410 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3411 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3412 -S "(after renegotiation) Use of Connection ID has been negotiated"
3413
Jerry Yuab082902021-12-23 18:02:22 +08003414requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003415requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01003416requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003417run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003418 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003419 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3420 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3421 0 \
3422 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3423 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3424 -s "(initial handshake) Use of Connection ID has been negotiated" \
3425 -c "(initial handshake) Use of Connection ID has been negotiated" \
3426 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3427 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3428 -C "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003429 -S "(after renegotiation) Use of Connection ID has been negotiated" \
3430 -c "ignoring unexpected CID" \
3431 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003432
Jerry Yuab082902021-12-23 18:02:22 +08003433requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003434requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003435requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3436run_test "Connection ID: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003437 "$P_SRV debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
3438 "$P_CLI debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
3439 0 \
3440 -S "(initial handshake) Use of Connection ID has been negotiated" \
3441 -C "(initial handshake) Use of Connection ID has been negotiated" \
3442 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3443 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3444 -c "(after renegotiation) Use of Connection ID has been negotiated" \
3445 -s "(after renegotiation) Use of Connection ID has been negotiated"
3446
Jerry Yuab082902021-12-23 18:02:22 +08003447requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003448requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003449requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01003450run_test "Connection ID, no packing: Cli+Srv enabled, CID on renegotiation" \
3451 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
3452 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
3453 0 \
3454 -S "(initial handshake) Use of Connection ID has been negotiated" \
3455 -C "(initial handshake) Use of Connection ID has been negotiated" \
3456 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3457 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3458 -c "(after renegotiation) Use of Connection ID has been negotiated" \
3459 -s "(after renegotiation) Use of Connection ID has been negotiated"
3460
Jerry Yuab082902021-12-23 18:02:22 +08003461requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003462requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01003463requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003464run_test "Connection ID, 3D+MTU: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003465 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003466 "$P_SRV debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
3467 "$P_CLI debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
3468 0 \
3469 -S "(initial handshake) Use of Connection ID has been negotiated" \
3470 -C "(initial handshake) Use of Connection ID has been negotiated" \
3471 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3472 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3473 -c "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003474 -s "(after renegotiation) Use of Connection ID has been negotiated" \
3475 -c "ignoring unexpected CID" \
3476 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003477
Jerry Yuab082902021-12-23 18:02:22 +08003478requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003479requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003480requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3481run_test "Connection ID: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003482 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
3483 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3484 0 \
3485 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3486 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3487 -s "(initial handshake) Use of Connection ID has been negotiated" \
3488 -c "(initial handshake) Use of Connection ID has been negotiated" \
3489 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3490 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3491 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3492 -S "(after renegotiation) Use of Connection ID has been negotiated" \
3493 -s "(after renegotiation) Use of Connection ID was not offered by client"
3494
Jerry Yuab082902021-12-23 18:02:22 +08003495requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003496requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003497requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01003498run_test "Connection ID, 3D: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003499 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01003500 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
3501 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
3502 0 \
3503 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3504 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3505 -s "(initial handshake) Use of Connection ID has been negotiated" \
3506 -c "(initial handshake) Use of Connection ID has been negotiated" \
3507 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3508 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3509 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3510 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003511 -s "(after renegotiation) Use of Connection ID was not offered by client" \
3512 -c "ignoring unexpected CID" \
3513 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01003514
Jerry Yuab082902021-12-23 18:02:22 +08003515requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003516requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003517requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3518run_test "Connection ID: Cli+Srv enabled, Srv disables on renegotiation" \
3519 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3520 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
3521 0 \
3522 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3523 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3524 -s "(initial handshake) Use of Connection ID has been negotiated" \
3525 -c "(initial handshake) Use of Connection ID has been negotiated" \
3526 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3527 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3528 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3529 -S "(after renegotiation) Use of Connection ID has been negotiated" \
3530 -c "(after renegotiation) Use of Connection ID was rejected by the server"
3531
Jerry Yuab082902021-12-23 18:02:22 +08003532requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera0e20d02019-05-15 14:03:01 +01003533requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01003534requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
3535run_test "Connection ID, 3D: Cli+Srv enabled, Srv disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003536 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01003537 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
3538 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
3539 0 \
3540 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3541 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3542 -s "(initial handshake) Use of Connection ID has been negotiated" \
3543 -c "(initial handshake) Use of Connection ID has been negotiated" \
3544 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
3545 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
3546 -C "(after renegotiation) Use of Connection ID has been negotiated" \
3547 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01003548 -c "(after renegotiation) Use of Connection ID was rejected by the server" \
3549 -c "ignoring unexpected CID" \
3550 -s "ignoring unexpected CID"
Hanno Becker7cf463e2019-04-09 18:08:47 +01003551
Yuto Takano3fa16732021-07-09 11:21:43 +01003552# This and the test below it require MAX_CONTENT_LEN to be at least MFL+1, because the
Yuto Takano9c09d552021-07-08 16:03:44 +01003553# tests check that the buffer contents are reallocated when the message is
3554# larger than the buffer.
Andrzej Kurekb6577832020-06-08 07:08:03 -04003555requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
3556requires_config_enabled MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Yuto Takano9c09d552021-07-08 16:03:44 +01003557requires_max_content_len 513
Andrzej Kurekb6577832020-06-08 07:08:03 -04003558run_test "Connection ID: Cli+Srv enabled, variable buffer lengths, MFL=512" \
3559 "$P_SRV dtls=1 cid=1 cid_val=dead debug_level=2" \
3560 "$P_CLI force_ciphersuite="TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" max_frag_len=512 dtls=1 cid=1 cid_val=beef" \
3561 0 \
3562 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3563 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3564 -s "(initial handshake) Use of Connection ID has been negotiated" \
3565 -c "(initial handshake) Use of Connection ID has been negotiated" \
3566 -s "Reallocating in_buf" \
3567 -s "Reallocating out_buf"
3568
3569requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
3570requires_config_enabled MBEDTLS_SSL_VARIABLE_BUFFER_LENGTH
Yuto Takano9c09d552021-07-08 16:03:44 +01003571requires_max_content_len 1025
Andrzej Kurekb6577832020-06-08 07:08:03 -04003572run_test "Connection ID: Cli+Srv enabled, variable buffer lengths, MFL=1024" \
3573 "$P_SRV dtls=1 cid=1 cid_val=dead debug_level=2" \
3574 "$P_CLI force_ciphersuite="TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" max_frag_len=1024 dtls=1 cid=1 cid_val=beef" \
3575 0 \
3576 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
3577 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
3578 -s "(initial handshake) Use of Connection ID has been negotiated" \
3579 -c "(initial handshake) Use of Connection ID has been negotiated" \
3580 -s "Reallocating in_buf" \
3581 -s "Reallocating out_buf"
3582
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003583# Tests for Encrypt-then-MAC extension
3584
3585run_test "Encrypt then MAC: default" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01003586 "$P_SRV debug_level=3 \
3587 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003588 "$P_CLI debug_level=3" \
3589 0 \
3590 -c "client hello, adding encrypt_then_mac extension" \
3591 -s "found encrypt then mac extension" \
3592 -s "server hello, adding encrypt then mac extension" \
3593 -c "found encrypt_then_mac extension" \
3594 -c "using encrypt then mac" \
3595 -s "using encrypt then mac"
3596
3597run_test "Encrypt then MAC: client enabled, server disabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01003598 "$P_SRV debug_level=3 etm=0 \
3599 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003600 "$P_CLI debug_level=3 etm=1" \
3601 0 \
3602 -c "client hello, adding encrypt_then_mac extension" \
3603 -s "found encrypt then mac extension" \
3604 -S "server hello, adding encrypt then mac extension" \
3605 -C "found encrypt_then_mac extension" \
3606 -C "using encrypt then mac" \
3607 -S "using encrypt then mac"
3608
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01003609run_test "Encrypt then MAC: client enabled, aead cipher" \
3610 "$P_SRV debug_level=3 etm=1 \
3611 force_ciphersuite=TLS-RSA-WITH-AES-128-GCM-SHA256" \
3612 "$P_CLI debug_level=3 etm=1" \
3613 0 \
3614 -c "client hello, adding encrypt_then_mac extension" \
3615 -s "found encrypt then mac extension" \
3616 -S "server hello, adding encrypt then mac extension" \
3617 -C "found encrypt_then_mac extension" \
3618 -C "using encrypt then mac" \
3619 -S "using encrypt then mac"
3620
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003621run_test "Encrypt then MAC: client disabled, server enabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01003622 "$P_SRV debug_level=3 etm=1 \
3623 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01003624 "$P_CLI debug_level=3 etm=0" \
3625 0 \
3626 -C "client hello, adding encrypt_then_mac extension" \
3627 -S "found encrypt then mac extension" \
3628 -S "server hello, adding encrypt then mac extension" \
3629 -C "found encrypt_then_mac extension" \
3630 -C "using encrypt then mac" \
3631 -S "using encrypt then mac"
3632
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003633# Tests for Extended Master Secret extension
3634
Gilles Peskine2fe796f2022-02-25 19:51:52 +01003635requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003636run_test "Extended Master Secret: default" \
3637 "$P_SRV debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003638 "$P_CLI force_version=tls12 debug_level=3" \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003639 0 \
3640 -c "client hello, adding extended_master_secret extension" \
3641 -s "found extended master secret extension" \
3642 -s "server hello, adding extended master secret extension" \
3643 -c "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003644 -c "session hash for extended master secret" \
3645 -s "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003646
Gilles Peskine2fe796f2022-02-25 19:51:52 +01003647requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003648run_test "Extended Master Secret: client enabled, server disabled" \
3649 "$P_SRV debug_level=3 extended_ms=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003650 "$P_CLI force_version=tls12 debug_level=3 extended_ms=1" \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003651 0 \
3652 -c "client hello, adding extended_master_secret extension" \
3653 -s "found extended master secret extension" \
3654 -S "server hello, adding extended master secret extension" \
3655 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003656 -C "session hash for extended master secret" \
3657 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003658
Gilles Peskine2fe796f2022-02-25 19:51:52 +01003659requires_config_enabled MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003660run_test "Extended Master Secret: client disabled, server enabled" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003661 "$P_SRV force_version=tls12 debug_level=3 extended_ms=1" \
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003662 "$P_CLI debug_level=3 extended_ms=0" \
3663 0 \
3664 -C "client hello, adding extended_master_secret extension" \
3665 -S "found extended master secret extension" \
3666 -S "server hello, adding extended master secret extension" \
3667 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02003668 -C "session hash for extended master secret" \
3669 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02003670
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003671# Test sending and receiving empty application data records
3672
3673run_test "Encrypt then MAC: empty application data record" \
3674 "$P_SRV auth_mode=none debug_level=4 etm=1" \
3675 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA" \
3676 0 \
3677 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
3678 -s "dumping 'input payload after decrypt' (0 bytes)" \
3679 -c "0 bytes written in 1 fragments"
3680
Jerry Yuab082902021-12-23 18:02:22 +08003681requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9e2c80f2020-03-24 10:53:39 +01003682run_test "Encrypt then MAC: disabled, empty application data record" \
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003683 "$P_SRV auth_mode=none debug_level=4 etm=0" \
3684 "$P_CLI auth_mode=none etm=0 request_size=0" \
3685 0 \
3686 -s "dumping 'input payload after decrypt' (0 bytes)" \
3687 -c "0 bytes written in 1 fragments"
3688
3689run_test "Encrypt then MAC, DTLS: empty application data record" \
3690 "$P_SRV auth_mode=none debug_level=4 etm=1 dtls=1" \
3691 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA dtls=1" \
3692 0 \
3693 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
3694 -s "dumping 'input payload after decrypt' (0 bytes)" \
3695 -c "0 bytes written in 1 fragments"
3696
Jerry Yuab082902021-12-23 18:02:22 +08003697requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9e2c80f2020-03-24 10:53:39 +01003698run_test "Encrypt then MAC, DTLS: disabled, empty application data record" \
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01003699 "$P_SRV auth_mode=none debug_level=4 etm=0 dtls=1" \
3700 "$P_CLI auth_mode=none etm=0 request_size=0 dtls=1" \
3701 0 \
3702 -s "dumping 'input payload after decrypt' (0 bytes)" \
3703 -c "0 bytes written in 1 fragments"
3704
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003705# Tests for CBC 1/n-1 record splitting
3706
3707run_test "CBC Record splitting: TLS 1.2, no splitting" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01003708 "$P_SRV force_version=tls12" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003709 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
Ronald Cronf3b425b2022-03-17 16:45:09 +01003710 request_size=123" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01003711 0 \
3712 -s "Read from client: 123 bytes read" \
3713 -S "Read from client: 1 bytes read" \
3714 -S "122 bytes read"
3715
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01003716# Tests for Session Tickets
3717
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003718run_test "Session resume using tickets: basic" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003719 "$P_SRV debug_level=3 tickets=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003720 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003721 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01003722 -c "client hello, adding session ticket extension" \
3723 -s "found session ticket extension" \
3724 -s "server hello, adding session ticket extension" \
3725 -c "found session_ticket extension" \
3726 -c "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01003727 -S "session successfully restored from cache" \
3728 -s "session successfully restored from ticket" \
3729 -s "a session has been resumed" \
3730 -c "a session has been resumed"
3731
Glenn Strausse3282452022-02-03 17:23:24 -05003732run_test "Session resume using tickets: manual rotation" \
3733 "$P_SRV debug_level=3 tickets=1 ticket_rotate=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003734 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Glenn Strausse3282452022-02-03 17:23:24 -05003735 0 \
3736 -c "client hello, adding session ticket extension" \
3737 -s "found session ticket extension" \
3738 -s "server hello, adding session ticket extension" \
3739 -c "found session_ticket extension" \
3740 -c "parse new session ticket" \
3741 -S "session successfully restored from cache" \
3742 -s "session successfully restored from ticket" \
3743 -s "a session has been resumed" \
3744 -c "a session has been resumed"
3745
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003746run_test "Session resume using tickets: cache disabled" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003747 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003748 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01003749 0 \
3750 -c "client hello, adding session ticket extension" \
3751 -s "found session ticket extension" \
3752 -s "server hello, adding session ticket extension" \
3753 -c "found session_ticket extension" \
3754 -c "parse new session ticket" \
3755 -S "session successfully restored from cache" \
3756 -s "session successfully restored from ticket" \
3757 -s "a session has been resumed" \
3758 -c "a session has been resumed"
3759
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003760run_test "Session resume using tickets: timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003761 "$P_SRV debug_level=3 tickets=1 cache_max=0 ticket_timeout=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003762 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1 reco_delay=2000" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01003763 0 \
3764 -c "client hello, adding session ticket extension" \
3765 -s "found session ticket extension" \
3766 -s "server hello, adding session ticket extension" \
3767 -c "found session_ticket extension" \
3768 -c "parse new session ticket" \
3769 -S "session successfully restored from cache" \
3770 -S "session successfully restored from ticket" \
3771 -S "a session has been resumed" \
3772 -C "a session has been resumed"
3773
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003774run_test "Session resume using tickets: session copy" \
3775 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003776 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02003777 0 \
3778 -c "client hello, adding session ticket extension" \
3779 -s "found session ticket extension" \
3780 -s "server hello, adding session ticket extension" \
3781 -c "found session_ticket extension" \
3782 -c "parse new session ticket" \
3783 -S "session successfully restored from cache" \
3784 -s "session successfully restored from ticket" \
3785 -s "a session has been resumed" \
3786 -c "a session has been resumed"
3787
Jerry Yuab082902021-12-23 18:02:22 +08003788requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003789run_test "Session resume using tickets: openssl server" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02003790 "$O_SRV -tls1_2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003791 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01003792 0 \
3793 -c "client hello, adding session ticket extension" \
3794 -c "found session_ticket extension" \
3795 -c "parse new session ticket" \
3796 -c "a session has been resumed"
3797
Jerry Yuab082902021-12-23 18:02:22 +08003798requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003799run_test "Session resume using tickets: openssl client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003800 "$P_SRV debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02003801 "( $O_CLI -sess_out $SESSION; \
3802 $O_CLI -sess_in $SESSION; \
3803 rm -f $SESSION )" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01003804 0 \
3805 -s "found session ticket extension" \
3806 -s "server hello, adding session ticket extension" \
3807 -S "session successfully restored from cache" \
3808 -s "session successfully restored from ticket" \
3809 -s "a session has been resumed"
3810
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003811run_test "Session resume using tickets: AES-128-GCM" \
3812 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-128-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003813 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003814 0 \
3815 -c "client hello, adding session ticket extension" \
3816 -s "found session ticket extension" \
3817 -s "server hello, adding session ticket extension" \
3818 -c "found session_ticket extension" \
3819 -c "parse new session ticket" \
3820 -S "session successfully restored from cache" \
3821 -s "session successfully restored from ticket" \
3822 -s "a session has been resumed" \
3823 -c "a session has been resumed"
3824
3825run_test "Session resume using tickets: AES-192-GCM" \
3826 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-192-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003827 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003828 0 \
3829 -c "client hello, adding session ticket extension" \
3830 -s "found session ticket extension" \
3831 -s "server hello, adding session ticket extension" \
3832 -c "found session_ticket extension" \
3833 -c "parse new session ticket" \
3834 -S "session successfully restored from cache" \
3835 -s "session successfully restored from ticket" \
3836 -s "a session has been resumed" \
3837 -c "a session has been resumed"
3838
3839run_test "Session resume using tickets: AES-128-CCM" \
3840 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-128-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003841 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003842 0 \
3843 -c "client hello, adding session ticket extension" \
3844 -s "found session ticket extension" \
3845 -s "server hello, adding session ticket extension" \
3846 -c "found session_ticket extension" \
3847 -c "parse new session ticket" \
3848 -S "session successfully restored from cache" \
3849 -s "session successfully restored from ticket" \
3850 -s "a session has been resumed" \
3851 -c "a session has been resumed"
3852
3853run_test "Session resume using tickets: AES-192-CCM" \
3854 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-192-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003855 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003856 0 \
3857 -c "client hello, adding session ticket extension" \
3858 -s "found session ticket extension" \
3859 -s "server hello, adding session ticket extension" \
3860 -c "found session_ticket extension" \
3861 -c "parse new session ticket" \
3862 -S "session successfully restored from cache" \
3863 -s "session successfully restored from ticket" \
3864 -s "a session has been resumed" \
3865 -c "a session has been resumed"
3866
3867run_test "Session resume using tickets: AES-256-CCM" \
3868 "$P_SRV debug_level=3 tickets=1 ticket_aead=AES-256-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003869 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003870 0 \
3871 -c "client hello, adding session ticket extension" \
3872 -s "found session ticket extension" \
3873 -s "server hello, adding session ticket extension" \
3874 -c "found session_ticket extension" \
3875 -c "parse new session ticket" \
3876 -S "session successfully restored from cache" \
3877 -s "session successfully restored from ticket" \
3878 -s "a session has been resumed" \
3879 -c "a session has been resumed"
3880
3881run_test "Session resume using tickets: CAMELLIA-128-CCM" \
3882 "$P_SRV debug_level=3 tickets=1 ticket_aead=CAMELLIA-128-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003883 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003884 0 \
3885 -c "client hello, adding session ticket extension" \
3886 -s "found session ticket extension" \
3887 -s "server hello, adding session ticket extension" \
3888 -c "found session_ticket extension" \
3889 -c "parse new session ticket" \
3890 -S "session successfully restored from cache" \
3891 -s "session successfully restored from ticket" \
3892 -s "a session has been resumed" \
3893 -c "a session has been resumed"
3894
3895run_test "Session resume using tickets: CAMELLIA-192-CCM" \
3896 "$P_SRV debug_level=3 tickets=1 ticket_aead=CAMELLIA-192-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003897 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003898 0 \
3899 -c "client hello, adding session ticket extension" \
3900 -s "found session ticket extension" \
3901 -s "server hello, adding session ticket extension" \
3902 -c "found session_ticket extension" \
3903 -c "parse new session ticket" \
3904 -S "session successfully restored from cache" \
3905 -s "session successfully restored from ticket" \
3906 -s "a session has been resumed" \
3907 -c "a session has been resumed"
3908
3909run_test "Session resume using tickets: CAMELLIA-256-CCM" \
3910 "$P_SRV debug_level=3 tickets=1 ticket_aead=CAMELLIA-256-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003911 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003912 0 \
3913 -c "client hello, adding session ticket extension" \
3914 -s "found session ticket extension" \
3915 -s "server hello, adding session ticket extension" \
3916 -c "found session_ticket extension" \
3917 -c "parse new session ticket" \
3918 -S "session successfully restored from cache" \
3919 -s "session successfully restored from ticket" \
3920 -s "a session has been resumed" \
3921 -c "a session has been resumed"
3922
3923run_test "Session resume using tickets: ARIA-128-GCM" \
3924 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-128-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003925 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003926 0 \
3927 -c "client hello, adding session ticket extension" \
3928 -s "found session ticket extension" \
3929 -s "server hello, adding session ticket extension" \
3930 -c "found session_ticket extension" \
3931 -c "parse new session ticket" \
3932 -S "session successfully restored from cache" \
3933 -s "session successfully restored from ticket" \
3934 -s "a session has been resumed" \
3935 -c "a session has been resumed"
3936
3937run_test "Session resume using tickets: ARIA-192-GCM" \
3938 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-192-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003939 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003940 0 \
3941 -c "client hello, adding session ticket extension" \
3942 -s "found session ticket extension" \
3943 -s "server hello, adding session ticket extension" \
3944 -c "found session_ticket extension" \
3945 -c "parse new session ticket" \
3946 -S "session successfully restored from cache" \
3947 -s "session successfully restored from ticket" \
3948 -s "a session has been resumed" \
3949 -c "a session has been resumed"
3950
3951run_test "Session resume using tickets: ARIA-256-GCM" \
3952 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-256-GCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003953 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003954 0 \
3955 -c "client hello, adding session ticket extension" \
3956 -s "found session ticket extension" \
3957 -s "server hello, adding session ticket extension" \
3958 -c "found session_ticket extension" \
3959 -c "parse new session ticket" \
3960 -S "session successfully restored from cache" \
3961 -s "session successfully restored from ticket" \
3962 -s "a session has been resumed" \
3963 -c "a session has been resumed"
3964
3965run_test "Session resume using tickets: ARIA-128-CCM" \
3966 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-128-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003967 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003968 0 \
3969 -c "client hello, adding session ticket extension" \
3970 -s "found session ticket extension" \
3971 -s "server hello, adding session ticket extension" \
3972 -c "found session_ticket extension" \
3973 -c "parse new session ticket" \
3974 -S "session successfully restored from cache" \
3975 -s "session successfully restored from ticket" \
3976 -s "a session has been resumed" \
3977 -c "a session has been resumed"
3978
3979run_test "Session resume using tickets: ARIA-192-CCM" \
3980 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-192-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003981 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003982 0 \
3983 -c "client hello, adding session ticket extension" \
3984 -s "found session ticket extension" \
3985 -s "server hello, adding session ticket extension" \
3986 -c "found session_ticket extension" \
3987 -c "parse new session ticket" \
3988 -S "session successfully restored from cache" \
3989 -s "session successfully restored from ticket" \
3990 -s "a session has been resumed" \
3991 -c "a session has been resumed"
3992
3993run_test "Session resume using tickets: ARIA-256-CCM" \
3994 "$P_SRV debug_level=3 tickets=1 ticket_aead=ARIA-256-CCM" \
Ronald Cronf95d1692023-03-14 17:19:42 +01003995 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei6e5aae62022-01-12 16:29:58 +01003996 0 \
3997 -c "client hello, adding session ticket extension" \
3998 -s "found session ticket extension" \
3999 -s "server hello, adding session ticket extension" \
4000 -c "found session_ticket extension" \
4001 -c "parse new session ticket" \
4002 -S "session successfully restored from cache" \
4003 -s "session successfully restored from ticket" \
4004 -s "a session has been resumed" \
4005 -c "a session has been resumed"
4006
Gabor Mezei49c8eb32022-03-10 16:13:17 +01004007run_test "Session resume using tickets: CHACHA20-POLY1305" \
4008 "$P_SRV debug_level=3 tickets=1 ticket_aead=CHACHA20-POLY1305" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004009 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Gabor Mezei49c8eb32022-03-10 16:13:17 +01004010 0 \
4011 -c "client hello, adding session ticket extension" \
4012 -s "found session ticket extension" \
4013 -s "server hello, adding session ticket extension" \
4014 -c "found session_ticket extension" \
4015 -c "parse new session ticket" \
4016 -S "session successfully restored from cache" \
4017 -s "session successfully restored from ticket" \
4018 -s "a session has been resumed" \
4019 -c "a session has been resumed"
4020
Hanno Becker1d739932018-08-21 13:55:22 +01004021# Tests for Session Tickets with DTLS
4022
Jerry Yuab082902021-12-23 18:02:22 +08004023requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker1d739932018-08-21 13:55:22 +01004024run_test "Session resume using tickets, DTLS: basic" \
4025 "$P_SRV debug_level=3 dtls=1 tickets=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004026 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004027 0 \
4028 -c "client hello, adding session ticket extension" \
4029 -s "found session ticket extension" \
4030 -s "server hello, adding session ticket extension" \
4031 -c "found session_ticket extension" \
4032 -c "parse new session ticket" \
4033 -S "session successfully restored from cache" \
4034 -s "session successfully restored from ticket" \
4035 -s "a session has been resumed" \
4036 -c "a session has been resumed"
4037
Jerry Yuab082902021-12-23 18:02:22 +08004038requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker1d739932018-08-21 13:55:22 +01004039run_test "Session resume using tickets, DTLS: cache disabled" \
4040 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004041 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004042 0 \
4043 -c "client hello, adding session ticket extension" \
4044 -s "found session ticket extension" \
4045 -s "server hello, adding session ticket extension" \
4046 -c "found session_ticket extension" \
4047 -c "parse new session ticket" \
4048 -S "session successfully restored from cache" \
4049 -s "session successfully restored from ticket" \
4050 -s "a session has been resumed" \
4051 -c "a session has been resumed"
4052
Jerry Yuab082902021-12-23 18:02:22 +08004053requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker1d739932018-08-21 13:55:22 +01004054run_test "Session resume using tickets, DTLS: timeout" \
4055 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0 ticket_timeout=1" \
Jerry Yua15af372022-12-05 15:55:24 +08004056 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1 reco_delay=2000" \
Hanno Becker1d739932018-08-21 13:55:22 +01004057 0 \
4058 -c "client hello, adding session ticket extension" \
4059 -s "found session ticket extension" \
4060 -s "server hello, adding session ticket extension" \
4061 -c "found session_ticket extension" \
4062 -c "parse new session ticket" \
4063 -S "session successfully restored from cache" \
4064 -S "session successfully restored from ticket" \
4065 -S "a session has been resumed" \
4066 -C "a session has been resumed"
4067
Jerry Yuab082902021-12-23 18:02:22 +08004068requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004069run_test "Session resume using tickets, DTLS: session copy" \
4070 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004071 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 skip_close_notify=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004072 0 \
4073 -c "client hello, adding session ticket extension" \
4074 -s "found session ticket extension" \
4075 -s "server hello, adding session ticket extension" \
4076 -c "found session_ticket extension" \
4077 -c "parse new session ticket" \
4078 -S "session successfully restored from cache" \
4079 -s "session successfully restored from ticket" \
4080 -s "a session has been resumed" \
4081 -c "a session has been resumed"
4082
Jerry Yuab082902021-12-23 18:02:22 +08004083requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004084run_test "Session resume using tickets, DTLS: openssl server" \
4085 "$O_SRV -dtls" \
4086 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1" \
4087 0 \
4088 -c "client hello, adding session ticket extension" \
4089 -c "found session_ticket extension" \
4090 -c "parse new session ticket" \
4091 -c "a session has been resumed"
4092
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004093# For reasons that aren't fully understood, this test randomly fails with high
Paul Elliott09cfa182021-10-13 16:13:44 +01004094# probability with OpenSSL 1.0.2g on the CI, see #5012.
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004095requires_openssl_next
Jerry Yuab082902021-12-23 18:02:22 +08004096requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004097run_test "Session resume using tickets, DTLS: openssl client" \
4098 "$P_SRV dtls=1 debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004099 "( $O_NEXT_CLI -dtls -sess_out $SESSION; \
4100 $O_NEXT_CLI -dtls -sess_in $SESSION; \
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004101 rm -f $SESSION )" \
4102 0 \
4103 -s "found session ticket extension" \
4104 -s "server hello, adding session ticket extension" \
4105 -S "session successfully restored from cache" \
4106 -s "session successfully restored from ticket" \
4107 -s "a session has been resumed"
4108
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004109# Tests for Session Resume based on session-ID and cache
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004110
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004111requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004112run_test "Session resume using cache: tickets enabled on client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004113 "$P_SRV debug_level=3 tickets=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004114 "$P_CLI force_version=tls12 debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01004115 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004116 -c "client hello, adding session ticket extension" \
4117 -s "found session ticket extension" \
4118 -S "server hello, adding session ticket extension" \
4119 -C "found session_ticket extension" \
4120 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01004121 -s "session successfully restored from cache" \
4122 -S "session successfully restored from ticket" \
4123 -s "a session has been resumed" \
4124 -c "a session has been resumed"
4125
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004126requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004127run_test "Session resume using cache: tickets enabled on server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004128 "$P_SRV debug_level=3 tickets=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004129 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01004130 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004131 -C "client hello, adding session ticket extension" \
4132 -S "found session ticket extension" \
4133 -S "server hello, adding session ticket extension" \
4134 -C "found session_ticket extension" \
4135 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01004136 -s "session successfully restored from cache" \
4137 -S "session successfully restored from ticket" \
4138 -s "a session has been resumed" \
4139 -c "a session has been resumed"
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004140
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004141requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004142run_test "Session resume using cache: cache_max=0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004143 "$P_SRV debug_level=3 tickets=0 cache_max=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004144 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01004145 0 \
4146 -S "session successfully restored from cache" \
4147 -S "session successfully restored from ticket" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004148 -S "a session has been resumed" \
4149 -C "a session has been resumed"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01004150
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004151requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004152run_test "Session resume using cache: cache_max=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004153 "$P_SRV debug_level=3 tickets=0 cache_max=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004154 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004155 0 \
4156 -s "session successfully restored from cache" \
4157 -S "session successfully restored from ticket" \
4158 -s "a session has been resumed" \
4159 -c "a session has been resumed"
4160
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004161requires_config_enabled MBEDTLS_SSL_CACHE_C
Pengyu Lv62ed1aa2023-03-07 14:52:47 +08004162run_test "Session resume using cache: cache removed" \
4163 "$P_SRV debug_level=3 tickets=0 cache_remove=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004164 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1" \
Pengyu Lv62ed1aa2023-03-07 14:52:47 +08004165 0 \
4166 -C "client hello, adding session ticket extension" \
4167 -S "found session ticket extension" \
4168 -S "server hello, adding session ticket extension" \
4169 -C "found session_ticket extension" \
4170 -C "parse new session ticket" \
4171 -S "session successfully restored from cache" \
4172 -S "session successfully restored from ticket" \
4173 -S "a session has been resumed" \
4174 -C "a session has been resumed"
4175
4176requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
4177requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard6df31962015-05-04 10:55:47 +02004178run_test "Session resume using cache: timeout > delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004179 "$P_SRV debug_level=3 tickets=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004180 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1 reco_delay=0" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004181 0 \
4182 -s "session successfully restored from cache" \
4183 -S "session successfully restored from ticket" \
4184 -s "a session has been resumed" \
4185 -c "a session has been resumed"
4186
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004187requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004188run_test "Session resume using cache: timeout < delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004189 "$P_SRV debug_level=3 tickets=0 cache_timeout=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004190 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1 reco_delay=2000" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01004191 0 \
4192 -S "session successfully restored from cache" \
4193 -S "session successfully restored from ticket" \
4194 -S "a session has been resumed" \
4195 -C "a session has been resumed"
4196
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004197requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004198run_test "Session resume using cache: no timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004199 "$P_SRV debug_level=3 tickets=0 cache_timeout=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004200 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1 reco_delay=2000" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01004201 0 \
4202 -s "session successfully restored from cache" \
4203 -S "session successfully restored from ticket" \
4204 -s "a session has been resumed" \
4205 -c "a session has been resumed"
4206
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004207requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004208run_test "Session resume using cache: session copy" \
4209 "$P_SRV debug_level=3 tickets=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004210 "$P_CLI force_version=tls12 debug_level=3 tickets=0 reconnect=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004211 0 \
4212 -s "session successfully restored from cache" \
4213 -S "session successfully restored from ticket" \
4214 -s "a session has been resumed" \
4215 -c "a session has been resumed"
4216
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004217requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004218run_test "Session resume using cache: openssl client" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004219 "$P_SRV force_version=tls12 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02004220 "( $O_CLI -sess_out $SESSION; \
4221 $O_CLI -sess_in $SESSION; \
4222 rm -f $SESSION )" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01004223 0 \
4224 -s "found session ticket extension" \
4225 -S "server hello, adding session ticket extension" \
4226 -s "session successfully restored from cache" \
4227 -S "session successfully restored from ticket" \
4228 -s "a session has been resumed"
4229
Jerry Yuab082902021-12-23 18:02:22 +08004230requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004231requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004232run_test "Session resume using cache: openssl server" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02004233 "$O_SRV -tls1_2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004234 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01004235 0 \
4236 -C "found session_ticket extension" \
4237 -C "parse new session ticket" \
4238 -c "a session has been resumed"
4239
Andrzej Kurek7cf87252022-06-14 07:12:33 -04004240# Tests for Session resume and extensions
4241
4242requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
4243requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
4244run_test "Session resume and connection ID" \
4245 "$P_SRV debug_level=3 cid=1 cid_val=dead dtls=1 tickets=0" \
4246 "$P_CLI debug_level=3 cid=1 cid_val=beef dtls=1 tickets=0 reconnect=1" \
4247 0 \
4248 -c "Enable use of CID extension." \
4249 -s "Enable use of CID extension." \
4250 -c "client hello, adding CID extension" \
4251 -s "found CID extension" \
4252 -s "Use of CID extension negotiated" \
4253 -s "server hello, adding CID extension" \
4254 -c "found CID extension" \
4255 -c "Use of CID extension negotiated" \
4256 -s "Copy CIDs into SSL transform" \
4257 -c "Copy CIDs into SSL transform" \
4258 -c "Peer CID (length 2 Bytes): de ad" \
4259 -s "Peer CID (length 2 Bytes): be ef" \
4260 -s "Use of Connection ID has been negotiated" \
4261 -c "Use of Connection ID has been negotiated"
4262
Hanno Becker1d739932018-08-21 13:55:22 +01004263# Tests for Session Resume based on session-ID and cache, DTLS
4264
Jerry Yuab082902021-12-23 18:02:22 +08004265requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004266requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004267run_test "Session resume using cache, DTLS: tickets enabled on client" \
4268 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004269 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004270 0 \
4271 -c "client hello, adding session ticket extension" \
4272 -s "found session ticket extension" \
4273 -S "server hello, adding session ticket extension" \
4274 -C "found session_ticket extension" \
4275 -C "parse new session ticket" \
4276 -s "session successfully restored from cache" \
4277 -S "session successfully restored from ticket" \
4278 -s "a session has been resumed" \
4279 -c "a session has been resumed"
4280
Jerry Yuab082902021-12-23 18:02:22 +08004281requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004282requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004283run_test "Session resume using cache, DTLS: tickets enabled on server" \
4284 "$P_SRV dtls=1 debug_level=3 tickets=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004285 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004286 0 \
4287 -C "client hello, adding session ticket extension" \
4288 -S "found session ticket extension" \
4289 -S "server hello, adding session ticket extension" \
4290 -C "found session_ticket extension" \
4291 -C "parse new session ticket" \
4292 -s "session successfully restored from cache" \
4293 -S "session successfully restored from ticket" \
4294 -s "a session has been resumed" \
4295 -c "a session has been resumed"
4296
Jerry Yuab082902021-12-23 18:02:22 +08004297requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004298requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004299run_test "Session resume using cache, DTLS: cache_max=0" \
4300 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004301 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004302 0 \
4303 -S "session successfully restored from cache" \
4304 -S "session successfully restored from ticket" \
4305 -S "a session has been resumed" \
4306 -C "a session has been resumed"
4307
Jerry Yuab082902021-12-23 18:02:22 +08004308requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004309requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004310run_test "Session resume using cache, DTLS: cache_max=1" \
4311 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=1" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004312 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker1d739932018-08-21 13:55:22 +01004313 0 \
4314 -s "session successfully restored from cache" \
4315 -S "session successfully restored from ticket" \
4316 -s "a session has been resumed" \
4317 -c "a session has been resumed"
4318
Jerry Yuab082902021-12-23 18:02:22 +08004319requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004320requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004321run_test "Session resume using cache, DTLS: timeout > delay" \
4322 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004323 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=0" \
Hanno Becker1d739932018-08-21 13:55:22 +01004324 0 \
4325 -s "session successfully restored from cache" \
4326 -S "session successfully restored from ticket" \
4327 -s "a session has been resumed" \
4328 -c "a session has been resumed"
4329
Jerry Yuab082902021-12-23 18:02:22 +08004330requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004331requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004332run_test "Session resume using cache, DTLS: timeout < delay" \
4333 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=1" \
Jerry Yua15af372022-12-05 15:55:24 +08004334 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=2000" \
Hanno Becker1d739932018-08-21 13:55:22 +01004335 0 \
4336 -S "session successfully restored from cache" \
4337 -S "session successfully restored from ticket" \
4338 -S "a session has been resumed" \
4339 -C "a session has been resumed"
4340
Jerry Yuab082902021-12-23 18:02:22 +08004341requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004342requires_config_enabled MBEDTLS_SSL_CACHE_C
Hanno Becker1d739932018-08-21 13:55:22 +01004343run_test "Session resume using cache, DTLS: no timeout" \
4344 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=0" \
Jerry Yua15af372022-12-05 15:55:24 +08004345 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_delay=2000" \
Hanno Becker1d739932018-08-21 13:55:22 +01004346 0 \
4347 -s "session successfully restored from cache" \
4348 -S "session successfully restored from ticket" \
4349 -s "a session has been resumed" \
4350 -c "a session has been resumed"
4351
Jerry Yuab082902021-12-23 18:02:22 +08004352requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004353requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004354run_test "Session resume using cache, DTLS: session copy" \
4355 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01004356 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 skip_close_notify=1 reco_mode=0" \
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02004357 0 \
4358 -s "session successfully restored from cache" \
4359 -S "session successfully restored from ticket" \
4360 -s "a session has been resumed" \
4361 -c "a session has been resumed"
4362
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004363# For reasons that aren't fully understood, this test randomly fails with high
Paul Elliott09cfa182021-10-13 16:13:44 +01004364# probability with OpenSSL 1.0.2g on the CI, see #5012.
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004365requires_openssl_next
Jerry Yuab082902021-12-23 18:02:22 +08004366requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004367requires_config_enabled MBEDTLS_SSL_CACHE_C
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004368run_test "Session resume using cache, DTLS: openssl client" \
4369 "$P_SRV dtls=1 debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardd60950c2021-10-13 13:12:47 +02004370 "( $O_NEXT_CLI -dtls -sess_out $SESSION; \
4371 $O_NEXT_CLI -dtls -sess_in $SESSION; \
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004372 rm -f $SESSION )" \
4373 0 \
4374 -s "found session ticket extension" \
4375 -S "server hello, adding session ticket extension" \
4376 -s "session successfully restored from cache" \
4377 -S "session successfully restored from ticket" \
4378 -s "a session has been resumed"
4379
Jerry Yuab082902021-12-23 18:02:22 +08004380requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskine2fe796f2022-02-25 19:51:52 +01004381requires_config_enabled MBEDTLS_SSL_CACHE_C
TRodziewicz4ca18aa2021-05-20 14:46:20 +02004382run_test "Session resume using cache, DTLS: openssl server" \
4383 "$O_SRV -dtls" \
4384 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
4385 0 \
4386 -C "found session_ticket extension" \
4387 -C "parse new session ticket" \
4388 -c "a session has been resumed"
4389
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004390# Tests for Max Fragment Length extension
4391
Hanno Becker4aed27e2017-09-18 15:00:34 +01004392requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004393requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc5266962017-09-18 15:01:50 +01004394run_test "Max fragment length: enabled, default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004395 "$P_SRV debug_level=3" \
4396 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004397 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004398 -c "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4399 -c "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
4400 -s "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4401 -s "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004402 -C "client hello, adding max_fragment_length extension" \
4403 -S "found max fragment length extension" \
4404 -S "server hello, max_fragment_length extension" \
4405 -C "found max_fragment_length extension"
4406
Hanno Becker4aed27e2017-09-18 15:00:34 +01004407requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004408requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc5266962017-09-18 15:01:50 +01004409run_test "Max fragment length: enabled, default, larger message" \
4410 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004411 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004412 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004413 -c "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4414 -c "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
4415 -s "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4416 -s "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004417 -C "client hello, adding max_fragment_length extension" \
4418 -S "found max fragment length extension" \
4419 -S "server hello, max_fragment_length extension" \
4420 -C "found max_fragment_length extension" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004421 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
4422 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01004423 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01004424
4425requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004426requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc5266962017-09-18 15:01:50 +01004427run_test "Max fragment length, DTLS: enabled, default, larger message" \
4428 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004429 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004430 1 \
Hanno Becker59d36702021-06-08 05:35:29 +01004431 -c "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4432 -c "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
4433 -s "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4434 -s "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004435 -C "client hello, adding max_fragment_length extension" \
4436 -S "found max fragment length extension" \
4437 -S "server hello, max_fragment_length extension" \
4438 -C "found max_fragment_length extension" \
4439 -c "fragment larger than.*maximum "
4440
Angus Grattonc4dd0732018-04-11 16:28:39 +10004441# Run some tests with MBEDTLS_SSL_MAX_FRAGMENT_LENGTH disabled
4442# (session fragment length will be 16384 regardless of mbedtls
4443# content length configuration.)
4444
Hanno Beckerc5266962017-09-18 15:01:50 +01004445requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004446requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc5266962017-09-18 15:01:50 +01004447run_test "Max fragment length: disabled, larger message" \
4448 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004449 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004450 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004451 -C "Maximum incoming record payload length is 16384" \
4452 -C "Maximum outgoing record payload length is 16384" \
4453 -S "Maximum incoming record payload length is 16384" \
4454 -S "Maximum outgoing record payload length is 16384" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004455 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
4456 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01004457 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01004458
4459requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004460requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Yuto Takano0509fea2021-06-21 19:43:33 +01004461run_test "Max fragment length, DTLS: disabled, larger message" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004462 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10004463 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004464 1 \
Hanno Becker59d36702021-06-08 05:35:29 +01004465 -C "Maximum incoming record payload length is 16384" \
4466 -C "Maximum outgoing record payload length is 16384" \
4467 -S "Maximum incoming record payload length is 16384" \
4468 -S "Maximum outgoing record payload length is 16384" \
Hanno Beckerc5266962017-09-18 15:01:50 +01004469 -c "fragment larger than.*maximum "
4470
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004471requires_max_content_len 4096
Hanno Beckerc5266962017-09-18 15:01:50 +01004472requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004473run_test "Max fragment length: used by client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004474 "$P_SRV debug_level=3" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004475 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004476 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004477 -c "Maximum incoming record payload length is 4096" \
4478 -c "Maximum outgoing record payload length is 4096" \
4479 -s "Maximum incoming record payload length is 4096" \
4480 -s "Maximum outgoing record payload length is 4096" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004481 -c "client hello, adding max_fragment_length extension" \
4482 -s "found max fragment length extension" \
4483 -s "server hello, max_fragment_length extension" \
4484 -c "found max_fragment_length extension"
4485
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004486requires_max_content_len 1024
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004487requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4488run_test "Max fragment length: client 512, server 1024" \
4489 "$P_SRV debug_level=3 max_frag_len=1024" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004490 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004491 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004492 -c "Maximum incoming record payload length is 512" \
4493 -c "Maximum outgoing record payload length is 512" \
4494 -s "Maximum incoming record payload length is 512" \
4495 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004496 -c "client hello, adding max_fragment_length extension" \
4497 -s "found max fragment length extension" \
4498 -s "server hello, max_fragment_length extension" \
4499 -c "found max_fragment_length extension"
4500
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004501requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004502requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4503run_test "Max fragment length: client 512, server 2048" \
4504 "$P_SRV debug_level=3 max_frag_len=2048" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004505 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004506 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004507 -c "Maximum incoming record payload length is 512" \
4508 -c "Maximum outgoing record payload length is 512" \
4509 -s "Maximum incoming record payload length is 512" \
4510 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004511 -c "client hello, adding max_fragment_length extension" \
4512 -s "found max fragment length extension" \
4513 -s "server hello, max_fragment_length extension" \
4514 -c "found max_fragment_length extension"
4515
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004516requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004517requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4518run_test "Max fragment length: client 512, server 4096" \
4519 "$P_SRV debug_level=3 max_frag_len=4096" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004520 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004521 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004522 -c "Maximum incoming record payload length is 512" \
4523 -c "Maximum outgoing record payload length is 512" \
4524 -s "Maximum incoming record payload length is 512" \
4525 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004526 -c "client hello, adding max_fragment_length extension" \
4527 -s "found max fragment length extension" \
4528 -s "server hello, max_fragment_length extension" \
4529 -c "found max_fragment_length extension"
4530
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004531requires_max_content_len 1024
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004532requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4533run_test "Max fragment length: client 1024, server 512" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004534 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004535 "$P_CLI debug_level=3 max_frag_len=1024" \
4536 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004537 -c "Maximum incoming record payload length is 1024" \
4538 -c "Maximum outgoing record payload length is 1024" \
4539 -s "Maximum incoming record payload length is 1024" \
4540 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004541 -c "client hello, adding max_fragment_length extension" \
4542 -s "found max fragment length extension" \
4543 -s "server hello, max_fragment_length extension" \
4544 -c "found max_fragment_length extension"
4545
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004546requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004547requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4548run_test "Max fragment length: client 1024, server 2048" \
4549 "$P_SRV debug_level=3 max_frag_len=2048" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004550 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004551 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004552 -c "Maximum incoming record payload length is 1024" \
4553 -c "Maximum outgoing record payload length is 1024" \
4554 -s "Maximum incoming record payload length is 1024" \
4555 -s "Maximum outgoing record payload length is 1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004556 -c "client hello, adding max_fragment_length extension" \
4557 -s "found max fragment length extension" \
4558 -s "server hello, max_fragment_length extension" \
4559 -c "found max_fragment_length extension"
4560
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004561requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004562requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4563run_test "Max fragment length: client 1024, server 4096" \
4564 "$P_SRV debug_level=3 max_frag_len=4096" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004565 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004566 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004567 -c "Maximum incoming record payload length is 1024" \
4568 -c "Maximum outgoing record payload length is 1024" \
4569 -s "Maximum incoming record payload length is 1024" \
4570 -s "Maximum outgoing record payload length is 1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004571 -c "client hello, adding max_fragment_length extension" \
4572 -s "found max fragment length extension" \
4573 -s "server hello, max_fragment_length extension" \
4574 -c "found max_fragment_length extension"
4575
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004576requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004577requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4578run_test "Max fragment length: client 2048, server 512" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004579 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004580 "$P_CLI debug_level=3 max_frag_len=2048" \
4581 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004582 -c "Maximum incoming record payload length is 2048" \
4583 -c "Maximum outgoing record payload length is 2048" \
4584 -s "Maximum incoming record payload length is 2048" \
4585 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004586 -c "client hello, adding max_fragment_length extension" \
4587 -s "found max fragment length extension" \
4588 -s "server hello, max_fragment_length extension" \
4589 -c "found max_fragment_length extension"
4590
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004591requires_max_content_len 2048
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004592requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4593run_test "Max fragment length: client 2048, server 1024" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004594 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004595 "$P_CLI debug_level=3 max_frag_len=2048" \
4596 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004597 -c "Maximum incoming record payload length is 2048" \
4598 -c "Maximum outgoing record payload length is 2048" \
4599 -s "Maximum incoming record payload length is 2048" \
4600 -s "Maximum outgoing record payload length is 1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004601 -c "client hello, adding max_fragment_length extension" \
4602 -s "found max fragment length extension" \
4603 -s "server hello, max_fragment_length extension" \
4604 -c "found max_fragment_length extension"
4605
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004606requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004607requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4608run_test "Max fragment length: client 2048, server 4096" \
4609 "$P_SRV debug_level=3 max_frag_len=4096" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004610 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=2048" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004611 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004612 -c "Maximum incoming record payload length is 2048" \
4613 -c "Maximum outgoing record payload length is 2048" \
4614 -s "Maximum incoming record payload length is 2048" \
4615 -s "Maximum outgoing record payload length is 2048" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004616 -c "client hello, adding max_fragment_length extension" \
4617 -s "found max fragment length extension" \
4618 -s "server hello, max_fragment_length extension" \
4619 -c "found max_fragment_length extension"
4620
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004621requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004622requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4623run_test "Max fragment length: client 4096, server 512" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004624 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004625 "$P_CLI debug_level=3 max_frag_len=4096" \
4626 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004627 -c "Maximum incoming record payload length is 4096" \
4628 -c "Maximum outgoing record payload length is 4096" \
4629 -s "Maximum incoming record payload length is 4096" \
4630 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004631 -c "client hello, adding max_fragment_length extension" \
4632 -s "found max fragment length extension" \
4633 -s "server hello, max_fragment_length extension" \
4634 -c "found max_fragment_length extension"
4635
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004636requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004637requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4638run_test "Max fragment length: client 4096, server 1024" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004639 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004640 "$P_CLI debug_level=3 max_frag_len=4096" \
4641 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004642 -c "Maximum incoming record payload length is 4096" \
4643 -c "Maximum outgoing record payload length is 4096" \
4644 -s "Maximum incoming record payload length is 4096" \
4645 -s "Maximum outgoing record payload length is 1024" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004646 -c "client hello, adding max_fragment_length extension" \
4647 -s "found max fragment length extension" \
4648 -s "server hello, max_fragment_length extension" \
4649 -c "found max_fragment_length extension"
4650
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004651requires_max_content_len 4096
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004652requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
4653run_test "Max fragment length: client 4096, server 2048" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004654 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=2048" \
Andrzej Kurek90c6e842020-04-03 05:25:29 -04004655 "$P_CLI debug_level=3 max_frag_len=4096" \
4656 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004657 -c "Maximum incoming record payload length is 4096" \
4658 -c "Maximum outgoing record payload length is 4096" \
4659 -s "Maximum incoming record payload length is 4096" \
4660 -s "Maximum outgoing record payload length is 2048" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004661 -c "client hello, adding max_fragment_length extension" \
4662 -s "found max fragment length extension" \
4663 -s "server hello, max_fragment_length extension" \
4664 -c "found max_fragment_length extension"
4665
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004666requires_max_content_len 4096
Hanno Becker4aed27e2017-09-18 15:00:34 +01004667requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004668run_test "Max fragment length: used by server" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004669 "$P_SRV force_version=tls12 debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004670 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004671 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004672 -c "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4673 -c "Maximum outgoing record payload length is $MAX_CONTENT_LEN" \
4674 -s "Maximum incoming record payload length is $MAX_CONTENT_LEN" \
4675 -s "Maximum outgoing record payload length is 4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01004676 -C "client hello, adding max_fragment_length extension" \
4677 -S "found max fragment length extension" \
4678 -S "server hello, max_fragment_length extension" \
4679 -C "found max_fragment_length extension"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004680
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004681requires_max_content_len 4096
Hanno Becker4aed27e2017-09-18 15:00:34 +01004682requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004683requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08004684requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004685run_test "Max fragment length: gnutls server" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02004686 "$G_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004687 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02004688 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004689 -c "Maximum incoming record payload length is 4096" \
4690 -c "Maximum outgoing record payload length is 4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02004691 -c "client hello, adding max_fragment_length extension" \
4692 -c "found max_fragment_length extension"
4693
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004694requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01004695requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004696run_test "Max fragment length: client, message just fits" \
4697 "$P_SRV debug_level=3" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004698 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=2048 request_size=2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004699 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004700 -c "Maximum incoming record payload length is 2048" \
4701 -c "Maximum outgoing record payload length is 2048" \
4702 -s "Maximum incoming record payload length is 2048" \
4703 -s "Maximum outgoing record payload length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004704 -c "client hello, adding max_fragment_length extension" \
4705 -s "found max fragment length extension" \
4706 -s "server hello, max_fragment_length extension" \
4707 -c "found max_fragment_length extension" \
4708 -c "2048 bytes written in 1 fragments" \
4709 -s "2048 bytes read"
4710
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004711requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01004712requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004713run_test "Max fragment length: client, larger message" \
4714 "$P_SRV debug_level=3" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01004715 "$P_CLI force_version=tls12 debug_level=3 max_frag_len=2048 request_size=2345" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004716 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004717 -c "Maximum incoming record payload length is 2048" \
4718 -c "Maximum outgoing record payload length is 2048" \
4719 -s "Maximum incoming record payload length is 2048" \
4720 -s "Maximum outgoing record payload length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004721 -c "client hello, adding max_fragment_length extension" \
4722 -s "found max fragment length extension" \
4723 -s "server hello, max_fragment_length extension" \
4724 -c "found max_fragment_length extension" \
4725 -c "2345 bytes written in 2 fragments" \
4726 -s "2048 bytes read" \
4727 -s "297 bytes read"
4728
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004729requires_max_content_len 2048
Hanno Becker4aed27e2017-09-18 15:00:34 +01004730requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Jerry Yuab082902021-12-23 18:02:22 +08004731requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard23eb74d2015-01-21 14:37:13 +00004732run_test "Max fragment length: DTLS client, larger message" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004733 "$P_SRV debug_level=3 dtls=1" \
4734 "$P_CLI debug_level=3 dtls=1 max_frag_len=2048 request_size=2345" \
4735 1 \
Hanno Becker59d36702021-06-08 05:35:29 +01004736 -c "Maximum incoming record payload length is 2048" \
4737 -c "Maximum outgoing record payload length is 2048" \
4738 -s "Maximum incoming record payload length is 2048" \
4739 -s "Maximum outgoing record payload length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02004740 -c "client hello, adding max_fragment_length extension" \
4741 -s "found max fragment length extension" \
4742 -s "server hello, max_fragment_length extension" \
4743 -c "found max_fragment_length extension" \
4744 -c "fragment larger than.*maximum"
4745
Jan Bruckneraa31b192023-02-06 12:54:29 +01004746# Tests for Record Size Limit extension
4747
Jan Bruckneraa31b192023-02-06 12:54:29 +01004748requires_gnutls_tls1_3
4749requires_gnutls_record_size_limit
Jan Bruckner151f6422023-02-10 12:45:19 +01004750requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
4751run_test "Record Size Limit: TLS 1.3: Server-side parsing, debug output and fatal alert" \
4752 "$P_SRV debug_level=3 force_version=tls13" \
Jan Bruckneraa31b192023-02-06 12:54:29 +01004753 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 -V -d 4" \
Jan Bruckner151f6422023-02-10 12:45:19 +01004754 1 \
4755 -c "Preparing extension (Record Size Limit/28) for 'client hello'" \
4756 -c "Sending extension Record Size Limit/28 (2 bytes)" \
4757 -s "ClientHello: record_size_limit(28) extension received."\
4758 -s "found record_size_limit extension" \
4759 -s "RecordSizeLimit: 16385 Bytes" \
4760 -c "Received alert \[110]: An unsupported extension was sent"
4761
4762requires_gnutls_tls1_3
4763requires_gnutls_record_size_limit
4764requires_gnutls_next_disable_tls13_compat
4765requires_config_enabled MBEDTLS_SSL_RECORD_SIZE_LIMIT
4766run_test "Record Size Limit: TLS 1.3: Client-side parsing, debug output and fatal alert" \
4767 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%DISABLE_TLS13_COMPAT_MODE --disable-client-cert -d 4" \
4768 "$P_CLI debug_level=4 force_version=tls13" \
Jan Bruckneraa31b192023-02-06 12:54:29 +01004769 0 \
Jan Bruckner151f6422023-02-10 12:45:19 +01004770 -s "Preparing extension (Record Size Limit/28) for 'encrypted extensions'"
4771# The P_CLI can not yet send the Record Size Limit extension. Thus, the G_NEXT_SRV does not send
4772# a response in its EncryptedExtensions record.
4773# -s "Parsing extension 'Record Size Limit/28 (2 bytes)" \
4774# -s "Sending extension Record Size Limit/28 (2 bytes)" \
4775# -c "EncryptedExtensions: record_size_limit(28) extension received."\
4776# -c "found record_size_limit extension" \
4777# -c "RecordSizeLimit: 16385 Bytes" \
4778# -s "Received alert \[110]: An unsupported extension was sent"
Jan Bruckneraa31b192023-02-06 12:54:29 +01004779
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004780# Tests for renegotiation
4781
Hanno Becker6a243642017-10-12 15:18:45 +01004782# Renegotiation SCSV always added, regardless of SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004783run_test "Renegotiation: none, for reference" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004784 "$P_SRV debug_level=3 exchanges=2 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004785 "$P_CLI force_version=tls12 debug_level=3 exchanges=2" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004786 0 \
4787 -C "client hello, adding renegotiation extension" \
4788 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4789 -S "found renegotiation extension" \
4790 -s "server hello, secure renegotiation extension" \
4791 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004792 -C "=> renegotiate" \
4793 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004794 -S "write hello request"
4795
Hanno Becker6a243642017-10-12 15:18:45 +01004796requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004797run_test "Renegotiation: client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004798 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004799 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004800 0 \
4801 -c "client hello, adding renegotiation extension" \
4802 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4803 -s "found renegotiation extension" \
4804 -s "server hello, secure renegotiation extension" \
4805 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004806 -c "=> renegotiate" \
4807 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004808 -S "write hello request"
4809
Hanno Becker6a243642017-10-12 15:18:45 +01004810requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004811run_test "Renegotiation: server-initiated" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004812 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004813 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004814 0 \
4815 -c "client hello, adding renegotiation extension" \
4816 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4817 -s "found renegotiation extension" \
4818 -s "server hello, secure renegotiation extension" \
4819 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004820 -c "=> renegotiate" \
4821 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004822 -s "write hello request"
4823
Janos Follathb0f148c2017-10-05 12:29:42 +01004824# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
4825# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +02004826# algorithm stronger than SHA-1 is enabled in mbedtls_config.h
Hanno Becker6a243642017-10-12 15:18:45 +01004827requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01004828run_test "Renegotiation: Signature Algorithms parsing, client-initiated" \
4829 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004830 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Janos Follathb0f148c2017-10-05 12:29:42 +01004831 0 \
4832 -c "client hello, adding renegotiation extension" \
4833 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4834 -s "found renegotiation extension" \
4835 -s "server hello, secure renegotiation extension" \
4836 -c "found renegotiation extension" \
4837 -c "=> renegotiate" \
4838 -s "=> renegotiate" \
4839 -S "write hello request" \
4840 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
4841
4842# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
4843# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
Bence Szépkútibb0cfeb2021-05-28 09:42:25 +02004844# algorithm stronger than SHA-1 is enabled in mbedtls_config.h
Hanno Becker6a243642017-10-12 15:18:45 +01004845requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01004846run_test "Renegotiation: Signature Algorithms parsing, server-initiated" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004847 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Janos Follathb0f148c2017-10-05 12:29:42 +01004848 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
4849 0 \
4850 -c "client hello, adding renegotiation extension" \
4851 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4852 -s "found renegotiation extension" \
4853 -s "server hello, secure renegotiation extension" \
4854 -c "found renegotiation extension" \
4855 -c "=> renegotiate" \
4856 -s "=> renegotiate" \
4857 -s "write hello request" \
4858 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
4859
Hanno Becker6a243642017-10-12 15:18:45 +01004860requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004861run_test "Renegotiation: double" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004862 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004863 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004864 0 \
4865 -c "client hello, adding renegotiation extension" \
4866 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4867 -s "found renegotiation extension" \
4868 -s "server hello, secure renegotiation extension" \
4869 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004870 -c "=> renegotiate" \
4871 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004872 -s "write hello request"
4873
Hanno Becker6a243642017-10-12 15:18:45 +01004874requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Andrzej Kurek8ea68722020-04-03 06:40:47 -04004875requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanob0a1c5b2021-07-02 10:10:49 +01004876requires_max_content_len 2048
Andrzej Kurek8ea68722020-04-03 06:40:47 -04004877run_test "Renegotiation with max fragment length: client 2048, server 512" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004878 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1 max_frag_len=512" \
Andrzej Kurek8ea68722020-04-03 06:40:47 -04004879 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 max_frag_len=2048 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
4880 0 \
Hanno Becker59d36702021-06-08 05:35:29 +01004881 -c "Maximum incoming record payload length is 2048" \
4882 -c "Maximum outgoing record payload length is 2048" \
4883 -s "Maximum incoming record payload length is 2048" \
4884 -s "Maximum outgoing record payload length is 512" \
Andrzej Kurek8ea68722020-04-03 06:40:47 -04004885 -c "client hello, adding max_fragment_length extension" \
4886 -s "found max fragment length extension" \
4887 -s "server hello, max_fragment_length extension" \
4888 -c "found max_fragment_length extension" \
4889 -c "client hello, adding renegotiation extension" \
4890 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4891 -s "found renegotiation extension" \
4892 -s "server hello, secure renegotiation extension" \
4893 -c "found renegotiation extension" \
4894 -c "=> renegotiate" \
4895 -s "=> renegotiate" \
4896 -s "write hello request"
4897
4898requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004899run_test "Renegotiation: client-initiated, server-rejected" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004900 "$P_SRV debug_level=3 exchanges=2 renegotiation=0 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004901 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004902 1 \
4903 -c "client hello, adding renegotiation extension" \
4904 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4905 -S "found renegotiation extension" \
4906 -s "server hello, secure renegotiation extension" \
4907 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004908 -c "=> renegotiate" \
4909 -S "=> renegotiate" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004910 -S "write hello request" \
Manuel Pégourié-Gonnard65919622014-08-19 12:50:30 +02004911 -c "SSL - Unexpected message at ServerHello in renegotiation" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004912 -c "failed"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004913
Hanno Becker6a243642017-10-12 15:18:45 +01004914requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004915run_test "Renegotiation: server-initiated, client-rejected, default" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004916 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004917 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004918 0 \
4919 -C "client hello, adding renegotiation extension" \
4920 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4921 -S "found renegotiation extension" \
4922 -s "server hello, secure renegotiation extension" \
4923 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01004924 -C "=> renegotiate" \
4925 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01004926 -s "write hello request" \
Manuel Pégourié-Gonnarda9964db2014-07-03 19:29:16 +02004927 -S "SSL - An unexpected message was received from our peer" \
4928 -S "failed"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01004929
Hanno Becker6a243642017-10-12 15:18:45 +01004930requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004931run_test "Renegotiation: server-initiated, client-rejected, not enforced" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004932 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004933 renego_delay=-1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004934 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004935 0 \
4936 -C "client hello, adding renegotiation extension" \
4937 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4938 -S "found renegotiation extension" \
4939 -s "server hello, secure renegotiation extension" \
4940 -c "found renegotiation extension" \
4941 -C "=> renegotiate" \
4942 -S "=> renegotiate" \
4943 -s "write hello request" \
4944 -S "SSL - An unexpected message was received from our peer" \
4945 -S "failed"
4946
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004947# delay 2 for 1 alert record + 1 application data record
Hanno Becker6a243642017-10-12 15:18:45 +01004948requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004949run_test "Renegotiation: server-initiated, client-rejected, delay 2" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004950 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004951 renego_delay=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004952 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004953 0 \
4954 -C "client hello, adding renegotiation extension" \
4955 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4956 -S "found renegotiation extension" \
4957 -s "server hello, secure renegotiation extension" \
4958 -c "found renegotiation extension" \
4959 -C "=> renegotiate" \
4960 -S "=> renegotiate" \
4961 -s "write hello request" \
4962 -S "SSL - An unexpected message was received from our peer" \
4963 -S "failed"
4964
Hanno Becker6a243642017-10-12 15:18:45 +01004965requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004966run_test "Renegotiation: server-initiated, client-rejected, delay 0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004967 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004968 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004969 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004970 0 \
4971 -C "client hello, adding renegotiation extension" \
4972 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4973 -S "found renegotiation extension" \
4974 -s "server hello, secure renegotiation extension" \
4975 -c "found renegotiation extension" \
4976 -C "=> renegotiate" \
4977 -S "=> renegotiate" \
4978 -s "write hello request" \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02004979 -s "SSL - An unexpected message was received from our peer"
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004980
Hanno Becker6a243642017-10-12 15:18:45 +01004981requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004982run_test "Renegotiation: server-initiated, client-accepted, delay 0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01004983 "$P_SRV force_version=tls12 debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01004984 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004985 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02004986 0 \
4987 -c "client hello, adding renegotiation extension" \
4988 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
4989 -s "found renegotiation extension" \
4990 -s "server hello, secure renegotiation extension" \
4991 -c "found renegotiation extension" \
4992 -c "=> renegotiate" \
4993 -s "=> renegotiate" \
4994 -s "write hello request" \
4995 -S "SSL - An unexpected message was received from our peer" \
4996 -S "failed"
4997
Hanno Becker6a243642017-10-12 15:18:45 +01004998requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01004999run_test "Renegotiation: periodic, just below period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005000 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005001 "$P_CLI force_version=tls12 debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005002 0 \
5003 -C "client hello, adding renegotiation extension" \
5004 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5005 -S "found renegotiation extension" \
5006 -s "server hello, secure renegotiation extension" \
5007 -c "found renegotiation extension" \
5008 -S "record counter limit reached: renegotiate" \
5009 -C "=> renegotiate" \
5010 -S "=> renegotiate" \
5011 -S "write hello request" \
5012 -S "SSL - An unexpected message was received from our peer" \
5013 -S "failed"
5014
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01005015# one extra exchange to be able to complete renego
Hanno Becker6a243642017-10-12 15:18:45 +01005016requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005017run_test "Renegotiation: periodic, just above period" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005018 "$P_SRV force_version=tls12 debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01005019 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005020 0 \
5021 -c "client hello, adding renegotiation extension" \
5022 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5023 -s "found renegotiation extension" \
5024 -s "server hello, secure renegotiation extension" \
5025 -c "found renegotiation extension" \
5026 -s "record counter limit reached: renegotiate" \
5027 -c "=> renegotiate" \
5028 -s "=> renegotiate" \
5029 -s "write hello request" \
5030 -S "SSL - An unexpected message was received from our peer" \
5031 -S "failed"
5032
Hanno Becker6a243642017-10-12 15:18:45 +01005033requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005034run_test "Renegotiation: periodic, two times period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005035 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005036 "$P_CLI force_version=tls12 debug_level=3 exchanges=7 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005037 0 \
5038 -c "client hello, adding renegotiation extension" \
5039 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5040 -s "found renegotiation extension" \
5041 -s "server hello, secure renegotiation extension" \
5042 -c "found renegotiation extension" \
5043 -s "record counter limit reached: renegotiate" \
5044 -c "=> renegotiate" \
5045 -s "=> renegotiate" \
5046 -s "write hello request" \
5047 -S "SSL - An unexpected message was received from our peer" \
5048 -S "failed"
5049
Hanno Becker6a243642017-10-12 15:18:45 +01005050requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005051run_test "Renegotiation: periodic, above period, disabled" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005052 "$P_SRV force_version=tls12 debug_level=3 exchanges=9 renegotiation=0 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01005053 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
5054 0 \
5055 -C "client hello, adding renegotiation extension" \
5056 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5057 -S "found renegotiation extension" \
5058 -s "server hello, secure renegotiation extension" \
5059 -c "found renegotiation extension" \
5060 -S "record counter limit reached: renegotiate" \
5061 -C "=> renegotiate" \
5062 -S "=> renegotiate" \
5063 -S "write hello request" \
5064 -S "SSL - An unexpected message was received from our peer" \
5065 -S "failed"
5066
Hanno Becker6a243642017-10-12 15:18:45 +01005067requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005068run_test "Renegotiation: nbio, client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01005069 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 auth_mode=optional" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005070 "$P_CLI force_version=tls12 debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02005071 0 \
5072 -c "client hello, adding renegotiation extension" \
5073 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5074 -s "found renegotiation extension" \
5075 -s "server hello, secure renegotiation extension" \
5076 -c "found renegotiation extension" \
5077 -c "=> renegotiate" \
5078 -s "=> renegotiate" \
5079 -S "write hello request"
5080
Hanno Becker6a243642017-10-12 15:18:45 +01005081requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005082run_test "Renegotiation: nbio, server-initiated" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005083 "$P_SRV force_version=tls12 debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005084 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02005085 0 \
5086 -c "client hello, adding renegotiation extension" \
5087 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5088 -s "found renegotiation extension" \
5089 -s "server hello, secure renegotiation extension" \
5090 -c "found renegotiation extension" \
5091 -c "=> renegotiate" \
5092 -s "=> renegotiate" \
5093 -s "write hello request"
5094
Hanno Becker6a243642017-10-12 15:18:45 +01005095requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005096requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005097run_test "Renegotiation: openssl server, client-initiated" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005098 "$O_SRV -www -tls1_2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005099 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02005100 0 \
5101 -c "client hello, adding renegotiation extension" \
5102 -c "found renegotiation extension" \
5103 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005104 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02005105 -C "error" \
5106 -c "HTTP/1.0 200 [Oo][Kk]"
5107
Paul Bakker539d9722015-02-08 16:18:35 +01005108requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005109requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005110requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005111run_test "Renegotiation: gnutls server strict, client-initiated" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005112 "$G_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005113 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02005114 0 \
5115 -c "client hello, adding renegotiation extension" \
5116 -c "found renegotiation extension" \
5117 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005118 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02005119 -C "error" \
5120 -c "HTTP/1.0 200 [Oo][Kk]"
5121
Paul Bakker539d9722015-02-08 16:18:35 +01005122requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005123requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005124requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005125run_test "Renegotiation: gnutls server unsafe, client-initiated default" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005126 "$G_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005127 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
5128 1 \
5129 -c "client hello, adding renegotiation extension" \
5130 -C "found renegotiation extension" \
5131 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005132 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005133 -c "error" \
5134 -C "HTTP/1.0 200 [Oo][Kk]"
5135
Paul Bakker539d9722015-02-08 16:18:35 +01005136requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005137requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005138requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005139run_test "Renegotiation: gnutls server unsafe, client-inititated no legacy" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005140 "$G_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005141 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
5142 allow_legacy=0" \
5143 1 \
5144 -c "client hello, adding renegotiation extension" \
5145 -C "found renegotiation extension" \
5146 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005147 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005148 -c "error" \
5149 -C "HTTP/1.0 200 [Oo][Kk]"
5150
Paul Bakker539d9722015-02-08 16:18:35 +01005151requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005152requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005153requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005154run_test "Renegotiation: gnutls server unsafe, client-inititated legacy" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005155 "$G_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005156 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
5157 allow_legacy=1" \
5158 0 \
5159 -c "client hello, adding renegotiation extension" \
5160 -C "found renegotiation extension" \
5161 -c "=> renegotiate" \
5162 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005163 -C "error" \
5164 -c "HTTP/1.0 200 [Oo][Kk]"
5165
Hanno Becker6a243642017-10-12 15:18:45 +01005166requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005167requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard30d16eb2014-08-19 17:43:50 +02005168run_test "Renegotiation: DTLS, client-initiated" \
5169 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1" \
5170 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
5171 0 \
5172 -c "client hello, adding renegotiation extension" \
5173 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5174 -s "found renegotiation extension" \
5175 -s "server hello, secure renegotiation extension" \
5176 -c "found renegotiation extension" \
5177 -c "=> renegotiate" \
5178 -s "=> renegotiate" \
5179 -S "write hello request"
5180
Hanno Becker6a243642017-10-12 15:18:45 +01005181requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005182requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02005183run_test "Renegotiation: DTLS, server-initiated" \
5184 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnarddf9a0a82014-10-02 14:17:18 +02005185 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 \
5186 read_timeout=1000 max_resend=2" \
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02005187 0 \
5188 -c "client hello, adding renegotiation extension" \
5189 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5190 -s "found renegotiation extension" \
5191 -s "server hello, secure renegotiation extension" \
5192 -c "found renegotiation extension" \
5193 -c "=> renegotiate" \
5194 -s "=> renegotiate" \
5195 -s "write hello request"
5196
Hanno Becker6a243642017-10-12 15:18:45 +01005197requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005198requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres AG692ad842017-01-19 16:30:57 +00005199run_test "Renegotiation: DTLS, renego_period overflow" \
5200 "$P_SRV debug_level=3 dtls=1 exchanges=4 renegotiation=1 renego_period=18446462598732840962 auth_mode=optional" \
5201 "$P_CLI debug_level=3 dtls=1 exchanges=4 renegotiation=1" \
5202 0 \
5203 -c "client hello, adding renegotiation extension" \
5204 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
5205 -s "found renegotiation extension" \
5206 -s "server hello, secure renegotiation extension" \
5207 -s "record counter limit reached: renegotiate" \
5208 -c "=> renegotiate" \
5209 -s "=> renegotiate" \
Hanno Becker6a243642017-10-12 15:18:45 +01005210 -s "write hello request"
Andres AG692ad842017-01-19 16:30:57 +00005211
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +00005212requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01005213requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08005214requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02005215run_test "Renegotiation: DTLS, gnutls server, client-initiated" \
5216 "$G_SRV -u --mtu 4096" \
5217 "$P_CLI debug_level=3 dtls=1 exchanges=1 renegotiation=1 renegotiate=1" \
5218 0 \
5219 -c "client hello, adding renegotiation extension" \
5220 -c "found renegotiation extension" \
5221 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005222 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02005223 -C "error" \
5224 -s "Extra-header:"
5225
Shaun Case8b0ecbc2021-12-20 21:14:10 -08005226# Test for the "secure renegotiation" extension only (no actual renegotiation)
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005227
Paul Bakker539d9722015-02-08 16:18:35 +01005228requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005229requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005230run_test "Renego ext: gnutls server strict, client default" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005231 "$G_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005232 "$P_CLI debug_level=3" \
5233 0 \
5234 -c "found renegotiation extension" \
5235 -C "error" \
5236 -c "HTTP/1.0 200 [Oo][Kk]"
5237
Paul Bakker539d9722015-02-08 16:18:35 +01005238requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005239requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005240run_test "Renego ext: gnutls server unsafe, client default" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005241 "$G_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005242 "$P_CLI debug_level=3" \
5243 0 \
5244 -C "found renegotiation extension" \
5245 -C "error" \
5246 -c "HTTP/1.0 200 [Oo][Kk]"
5247
Paul Bakker539d9722015-02-08 16:18:35 +01005248requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005249requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005250run_test "Renego ext: gnutls server unsafe, client break legacy" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005251 "$G_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2:%DISABLE_SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005252 "$P_CLI debug_level=3 allow_legacy=-1" \
5253 1 \
5254 -C "found renegotiation extension" \
5255 -c "error" \
5256 -C "HTTP/1.0 200 [Oo][Kk]"
5257
Paul Bakker539d9722015-02-08 16:18:35 +01005258requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005259requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005260run_test "Renego ext: gnutls client strict, server default" \
5261 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005262 "$G_CLI --priority=NORMAL:%SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005263 0 \
5264 -s "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
5265 -s "server hello, secure renegotiation extension"
5266
Paul Bakker539d9722015-02-08 16:18:35 +01005267requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005268requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005269run_test "Renego ext: gnutls client unsafe, server default" \
5270 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005271 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005272 0 \
5273 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
5274 -S "server hello, secure renegotiation extension"
5275
Paul Bakker539d9722015-02-08 16:18:35 +01005276requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005277requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005278run_test "Renego ext: gnutls client unsafe, server break legacy" \
5279 "$P_SRV debug_level=3 allow_legacy=-1" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005280 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01005281 1 \
5282 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
5283 -S "server hello, secure renegotiation extension"
5284
Janos Follath0b242342016-02-17 10:11:21 +00005285# Tests for silently dropping trailing extra bytes in .der certificates
5286
5287requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005288requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005289run_test "DER format: no trailing bytes" \
5290 "$P_SRV crt_file=data_files/server5-der0.crt \
5291 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005292 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005293 0 \
5294 -c "Handshake was completed" \
5295
5296requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005297requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005298run_test "DER format: with a trailing zero byte" \
5299 "$P_SRV crt_file=data_files/server5-der1a.crt \
5300 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005301 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005302 0 \
5303 -c "Handshake was completed" \
5304
5305requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005306requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005307run_test "DER format: with a trailing random byte" \
5308 "$P_SRV crt_file=data_files/server5-der1b.crt \
5309 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005310 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005311 0 \
5312 -c "Handshake was completed" \
5313
5314requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005315requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005316run_test "DER format: with 2 trailing random bytes" \
5317 "$P_SRV crt_file=data_files/server5-der2.crt \
5318 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005319 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005320 0 \
5321 -c "Handshake was completed" \
5322
5323requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005324requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005325run_test "DER format: with 4 trailing random bytes" \
5326 "$P_SRV crt_file=data_files/server5-der4.crt \
5327 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005328 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005329 0 \
5330 -c "Handshake was completed" \
5331
5332requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005333requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005334run_test "DER format: with 8 trailing random bytes" \
5335 "$P_SRV crt_file=data_files/server5-der8.crt \
5336 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005337 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005338 0 \
5339 -c "Handshake was completed" \
5340
5341requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08005342requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Janos Follath0b242342016-02-17 10:11:21 +00005343run_test "DER format: with 9 trailing random bytes" \
5344 "$P_SRV crt_file=data_files/server5-der9.crt \
5345 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005346 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00005347 0 \
5348 -c "Handshake was completed" \
5349
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03005350# Tests for auth_mode, there are duplicated tests using ca callback for authentication
5351# When updating these tests, modify the matching authentication tests accordingly
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005352
Ronald Cronbc5adf42022-10-04 11:06:14 +02005353requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005354run_test "Authentication: server badcert, client required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005355 "$P_SRV crt_file=data_files/server5-badsign.crt \
5356 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005357 "$P_CLI debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005358 1 \
5359 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01005360 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005361 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005362 -c "X509 - Certificate verification failed"
5363
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005364run_test "Authentication: server badcert, client optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005365 "$P_SRV crt_file=data_files/server5-badsign.crt \
5366 key_file=data_files/server5.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005367 "$P_CLI force_version=tls12 debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005368 0 \
5369 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01005370 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005371 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005372 -C "X509 - Certificate verification failed"
5373
Ronald Cron5de538c2022-10-20 14:47:56 +02005374requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Hanno Beckere6706e62017-05-15 16:05:15 +01005375run_test "Authentication: server goodcert, client optional, no trusted CA" \
5376 "$P_SRV" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005377 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional ca_file=none ca_path=none" \
Hanno Beckere6706e62017-05-15 16:05:15 +01005378 0 \
5379 -c "x509_verify_cert() returned" \
5380 -c "! The certificate is not correctly signed by the trusted CA" \
5381 -c "! Certificate verification flags"\
5382 -C "! mbedtls_ssl_handshake returned" \
5383 -C "X509 - Certificate verification failed" \
5384 -C "SSL - No CA Chain is set, but required to operate"
5385
Ronald Cronbc5adf42022-10-04 11:06:14 +02005386requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Hanno Beckere6706e62017-05-15 16:05:15 +01005387run_test "Authentication: server goodcert, client required, no trusted CA" \
5388 "$P_SRV" \
5389 "$P_CLI debug_level=3 auth_mode=required ca_file=none ca_path=none" \
5390 1 \
5391 -c "x509_verify_cert() returned" \
5392 -c "! The certificate is not correctly signed by the trusted CA" \
5393 -c "! Certificate verification flags"\
5394 -c "! mbedtls_ssl_handshake returned" \
5395 -c "SSL - No CA Chain is set, but required to operate"
5396
5397# The purpose of the next two tests is to test the client's behaviour when receiving a server
5398# certificate with an unsupported elliptic curve. This should usually not happen because
5399# the client informs the server about the supported curves - it does, though, in the
5400# corner case of a static ECDH suite, because the server doesn't check the curve on that
5401# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
5402# different means to have the server ignoring the client's supported curve list.
5403
Hanno Beckere6706e62017-05-15 16:05:15 +01005404run_test "Authentication: server ECDH p256v1, client required, p256v1 unsupported" \
5405 "$P_SRV debug_level=1 key_file=data_files/server5.key \
5406 crt_file=data_files/server5.ku-ka.crt" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02005407 "$P_CLI force_version=tls12 debug_level=3 auth_mode=required groups=secp521r1" \
Hanno Beckere6706e62017-05-15 16:05:15 +01005408 1 \
5409 -c "bad certificate (EC key curve)"\
5410 -c "! Certificate verification flags"\
5411 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
5412
Hanno Beckere6706e62017-05-15 16:05:15 +01005413run_test "Authentication: server ECDH p256v1, client optional, p256v1 unsupported" \
5414 "$P_SRV debug_level=1 key_file=data_files/server5.key \
5415 crt_file=data_files/server5.ku-ka.crt" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02005416 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional groups=secp521r1" \
Hanno Beckere6706e62017-05-15 16:05:15 +01005417 1 \
5418 -c "bad certificate (EC key curve)"\
5419 -c "! Certificate verification flags"\
5420 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
5421
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005422run_test "Authentication: server badcert, client none" \
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01005423 "$P_SRV crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005424 key_file=data_files/server5.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005425 "$P_CLI force_version=tls12 debug_level=1 auth_mode=none" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005426 0 \
5427 -C "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01005428 -C "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005429 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005430 -C "X509 - Certificate verification failed"
5431
Ronald Cron5de538c2022-10-20 14:47:56 +02005432requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Simon Butcher99000142016-10-13 17:21:01 +01005433run_test "Authentication: client SHA256, server required" \
5434 "$P_SRV auth_mode=required" \
5435 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
5436 key_file=data_files/server6.key \
5437 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
5438 0 \
Andrzej Kurekec71b092022-11-15 10:21:50 -05005439 -c "Supported Signature Algorithm found: 04 " \
5440 -c "Supported Signature Algorithm found: 05 "
Simon Butcher99000142016-10-13 17:21:01 +01005441
Ronald Cron5de538c2022-10-20 14:47:56 +02005442requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Simon Butcher99000142016-10-13 17:21:01 +01005443run_test "Authentication: client SHA384, server required" \
5444 "$P_SRV auth_mode=required" \
5445 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
5446 key_file=data_files/server6.key \
5447 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
5448 0 \
Andrzej Kurekec71b092022-11-15 10:21:50 -05005449 -c "Supported Signature Algorithm found: 04 " \
5450 -c "Supported Signature Algorithm found: 05 "
Simon Butcher99000142016-10-13 17:21:01 +01005451
Ronald Cronbc5adf42022-10-04 11:06:14 +02005452requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Gilles Peskinefd8332e2017-05-03 16:25:07 +02005453run_test "Authentication: client has no cert, server required (TLS)" \
5454 "$P_SRV debug_level=3 auth_mode=required" \
5455 "$P_CLI debug_level=3 crt_file=none \
5456 key_file=data_files/server5.key" \
5457 1 \
5458 -S "skip write certificate request" \
5459 -C "skip parse certificate request" \
5460 -c "got a certificate request" \
5461 -c "= write certificate$" \
5462 -C "skip write certificate$" \
5463 -S "x509_verify_cert() returned" \
Ronald Cron19385882022-06-15 16:26:13 +02005464 -s "peer has no certificate" \
Gilles Peskinefd8332e2017-05-03 16:25:07 +02005465 -s "! mbedtls_ssl_handshake returned" \
Gilles Peskinefd8332e2017-05-03 16:25:07 +02005466 -s "No client certification received from the client, but required by the authentication mode"
5467
Ronald Cronbc5adf42022-10-04 11:06:14 +02005468requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005469run_test "Authentication: client badcert, server required" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005470 "$P_SRV debug_level=3 auth_mode=required" \
5471 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005472 key_file=data_files/server5.key" \
5473 1 \
5474 -S "skip write certificate request" \
5475 -C "skip parse certificate request" \
5476 -c "got a certificate request" \
5477 -C "skip write certificate" \
5478 -C "skip write certificate verify" \
5479 -S "skip parse certificate verify" \
5480 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005481 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005482 -s "! mbedtls_ssl_handshake returned" \
Gilles Peskine1cc8e342017-05-03 16:28:34 +02005483 -s "send alert level=2 message=48" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005484 -s "X509 - Certificate verification failed"
Gilles Peskine1cc8e342017-05-03 16:28:34 +02005485# We don't check that the client receives the alert because it might
5486# detect that its write end of the connection is closed and abort
5487# before reading the alert message.
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005488
Ronald Cronbc5adf42022-10-04 11:06:14 +02005489requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Gilles Peskinee1cc60e2022-01-07 23:10:56 +01005490run_test "Authentication: client cert self-signed and trusted, server required" \
5491 "$P_SRV debug_level=3 auth_mode=required ca_file=data_files/server5-selfsigned.crt" \
5492 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
5493 key_file=data_files/server5.key" \
5494 0 \
5495 -S "skip write certificate request" \
5496 -C "skip parse certificate request" \
5497 -c "got a certificate request" \
5498 -C "skip write certificate" \
5499 -C "skip write certificate verify" \
5500 -S "skip parse certificate verify" \
5501 -S "x509_verify_cert() returned" \
5502 -S "! The certificate is not correctly signed" \
5503 -S "X509 - Certificate verification failed"
5504
Ronald Cronbc5adf42022-10-04 11:06:14 +02005505requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Janos Follath89baba22017-04-10 14:34:35 +01005506run_test "Authentication: client cert not trusted, server required" \
5507 "$P_SRV debug_level=3 auth_mode=required" \
5508 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
5509 key_file=data_files/server5.key" \
5510 1 \
5511 -S "skip write certificate request" \
5512 -C "skip parse certificate request" \
5513 -c "got a certificate request" \
5514 -C "skip write certificate" \
5515 -C "skip write certificate verify" \
5516 -S "skip parse certificate verify" \
5517 -s "x509_verify_cert() returned" \
5518 -s "! The certificate is not correctly signed by the trusted CA" \
5519 -s "! mbedtls_ssl_handshake returned" \
Janos Follath89baba22017-04-10 14:34:35 +01005520 -s "X509 - Certificate verification failed"
5521
Ronald Cronbc5adf42022-10-04 11:06:14 +02005522requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005523run_test "Authentication: client badcert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005524 "$P_SRV debug_level=3 auth_mode=optional" \
5525 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005526 key_file=data_files/server5.key" \
5527 0 \
5528 -S "skip write certificate request" \
5529 -C "skip parse certificate request" \
5530 -c "got a certificate request" \
5531 -C "skip write certificate" \
5532 -C "skip write certificate verify" \
5533 -S "skip parse certificate verify" \
5534 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01005535 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005536 -S "! mbedtls_ssl_handshake returned" \
5537 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005538 -S "X509 - Certificate verification failed"
5539
Ronald Cronbc5adf42022-10-04 11:06:14 +02005540requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005541run_test "Authentication: client badcert, server none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005542 "$P_SRV debug_level=3 auth_mode=none" \
5543 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005544 key_file=data_files/server5.key" \
5545 0 \
5546 -s "skip write certificate request" \
5547 -C "skip parse certificate request" \
5548 -c "got no certificate request" \
5549 -c "skip write certificate" \
5550 -c "skip write certificate verify" \
5551 -s "skip parse certificate verify" \
5552 -S "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01005553 -S "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005554 -S "! mbedtls_ssl_handshake returned" \
5555 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01005556 -S "X509 - Certificate verification failed"
5557
Ronald Cronbc5adf42022-10-04 11:06:14 +02005558requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005559run_test "Authentication: client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005560 "$P_SRV debug_level=3 auth_mode=optional" \
5561 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01005562 0 \
5563 -S "skip write certificate request" \
5564 -C "skip parse certificate request" \
5565 -c "got a certificate request" \
5566 -C "skip write certificate$" \
5567 -C "got no certificate to send" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01005568 -c "skip write certificate verify" \
5569 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01005570 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005571 -S "! mbedtls_ssl_handshake returned" \
5572 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01005573 -S "X509 - Certificate verification failed"
5574
Przemek Stekielc31a7982023-06-27 10:53:33 +02005575requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron92dca392023-03-10 16:11:15 +01005576requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005577run_test "Authentication: openssl client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005578 "$P_SRV debug_level=3 auth_mode=optional" \
Ronald Cron92dca392023-03-10 16:11:15 +01005579 "$O_NEXT_CLI_NO_CERT -no_middlebox" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01005580 0 \
5581 -S "skip write certificate request" \
5582 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01005583 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005584 -S "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01005585 -S "X509 - Certificate verification failed"
5586
Jerry Yuab082902021-12-23 18:02:22 +08005587requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005588run_test "Authentication: client no cert, openssl server optional" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005589 "$O_SRV -verify 10 -tls1_2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02005590 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01005591 0 \
5592 -C "skip parse certificate request" \
5593 -c "got a certificate request" \
5594 -C "skip write certificate$" \
5595 -c "skip write certificate verify" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005596 -C "! mbedtls_ssl_handshake returned"
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01005597
Jerry Yuab082902021-12-23 18:02:22 +08005598requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskinefd8332e2017-05-03 16:25:07 +02005599run_test "Authentication: client no cert, openssl server required" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02005600 "$O_SRV -Verify 10 -tls1_2" \
Gilles Peskinefd8332e2017-05-03 16:25:07 +02005601 "$P_CLI debug_level=3 crt_file=none key_file=none" \
5602 1 \
5603 -C "skip parse certificate request" \
5604 -c "got a certificate request" \
5605 -C "skip write certificate$" \
5606 -c "skip write certificate verify" \
5607 -c "! mbedtls_ssl_handshake returned"
5608
Yuto Takano02485822021-07-02 13:05:15 +01005609# This script assumes that MBEDTLS_X509_MAX_INTERMEDIATE_CA has its default
5610# value, defined here as MAX_IM_CA. Some test cases will be skipped if the
5611# library is configured with a different value.
Hanno Beckera6bca9f2017-07-26 13:35:11 +01005612
Simon Butcherbcfa6f42017-07-28 15:59:35 +01005613MAX_IM_CA='8'
Hanno Beckera6bca9f2017-07-26 13:35:11 +01005614
Yuto Takano02485822021-07-02 13:05:15 +01005615# The tests for the max_int tests can pass with any number higher than MAX_IM_CA
5616# because only a chain of MAX_IM_CA length is tested. Equally, the max_int+1
5617# tests can pass with any number less than MAX_IM_CA. However, stricter preconditions
5618# are in place so that the semantics are consistent with the test description.
Yuto Takano6f657432021-07-02 13:10:41 +01005619requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10005620requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005621run_test "Authentication: server max_int chain, client default" \
5622 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
5623 key_file=data_files/dir-maxpath/09.key" \
5624 "$P_CLI server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
5625 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01005626 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005627
Yuto Takano6f657432021-07-02 13:10:41 +01005628requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10005629requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005630run_test "Authentication: server max_int+1 chain, client default" \
5631 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
5632 key_file=data_files/dir-maxpath/10.key" \
5633 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
5634 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01005635 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005636
Yuto Takano6f657432021-07-02 13:10:41 +01005637requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10005638requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005639run_test "Authentication: server max_int+1 chain, client optional" \
5640 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
5641 key_file=data_files/dir-maxpath/10.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005642 "$P_CLI force_version=tls12 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005643 auth_mode=optional" \
5644 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01005645 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005646
Yuto Takano6f657432021-07-02 13:10:41 +01005647requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10005648requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005649run_test "Authentication: server max_int+1 chain, client none" \
5650 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
5651 key_file=data_files/dir-maxpath/10.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005652 "$P_CLI force_version=tls12 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005653 auth_mode=none" \
5654 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01005655 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005656
Yuto Takano6f657432021-07-02 13:10:41 +01005657requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10005658requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005659run_test "Authentication: client max_int+1 chain, server default" \
5660 "$P_SRV ca_file=data_files/dir-maxpath/00.crt" \
5661 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
5662 key_file=data_files/dir-maxpath/10.key" \
5663 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01005664 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005665
Yuto Takano6f657432021-07-02 13:10:41 +01005666requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10005667requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005668run_test "Authentication: client max_int+1 chain, server optional" \
5669 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
5670 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
5671 key_file=data_files/dir-maxpath/10.key" \
5672 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01005673 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005674
Yuto Takano6f657432021-07-02 13:10:41 +01005675requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10005676requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005677run_test "Authentication: client max_int+1 chain, server required" \
5678 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
5679 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
5680 key_file=data_files/dir-maxpath/10.key" \
5681 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01005682 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005683
Yuto Takano6f657432021-07-02 13:10:41 +01005684requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Angus Grattonc4dd0732018-04-11 16:28:39 +10005685requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005686run_test "Authentication: client max_int chain, server required" \
5687 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
5688 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
5689 key_file=data_files/dir-maxpath/09.key" \
5690 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01005691 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02005692
Janos Follath89baba22017-04-10 14:34:35 +01005693# Tests for CA list in CertificateRequest messages
5694
Ronald Cron5de538c2022-10-20 14:47:56 +02005695requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Janos Follath89baba22017-04-10 14:34:35 +01005696run_test "Authentication: send CA list in CertificateRequest (default)" \
5697 "$P_SRV debug_level=3 auth_mode=required" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005698 "$P_CLI force_version=tls12 crt_file=data_files/server6.crt \
Janos Follath89baba22017-04-10 14:34:35 +01005699 key_file=data_files/server6.key" \
5700 0 \
5701 -s "requested DN"
5702
Ronald Cron5de538c2022-10-20 14:47:56 +02005703requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Janos Follath89baba22017-04-10 14:34:35 +01005704run_test "Authentication: do not send CA list in CertificateRequest" \
5705 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005706 "$P_CLI force_version=tls12 crt_file=data_files/server6.crt \
Janos Follath89baba22017-04-10 14:34:35 +01005707 key_file=data_files/server6.key" \
5708 0 \
5709 -S "requested DN"
5710
5711run_test "Authentication: send CA list in CertificateRequest, client self signed" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005712 "$P_SRV force_version=tls12 debug_level=3 auth_mode=required cert_req_ca_list=0" \
Janos Follath89baba22017-04-10 14:34:35 +01005713 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
5714 key_file=data_files/server5.key" \
5715 1 \
5716 -S "requested DN" \
5717 -s "x509_verify_cert() returned" \
5718 -s "! The certificate is not correctly signed by the trusted CA" \
5719 -s "! mbedtls_ssl_handshake returned" \
5720 -c "! mbedtls_ssl_handshake returned" \
5721 -s "X509 - Certificate verification failed"
5722
Ronald Cron5de538c2022-10-20 14:47:56 +02005723requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Glenn Straussbd10c4e2022-06-25 03:15:48 -04005724run_test "Authentication: send alt conf DN hints in CertificateRequest" \
5725 "$P_SRV debug_level=3 auth_mode=optional cert_req_ca_list=2 \
5726 crt_file2=data_files/server1.crt \
5727 key_file2=data_files/server1.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005728 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional \
Glenn Straussbd10c4e2022-06-25 03:15:48 -04005729 crt_file=data_files/server6.crt \
5730 key_file=data_files/server6.key" \
5731 0 \
5732 -c "DN hint: C=NL, O=PolarSSL, CN=PolarSSL Server 1"
5733
Ronald Cron5de538c2022-10-20 14:47:56 +02005734requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Glenn Straussbd10c4e2022-06-25 03:15:48 -04005735run_test "Authentication: send alt conf DN hints in CertificateRequest (2)" \
5736 "$P_SRV debug_level=3 auth_mode=optional cert_req_ca_list=2 \
5737 crt_file2=data_files/server2.crt \
5738 key_file2=data_files/server2.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005739 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional \
Glenn Straussbd10c4e2022-06-25 03:15:48 -04005740 crt_file=data_files/server6.crt \
5741 key_file=data_files/server6.key" \
5742 0 \
5743 -c "DN hint: C=NL, O=PolarSSL, CN=localhost"
5744
Ronald Cron5de538c2022-10-20 14:47:56 +02005745requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Glenn Straussbd10c4e2022-06-25 03:15:48 -04005746run_test "Authentication: send alt hs DN hints in CertificateRequest" \
5747 "$P_SRV debug_level=3 auth_mode=optional cert_req_ca_list=3 \
5748 crt_file2=data_files/server1.crt \
5749 key_file2=data_files/server1.key" \
Ronald Cronf95d1692023-03-14 17:19:42 +01005750 "$P_CLI force_version=tls12 debug_level=3 auth_mode=optional \
Glenn Straussbd10c4e2022-06-25 03:15:48 -04005751 crt_file=data_files/server6.crt \
5752 key_file=data_files/server6.key" \
5753 0 \
5754 -c "DN hint: C=NL, O=PolarSSL, CN=PolarSSL Server 1"
5755
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03005756# Tests for auth_mode, using CA callback, these are duplicated from the authentication tests
5757# When updating these tests, modify the matching authentication tests accordingly
Hanno Becker746aaf32019-03-28 15:25:23 +00005758
5759requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5760run_test "Authentication, CA callback: server badcert, client required" \
5761 "$P_SRV crt_file=data_files/server5-badsign.crt \
5762 key_file=data_files/server5.key" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005763 "$P_CLI force_version=tls12 ca_callback=1 debug_level=3 auth_mode=required" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005764 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005765 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005766 -c "x509_verify_cert() returned" \
5767 -c "! The certificate is not correctly signed by the trusted CA" \
5768 -c "! mbedtls_ssl_handshake returned" \
5769 -c "X509 - Certificate verification failed"
5770
5771requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5772run_test "Authentication, CA callback: server badcert, client optional" \
5773 "$P_SRV crt_file=data_files/server5-badsign.crt \
5774 key_file=data_files/server5.key" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005775 "$P_CLI force_version=tls12 ca_callback=1 debug_level=3 auth_mode=optional" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005776 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005777 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005778 -c "x509_verify_cert() returned" \
5779 -c "! The certificate is not correctly signed by the trusted CA" \
5780 -C "! mbedtls_ssl_handshake returned" \
5781 -C "X509 - Certificate verification failed"
5782
5783# The purpose of the next two tests is to test the client's behaviour when receiving a server
5784# certificate with an unsupported elliptic curve. This should usually not happen because
5785# the client informs the server about the supported curves - it does, though, in the
5786# corner case of a static ECDH suite, because the server doesn't check the curve on that
5787# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
5788# different means to have the server ignoring the client's supported curve list.
5789
Hanno Becker746aaf32019-03-28 15:25:23 +00005790requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5791run_test "Authentication, CA callback: server ECDH p256v1, client required, p256v1 unsupported" \
5792 "$P_SRV debug_level=1 key_file=data_files/server5.key \
5793 crt_file=data_files/server5.ku-ka.crt" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02005794 "$P_CLI force_version=tls12 ca_callback=1 debug_level=3 auth_mode=required groups=secp521r1" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005795 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005796 -c "use CA callback for X.509 CRT verification" \
5797 -c "bad certificate (EC key curve)" \
5798 -c "! Certificate verification flags" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005799 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
5800
Hanno Becker746aaf32019-03-28 15:25:23 +00005801requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5802run_test "Authentication, CA callback: server ECDH p256v1, client optional, p256v1 unsupported" \
Valerio Settia9aafd42023-04-11 12:30:45 +02005803 "$P_SRV debug_level=1 key_file=data_files/server5.key \
Hanno Becker746aaf32019-03-28 15:25:23 +00005804 crt_file=data_files/server5.ku-ka.crt" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02005805 "$P_CLI force_version=tls12 ca_callback=1 debug_level=3 auth_mode=optional groups=secp521r1" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005806 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005807 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005808 -c "bad certificate (EC key curve)"\
5809 -c "! Certificate verification flags"\
5810 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
5811
5812requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
Ronald Cron5de538c2022-10-20 14:47:56 +02005813requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Hanno Becker746aaf32019-03-28 15:25:23 +00005814run_test "Authentication, CA callback: client SHA256, server required" \
5815 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
5816 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
5817 key_file=data_files/server6.key \
5818 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
5819 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005820 -s "use CA callback for X.509 CRT verification" \
Andrzej Kurekec71b092022-11-15 10:21:50 -05005821 -c "Supported Signature Algorithm found: 04 " \
5822 -c "Supported Signature Algorithm found: 05 "
Hanno Becker746aaf32019-03-28 15:25:23 +00005823
5824requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
Ronald Cron5de538c2022-10-20 14:47:56 +02005825requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Hanno Becker746aaf32019-03-28 15:25:23 +00005826run_test "Authentication, CA callback: client SHA384, server required" \
5827 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
5828 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
5829 key_file=data_files/server6.key \
5830 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
5831 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005832 -s "use CA callback for X.509 CRT verification" \
Andrzej Kurekec71b092022-11-15 10:21:50 -05005833 -c "Supported Signature Algorithm found: 04 " \
5834 -c "Supported Signature Algorithm found: 05 "
Hanno Becker746aaf32019-03-28 15:25:23 +00005835
5836requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5837run_test "Authentication, CA callback: client badcert, server required" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005838 "$P_SRV force_version=tls12 ca_callback=1 debug_level=3 auth_mode=required" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005839 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
5840 key_file=data_files/server5.key" \
5841 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005842 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005843 -S "skip write certificate request" \
5844 -C "skip parse certificate request" \
5845 -c "got a certificate request" \
5846 -C "skip write certificate" \
5847 -C "skip write certificate verify" \
5848 -S "skip parse certificate verify" \
5849 -s "x509_verify_cert() returned" \
5850 -s "! The certificate is not correctly signed by the trusted CA" \
5851 -s "! mbedtls_ssl_handshake returned" \
5852 -s "send alert level=2 message=48" \
5853 -c "! mbedtls_ssl_handshake returned" \
5854 -s "X509 - Certificate verification failed"
5855# We don't check that the client receives the alert because it might
5856# detect that its write end of the connection is closed and abort
5857# before reading the alert message.
5858
5859requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5860run_test "Authentication, CA callback: client cert not trusted, server required" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005861 "$P_SRV force_version=tls12 ca_callback=1 debug_level=3 auth_mode=required" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005862 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
5863 key_file=data_files/server5.key" \
5864 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005865 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005866 -S "skip write certificate request" \
5867 -C "skip parse certificate request" \
5868 -c "got a certificate request" \
5869 -C "skip write certificate" \
5870 -C "skip write certificate verify" \
5871 -S "skip parse certificate verify" \
5872 -s "x509_verify_cert() returned" \
5873 -s "! The certificate is not correctly signed by the trusted CA" \
5874 -s "! mbedtls_ssl_handshake returned" \
5875 -c "! mbedtls_ssl_handshake returned" \
5876 -s "X509 - Certificate verification failed"
5877
5878requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5879run_test "Authentication, CA callback: client badcert, server optional" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005880 "$P_SRV force_version=tls12 ca_callback=1 debug_level=3 auth_mode=optional" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005881 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
5882 key_file=data_files/server5.key" \
5883 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005884 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005885 -S "skip write certificate request" \
5886 -C "skip parse certificate request" \
5887 -c "got a certificate request" \
5888 -C "skip write certificate" \
5889 -C "skip write certificate verify" \
5890 -S "skip parse certificate verify" \
5891 -s "x509_verify_cert() returned" \
5892 -s "! The certificate is not correctly signed by the trusted CA" \
5893 -S "! mbedtls_ssl_handshake returned" \
5894 -C "! mbedtls_ssl_handshake returned" \
5895 -S "X509 - Certificate verification failed"
5896
Yuto Takano6f657432021-07-02 13:10:41 +01005897requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005898requires_full_size_output_buffer
5899requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5900run_test "Authentication, CA callback: server max_int chain, client default" \
5901 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
5902 key_file=data_files/dir-maxpath/09.key" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005903 "$P_CLI force_version=tls12 ca_callback=1 debug_level=3 server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005904 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005905 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005906 -C "X509 - A fatal error occurred"
5907
Yuto Takano6f657432021-07-02 13:10:41 +01005908requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005909requires_full_size_output_buffer
5910requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5911run_test "Authentication, CA callback: server max_int+1 chain, client default" \
5912 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
5913 key_file=data_files/dir-maxpath/10.key" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005914 "$P_CLI force_version=tls12 debug_level=3 ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005915 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005916 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005917 -c "X509 - A fatal error occurred"
5918
Yuto Takano6f657432021-07-02 13:10:41 +01005919requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005920requires_full_size_output_buffer
5921requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5922run_test "Authentication, CA callback: server max_int+1 chain, client optional" \
5923 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
5924 key_file=data_files/dir-maxpath/10.key" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005925 "$P_CLI force_version=tls12 ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
Hanno Becker746aaf32019-03-28 15:25:23 +00005926 debug_level=3 auth_mode=optional" \
5927 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005928 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005929 -c "X509 - A fatal error occurred"
5930
Yuto Takano6f657432021-07-02 13:10:41 +01005931requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005932requires_full_size_output_buffer
5933requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5934run_test "Authentication, CA callback: client max_int+1 chain, server optional" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005935 "$P_SRV force_version=tls12 ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005936 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
5937 key_file=data_files/dir-maxpath/10.key" \
5938 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005939 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005940 -s "X509 - A fatal error occurred"
5941
Yuto Takano6f657432021-07-02 13:10:41 +01005942requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005943requires_full_size_output_buffer
5944requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5945run_test "Authentication, CA callback: client max_int+1 chain, server required" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005946 "$P_SRV force_version=tls12 ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005947 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
5948 key_file=data_files/dir-maxpath/10.key" \
5949 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005950 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005951 -s "X509 - A fatal error occurred"
5952
Yuto Takano6f657432021-07-02 13:10:41 +01005953requires_config_value_equals "MBEDTLS_X509_MAX_INTERMEDIATE_CA" $MAX_IM_CA
Hanno Becker746aaf32019-03-28 15:25:23 +00005954requires_full_size_output_buffer
5955requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
5956run_test "Authentication, CA callback: client max_int chain, server required" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01005957 "$P_SRV force_version=tls12 ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005958 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
5959 key_file=data_files/dir-maxpath/09.key" \
5960 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01005961 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00005962 -S "X509 - A fatal error occurred"
5963
Shaun Case8b0ecbc2021-12-20 21:14:10 -08005964# Tests for certificate selection based on SHA version
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01005965
Hanno Beckerc5722d12020-10-09 11:10:42 +01005966requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01005967run_test "Certificate hash: client TLS 1.2 -> SHA-2" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01005968 "$P_SRV force_version=tls12 crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01005969 key_file=data_files/server5.key \
5970 crt_file2=data_files/server5-sha1.crt \
5971 key_file2=data_files/server5.key" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01005972 "$P_CLI" \
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01005973 0 \
5974 -c "signed using.*ECDSA with SHA256" \
5975 -C "signed using.*ECDSA with SHA1"
5976
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005977# tests for SNI
5978
Hanno Beckerc5722d12020-10-09 11:10:42 +01005979requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Ronald Cronbc5adf42022-10-04 11:06:14 +02005980requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005981run_test "SNI: no SNI callback" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005982 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005983 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005984 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005985 0 \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005986 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
5987 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005988
Hanno Beckerc5722d12020-10-09 11:10:42 +01005989requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Ronald Cronbc5adf42022-10-04 11:06:14 +02005990requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005991run_test "SNI: matching cert 1" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005992 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01005993 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02005994 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02005995 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02005996 0 \
5997 -s "parse ServerName extension" \
5998 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
5999 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006000
Hanno Beckerc5722d12020-10-09 11:10:42 +01006001requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Ronald Cronbc5adf42022-10-04 11:06:14 +02006002requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006003run_test "SNI: matching cert 2" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006004 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006005 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02006006 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006007 "$P_CLI server_name=polarssl.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006008 0 \
6009 -s "parse ServerName extension" \
6010 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
6011 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006012
Hanno Beckerc5722d12020-10-09 11:10:42 +01006013requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Ronald Cronbc5adf42022-10-04 11:06:14 +02006014requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006015run_test "SNI: no matching cert" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006016 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006017 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02006018 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006019 "$P_CLI server_name=nonesuch.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006020 1 \
6021 -s "parse ServerName extension" \
6022 -s "ssl_sni_wrapper() returned" \
6023 -s "mbedtls_ssl_handshake returned" \
6024 -c "mbedtls_ssl_handshake returned" \
6025 -c "SSL - A fatal alert message was received from our peer"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01006026
Ronald Cronbc5adf42022-10-04 11:06:14 +02006027requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006028run_test "SNI: client auth no override: optional" \
6029 "$P_SRV debug_level=3 auth_mode=optional \
6030 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6031 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
6032 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006033 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006034 -S "skip write certificate request" \
6035 -C "skip parse certificate request" \
6036 -c "got a certificate request" \
6037 -C "skip write certificate" \
6038 -C "skip write certificate verify" \
6039 -S "skip parse certificate verify"
6040
Ronald Cronbc5adf42022-10-04 11:06:14 +02006041requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006042run_test "SNI: client auth override: none -> optional" \
6043 "$P_SRV debug_level=3 auth_mode=none \
6044 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6045 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
6046 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006047 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006048 -S "skip write certificate request" \
6049 -C "skip parse certificate request" \
6050 -c "got a certificate request" \
6051 -C "skip write certificate" \
6052 -C "skip write certificate verify" \
6053 -S "skip parse certificate verify"
6054
Ronald Cronbc5adf42022-10-04 11:06:14 +02006055requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006056run_test "SNI: client auth override: optional -> none" \
6057 "$P_SRV debug_level=3 auth_mode=optional \
6058 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6059 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
6060 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006061 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006062 -s "skip write certificate request" \
6063 -C "skip parse certificate request" \
6064 -c "got no certificate request" \
XiaokangQian23c5be62022-06-07 02:04:34 +00006065 -c "skip write certificate"
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02006066
Ronald Cronbc5adf42022-10-04 11:06:14 +02006067requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006068run_test "SNI: CA no override" \
6069 "$P_SRV debug_level=3 auth_mode=optional \
6070 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6071 ca_file=data_files/test-ca.crt \
6072 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
6073 "$P_CLI debug_level=3 server_name=localhost \
6074 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
6075 1 \
6076 -S "skip write certificate request" \
6077 -C "skip parse certificate request" \
6078 -c "got a certificate request" \
6079 -C "skip write certificate" \
6080 -C "skip write certificate verify" \
6081 -S "skip parse certificate verify" \
6082 -s "x509_verify_cert() returned" \
6083 -s "! The certificate is not correctly signed by the trusted CA" \
6084 -S "The certificate has been revoked (is on a CRL)"
6085
Ronald Cronbc5adf42022-10-04 11:06:14 +02006086requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006087run_test "SNI: CA override" \
6088 "$P_SRV debug_level=3 auth_mode=optional \
6089 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6090 ca_file=data_files/test-ca.crt \
6091 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
6092 "$P_CLI debug_level=3 server_name=localhost \
6093 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
6094 0 \
6095 -S "skip write certificate request" \
6096 -C "skip parse certificate request" \
6097 -c "got a certificate request" \
6098 -C "skip write certificate" \
6099 -C "skip write certificate verify" \
6100 -S "skip parse certificate verify" \
6101 -S "x509_verify_cert() returned" \
6102 -S "! The certificate is not correctly signed by the trusted CA" \
6103 -S "The certificate has been revoked (is on a CRL)"
6104
Ronald Cronbc5adf42022-10-04 11:06:14 +02006105requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02006106run_test "SNI: CA override with CRL" \
6107 "$P_SRV debug_level=3 auth_mode=optional \
6108 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6109 ca_file=data_files/test-ca.crt \
6110 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
6111 "$P_CLI debug_level=3 server_name=localhost \
6112 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
6113 1 \
6114 -S "skip write certificate request" \
6115 -C "skip parse certificate request" \
6116 -c "got a certificate request" \
6117 -C "skip write certificate" \
6118 -C "skip write certificate verify" \
6119 -S "skip parse certificate verify" \
6120 -s "x509_verify_cert() returned" \
6121 -S "! The certificate is not correctly signed by the trusted CA" \
6122 -s "The certificate has been revoked (is on a CRL)"
6123
Andres AG1a834452016-12-07 10:01:30 +00006124# Tests for SNI and DTLS
6125
Hanno Beckerc5722d12020-10-09 11:10:42 +01006126requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Jerry Yuab082902021-12-23 18:02:22 +08006127requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006128run_test "SNI: DTLS, no SNI callback" \
6129 "$P_SRV debug_level=3 dtls=1 \
6130 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
6131 "$P_CLI server_name=localhost dtls=1" \
6132 0 \
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006133 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
6134 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
6135
Hanno Beckerc5722d12020-10-09 11:10:42 +01006136requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Jerry Yuab082902021-12-23 18:02:22 +08006137requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01006138run_test "SNI: DTLS, matching cert 1" \
Andres AG1a834452016-12-07 10:01:30 +00006139 "$P_SRV debug_level=3 dtls=1 \
6140 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6141 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
6142 "$P_CLI server_name=localhost dtls=1" \
6143 0 \
6144 -s "parse ServerName extension" \
6145 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
6146 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
6147
Hanno Beckerc5722d12020-10-09 11:10:42 +01006148requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Jerry Yuab082902021-12-23 18:02:22 +08006149requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006150run_test "SNI: DTLS, matching cert 2" \
6151 "$P_SRV debug_level=3 dtls=1 \
6152 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6153 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
6154 "$P_CLI server_name=polarssl.example dtls=1" \
6155 0 \
6156 -s "parse ServerName extension" \
6157 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
6158 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
6159
Jerry Yuab082902021-12-23 18:02:22 +08006160requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006161run_test "SNI: DTLS, no matching cert" \
6162 "$P_SRV debug_level=3 dtls=1 \
6163 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6164 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
6165 "$P_CLI server_name=nonesuch.example dtls=1" \
6166 1 \
6167 -s "parse ServerName extension" \
6168 -s "ssl_sni_wrapper() returned" \
6169 -s "mbedtls_ssl_handshake returned" \
6170 -c "mbedtls_ssl_handshake returned" \
6171 -c "SSL - A fatal alert message was received from our peer"
6172
Jerry Yuab082902021-12-23 18:02:22 +08006173requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006174run_test "SNI: DTLS, client auth no override: optional" \
6175 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
6176 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6177 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
6178 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
6179 0 \
6180 -S "skip write certificate request" \
6181 -C "skip parse certificate request" \
6182 -c "got a certificate request" \
6183 -C "skip write certificate" \
6184 -C "skip write certificate verify" \
6185 -S "skip parse certificate verify"
6186
Jerry Yuab082902021-12-23 18:02:22 +08006187requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006188run_test "SNI: DTLS, client auth override: none -> optional" \
6189 "$P_SRV debug_level=3 auth_mode=none dtls=1 \
6190 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6191 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
6192 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
6193 0 \
6194 -S "skip write certificate request" \
6195 -C "skip parse certificate request" \
6196 -c "got a certificate request" \
6197 -C "skip write certificate" \
6198 -C "skip write certificate verify" \
6199 -S "skip parse certificate verify"
6200
Jerry Yuab082902021-12-23 18:02:22 +08006201requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006202run_test "SNI: DTLS, client auth override: optional -> none" \
6203 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
6204 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6205 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
6206 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
6207 0 \
6208 -s "skip write certificate request" \
6209 -C "skip parse certificate request" \
6210 -c "got no certificate request" \
6211 -c "skip write certificate" \
6212 -c "skip write certificate verify" \
6213 -s "skip parse certificate verify"
6214
Jerry Yuab082902021-12-23 18:02:22 +08006215requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01006216run_test "SNI: DTLS, CA no override" \
6217 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
6218 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6219 ca_file=data_files/test-ca.crt \
6220 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
6221 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
6222 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
6223 1 \
6224 -S "skip write certificate request" \
6225 -C "skip parse certificate request" \
6226 -c "got a certificate request" \
6227 -C "skip write certificate" \
6228 -C "skip write certificate verify" \
6229 -S "skip parse certificate verify" \
6230 -s "x509_verify_cert() returned" \
6231 -s "! The certificate is not correctly signed by the trusted CA" \
6232 -S "The certificate has been revoked (is on a CRL)"
6233
Jerry Yuab082902021-12-23 18:02:22 +08006234requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01006235run_test "SNI: DTLS, CA override" \
Andres AG1a834452016-12-07 10:01:30 +00006236 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
6237 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6238 ca_file=data_files/test-ca.crt \
6239 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
6240 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
6241 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
6242 0 \
6243 -S "skip write certificate request" \
6244 -C "skip parse certificate request" \
6245 -c "got a certificate request" \
6246 -C "skip write certificate" \
6247 -C "skip write certificate verify" \
6248 -S "skip parse certificate verify" \
6249 -S "x509_verify_cert() returned" \
6250 -S "! The certificate is not correctly signed by the trusted CA" \
6251 -S "The certificate has been revoked (is on a CRL)"
6252
Jerry Yuab082902021-12-23 18:02:22 +08006253requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01006254run_test "SNI: DTLS, CA override with CRL" \
Andres AG1a834452016-12-07 10:01:30 +00006255 "$P_SRV debug_level=3 auth_mode=optional \
6256 crt_file=data_files/server5.crt key_file=data_files/server5.key dtls=1 \
6257 ca_file=data_files/test-ca.crt \
6258 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
6259 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
6260 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
6261 1 \
6262 -S "skip write certificate request" \
6263 -C "skip parse certificate request" \
6264 -c "got a certificate request" \
6265 -C "skip write certificate" \
6266 -C "skip write certificate verify" \
6267 -S "skip parse certificate verify" \
6268 -s "x509_verify_cert() returned" \
6269 -S "! The certificate is not correctly signed by the trusted CA" \
6270 -s "The certificate has been revoked (is on a CRL)"
6271
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006272# Tests for non-blocking I/O: exercise a variety of handshake flows
6273
Ronald Cronbc5adf42022-10-04 11:06:14 +02006274requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006275run_test "Non-blocking I/O: basic handshake" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006276 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
6277 "$P_CLI nbio=2 tickets=0" \
6278 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006279 -S "mbedtls_ssl_handshake returned" \
6280 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006281 -c "Read from server: .* bytes read"
6282
Ronald Cronbc5adf42022-10-04 11:06:14 +02006283requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006284run_test "Non-blocking I/O: client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006285 "$P_SRV nbio=2 tickets=0 auth_mode=required" \
6286 "$P_CLI nbio=2 tickets=0" \
6287 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006288 -S "mbedtls_ssl_handshake returned" \
6289 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006290 -c "Read from server: .* bytes read"
6291
Ronald Cron92dca392023-03-10 16:11:15 +01006292requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006293run_test "Non-blocking I/O: ticket" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006294 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
6295 "$P_CLI nbio=2 tickets=1" \
6296 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006297 -S "mbedtls_ssl_handshake returned" \
6298 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006299 -c "Read from server: .* bytes read"
6300
Ronald Cron92dca392023-03-10 16:11:15 +01006301requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006302run_test "Non-blocking I/O: ticket + client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006303 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
6304 "$P_CLI nbio=2 tickets=1" \
6305 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006306 -S "mbedtls_ssl_handshake returned" \
6307 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006308 -c "Read from server: .* bytes read"
6309
Ronald Cron5de538c2022-10-20 14:47:56 +02006310requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron92dca392023-03-10 16:11:15 +01006311run_test "Non-blocking I/O: TLS 1.2 + ticket + client auth + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006312 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
Ronald Cron92dca392023-03-10 16:11:15 +01006313 "$P_CLI force_version=tls12 nbio=2 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006314 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006315 -S "mbedtls_ssl_handshake returned" \
6316 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006317 -c "Read from server: .* bytes read"
6318
Ronald Cron92dca392023-03-10 16:11:15 +01006319requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6320requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6321requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
6322run_test "Non-blocking I/O: TLS 1.3 + ticket + client auth + resume" \
6323 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01006324 "$P_CLI nbio=2 tickets=1 reconnect=1" \
Ronald Cron92dca392023-03-10 16:11:15 +01006325 0 \
6326 -S "mbedtls_ssl_handshake returned" \
6327 -C "mbedtls_ssl_handshake returned" \
6328 -c "Read from server: .* bytes read"
6329
Ronald Cron5de538c2022-10-20 14:47:56 +02006330requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron92dca392023-03-10 16:11:15 +01006331run_test "Non-blocking I/O: TLS 1.2 + ticket + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006332 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
Ronald Cron92dca392023-03-10 16:11:15 +01006333 "$P_CLI force_version=tls12 nbio=2 tickets=1 reconnect=1" \
6334 0 \
6335 -S "mbedtls_ssl_handshake returned" \
6336 -C "mbedtls_ssl_handshake returned" \
6337 -c "Read from server: .* bytes read"
6338
6339requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6340requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6341requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
6342run_test "Non-blocking I/O: TLS 1.3 + ticket + resume" \
6343 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01006344 "$P_CLI nbio=2 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006345 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006346 -S "mbedtls_ssl_handshake returned" \
6347 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006348 -c "Read from server: .* bytes read"
6349
Ronald Cron5de538c2022-10-20 14:47:56 +02006350requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006351run_test "Non-blocking I/O: session-id resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006352 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006353 "$P_CLI force_version=tls12 nbio=2 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006354 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006355 -S "mbedtls_ssl_handshake returned" \
6356 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01006357 -c "Read from server: .* bytes read"
6358
Hanno Becker00076712017-11-15 16:39:08 +00006359# Tests for event-driven I/O: exercise a variety of handshake flows
6360
Ronald Cronbc5adf42022-10-04 11:06:14 +02006361requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Hanno Becker00076712017-11-15 16:39:08 +00006362run_test "Event-driven I/O: basic handshake" \
6363 "$P_SRV event=1 tickets=0 auth_mode=none" \
6364 "$P_CLI event=1 tickets=0" \
6365 0 \
6366 -S "mbedtls_ssl_handshake returned" \
6367 -C "mbedtls_ssl_handshake returned" \
6368 -c "Read from server: .* bytes read"
6369
Ronald Cronbc5adf42022-10-04 11:06:14 +02006370requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Hanno Becker00076712017-11-15 16:39:08 +00006371run_test "Event-driven I/O: client auth" \
6372 "$P_SRV event=1 tickets=0 auth_mode=required" \
6373 "$P_CLI event=1 tickets=0" \
6374 0 \
6375 -S "mbedtls_ssl_handshake returned" \
6376 -C "mbedtls_ssl_handshake returned" \
6377 -c "Read from server: .* bytes read"
6378
Ronald Cron92dca392023-03-10 16:11:15 +01006379requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Hanno Becker00076712017-11-15 16:39:08 +00006380run_test "Event-driven I/O: ticket" \
6381 "$P_SRV event=1 tickets=1 auth_mode=none" \
6382 "$P_CLI event=1 tickets=1" \
6383 0 \
6384 -S "mbedtls_ssl_handshake returned" \
6385 -C "mbedtls_ssl_handshake returned" \
6386 -c "Read from server: .* bytes read"
6387
Ronald Cron92dca392023-03-10 16:11:15 +01006388requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Hanno Becker00076712017-11-15 16:39:08 +00006389run_test "Event-driven I/O: ticket + client auth" \
6390 "$P_SRV event=1 tickets=1 auth_mode=required" \
6391 "$P_CLI event=1 tickets=1" \
6392 0 \
6393 -S "mbedtls_ssl_handshake returned" \
6394 -C "mbedtls_ssl_handshake returned" \
6395 -c "Read from server: .* bytes read"
6396
Ronald Cron5de538c2022-10-20 14:47:56 +02006397requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron92dca392023-03-10 16:11:15 +01006398run_test "Event-driven I/O: TLS 1.2 + ticket + client auth + resume" \
Hanno Becker00076712017-11-15 16:39:08 +00006399 "$P_SRV event=1 tickets=1 auth_mode=required" \
Ronald Cron92dca392023-03-10 16:11:15 +01006400 "$P_CLI force_version=tls12 event=1 tickets=1 reconnect=1" \
Hanno Becker00076712017-11-15 16:39:08 +00006401 0 \
6402 -S "mbedtls_ssl_handshake returned" \
6403 -C "mbedtls_ssl_handshake returned" \
6404 -c "Read from server: .* bytes read"
6405
Ronald Cron92dca392023-03-10 16:11:15 +01006406requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6407requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6408requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
6409run_test "Event-driven I/O: TLS 1.3 + ticket + client auth + resume" \
6410 "$P_SRV event=1 tickets=1 auth_mode=required" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01006411 "$P_CLI event=1 tickets=1 reconnect=1" \
Ronald Cron92dca392023-03-10 16:11:15 +01006412 0 \
6413 -S "mbedtls_ssl_handshake returned" \
6414 -C "mbedtls_ssl_handshake returned" \
6415 -c "Read from server: .* bytes read"
6416
Ronald Cron5de538c2022-10-20 14:47:56 +02006417requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Ronald Cron92dca392023-03-10 16:11:15 +01006418run_test "Event-driven I/O: TLS 1.2 + ticket + resume" \
Hanno Becker00076712017-11-15 16:39:08 +00006419 "$P_SRV event=1 tickets=1 auth_mode=none" \
Ronald Cron92dca392023-03-10 16:11:15 +01006420 "$P_CLI force_version=tls12 event=1 tickets=1 reconnect=1" \
6421 0 \
6422 -S "mbedtls_ssl_handshake returned" \
6423 -C "mbedtls_ssl_handshake returned" \
6424 -c "Read from server: .* bytes read"
6425
6426requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
6427requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6428requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
6429run_test "Event-driven I/O: TLS 1.3 + ticket + resume" \
6430 "$P_SRV event=1 tickets=1 auth_mode=none" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01006431 "$P_CLI event=1 tickets=1 reconnect=1" \
Hanno Becker00076712017-11-15 16:39:08 +00006432 0 \
6433 -S "mbedtls_ssl_handshake returned" \
6434 -C "mbedtls_ssl_handshake returned" \
6435 -c "Read from server: .* bytes read"
6436
Ronald Cron5de538c2022-10-20 14:47:56 +02006437requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
Hanno Becker00076712017-11-15 16:39:08 +00006438run_test "Event-driven I/O: session-id resume" \
6439 "$P_SRV event=1 tickets=0 auth_mode=none" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006440 "$P_CLI force_version=tls12 event=1 tickets=0 reconnect=1" \
Hanno Becker00076712017-11-15 16:39:08 +00006441 0 \
6442 -S "mbedtls_ssl_handshake returned" \
6443 -C "mbedtls_ssl_handshake returned" \
6444 -c "Read from server: .* bytes read"
6445
Jerry Yuab082902021-12-23 18:02:22 +08006446requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00006447run_test "Event-driven I/O, DTLS: basic handshake" \
6448 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
6449 "$P_CLI dtls=1 event=1 tickets=0" \
6450 0 \
6451 -c "Read from server: .* bytes read"
6452
Jerry Yuab082902021-12-23 18:02:22 +08006453requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00006454run_test "Event-driven I/O, DTLS: client auth" \
6455 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
6456 "$P_CLI dtls=1 event=1 tickets=0" \
6457 0 \
6458 -c "Read from server: .* bytes read"
6459
Jerry Yuab082902021-12-23 18:02:22 +08006460requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00006461run_test "Event-driven I/O, DTLS: ticket" \
6462 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
6463 "$P_CLI dtls=1 event=1 tickets=1" \
6464 0 \
6465 -c "Read from server: .* bytes read"
6466
Jerry Yuab082902021-12-23 18:02:22 +08006467requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00006468run_test "Event-driven I/O, DTLS: ticket + client auth" \
6469 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
6470 "$P_CLI dtls=1 event=1 tickets=1" \
6471 0 \
6472 -c "Read from server: .* bytes read"
6473
Jerry Yuab082902021-12-23 18:02:22 +08006474requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00006475run_test "Event-driven I/O, DTLS: ticket + client auth + resume" \
6476 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01006477 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00006478 0 \
6479 -c "Read from server: .* bytes read"
6480
Jerry Yuab082902021-12-23 18:02:22 +08006481requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00006482run_test "Event-driven I/O, DTLS: ticket + resume" \
6483 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01006484 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00006485 0 \
6486 -c "Read from server: .* bytes read"
6487
Jerry Yuab082902021-12-23 18:02:22 +08006488requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker6a33f592018-03-13 11:38:46 +00006489run_test "Event-driven I/O, DTLS: session-id resume" \
6490 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01006491 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Becker6a33f592018-03-13 11:38:46 +00006492 0 \
6493 -c "Read from server: .* bytes read"
Hanno Beckerbc6c1102018-03-13 11:39:40 +00006494
6495# This test demonstrates the need for the mbedtls_ssl_check_pending function.
6496# During session resumption, the client will send its ApplicationData record
6497# within the same datagram as the Finished messages. In this situation, the
6498# server MUST NOT idle on the underlying transport after handshake completion,
6499# because the ApplicationData request has already been queued internally.
Jerry Yuab082902021-12-23 18:02:22 +08006500requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerbc6c1102018-03-13 11:39:40 +00006501run_test "Event-driven I/O, DTLS: session-id resume, UDP packing" \
Hanno Becker8d832182018-03-15 10:14:19 +00006502 -p "$P_PXY pack=50" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00006503 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +01006504 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1 skip_close_notify=1" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00006505 0 \
6506 -c "Read from server: .* bytes read"
6507
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006508# Tests for version negotiation
6509
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006510run_test "Version check: all -> 1.2" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01006511 "$P_SRV" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006512 "$P_CLI force_version=tls12" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01006513 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02006514 -S "mbedtls_ssl_handshake returned" \
6515 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01006516 -s "Protocol is TLSv1.2" \
6517 -c "Protocol is TLSv1.2"
6518
Jerry Yuab082902021-12-23 18:02:22 +08006519requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz2abf03c2021-06-25 14:40:09 +02006520run_test "Not supported version check: cli TLS 1.0" \
6521 "$P_SRV" \
6522 "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.0" \
6523 1 \
6524 -s "Handshake protocol not within min/max boundaries" \
6525 -c "Error in protocol version" \
6526 -S "Protocol is TLSv1.0" \
6527 -C "Handshake was completed"
6528
Jerry Yuab082902021-12-23 18:02:22 +08006529requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz2abf03c2021-06-25 14:40:09 +02006530run_test "Not supported version check: cli TLS 1.1" \
6531 "$P_SRV" \
6532 "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.1" \
6533 1 \
6534 -s "Handshake protocol not within min/max boundaries" \
6535 -c "Error in protocol version" \
6536 -S "Protocol is TLSv1.1" \
6537 -C "Handshake was completed"
6538
Jerry Yuab082902021-12-23 18:02:22 +08006539requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz2abf03c2021-06-25 14:40:09 +02006540run_test "Not supported version check: srv max TLS 1.0" \
6541 "$G_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.0" \
6542 "$P_CLI" \
6543 1 \
6544 -s "Error in protocol version" \
6545 -c "Handshake protocol not within min/max boundaries" \
6546 -S "Version: TLS1.0" \
6547 -C "Protocol is TLSv1.0"
6548
Jerry Yuab082902021-12-23 18:02:22 +08006549requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz2abf03c2021-06-25 14:40:09 +02006550run_test "Not supported version check: srv max TLS 1.1" \
6551 "$G_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.1" \
6552 "$P_CLI" \
6553 1 \
6554 -s "Error in protocol version" \
6555 -c "Handshake protocol not within min/max boundaries" \
6556 -S "Version: TLS1.1" \
6557 -C "Protocol is TLSv1.1"
6558
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006559# Tests for ALPN extension
6560
Ronald Cronbc5adf42022-10-04 11:06:14 +02006561requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006562run_test "ALPN: none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006563 "$P_SRV debug_level=3" \
6564 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006565 0 \
6566 -C "client hello, adding alpn extension" \
6567 -S "found alpn extension" \
6568 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00006569 -S "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006570 -C "found alpn extension " \
6571 -C "Application Layer Protocol is" \
6572 -S "Application Layer Protocol is"
6573
Ronald Cronbc5adf42022-10-04 11:06:14 +02006574requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006575run_test "ALPN: client only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006576 "$P_SRV debug_level=3" \
6577 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006578 0 \
6579 -c "client hello, adding alpn extension" \
6580 -s "found alpn extension" \
6581 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00006582 -S "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006583 -C "found alpn extension " \
6584 -c "Application Layer Protocol is (none)" \
6585 -S "Application Layer Protocol is"
6586
Ronald Cronbc5adf42022-10-04 11:06:14 +02006587requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006588run_test "ALPN: server only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006589 "$P_SRV debug_level=3 alpn=abc,1234" \
6590 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006591 0 \
6592 -C "client hello, adding alpn extension" \
6593 -S "found alpn extension" \
6594 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00006595 -S "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006596 -C "found alpn extension " \
6597 -C "Application Layer Protocol is" \
6598 -s "Application Layer Protocol is (none)"
6599
Ronald Cronbc5adf42022-10-04 11:06:14 +02006600requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006601run_test "ALPN: both, common cli1-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006602 "$P_SRV debug_level=3 alpn=abc,1234" \
6603 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006604 0 \
6605 -c "client hello, adding alpn extension" \
6606 -s "found alpn extension" \
6607 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00006608 -s "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006609 -c "found alpn extension" \
6610 -c "Application Layer Protocol is abc" \
6611 -s "Application Layer Protocol is abc"
6612
Ronald Cronbc5adf42022-10-04 11:06:14 +02006613requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006614run_test "ALPN: both, common cli2-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006615 "$P_SRV debug_level=3 alpn=abc,1234" \
6616 "$P_CLI debug_level=3 alpn=1234,abc" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006617 0 \
6618 -c "client hello, adding alpn extension" \
6619 -s "found alpn extension" \
6620 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00006621 -s "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006622 -c "found alpn extension" \
6623 -c "Application Layer Protocol is abc" \
6624 -s "Application Layer Protocol is abc"
6625
Ronald Cronbc5adf42022-10-04 11:06:14 +02006626requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006627run_test "ALPN: both, common cli1-srv2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006628 "$P_SRV debug_level=3 alpn=abc,1234" \
6629 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006630 0 \
6631 -c "client hello, adding alpn extension" \
6632 -s "found alpn extension" \
6633 -C "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00006634 -s "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006635 -c "found alpn extension" \
6636 -c "Application Layer Protocol is 1234" \
6637 -s "Application Layer Protocol is 1234"
6638
Ronald Cronbc5adf42022-10-04 11:06:14 +02006639requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006640run_test "ALPN: both, no common" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006641 "$P_SRV debug_level=3 alpn=abc,123" \
6642 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006643 1 \
6644 -c "client hello, adding alpn extension" \
6645 -s "found alpn extension" \
6646 -c "got an alert message, type: \\[2:120]" \
XiaokangQianacb39922022-06-17 10:18:48 +00006647 -S "server side, adding alpn extension" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02006648 -C "found alpn extension" \
6649 -C "Application Layer Protocol is 1234" \
6650 -S "Application Layer Protocol is 1234"
6651
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +02006652
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006653# Tests for keyUsage in leaf certificates, part 1:
6654# server-side certificate/suite selection
6655
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006656run_test "keyUsage srv: RSA, digitalSignature -> (EC)DHE-RSA" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006657 "$P_SRV force_version=tls12 key_file=data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006658 crt_file=data_files/server2.ku-ds.crt" \
6659 "$P_CLI" \
6660 0 \
Manuel Pégourié-Gonnard17cde5f2014-05-22 14:42:39 +02006661 -c "Ciphersuite is TLS-[EC]*DHE-RSA-WITH-"
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006662
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006663run_test "keyUsage srv: RSA, keyEncipherment -> RSA" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006664 "$P_SRV force_version=tls12 key_file=data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006665 crt_file=data_files/server2.ku-ke.crt" \
6666 "$P_CLI" \
6667 0 \
6668 -c "Ciphersuite is TLS-RSA-WITH-"
6669
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006670run_test "keyUsage srv: RSA, keyAgreement -> fail" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006671 "$P_SRV force_version=tls12 key_file=data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006672 crt_file=data_files/server2.ku-ka.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02006673 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006674 1 \
6675 -C "Ciphersuite is "
6676
Valerio Settid1f991c2023-02-22 12:54:13 +01006677requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006678run_test "keyUsage srv: ECDSA, digitalSignature -> ECDHE-ECDSA" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006679 "$P_SRV force_version=tls12 key_file=data_files/server5.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006680 crt_file=data_files/server5.ku-ds.crt" \
6681 "$P_CLI" \
6682 0 \
6683 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-"
6684
6685
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006686run_test "keyUsage srv: ECDSA, keyAgreement -> ECDH-" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006687 "$P_SRV force_version=tls12 key_file=data_files/server5.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006688 crt_file=data_files/server5.ku-ka.crt" \
6689 "$P_CLI" \
6690 0 \
6691 -c "Ciphersuite is TLS-ECDH-"
6692
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006693run_test "keyUsage srv: ECDSA, keyEncipherment -> fail" \
Ronald Cronf95d1692023-03-14 17:19:42 +01006694 "$P_SRV force_version=tls12 key_file=data_files/server5.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006695 crt_file=data_files/server5.ku-ke.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02006696 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006697 1 \
6698 -C "Ciphersuite is "
6699
6700# Tests for keyUsage in leaf certificates, part 2:
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006701# client-side checking of server cert
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006702
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006703run_test "keyUsage cli: DigitalSignature+KeyEncipherment, RSA: OK" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006704 "$O_SRV -tls1_2 -key data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006705 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006706 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006707 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6708 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006709 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006710 -C "Processing of the Certificate handshake message failed" \
6711 -c "Ciphersuite is TLS-"
6712
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006713run_test "keyUsage cli: DigitalSignature+KeyEncipherment, DHE-RSA: OK" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006714 "$O_SRV -tls1_2 -key data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006715 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006716 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006717 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
6718 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006719 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006720 -C "Processing of the Certificate handshake message failed" \
6721 -c "Ciphersuite is TLS-"
6722
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006723run_test "keyUsage cli: KeyEncipherment, RSA: OK" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006724 "$O_SRV -tls1_2 -key data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006725 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006726 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006727 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6728 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006729 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006730 -C "Processing of the Certificate handshake message failed" \
6731 -c "Ciphersuite is TLS-"
6732
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006733run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006734 "$O_SRV -tls1_2 -key data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006735 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006736 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006737 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
6738 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006739 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006740 -c "Processing of the Certificate handshake message failed" \
6741 -C "Ciphersuite is TLS-"
6742
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01006743run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail, soft" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006744 "$O_SRV -tls1_2 -key data_files/server2.key \
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01006745 -cert data_files/server2.ku-ke.crt" \
6746 "$P_CLI debug_level=1 auth_mode=optional \
6747 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
6748 0 \
6749 -c "bad certificate (usage extensions)" \
6750 -C "Processing of the Certificate handshake message failed" \
6751 -c "Ciphersuite is TLS-" \
6752 -c "! Usage does not match the keyUsage extension"
6753
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006754run_test "keyUsage cli: DigitalSignature, DHE-RSA: OK" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006755 "$O_SRV -tls1_2 -key data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006756 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006757 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006758 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
6759 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006760 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006761 -C "Processing of the Certificate handshake message failed" \
6762 -c "Ciphersuite is TLS-"
6763
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006764run_test "keyUsage cli: DigitalSignature, RSA: fail" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006765 "$O_SRV -tls1_2 -key data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006766 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006767 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006768 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6769 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006770 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02006771 -c "Processing of the Certificate handshake message failed" \
6772 -C "Ciphersuite is TLS-"
6773
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01006774run_test "keyUsage cli: DigitalSignature, RSA: fail, soft" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006775 "$O_SRV -tls1_2 -key data_files/server2.key \
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01006776 -cert data_files/server2.ku-ds.crt" \
6777 "$P_CLI debug_level=1 auth_mode=optional \
6778 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6779 0 \
6780 -c "bad certificate (usage extensions)" \
6781 -C "Processing of the Certificate handshake message failed" \
6782 -c "Ciphersuite is TLS-" \
6783 -c "! Usage does not match the keyUsage extension"
6784
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006785requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006786requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6787 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02006788run_test "keyUsage cli 1.3: DigitalSignature+KeyEncipherment, RSA: OK" \
6789 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server2.key \
6790 -cert data_files/server2.ku-ds_ke.crt" \
6791 "$P_CLI debug_level=3" \
6792 0 \
6793 -C "bad certificate (usage extensions)" \
6794 -C "Processing of the Certificate handshake message failed" \
6795 -c "Ciphersuite is"
6796
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006797requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006798requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6799 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronba65fbb2022-06-22 14:35:05 +02006800run_test "keyUsage cli 1.3: KeyEncipherment, RSA: fail" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006801 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server2.key \
6802 -cert data_files/server2.ku-ke.crt" \
6803 "$P_CLI debug_level=1" \
6804 1 \
6805 -c "bad certificate (usage extensions)" \
6806 -c "Processing of the Certificate handshake message failed" \
6807 -C "Ciphersuite is"
6808
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006809requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006810requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6811 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronba65fbb2022-06-22 14:35:05 +02006812run_test "keyUsage cli 1.3: KeyAgreement, RSA: fail" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006813 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server2.key \
6814 -cert data_files/server2.ku-ka.crt" \
6815 "$P_CLI debug_level=1" \
6816 1 \
6817 -c "bad certificate (usage extensions)" \
6818 -c "Processing of the Certificate handshake message failed" \
6819 -C "Ciphersuite is"
6820
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006821requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006822requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6823 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02006824run_test "keyUsage cli 1.3: DigitalSignature, ECDSA: OK" \
6825 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server5.key \
6826 -cert data_files/server5.ku-ds.crt" \
6827 "$P_CLI debug_level=3" \
6828 0 \
6829 -C "bad certificate (usage extensions)" \
6830 -C "Processing of the Certificate handshake message failed" \
6831 -c "Ciphersuite is"
6832
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006833requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006834requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6835 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronba65fbb2022-06-22 14:35:05 +02006836run_test "keyUsage cli 1.3: KeyEncipherment, ECDSA: fail" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006837 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server5.key \
6838 -cert data_files/server5.ku-ke.crt" \
6839 "$P_CLI debug_level=1" \
6840 1 \
6841 -c "bad certificate (usage extensions)" \
6842 -c "Processing of the Certificate handshake message failed" \
6843 -C "Ciphersuite is"
6844
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006845requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006846requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6847 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronba65fbb2022-06-22 14:35:05 +02006848run_test "keyUsage cli 1.3: KeyAgreement, ECDSA: fail" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006849 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server5.key \
6850 -cert data_files/server5.ku-ka.crt" \
6851 "$P_CLI debug_level=1" \
6852 1 \
6853 -c "bad certificate (usage extensions)" \
6854 -c "Processing of the Certificate handshake message failed" \
6855 -C "Ciphersuite is"
6856
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006857# Tests for keyUsage in leaf certificates, part 3:
6858# server-side checking of client cert
6859
Jerry Yuab082902021-12-23 18:02:22 +08006860requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006861run_test "keyUsage cli-auth: RSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006862 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006863 "$O_CLI -key data_files/server2.key \
6864 -cert data_files/server2.ku-ds.crt" \
6865 0 \
Ronald Cronf9c13fe2022-06-22 14:35:17 +02006866 -s "Verifying peer X.509 certificate... ok" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006867 -S "bad certificate (usage extensions)" \
6868 -S "Processing of the Certificate handshake message failed"
6869
Jerry Yuab082902021-12-23 18:02:22 +08006870requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006871run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006872 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006873 "$O_CLI -key data_files/server2.key \
6874 -cert data_files/server2.ku-ke.crt" \
6875 0 \
6876 -s "bad certificate (usage extensions)" \
6877 -S "Processing of the Certificate handshake message failed"
6878
Jerry Yuab082902021-12-23 18:02:22 +08006879requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006880run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006881 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006882 "$O_CLI -key data_files/server2.key \
6883 -cert data_files/server2.ku-ke.crt" \
6884 1 \
6885 -s "bad certificate (usage extensions)" \
6886 -s "Processing of the Certificate handshake message failed"
6887
Jerry Yuab082902021-12-23 18:02:22 +08006888requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006889run_test "keyUsage cli-auth: ECDSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006890 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006891 "$O_CLI -key data_files/server5.key \
6892 -cert data_files/server5.ku-ds.crt" \
6893 0 \
Ronald Cronf9c13fe2022-06-22 14:35:17 +02006894 -s "Verifying peer X.509 certificate... ok" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006895 -S "bad certificate (usage extensions)" \
6896 -S "Processing of the Certificate handshake message failed"
6897
Jerry Yuab082902021-12-23 18:02:22 +08006898requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006899run_test "keyUsage cli-auth: ECDSA, KeyAgreement: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006900 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02006901 "$O_CLI -key data_files/server5.key \
6902 -cert data_files/server5.ku-ka.crt" \
6903 0 \
6904 -s "bad certificate (usage extensions)" \
6905 -S "Processing of the Certificate handshake message failed"
6906
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006907requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006908requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6909 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02006910run_test "keyUsage cli-auth 1.3: RSA, DigitalSignature: OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02006911 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006912 "$O_NEXT_CLI_NO_CERT -key data_files/server2.key \
6913 -cert data_files/server2.ku-ds.crt" \
6914 0 \
Ronald Cronf9c13fe2022-06-22 14:35:17 +02006915 -s "Verifying peer X.509 certificate... ok" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006916 -S "bad certificate (usage extensions)" \
6917 -S "Processing of the Certificate handshake message failed"
6918
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006919requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006920requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6921 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02006922run_test "keyUsage cli-auth 1.3: RSA, KeyEncipherment: fail (soft)" \
Ronald Cron89ca9772022-10-17 14:56:45 +02006923 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006924 "$O_NEXT_CLI_NO_CERT -key data_files/server2.key \
6925 -cert data_files/server2.ku-ke.crt" \
6926 0 \
6927 -s "bad certificate (usage extensions)" \
6928 -S "Processing of the Certificate handshake message failed"
6929
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006930requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006931requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6932 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02006933run_test "keyUsage cli-auth 1.3: ECDSA, DigitalSignature: OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02006934 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006935 "$O_NEXT_CLI_NO_CERT -key data_files/server5.key \
6936 -cert data_files/server5.ku-ds.crt" \
6937 0 \
Ronald Cronf9c13fe2022-06-22 14:35:17 +02006938 -s "Verifying peer X.509 certificate... ok" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006939 -S "bad certificate (usage extensions)" \
6940 -S "Processing of the Certificate handshake message failed"
6941
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02006942requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02006943requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
6944 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02006945run_test "keyUsage cli-auth 1.3: ECDSA, KeyAgreement: fail (soft)" \
Ronald Cron89ca9772022-10-17 14:56:45 +02006946 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
Ronald Crond28f5a92022-06-16 19:27:25 +02006947 "$O_NEXT_CLI_NO_CERT -key data_files/server5.key \
6948 -cert data_files/server5.ku-ka.crt" \
6949 0 \
6950 -s "bad certificate (usage extensions)" \
6951 -S "Processing of the Certificate handshake message failed"
6952
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006953# Tests for extendedKeyUsage, part 1: server-side certificate/suite selection
6954
Ronald Cron92dca392023-03-10 16:11:15 +01006955requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006956run_test "extKeyUsage srv: serverAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006957 "$P_SRV key_file=data_files/server5.key \
6958 crt_file=data_files/server5.eku-srv.crt" \
6959 "$P_CLI" \
6960 0
6961
Ronald Cron92dca392023-03-10 16:11:15 +01006962requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006963run_test "extKeyUsage srv: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006964 "$P_SRV key_file=data_files/server5.key \
6965 crt_file=data_files/server5.eku-srv.crt" \
6966 "$P_CLI" \
6967 0
6968
Ronald Cron92dca392023-03-10 16:11:15 +01006969requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006970run_test "extKeyUsage srv: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006971 "$P_SRV key_file=data_files/server5.key \
6972 crt_file=data_files/server5.eku-cs_any.crt" \
6973 "$P_CLI" \
6974 0
6975
Ronald Cron92dca392023-03-10 16:11:15 +01006976requires_key_exchange_with_cert_in_tls12_or_tls13_enabled
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006977run_test "extKeyUsage srv: codeSign -> fail" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02006978 "$P_SRV key_file=data_files/server5.key \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006979 crt_file=data_files/server5.eku-cli.crt" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02006980 "$P_CLI" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006981 1
6982
6983# Tests for extendedKeyUsage, part 2: client-side checking of server cert
6984
Jerry Yuab082902021-12-23 18:02:22 +08006985requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006986run_test "extKeyUsage cli: serverAuth -> OK" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006987 "$O_SRV -tls1_2 -key data_files/server5.key \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006988 -cert data_files/server5.eku-srv.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006989 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006990 0 \
6991 -C "bad certificate (usage extensions)" \
6992 -C "Processing of the Certificate handshake message failed" \
6993 -c "Ciphersuite is TLS-"
6994
Jerry Yuab082902021-12-23 18:02:22 +08006995requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02006996run_test "extKeyUsage cli: serverAuth,clientAuth -> OK" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02006997 "$O_SRV -tls1_2 -key data_files/server5.key \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02006998 -cert data_files/server5.eku-srv_cli.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02006999 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007000 0 \
7001 -C "bad certificate (usage extensions)" \
7002 -C "Processing of the Certificate handshake message failed" \
7003 -c "Ciphersuite is TLS-"
7004
Jerry Yuab082902021-12-23 18:02:22 +08007005requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007006run_test "extKeyUsage cli: codeSign,anyEKU -> OK" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02007007 "$O_SRV -tls1_2 -key data_files/server5.key \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007008 -cert data_files/server5.eku-cs_any.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007009 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007010 0 \
7011 -C "bad certificate (usage extensions)" \
7012 -C "Processing of the Certificate handshake message failed" \
7013 -c "Ciphersuite is TLS-"
7014
Jerry Yuab082902021-12-23 18:02:22 +08007015requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007016run_test "extKeyUsage cli: codeSign -> fail" \
Ronald Croncbd7bfd2022-03-31 18:19:56 +02007017 "$O_SRV -tls1_2 -key data_files/server5.key \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007018 -cert data_files/server5.eku-cs.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007019 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007020 1 \
7021 -c "bad certificate (usage extensions)" \
7022 -c "Processing of the Certificate handshake message failed" \
7023 -C "Ciphersuite is TLS-"
7024
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007025requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02007026requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
7027 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007028run_test "extKeyUsage cli 1.3: serverAuth -> OK" \
7029 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server5.key \
7030 -cert data_files/server5.eku-srv.crt" \
7031 "$P_CLI debug_level=1" \
7032 0 \
7033 -C "bad certificate (usage extensions)" \
7034 -C "Processing of the Certificate handshake message failed" \
7035 -c "Ciphersuite is"
7036
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007037requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02007038requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
7039 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007040run_test "extKeyUsage cli 1.3: serverAuth,clientAuth -> OK" \
7041 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server5.key \
7042 -cert data_files/server5.eku-srv_cli.crt" \
7043 "$P_CLI debug_level=1" \
7044 0 \
7045 -C "bad certificate (usage extensions)" \
7046 -C "Processing of the Certificate handshake message failed" \
7047 -c "Ciphersuite is"
7048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007049requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02007050requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
7051 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007052run_test "extKeyUsage cli 1.3: codeSign,anyEKU -> OK" \
7053 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server5.key \
7054 -cert data_files/server5.eku-cs_any.crt" \
7055 "$P_CLI debug_level=1" \
7056 0 \
7057 -C "bad certificate (usage extensions)" \
7058 -C "Processing of the Certificate handshake message failed" \
7059 -c "Ciphersuite is"
7060
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007061requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02007062requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
7063 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007064run_test "extKeyUsage cli 1.3: codeSign -> fail" \
7065 "$O_NEXT_SRV_NO_CERT -tls1_3 -num_tickets=0 -key data_files/server5.key \
7066 -cert data_files/server5.eku-cs.crt" \
7067 "$P_CLI debug_level=1" \
7068 1 \
7069 -c "bad certificate (usage extensions)" \
7070 -c "Processing of the Certificate handshake message failed" \
7071 -C "Ciphersuite is"
7072
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007073# Tests for extendedKeyUsage, part 3: server-side checking of client cert
7074
Jerry Yuab082902021-12-23 18:02:22 +08007075requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007076run_test "extKeyUsage cli-auth: clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007077 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007078 "$O_CLI -key data_files/server5.key \
7079 -cert data_files/server5.eku-cli.crt" \
7080 0 \
7081 -S "bad certificate (usage extensions)" \
7082 -S "Processing of the Certificate handshake message failed"
7083
Jerry Yuab082902021-12-23 18:02:22 +08007084requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007085run_test "extKeyUsage cli-auth: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007086 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007087 "$O_CLI -key data_files/server5.key \
7088 -cert data_files/server5.eku-srv_cli.crt" \
7089 0 \
7090 -S "bad certificate (usage extensions)" \
7091 -S "Processing of the Certificate handshake message failed"
7092
Jerry Yuab082902021-12-23 18:02:22 +08007093requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007094run_test "extKeyUsage cli-auth: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007095 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007096 "$O_CLI -key data_files/server5.key \
7097 -cert data_files/server5.eku-cs_any.crt" \
7098 0 \
7099 -S "bad certificate (usage extensions)" \
7100 -S "Processing of the Certificate handshake message failed"
7101
Jerry Yuab082902021-12-23 18:02:22 +08007102requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007103run_test "extKeyUsage cli-auth: codeSign -> fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007104 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007105 "$O_CLI -key data_files/server5.key \
7106 -cert data_files/server5.eku-cs.crt" \
7107 0 \
7108 -s "bad certificate (usage extensions)" \
7109 -S "Processing of the Certificate handshake message failed"
7110
Jerry Yuab082902021-12-23 18:02:22 +08007111requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007112run_test "extKeyUsage cli-auth: codeSign -> fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02007113 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02007114 "$O_CLI -key data_files/server5.key \
7115 -cert data_files/server5.eku-cs.crt" \
7116 1 \
7117 -s "bad certificate (usage extensions)" \
7118 -s "Processing of the Certificate handshake message failed"
7119
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007120requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02007121requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
7122 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007123run_test "extKeyUsage cli-auth 1.3: clientAuth -> OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02007124 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
Ronald Crond28f5a92022-06-16 19:27:25 +02007125 "$O_NEXT_CLI_NO_CERT -key data_files/server5.key \
7126 -cert data_files/server5.eku-cli.crt" \
7127 0 \
7128 -S "bad certificate (usage extensions)" \
7129 -S "Processing of the Certificate handshake message failed"
7130
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007131requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02007132requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
7133 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007134run_test "extKeyUsage cli-auth 1.3: serverAuth,clientAuth -> OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02007135 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
Ronald Crond28f5a92022-06-16 19:27:25 +02007136 "$O_NEXT_CLI_NO_CERT -key data_files/server5.key \
7137 -cert data_files/server5.eku-srv_cli.crt" \
7138 0 \
7139 -S "bad certificate (usage extensions)" \
7140 -S "Processing of the Certificate handshake message failed"
7141
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007142requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02007143requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
7144 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007145run_test "extKeyUsage cli-auth 1.3: codeSign,anyEKU -> OK" \
Ronald Cron89ca9772022-10-17 14:56:45 +02007146 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
Ronald Crond28f5a92022-06-16 19:27:25 +02007147 "$O_NEXT_CLI_NO_CERT -key data_files/server5.key \
7148 -cert data_files/server5.eku-cs_any.crt" \
7149 0 \
7150 -S "bad certificate (usage extensions)" \
7151 -S "Processing of the Certificate handshake message failed"
7152
Przemek Stekiel8bfe8972023-06-26 12:59:45 +02007153requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron70ed4172022-10-20 15:48:19 +02007154requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
7155 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crond28f5a92022-06-16 19:27:25 +02007156run_test "extKeyUsage cli-auth 1.3: codeSign -> fail (soft)" \
Ronald Cron89ca9772022-10-17 14:56:45 +02007157 "$P_SRV debug_level=1 force_version=tls13 auth_mode=optional" \
Ronald Crond28f5a92022-06-16 19:27:25 +02007158 "$O_NEXT_CLI_NO_CERT -key data_files/server5.key \
7159 -cert data_files/server5.eku-cs.crt" \
7160 0 \
7161 -s "bad certificate (usage extensions)" \
7162 -S "Processing of the Certificate handshake message failed"
7163
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02007164# Tests for DHM parameters loading
7165
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007166run_test "DHM parameters: reference" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02007167 "$P_SRV" \
7168 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7169 debug_level=3" \
7170 0 \
7171 -c "value of 'DHM: P ' (2048 bits)" \
Hanno Becker13be9902017-09-27 17:17:30 +01007172 -c "value of 'DHM: G ' (2 bits)"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02007173
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007174run_test "DHM parameters: other parameters" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02007175 "$P_SRV dhm_file=data_files/dhparams.pem" \
7176 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7177 debug_level=3" \
7178 0 \
7179 -c "value of 'DHM: P ' (1024 bits)" \
7180 -c "value of 'DHM: G ' (2 bits)"
7181
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02007182# Tests for DHM client-side size checking
7183
7184run_test "DHM size: server default, client default, OK" \
7185 "$P_SRV" \
7186 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7187 debug_level=1" \
7188 0 \
7189 -C "DHM prime too short:"
7190
7191run_test "DHM size: server default, client 2048, OK" \
7192 "$P_SRV" \
7193 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7194 debug_level=1 dhmlen=2048" \
7195 0 \
7196 -C "DHM prime too short:"
7197
7198run_test "DHM size: server 1024, client default, OK" \
7199 "$P_SRV dhm_file=data_files/dhparams.pem" \
7200 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7201 debug_level=1" \
7202 0 \
7203 -C "DHM prime too short:"
7204
Gilles Peskinec6b0d962020-12-08 22:31:52 +01007205run_test "DHM size: server 999, client 999, OK" \
7206 "$P_SRV dhm_file=data_files/dh.999.pem" \
7207 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7208 debug_level=1 dhmlen=999" \
7209 0 \
7210 -C "DHM prime too short:"
7211
7212run_test "DHM size: server 1000, client 1000, OK" \
7213 "$P_SRV dhm_file=data_files/dh.1000.pem" \
7214 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7215 debug_level=1 dhmlen=1000" \
7216 0 \
7217 -C "DHM prime too short:"
7218
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02007219run_test "DHM size: server 1000, client default, rejected" \
7220 "$P_SRV dhm_file=data_files/dh.1000.pem" \
7221 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7222 debug_level=1" \
7223 1 \
7224 -c "DHM prime too short:"
7225
Gilles Peskinec6b0d962020-12-08 22:31:52 +01007226run_test "DHM size: server 1000, client 1001, rejected" \
7227 "$P_SRV dhm_file=data_files/dh.1000.pem" \
7228 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7229 debug_level=1 dhmlen=1001" \
7230 1 \
7231 -c "DHM prime too short:"
7232
7233run_test "DHM size: server 999, client 1000, rejected" \
7234 "$P_SRV dhm_file=data_files/dh.999.pem" \
7235 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7236 debug_level=1 dhmlen=1000" \
7237 1 \
7238 -c "DHM prime too short:"
7239
7240run_test "DHM size: server 998, client 999, rejected" \
7241 "$P_SRV dhm_file=data_files/dh.998.pem" \
7242 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7243 debug_level=1 dhmlen=999" \
7244 1 \
7245 -c "DHM prime too short:"
7246
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02007247run_test "DHM size: server default, client 2049, rejected" \
7248 "$P_SRV" \
7249 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
7250 debug_level=1 dhmlen=2049" \
7251 1 \
7252 -c "DHM prime too short:"
7253
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007254# Tests for PSK callback
7255
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007256run_test "PSK callback: psk, no callback" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007257 "$P_SRV psk=abc123 psk_identity=foo" \
7258 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
7259 psk_identity=foo psk=abc123" \
7260 0 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007261 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02007262 -S "SSL - Unknown identity received" \
7263 -S "SSL - Verification of the message MAC failed"
7264
Hanno Beckerf7027512018-10-23 15:27:39 +01007265requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7266run_test "PSK callback: opaque psk on client, no callback" \
7267 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007268 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00007269 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01007270 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007271 -C "session hash for extended master secret"\
7272 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007273 -S "SSL - The handshake negotiation failed" \
Hanno Beckerf7027512018-10-23 15:27:39 +01007274 -S "SSL - Unknown identity received" \
7275 -S "SSL - Verification of the message MAC failed"
7276
7277requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7278run_test "PSK callback: opaque psk on client, no callback, SHA-384" \
7279 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007280 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00007281 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01007282 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007283 -C "session hash for extended master secret"\
7284 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007285 -S "SSL - The handshake negotiation failed" \
Hanno Beckerf7027512018-10-23 15:27:39 +01007286 -S "SSL - Unknown identity received" \
7287 -S "SSL - Verification of the message MAC failed"
7288
7289requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7290run_test "PSK callback: opaque psk on client, no callback, EMS" \
7291 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007292 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00007293 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01007294 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007295 -c "session hash for extended master secret"\
7296 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007297 -S "SSL - The handshake negotiation failed" \
Hanno Beckerf7027512018-10-23 15:27:39 +01007298 -S "SSL - Unknown identity received" \
7299 -S "SSL - Verification of the message MAC failed"
7300
7301requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7302run_test "PSK callback: opaque psk on client, no callback, SHA-384, EMS" \
7303 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007304 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00007305 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01007306 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007307 -c "session hash for extended master secret"\
7308 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007309 -S "SSL - The handshake negotiation failed" \
Hanno Beckerf7027512018-10-23 15:27:39 +01007310 -S "SSL - Unknown identity received" \
7311 -S "SSL - Verification of the message MAC failed"
7312
Hanno Becker28c79dc2018-10-26 13:15:08 +01007313requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02007314run_test "PSK callback: opaque rsa-psk on client, no callback" \
7315 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
7316 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256 \
7317 psk_identity=foo psk=abc123 psk_opaque=1" \
7318 0 \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02007319 -C "session hash for extended master secret"\
7320 -S "session hash for extended master secret"\
7321 -S "SSL - The handshake negotiation failed" \
7322 -S "SSL - Unknown identity received" \
7323 -S "SSL - Verification of the message MAC failed"
7324
7325requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02007326run_test "PSK callback: opaque rsa-psk on client, no callback, SHA-384" \
7327 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
7328 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
7329 psk_identity=foo psk=abc123 psk_opaque=1" \
7330 0 \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02007331 -C "session hash for extended master secret"\
7332 -S "session hash for extended master secret"\
7333 -S "SSL - The handshake negotiation failed" \
7334 -S "SSL - Unknown identity received" \
7335 -S "SSL - Verification of the message MAC failed"
7336
7337requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02007338run_test "PSK callback: opaque rsa-psk on client, no callback, EMS" \
7339 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
7340 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
7341 psk_identity=foo psk=abc123 psk_opaque=1" \
7342 0 \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02007343 -c "session hash for extended master secret"\
7344 -s "session hash for extended master secret"\
7345 -S "SSL - The handshake negotiation failed" \
7346 -S "SSL - Unknown identity received" \
7347 -S "SSL - Verification of the message MAC failed"
7348
7349requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02007350run_test "PSK callback: opaque rsa-psk on client, no callback, SHA-384, EMS" \
7351 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
7352 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
7353 psk_identity=foo psk=abc123 psk_opaque=1" \
7354 0 \
Przemek Stekiel8e0495e2022-04-05 23:00:04 +02007355 -c "session hash for extended master secret"\
7356 -s "session hash for extended master secret"\
7357 -S "SSL - The handshake negotiation failed" \
7358 -S "SSL - Unknown identity received" \
7359 -S "SSL - Verification of the message MAC failed"
7360
7361requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007362run_test "PSK callback: opaque ecdhe-psk on client, no callback" \
7363 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
7364 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256 \
7365 psk_identity=foo psk=abc123 psk_opaque=1" \
7366 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02007367 -C "session hash for extended master secret"\
7368 -S "session hash for extended master secret"\
7369 -S "SSL - The handshake negotiation failed" \
7370 -S "SSL - Unknown identity received" \
7371 -S "SSL - Verification of the message MAC failed"
7372
7373requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007374run_test "PSK callback: opaque ecdhe-psk on client, no callback, SHA-384" \
7375 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
7376 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
7377 psk_identity=foo psk=abc123 psk_opaque=1" \
7378 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02007379 -C "session hash for extended master secret"\
7380 -S "session hash for extended master secret"\
7381 -S "SSL - The handshake negotiation failed" \
7382 -S "SSL - Unknown identity received" \
7383 -S "SSL - Verification of the message MAC failed"
7384
7385requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007386run_test "PSK callback: opaque ecdhe-psk on client, no callback, EMS" \
7387 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
7388 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
7389 psk_identity=foo psk=abc123 psk_opaque=1" \
7390 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02007391 -c "session hash for extended master secret"\
7392 -s "session hash for extended master secret"\
7393 -S "SSL - The handshake negotiation failed" \
7394 -S "SSL - Unknown identity received" \
7395 -S "SSL - Verification of the message MAC failed"
7396
7397requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007398run_test "PSK callback: opaque ecdhe-psk on client, no callback, SHA-384, EMS" \
7399 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
7400 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
7401 psk_identity=foo psk=abc123 psk_opaque=1" \
7402 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02007403 -c "session hash for extended master secret"\
7404 -s "session hash for extended master secret"\
7405 -S "SSL - The handshake negotiation failed" \
7406 -S "SSL - Unknown identity received" \
7407 -S "SSL - Verification of the message MAC failed"
7408
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007409requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007410run_test "PSK callback: opaque dhe-psk on client, no callback" \
7411 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
7412 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA256 \
7413 psk_identity=foo psk=abc123 psk_opaque=1" \
7414 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007415 -C "session hash for extended master secret"\
7416 -S "session hash for extended master secret"\
7417 -S "SSL - The handshake negotiation failed" \
7418 -S "SSL - Unknown identity received" \
7419 -S "SSL - Verification of the message MAC failed"
7420
7421requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007422run_test "PSK callback: opaque dhe-psk on client, no callback, SHA-384" \
7423 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
7424 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
7425 psk_identity=foo psk=abc123 psk_opaque=1" \
7426 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007427 -C "session hash for extended master secret"\
7428 -S "session hash for extended master secret"\
7429 -S "SSL - The handshake negotiation failed" \
7430 -S "SSL - Unknown identity received" \
7431 -S "SSL - Verification of the message MAC failed"
7432
7433requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007434run_test "PSK callback: opaque dhe-psk on client, no callback, EMS" \
7435 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
7436 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
7437 psk_identity=foo psk=abc123 psk_opaque=1" \
7438 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007439 -c "session hash for extended master secret"\
7440 -s "session hash for extended master secret"\
7441 -S "SSL - The handshake negotiation failed" \
7442 -S "SSL - Unknown identity received" \
7443 -S "SSL - Verification of the message MAC failed"
7444
7445requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007446run_test "PSK callback: opaque dhe-psk on client, no callback, SHA-384, EMS" \
7447 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
7448 "$P_CLI extended_ms=1 debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
7449 psk_identity=foo psk=abc123 psk_opaque=1" \
7450 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007451 -c "session hash for extended master secret"\
7452 -s "session hash for extended master secret"\
7453 -S "SSL - The handshake negotiation failed" \
7454 -S "SSL - Unknown identity received" \
7455 -S "SSL - Verification of the message MAC failed"
Przemek Stekielb6a05032022-04-14 10:22:18 +02007456
7457requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Hanno Becker28c79dc2018-10-26 13:15:08 +01007458run_test "PSK callback: raw psk on client, static opaque on server, no callback" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007459 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
7460 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007461 psk_identity=foo psk=abc123" \
7462 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007463 -C "session hash for extended master secret"\
7464 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007465 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007466 -S "SSL - Unknown identity received" \
7467 -S "SSL - Verification of the message MAC failed"
7468
7469requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7470run_test "PSK callback: raw psk on client, static opaque on server, no callback, SHA-384" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007471 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
7472 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007473 psk_identity=foo psk=abc123" \
7474 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007475 -C "session hash for extended master secret"\
7476 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007477 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007478 -S "SSL - Unknown identity received" \
7479 -S "SSL - Verification of the message MAC failed"
7480
7481requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7482run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007483 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007484 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007485 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007486 psk_identity=foo psk=abc123 extended_ms=1" \
7487 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007488 -c "session hash for extended master secret"\
7489 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007490 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007491 -S "SSL - Unknown identity received" \
7492 -S "SSL - Verification of the message MAC failed"
7493
7494requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7495run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS, SHA384" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007496 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007497 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007498 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007499 psk_identity=foo psk=abc123 extended_ms=1" \
7500 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007501 -c "session hash for extended master secret"\
7502 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007503 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007504 -S "SSL - Unknown identity received" \
7505 -S "SSL - Verification of the message MAC failed"
7506
7507requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb270b562022-04-06 13:12:48 +02007508run_test "PSK callback: raw rsa-psk on client, static opaque on server, no callback" \
7509 "$P_SRV extended_ms=0 debug_level=5 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA" \
7510 "$P_CLI extended_ms=0 debug_level=5 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
7511 psk_identity=foo psk=abc123" \
7512 0 \
Przemek Stekielb270b562022-04-06 13:12:48 +02007513 -C "session hash for extended master secret"\
7514 -S "session hash for extended master secret"\
7515 -S "SSL - The handshake negotiation failed" \
7516 -S "SSL - Unknown identity received" \
7517 -S "SSL - Verification of the message MAC failed"
7518
7519requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb270b562022-04-06 13:12:48 +02007520run_test "PSK callback: raw rsa-psk on client, static opaque on server, no callback, SHA-384" \
7521 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384" \
7522 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
7523 psk_identity=foo psk=abc123" \
7524 0 \
Przemek Stekielb270b562022-04-06 13:12:48 +02007525 -C "session hash for extended master secret"\
7526 -S "session hash for extended master secret"\
7527 -S "SSL - The handshake negotiation failed" \
7528 -S "SSL - Unknown identity received" \
7529 -S "SSL - Verification of the message MAC failed"
7530
7531requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb270b562022-04-06 13:12:48 +02007532run_test "PSK callback: raw rsa-psk on client, static opaque on server, no callback, EMS" \
7533 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
7534 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
7535 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
7536 psk_identity=foo psk=abc123 extended_ms=1" \
7537 0 \
7538 -c "session hash for extended master secret"\
7539 -s "session hash for extended master secret"\
Przemek Stekielb270b562022-04-06 13:12:48 +02007540 -S "SSL - The handshake negotiation failed" \
7541 -S "SSL - Unknown identity received" \
7542 -S "SSL - Verification of the message MAC failed"
7543
7544requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb270b562022-04-06 13:12:48 +02007545run_test "PSK callback: raw rsa-psk on client, static opaque on server, no callback, EMS, SHA384" \
7546 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
7547 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
7548 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
7549 psk_identity=foo psk=abc123 extended_ms=1" \
7550 0 \
7551 -c "session hash for extended master secret"\
7552 -s "session hash for extended master secret"\
Przemek Stekielb270b562022-04-06 13:12:48 +02007553 -S "SSL - The handshake negotiation failed" \
7554 -S "SSL - Unknown identity received" \
7555 -S "SSL - Verification of the message MAC failed"
7556
7557requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007558run_test "PSK callback: raw ecdhe-psk on client, static opaque on server, no callback" \
7559 "$P_SRV extended_ms=0 debug_level=5 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA" \
7560 "$P_CLI extended_ms=0 debug_level=5 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
7561 psk_identity=foo psk=abc123" \
7562 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02007563 -C "session hash for extended master secret"\
7564 -S "session hash for extended master secret"\
7565 -S "SSL - The handshake negotiation failed" \
7566 -S "SSL - Unknown identity received" \
7567 -S "SSL - Verification of the message MAC failed"
7568
7569requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007570run_test "PSK callback: raw ecdhe-psk on client, static opaque on server, no callback, SHA-384" \
7571 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384" \
7572 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
7573 psk_identity=foo psk=abc123" \
7574 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02007575 -C "session hash for extended master secret"\
7576 -S "session hash for extended master secret"\
7577 -S "SSL - The handshake negotiation failed" \
7578 -S "SSL - Unknown identity received" \
7579 -S "SSL - Verification of the message MAC failed"
7580
7581requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007582run_test "PSK callback: raw ecdhe-psk on client, static opaque on server, no callback, EMS" \
7583 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
7584 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
7585 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
7586 psk_identity=foo psk=abc123 extended_ms=1" \
7587 0 \
7588 -c "session hash for extended master secret"\
7589 -s "session hash for extended master secret"\
Przemek Stekielb6a05032022-04-14 10:22:18 +02007590 -S "SSL - The handshake negotiation failed" \
7591 -S "SSL - Unknown identity received" \
7592 -S "SSL - Verification of the message MAC failed"
7593
7594requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007595run_test "PSK callback: raw ecdhe-psk on client, static opaque on server, no callback, EMS, SHA384" \
7596 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
7597 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
7598 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
7599 psk_identity=foo psk=abc123 extended_ms=1" \
7600 0 \
7601 -c "session hash for extended master secret"\
7602 -s "session hash for extended master secret"\
Przemek Stekielb6a05032022-04-14 10:22:18 +02007603 -S "SSL - The handshake negotiation failed" \
7604 -S "SSL - Unknown identity received" \
7605 -S "SSL - Verification of the message MAC failed"
7606
7607requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007608run_test "PSK callback: raw dhe-psk on client, static opaque on server, no callback" \
7609 "$P_SRV extended_ms=0 debug_level=5 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA" \
7610 "$P_CLI extended_ms=0 debug_level=5 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
7611 psk_identity=foo psk=abc123" \
7612 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007613 -C "session hash for extended master secret"\
7614 -S "session hash for extended master secret"\
7615 -S "SSL - The handshake negotiation failed" \
7616 -S "SSL - Unknown identity received" \
7617 -S "SSL - Verification of the message MAC failed"
7618
7619requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007620run_test "PSK callback: raw dhe-psk on client, static opaque on server, no callback, SHA-384" \
7621 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384" \
7622 "$P_CLI extended_ms=0 debug_level=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
7623 psk_identity=foo psk=abc123" \
7624 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007625 -C "session hash for extended master secret"\
7626 -S "session hash for extended master secret"\
7627 -S "SSL - The handshake negotiation failed" \
7628 -S "SSL - Unknown identity received" \
7629 -S "SSL - Verification of the message MAC failed"
7630
7631requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007632run_test "PSK callback: raw dhe-psk on client, static opaque on server, no callback, EMS" \
7633 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
7634 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
7635 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
7636 psk_identity=foo psk=abc123 extended_ms=1" \
7637 0 \
7638 -c "session hash for extended master secret"\
7639 -s "session hash for extended master secret"\
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007640 -S "SSL - The handshake negotiation failed" \
7641 -S "SSL - Unknown identity received" \
7642 -S "SSL - Verification of the message MAC failed"
7643
7644requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007645run_test "PSK callback: raw dhe-psk on client, static opaque on server, no callback, EMS, SHA384" \
7646 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls12 \
7647 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
7648 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
7649 psk_identity=foo psk=abc123 extended_ms=1" \
7650 0 \
7651 -c "session hash for extended master secret"\
7652 -s "session hash for extended master secret"\
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007653 -S "SSL - The handshake negotiation failed" \
7654 -S "SSL - Unknown identity received" \
7655 -S "SSL - Verification of the message MAC failed"
7656
7657requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Hanno Becker28c79dc2018-10-26 13:15:08 +01007658run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007659 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
7660 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007661 psk_identity=def psk=beef" \
7662 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007663 -C "session hash for extended master secret"\
7664 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007665 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007666 -S "SSL - Unknown identity received" \
7667 -S "SSL - Verification of the message MAC failed"
7668
7669requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7670run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, SHA-384" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007671 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
7672 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007673 psk_identity=def psk=beef" \
7674 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007675 -C "session hash for extended master secret"\
7676 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007677 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007678 -S "SSL - Unknown identity received" \
7679 -S "SSL - Verification of the message MAC failed"
7680
7681requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7682run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007683 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007684 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007685 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007686 psk_identity=abc psk=dead extended_ms=1" \
7687 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007688 -c "session hash for extended master secret"\
7689 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007690 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007691 -S "SSL - Unknown identity received" \
7692 -S "SSL - Verification of the message MAC failed"
7693
7694requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7695run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS, SHA384" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007696 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007697 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007698 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007699 psk_identity=abc psk=dead extended_ms=1" \
7700 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007701 -c "session hash for extended master secret"\
7702 -s "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007703 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007704 -S "SSL - Unknown identity received" \
7705 -S "SSL - Verification of the message MAC failed"
7706
7707requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb270b562022-04-06 13:12:48 +02007708run_test "PSK callback: raw rsa-psk on client, no static RSA-PSK on server, opaque RSA-PSK from callback" \
7709 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA" \
7710 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
7711 psk_identity=def psk=beef" \
7712 0 \
Przemek Stekielb270b562022-04-06 13:12:48 +02007713 -C "session hash for extended master secret"\
7714 -S "session hash for extended master secret"\
7715 -S "SSL - The handshake negotiation failed" \
7716 -S "SSL - Unknown identity received" \
7717 -S "SSL - Verification of the message MAC failed"
7718
7719requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb270b562022-04-06 13:12:48 +02007720run_test "PSK callback: raw rsa-psk on client, no static RSA-PSK on server, opaque RSA-PSK from callback, SHA-384" \
7721 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384" \
7722 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
7723 psk_identity=def psk=beef" \
7724 0 \
Przemek Stekielb270b562022-04-06 13:12:48 +02007725 -C "session hash for extended master secret"\
7726 -S "session hash for extended master secret"\
7727 -S "SSL - The handshake negotiation failed" \
7728 -S "SSL - Unknown identity received" \
7729 -S "SSL - Verification of the message MAC failed"
7730
7731requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb270b562022-04-06 13:12:48 +02007732run_test "PSK callback: raw rsa-psk on client, no static RSA-PSK on server, opaque RSA-PSK from callback, EMS" \
7733 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
7734 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
7735 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA \
7736 psk_identity=abc psk=dead extended_ms=1" \
7737 0 \
7738 -c "session hash for extended master secret"\
7739 -s "session hash for extended master secret"\
Przemek Stekielb270b562022-04-06 13:12:48 +02007740 -S "SSL - The handshake negotiation failed" \
7741 -S "SSL - Unknown identity received" \
7742 -S "SSL - Verification of the message MAC failed"
7743
7744requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb270b562022-04-06 13:12:48 +02007745run_test "PSK callback: raw rsa-psk on client, no static RSA-PSK on server, opaque RSA-PSK from callback, EMS, SHA384" \
7746 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
7747 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
7748 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-RSA-PSK-WITH-AES-256-CBC-SHA384 \
7749 psk_identity=abc psk=dead extended_ms=1" \
7750 0 \
7751 -c "session hash for extended master secret"\
7752 -s "session hash for extended master secret"\
Przemek Stekielb270b562022-04-06 13:12:48 +02007753 -S "SSL - The handshake negotiation failed" \
7754 -S "SSL - Unknown identity received" \
7755 -S "SSL - Verification of the message MAC failed"
7756
7757requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007758run_test "PSK callback: raw ecdhe-psk on client, no static ECDHE-PSK on server, opaque ECDHE-PSK from callback" \
7759 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA" \
7760 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
7761 psk_identity=def psk=beef" \
7762 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02007763 -C "session hash for extended master secret"\
7764 -S "session hash for extended master secret"\
7765 -S "SSL - The handshake negotiation failed" \
7766 -S "SSL - Unknown identity received" \
7767 -S "SSL - Verification of the message MAC failed"
7768
7769requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007770run_test "PSK callback: raw ecdhe-psk on client, no static ECDHE-PSK on server, opaque ECDHE-PSK from callback, SHA-384" \
7771 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384" \
7772 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
7773 psk_identity=def psk=beef" \
7774 0 \
Przemek Stekielb6a05032022-04-14 10:22:18 +02007775 -C "session hash for extended master secret"\
7776 -S "session hash for extended master secret"\
7777 -S "SSL - The handshake negotiation failed" \
7778 -S "SSL - Unknown identity received" \
7779 -S "SSL - Verification of the message MAC failed"
7780
7781requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007782run_test "PSK callback: raw ecdhe-psk on client, no static ECDHE-PSK on server, opaque ECDHE-PSK from callback, EMS" \
7783 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
7784 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
7785 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA \
7786 psk_identity=abc psk=dead extended_ms=1" \
7787 0 \
7788 -c "session hash for extended master secret"\
7789 -s "session hash for extended master secret"\
Przemek Stekielb6a05032022-04-14 10:22:18 +02007790 -S "SSL - The handshake negotiation failed" \
7791 -S "SSL - Unknown identity received" \
7792 -S "SSL - Verification of the message MAC failed"
7793
7794requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekielb6a05032022-04-14 10:22:18 +02007795run_test "PSK callback: raw ecdhe-psk on client, no static ECDHE-PSK on server, opaque ECDHE-PSK from callback, EMS, SHA384" \
7796 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
7797 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
7798 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-256-CBC-SHA384 \
7799 psk_identity=abc psk=dead extended_ms=1" \
7800 0 \
7801 -c "session hash for extended master secret"\
7802 -s "session hash for extended master secret"\
Przemek Stekielb6a05032022-04-14 10:22:18 +02007803 -S "SSL - The handshake negotiation failed" \
7804 -S "SSL - Unknown identity received" \
7805 -S "SSL - Verification of the message MAC failed"
7806
7807requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007808run_test "PSK callback: raw dhe-psk on client, no static DHE-PSK on server, opaque DHE-PSK from callback" \
7809 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA" \
7810 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
7811 psk_identity=def psk=beef" \
7812 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007813 -C "session hash for extended master secret"\
7814 -S "session hash for extended master secret"\
7815 -S "SSL - The handshake negotiation failed" \
7816 -S "SSL - Unknown identity received" \
7817 -S "SSL - Verification of the message MAC failed"
7818
7819requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007820run_test "PSK callback: raw dhe-psk on client, no static DHE-PSK on server, opaque DHE-PSK from callback, SHA-384" \
7821 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384" \
7822 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
7823 psk_identity=def psk=beef" \
7824 0 \
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007825 -C "session hash for extended master secret"\
7826 -S "session hash for extended master secret"\
7827 -S "SSL - The handshake negotiation failed" \
7828 -S "SSL - Unknown identity received" \
7829 -S "SSL - Verification of the message MAC failed"
7830
7831requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007832run_test "PSK callback: raw dhe-psk on client, no static DHE-PSK on server, opaque DHE-PSK from callback, EMS" \
7833 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
7834 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
7835 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-128-CBC-SHA \
7836 psk_identity=abc psk=dead extended_ms=1" \
7837 0 \
7838 -c "session hash for extended master secret"\
7839 -s "session hash for extended master secret"\
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007840 -S "SSL - The handshake negotiation failed" \
7841 -S "SSL - Unknown identity received" \
7842 -S "SSL - Verification of the message MAC failed"
7843
7844requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007845run_test "PSK callback: raw dhe-psk on client, no static DHE-PSK on server, opaque DHE-PSK from callback, EMS, SHA384" \
7846 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 \
7847 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
7848 "$P_CLI debug_level=3 min_version=tls12 force_ciphersuite=TLS-DHE-PSK-WITH-AES-256-CBC-SHA384 \
7849 psk_identity=abc psk=dead extended_ms=1" \
7850 0 \
7851 -c "session hash for extended master secret"\
7852 -s "session hash for extended master secret"\
Przemek Stekiel85d46fe2022-04-19 12:47:48 +02007853 -S "SSL - The handshake negotiation failed" \
7854 -S "SSL - Unknown identity received" \
7855 -S "SSL - Verification of the message MAC failed"
7856
7857requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Hanno Becker28c79dc2018-10-26 13:15:08 +01007858run_test "PSK callback: raw psk on client, mismatching static raw PSK on server, opaque PSK from callback" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007859 "$P_SRV extended_ms=0 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
7860 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007861 psk_identity=def psk=beef" \
7862 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007863 -C "session hash for extended master secret"\
7864 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007865 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007866 -S "SSL - Unknown identity received" \
7867 -S "SSL - Verification of the message MAC failed"
7868
7869requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7870run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, opaque PSK from callback" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007871 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
7872 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007873 psk_identity=def psk=beef" \
7874 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007875 -C "session hash for extended master secret"\
7876 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007877 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007878 -S "SSL - Unknown identity received" \
7879 -S "SSL - Verification of the message MAC failed"
7880
7881requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7882run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, raw PSK from callback" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007883 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
7884 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007885 psk_identity=def psk=beef" \
7886 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007887 -C "session hash for extended master secret"\
7888 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007889 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007890 -S "SSL - Unknown identity received" \
7891 -S "SSL - Verification of the message MAC failed"
7892
7893requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7894run_test "PSK callback: raw psk on client, id-matching but wrong raw PSK on server, opaque PSK from callback" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007895 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
7896 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007897 psk_identity=def psk=beef" \
7898 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02007899 -C "session hash for extended master secret"\
7900 -S "session hash for extended master secret"\
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007901 -S "SSL - The handshake negotiation failed" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007902 -S "SSL - Unknown identity received" \
7903 -S "SSL - Verification of the message MAC failed"
7904
7905requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
7906run_test "PSK callback: raw psk on client, matching opaque PSK on server, wrong opaque PSK from callback" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00007907 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=beef debug_level=3 psk_list=abc,dead,def,abc123 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
7908 "$P_CLI extended_ms=0 debug_level=3 min_version=tls12 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker28c79dc2018-10-26 13:15:08 +01007909 psk_identity=def psk=beef" \
7910 1 \
7911 -s "SSL - Verification of the message MAC failed"
7912
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007913run_test "PSK callback: no psk, no callback" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02007914 "$P_SRV" \
7915 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
7916 psk_identity=foo psk=abc123" \
7917 1 \
Dave Rodgman6ce10be2021-06-29 14:20:31 +01007918 -s "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007919 -S "SSL - Unknown identity received" \
7920 -S "SSL - Verification of the message MAC failed"
7921
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007922run_test "PSK callback: callback overrides other settings" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007923 "$P_SRV psk=abc123 psk_identity=foo psk_list=abc,dead,def,beef" \
7924 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
7925 psk_identity=foo psk=abc123" \
7926 1 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007927 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007928 -s "SSL - Unknown identity received" \
7929 -S "SSL - Verification of the message MAC failed"
7930
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007931run_test "PSK callback: first id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007932 "$P_SRV psk_list=abc,dead,def,beef" \
7933 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
7934 psk_identity=abc psk=dead" \
7935 0 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007936 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007937 -S "SSL - Unknown identity received" \
7938 -S "SSL - Verification of the message MAC failed"
7939
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007940run_test "PSK callback: second id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007941 "$P_SRV psk_list=abc,dead,def,beef" \
7942 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
7943 psk_identity=def psk=beef" \
7944 0 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007945 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007946 -S "SSL - Unknown identity received" \
7947 -S "SSL - Verification of the message MAC failed"
7948
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007949run_test "PSK callback: no match" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007950 "$P_SRV psk_list=abc,dead,def,beef" \
7951 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
7952 psk_identity=ghi psk=beef" \
7953 1 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007954 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007955 -s "SSL - Unknown identity received" \
7956 -S "SSL - Verification of the message MAC failed"
7957
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02007958run_test "PSK callback: wrong key" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007959 "$P_SRV psk_list=abc,dead,def,beef" \
7960 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
7961 psk_identity=abc psk=beef" \
7962 1 \
Dave Rodgmane5b828c2021-06-29 19:05:34 +01007963 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02007964 -S "SSL - Unknown identity received" \
7965 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02007966
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02007967# Tests for EC J-PAKE
7968
Hanno Beckerfa452c42020-08-14 15:42:49 +01007969requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Jerry Yuab082902021-12-23 18:02:22 +08007970requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02007971run_test "ECJPAKE: client not configured" \
7972 "$P_SRV debug_level=3" \
7973 "$P_CLI debug_level=3" \
7974 0 \
Hanno Beckeree63af62020-08-14 15:41:23 +01007975 -C "add ciphersuite: 0xc0ff" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02007976 -C "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02007977 -S "found ecjpake kkpp extension" \
7978 -S "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02007979 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02007980 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02007981 -C "found ecjpake_kkpp extension" \
Dave Rodgman737237f2021-06-29 19:07:57 +01007982 -S "SSL - The handshake negotiation failed"
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02007983
Hanno Beckerfa452c42020-08-14 15:42:49 +01007984requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02007985run_test "ECJPAKE: server not configured" \
7986 "$P_SRV debug_level=3" \
7987 "$P_CLI debug_level=3 ecjpake_pw=bla \
7988 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
7989 1 \
Ronald Cron7320e642022-03-08 13:34:49 +01007990 -c "add ciphersuite: c0ff" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02007991 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02007992 -s "found ecjpake kkpp extension" \
7993 -s "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02007994 -s "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02007995 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02007996 -C "found ecjpake_kkpp extension" \
Dave Rodgman737237f2021-06-29 19:07:57 +01007997 -s "SSL - The handshake negotiation failed"
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02007998
Valerio Settif11e05a2022-12-07 15:41:05 +01007999# Note: if the name of this test is changed, then please adjust the corresponding
8000# filtering label in "test_tls1_2_ecjpake_compatibility" (in "all.sh")
Hanno Beckerfa452c42020-08-14 15:42:49 +01008001requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02008002run_test "ECJPAKE: working, TLS" \
8003 "$P_SRV debug_level=3 ecjpake_pw=bla" \
8004 "$P_CLI debug_level=3 ecjpake_pw=bla \
8005 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
Manuel Pégourié-Gonnard0f1660a2015-09-16 22:41:06 +02008006 0 \
Ronald Cron7320e642022-03-08 13:34:49 +01008007 -c "add ciphersuite: c0ff" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02008008 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02008009 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02008010 -s "found ecjpake kkpp extension" \
8011 -S "skip ecjpake kkpp extension" \
8012 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02008013 -s "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02008014 -c "found ecjpake_kkpp extension" \
Dave Rodgman737237f2021-06-29 19:07:57 +01008015 -S "SSL - The handshake negotiation failed" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02008016 -S "SSL - Verification of the message MAC failed"
8017
Valerio Settid572a822022-11-28 18:27:51 +01008018requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Valerio Settia6b69da2022-11-30 16:44:49 +01008019requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Valerio Setti70e02902022-12-02 16:21:56 +01008020run_test "ECJPAKE: opaque password client+server, working, TLS" \
Valerio Settid572a822022-11-28 18:27:51 +01008021 "$P_SRV debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1" \
8022 "$P_CLI debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1\
8023 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
8024 0 \
8025 -c "add ciphersuite: c0ff" \
8026 -c "adding ecjpake_kkpp extension" \
Valerio Setti661b9bc2022-11-29 17:19:25 +01008027 -c "using opaque password" \
8028 -s "using opaque password" \
Valerio Settid572a822022-11-28 18:27:51 +01008029 -C "re-using cached ecjpake parameters" \
8030 -s "found ecjpake kkpp extension" \
8031 -S "skip ecjpake kkpp extension" \
8032 -S "ciphersuite mismatch: ecjpake not configured" \
8033 -s "server hello, ecjpake kkpp extension" \
8034 -c "found ecjpake_kkpp extension" \
8035 -S "SSL - The handshake negotiation failed" \
8036 -S "SSL - Verification of the message MAC failed"
8037
Valerio Settif11e05a2022-12-07 15:41:05 +01008038# Note: if the name of this test is changed, then please adjust the corresponding
8039# filtering label in "test_tls1_2_ecjpake_compatibility" (in "all.sh")
Valerio Settib287ddf2022-12-01 16:18:12 +01008040requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
8041requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Valerio Setti70e02902022-12-02 16:21:56 +01008042run_test "ECJPAKE: opaque password client only, working, TLS" \
Valerio Settib287ddf2022-12-01 16:18:12 +01008043 "$P_SRV debug_level=3 ecjpake_pw=bla" \
8044 "$P_CLI debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1\
8045 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
8046 0 \
8047 -c "add ciphersuite: c0ff" \
8048 -c "adding ecjpake_kkpp extension" \
8049 -c "using opaque password" \
8050 -S "using opaque password" \
8051 -C "re-using cached ecjpake parameters" \
8052 -s "found ecjpake kkpp extension" \
8053 -S "skip ecjpake kkpp extension" \
8054 -S "ciphersuite mismatch: ecjpake not configured" \
8055 -s "server hello, ecjpake kkpp extension" \
8056 -c "found ecjpake_kkpp extension" \
8057 -S "SSL - The handshake negotiation failed" \
8058 -S "SSL - Verification of the message MAC failed"
8059
Valerio Settif11e05a2022-12-07 15:41:05 +01008060# Note: if the name of this test is changed, then please adjust the corresponding
8061# filtering label in "test_tls1_2_ecjpake_compatibility" (in "all.sh")
Valerio Settib287ddf2022-12-01 16:18:12 +01008062requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
8063requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Valerio Setti70e02902022-12-02 16:21:56 +01008064run_test "ECJPAKE: opaque password server only, working, TLS" \
Valerio Settib287ddf2022-12-01 16:18:12 +01008065 "$P_SRV debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1" \
8066 "$P_CLI debug_level=3 ecjpake_pw=bla\
8067 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
8068 0 \
8069 -c "add ciphersuite: c0ff" \
8070 -c "adding ecjpake_kkpp extension" \
8071 -C "using opaque password" \
8072 -s "using opaque password" \
8073 -C "re-using cached ecjpake parameters" \
8074 -s "found ecjpake kkpp extension" \
8075 -S "skip ecjpake kkpp extension" \
8076 -S "ciphersuite mismatch: ecjpake not configured" \
8077 -s "server hello, ecjpake kkpp extension" \
8078 -c "found ecjpake_kkpp extension" \
8079 -S "SSL - The handshake negotiation failed" \
8080 -S "SSL - Verification of the message MAC failed"
8081
Janos Follath74537a62016-09-02 13:45:28 +01008082server_needs_more_time 1
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01008083requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02008084run_test "ECJPAKE: password mismatch, TLS" \
8085 "$P_SRV debug_level=3 ecjpake_pw=bla" \
8086 "$P_CLI debug_level=3 ecjpake_pw=bad \
8087 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
8088 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02008089 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02008090 -s "SSL - Verification of the message MAC failed"
8091
Valerio Settib287ddf2022-12-01 16:18:12 +01008092server_needs_more_time 1
8093requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
8094requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Valerio Settib287ddf2022-12-01 16:18:12 +01008095run_test "ECJPAKE_OPAQUE_PW: opaque password mismatch, TLS" \
8096 "$P_SRV debug_level=3 ecjpake_pw=bla ecjpake_pw_opaque=1" \
8097 "$P_CLI debug_level=3 ecjpake_pw=bad ecjpake_pw_opaque=1 \
8098 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
8099 1 \
8100 -c "using opaque password" \
8101 -s "using opaque password" \
8102 -C "re-using cached ecjpake parameters" \
8103 -s "SSL - Verification of the message MAC failed"
8104
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01008105requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02008106run_test "ECJPAKE: working, DTLS" \
8107 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
8108 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
8109 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
8110 0 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02008111 -c "re-using cached ecjpake parameters" \
8112 -S "SSL - Verification of the message MAC failed"
8113
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01008114requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02008115run_test "ECJPAKE: working, DTLS, no cookie" \
8116 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla cookies=0" \
8117 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
8118 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
8119 0 \
8120 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02008121 -S "SSL - Verification of the message MAC failed"
8122
Janos Follath74537a62016-09-02 13:45:28 +01008123server_needs_more_time 1
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01008124requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02008125run_test "ECJPAKE: password mismatch, DTLS" \
8126 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
8127 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bad \
8128 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
8129 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02008130 -c "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02008131 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02008132
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02008133# for tests with configs/config-thread.h
Dave Rodgmanbec7caf2021-06-29 19:05:34 +01008134requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE_ENABLED
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02008135run_test "ECJPAKE: working, DTLS, nolog" \
8136 "$P_SRV dtls=1 ecjpake_pw=bla" \
8137 "$P_CLI dtls=1 ecjpake_pw=bla \
8138 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
8139 0
8140
Manuel Pégourié-Gonnard4cc8c632015-07-23 12:24:03 +02008141# Test for ClientHello without extensions
8142
Manuel Pégourié-Gonnardd55bc202015-08-04 16:22:30 +02008143requires_gnutls
Manuel Pégourié-Gonnardbc4da292020-01-30 12:45:14 +01008144run_test "ClientHello without extensions" \
Ronald Cronf95d1692023-03-14 17:19:42 +01008145 "$P_SRV force_version=tls12 debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02008146 "$G_CLI --priority=NORMAL:%NO_EXTENSIONS:%DISABLE_SAFE_RENEGOTIATION localhost" \
Gilles Peskine5d2511c2017-05-12 13:16:40 +02008147 0 \
8148 -s "dumping 'client hello extensions' (0 bytes)"
8149
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02008150# Tests for mbedtls_ssl_get_bytes_avail()
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02008151
Gilles Peskined2d90af2022-04-06 23:35:56 +02008152# The server first reads buffer_size-1 bytes, then reads the remainder.
Jerry Yuab082902021-12-23 18:02:22 +08008153requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02008154run_test "mbedtls_ssl_get_bytes_avail: no extra data" \
Gilles Peskined2d90af2022-04-06 23:35:56 +02008155 "$P_SRV buffer_size=100" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02008156 "$P_CLI request_size=100" \
8157 0 \
8158 -s "Read from client: 100 bytes read$"
8159
Jerry Yuab082902021-12-23 18:02:22 +08008160requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Gilles Peskined2d90af2022-04-06 23:35:56 +02008161run_test "mbedtls_ssl_get_bytes_avail: extra data (+1)" \
8162 "$P_SRV buffer_size=100" \
8163 "$P_CLI request_size=101" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02008164 0 \
Gilles Peskined2d90af2022-04-06 23:35:56 +02008165 -s "Read from client: 101 bytes read (100 + 1)"
8166
8167requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
8168requires_max_content_len 200
8169run_test "mbedtls_ssl_get_bytes_avail: extra data (*2)" \
8170 "$P_SRV buffer_size=100" \
8171 "$P_CLI request_size=200" \
8172 0 \
8173 -s "Read from client: 200 bytes read (100 + 100)"
8174
8175requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
8176run_test "mbedtls_ssl_get_bytes_avail: extra data (max)" \
8177 "$P_SRV buffer_size=100" \
8178 "$P_CLI request_size=$MAX_CONTENT_LEN" \
8179 0 \
8180 -s "Read from client: $MAX_CONTENT_LEN bytes read (100 + $((MAX_CONTENT_LEN - 100)))"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02008181
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008182# Tests for small client packets
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02008183
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008184run_test "Small client packet TLS 1.2 BlockCipher" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008185 "$P_SRV force_version=tls12" \
8186 "$P_CLI request_size=1 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02008187 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
8188 0 \
8189 -s "Read from client: 1 bytes read"
8190
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008191run_test "Small client packet TLS 1.2 BlockCipher, without EtM" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008192 "$P_SRV force_version=tls12" \
8193 "$P_CLI request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00008194 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01008195 0 \
8196 -s "Read from client: 1 bytes read"
8197
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008198run_test "Small client packet TLS 1.2 BlockCipher larger MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008199 "$P_SRV force_version=tls12" \
8200 "$P_CLI request_size=1 \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01008201 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02008202 0 \
8203 -s "Read from client: 1 bytes read"
8204
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008205run_test "Small client packet TLS 1.2 AEAD" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008206 "$P_SRV force_version=tls12" \
8207 "$P_CLI request_size=1 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02008208 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
8209 0 \
8210 -s "Read from client: 1 bytes read"
8211
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008212run_test "Small client packet TLS 1.2 AEAD shorter tag" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008213 "$P_SRV force_version=tls12" \
8214 "$P_CLI request_size=1 \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02008215 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
8216 0 \
8217 -s "Read from client: 1 bytes read"
8218
Ronald Cron928cbd32022-10-04 16:14:26 +02008219requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02008220run_test "Small client packet TLS 1.3 AEAD" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01008221 "$P_SRV" \
Ronald Crona4417c12022-06-23 16:06:28 +02008222 "$P_CLI request_size=1 \
8223 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256" \
8224 0 \
8225 -s "Read from client: 1 bytes read"
8226
Ronald Cron928cbd32022-10-04 16:14:26 +02008227requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02008228run_test "Small client packet TLS 1.3 AEAD shorter tag" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01008229 "$P_SRV" \
Ronald Crona4417c12022-06-23 16:06:28 +02008230 "$P_CLI request_size=1 \
8231 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256" \
8232 0 \
8233 -s "Read from client: 1 bytes read"
8234
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008235# Tests for small client packets in DTLS
Hanno Beckere2148042017-11-10 08:59:18 +00008236
8237requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008238run_test "Small client packet DTLS 1.2" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008239 "$P_SRV dtls=1 force_version=dtls12" \
Hanno Beckere2148042017-11-10 08:59:18 +00008240 "$P_CLI dtls=1 request_size=1 \
8241 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
8242 0 \
8243 -s "Read from client: 1 bytes read"
8244
8245requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008246run_test "Small client packet DTLS 1.2, without EtM" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008247 "$P_SRV dtls=1 force_version=dtls12 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00008248 "$P_CLI dtls=1 request_size=1 \
8249 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
8250 0 \
8251 -s "Read from client: 1 bytes read"
8252
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008253# Tests for small server packets
8254
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008255run_test "Small server packet TLS 1.2 BlockCipher" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008256 "$P_SRV response_size=1 force_version=tls12" \
8257 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008258 0 \
8259 -c "Read from server: 1 bytes read"
8260
8261run_test "Small server packet TLS 1.2 BlockCipher, without EtM" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008262 "$P_SRV response_size=1 force_version=tls12" \
8263 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008264 0 \
8265 -c "Read from server: 1 bytes read"
8266
8267run_test "Small server packet TLS 1.2 BlockCipher larger MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008268 "$P_SRV response_size=1 force_version=tls12" \
8269 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008270 0 \
8271 -c "Read from server: 1 bytes read"
8272
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008273run_test "Small server packet TLS 1.2 AEAD" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008274 "$P_SRV response_size=1 force_version=tls12" \
8275 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008276 0 \
8277 -c "Read from server: 1 bytes read"
8278
8279run_test "Small server packet TLS 1.2 AEAD shorter tag" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008280 "$P_SRV response_size=1 force_version=tls12" \
8281 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008282 0 \
8283 -c "Read from server: 1 bytes read"
8284
Ronald Cron928cbd32022-10-04 16:14:26 +02008285requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02008286run_test "Small server packet TLS 1.3 AEAD" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01008287 "$P_SRV response_size=1" \
Ronald Crona4417c12022-06-23 16:06:28 +02008288 "$P_CLI force_ciphersuite=TLS1-3-AES-128-CCM-SHA256" \
8289 0 \
8290 -c "Read from server: 1 bytes read"
8291
Ronald Cron928cbd32022-10-04 16:14:26 +02008292requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02008293run_test "Small server packet TLS 1.3 AEAD shorter tag" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01008294 "$P_SRV response_size=1" \
Ronald Crona4417c12022-06-23 16:06:28 +02008295 "$P_CLI force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256" \
8296 0 \
8297 -c "Read from server: 1 bytes read"
8298
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008299# Tests for small server packets in DTLS
8300
8301requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008302run_test "Small server packet DTLS 1.2" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008303 "$P_SRV dtls=1 response_size=1 force_version=dtls12" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008304 "$P_CLI dtls=1 \
8305 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
8306 0 \
8307 -c "Read from server: 1 bytes read"
8308
8309requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8310run_test "Small server packet DTLS 1.2, without EtM" \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +00008311 "$P_SRV dtls=1 response_size=1 force_version=dtls12 etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008312 "$P_CLI dtls=1 \
8313 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
8314 0 \
8315 -c "Read from server: 1 bytes read"
8316
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008317# Test for large client packets
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02008318
Angus Grattonc4dd0732018-04-11 16:28:39 +10008319# How many fragments do we expect to write $1 bytes?
8320fragments_for_write() {
8321 echo "$(( ( $1 + $MAX_OUT_LEN - 1 ) / $MAX_OUT_LEN ))"
8322}
8323
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008324run_test "Large client packet TLS 1.2 BlockCipher" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008325 "$P_SRV force_version=tls12" \
8326 "$P_CLI request_size=16384 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02008327 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
8328 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10008329 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
8330 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02008331
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008332run_test "Large client packet TLS 1.2 BlockCipher, without EtM" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008333 "$P_SRV force_version=tls12" \
8334 "$P_CLI request_size=16384 etm=0 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00008335 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
8336 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10008337 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00008338
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008339run_test "Large client packet TLS 1.2 BlockCipher larger MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008340 "$P_SRV force_version=tls12" \
8341 "$P_CLI request_size=16384 \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01008342 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02008343 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10008344 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
8345 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02008346
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008347run_test "Large client packet TLS 1.2 AEAD" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008348 "$P_SRV force_version=tls12" \
8349 "$P_CLI request_size=16384 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02008350 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
8351 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10008352 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
8353 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02008354
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008355run_test "Large client packet TLS 1.2 AEAD shorter tag" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008356 "$P_SRV force_version=tls12" \
8357 "$P_CLI request_size=16384 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02008358 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
8359 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10008360 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
8361 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02008362
Ronald Cron928cbd32022-10-04 16:14:26 +02008363requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02008364run_test "Large client packet TLS 1.3 AEAD" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01008365 "$P_SRV" \
Ronald Crona4417c12022-06-23 16:06:28 +02008366 "$P_CLI request_size=16384 \
8367 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256" \
8368 0 \
8369 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
8370 -s "Read from client: $MAX_CONTENT_LEN bytes read"
8371
Ronald Cron928cbd32022-10-04 16:14:26 +02008372requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02008373run_test "Large client packet TLS 1.3 AEAD shorter tag" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01008374 "$P_SRV" \
Ronald Crona4417c12022-06-23 16:06:28 +02008375 "$P_CLI request_size=16384 \
8376 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256" \
8377 0 \
8378 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
8379 -s "Read from client: $MAX_CONTENT_LEN bytes read"
8380
Yuto Takanobc87b1d2021-07-08 15:56:33 +01008381# The tests below fail when the server's OUT_CONTENT_LEN is less than 16384.
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008382run_test "Large server packet TLS 1.2 BlockCipher" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008383 "$P_SRV response_size=16384 force_version=tls12" \
8384 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008385 0 \
8386 -c "Read from server: 16384 bytes read"
8387
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008388run_test "Large server packet TLS 1.2 BlockCipher, without EtM" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008389 "$P_SRV response_size=16384 force_version=tls12" \
8390 "$P_CLI etm=0 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008391 0 \
8392 -s "16384 bytes written in 1 fragments" \
8393 -c "Read from server: 16384 bytes read"
8394
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008395run_test "Large server packet TLS 1.2 BlockCipher larger MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008396 "$P_SRV response_size=16384 force_version=tls12" \
8397 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008398 0 \
8399 -c "Read from server: 16384 bytes read"
8400
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008401run_test "Large server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008402 "$P_SRV response_size=16384 trunc_hmac=1 force_version=tls12" \
8403 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04008404 0 \
8405 -s "16384 bytes written in 1 fragments" \
8406 -c "Read from server: 16384 bytes read"
8407
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008408run_test "Large server packet TLS 1.2 AEAD" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008409 "$P_SRV response_size=16384 force_version=tls12" \
8410 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008411 0 \
8412 -c "Read from server: 16384 bytes read"
8413
8414run_test "Large server packet TLS 1.2 AEAD shorter tag" \
Ronald Cronf3b425b2022-03-17 16:45:09 +01008415 "$P_SRV response_size=16384 force_version=tls12" \
8416 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02008417 0 \
8418 -c "Read from server: 16384 bytes read"
8419
Ronald Cron928cbd32022-10-04 16:14:26 +02008420requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02008421run_test "Large server packet TLS 1.3 AEAD" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01008422 "$P_SRV response_size=16384" \
Ronald Crona4417c12022-06-23 16:06:28 +02008423 "$P_CLI force_ciphersuite=TLS1-3-AES-128-CCM-SHA256" \
8424 0 \
8425 -c "Read from server: 16384 bytes read"
8426
Ronald Cron928cbd32022-10-04 16:14:26 +02008427requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona4417c12022-06-23 16:06:28 +02008428run_test "Large server packet TLS 1.3 AEAD shorter tag" \
Ronald Cron50ae84e2023-03-14 08:59:56 +01008429 "$P_SRV response_size=16384" \
Ronald Crona4417c12022-06-23 16:06:28 +02008430 "$P_CLI force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256" \
8431 0 \
8432 -c "Read from server: 16384 bytes read"
8433
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008434# Tests for restartable ECC
8435
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008436# Force the use of a curve that supports restartable ECC (secp256r1).
8437
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008438requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008439requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008440run_test "EC restart: TLS, default" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008441 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008442 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02008443 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008444 debug_level=1" \
8445 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008446 -C "x509_verify_cert.*4b00" \
8447 -C "mbedtls_pk_verify.*4b00" \
8448 -C "mbedtls_ecdh_make_public.*4b00" \
8449 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008450
8451requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008452requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008453run_test "EC restart: TLS, max_ops=0" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008454 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008455 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02008456 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008457 debug_level=1 ec_max_ops=0" \
8458 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008459 -C "x509_verify_cert.*4b00" \
8460 -C "mbedtls_pk_verify.*4b00" \
8461 -C "mbedtls_ecdh_make_public.*4b00" \
8462 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008463
8464requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008465requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008466run_test "EC restart: TLS, max_ops=65535" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008467 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008468 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02008469 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008470 debug_level=1 ec_max_ops=65535" \
8471 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008472 -C "x509_verify_cert.*4b00" \
8473 -C "mbedtls_pk_verify.*4b00" \
8474 -C "mbedtls_ecdh_make_public.*4b00" \
8475 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008476
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008477# With USE_PSA disabled we expect full restartable behaviour.
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008478requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008479requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008480requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
8481run_test "EC restart: TLS, max_ops=1000 (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008482 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008483 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02008484 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008485 debug_level=1 ec_max_ops=1000" \
8486 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008487 -c "x509_verify_cert.*4b00" \
8488 -c "mbedtls_pk_verify.*4b00" \
8489 -c "mbedtls_ecdh_make_public.*4b00" \
8490 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008491
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008492# With USE_PSA enabled we expect only partial restartable behaviour:
8493# everything except ECDH (where TLS calls PSA directly).
8494requires_config_enabled MBEDTLS_ECP_RESTARTABLE
8495requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008496requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
8497run_test "EC restart: TLS, max_ops=1000 (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008498 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008499 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8500 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8501 debug_level=1 ec_max_ops=1000" \
8502 0 \
8503 -c "x509_verify_cert.*4b00" \
8504 -c "mbedtls_pk_verify.*4b00" \
8505 -C "mbedtls_ecdh_make_public.*4b00" \
8506 -c "mbedtls_pk_sign.*4b00"
8507
8508# This works the same with & without USE_PSA as we never get to ECDH:
8509# we abort as soon as we determined the cert is bad.
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008510requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008511requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008512run_test "EC restart: TLS, max_ops=1000, badsign" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008513 "$P_SRV groups=secp256r1 auth_mode=required \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008514 crt_file=data_files/server5-badsign.crt \
8515 key_file=data_files/server5.key" \
8516 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8517 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8518 debug_level=1 ec_max_ops=1000" \
8519 1 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008520 -c "x509_verify_cert.*4b00" \
8521 -C "mbedtls_pk_verify.*4b00" \
8522 -C "mbedtls_ecdh_make_public.*4b00" \
8523 -C "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008524 -c "! The certificate is not correctly signed by the trusted CA" \
8525 -c "! mbedtls_ssl_handshake returned" \
8526 -c "X509 - Certificate verification failed"
8527
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008528# With USE_PSA disabled we expect full restartable behaviour.
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008529requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008530requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008531requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
8532run_test "EC restart: TLS, max_ops=1000, auth_mode=optional badsign (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008533 "$P_SRV groups=secp256r1 auth_mode=required \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008534 crt_file=data_files/server5-badsign.crt \
8535 key_file=data_files/server5.key" \
8536 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8537 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8538 debug_level=1 ec_max_ops=1000 auth_mode=optional" \
8539 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008540 -c "x509_verify_cert.*4b00" \
8541 -c "mbedtls_pk_verify.*4b00" \
8542 -c "mbedtls_ecdh_make_public.*4b00" \
8543 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008544 -c "! The certificate is not correctly signed by the trusted CA" \
8545 -C "! mbedtls_ssl_handshake returned" \
8546 -C "X509 - Certificate verification failed"
8547
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008548# With USE_PSA enabled we expect only partial restartable behaviour:
8549# everything except ECDH (where TLS calls PSA directly).
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008550requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008551requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008552requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
8553run_test "EC restart: TLS, max_ops=1000, auth_mode=optional badsign (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008554 "$P_SRV groups=secp256r1 auth_mode=required \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008555 crt_file=data_files/server5-badsign.crt \
8556 key_file=data_files/server5.key" \
8557 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8558 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8559 debug_level=1 ec_max_ops=1000 auth_mode=optional" \
8560 0 \
8561 -c "x509_verify_cert.*4b00" \
8562 -c "mbedtls_pk_verify.*4b00" \
8563 -C "mbedtls_ecdh_make_public.*4b00" \
8564 -c "mbedtls_pk_sign.*4b00" \
8565 -c "! The certificate is not correctly signed by the trusted CA" \
8566 -C "! mbedtls_ssl_handshake returned" \
8567 -C "X509 - Certificate verification failed"
8568
8569# With USE_PSA disabled we expect full restartable behaviour.
8570requires_config_enabled MBEDTLS_ECP_RESTARTABLE
8571requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008572requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
8573run_test "EC restart: TLS, max_ops=1000, auth_mode=none badsign (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008574 "$P_SRV groups=secp256r1 auth_mode=required \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008575 crt_file=data_files/server5-badsign.crt \
8576 key_file=data_files/server5.key" \
8577 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8578 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8579 debug_level=1 ec_max_ops=1000 auth_mode=none" \
8580 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008581 -C "x509_verify_cert.*4b00" \
8582 -c "mbedtls_pk_verify.*4b00" \
8583 -c "mbedtls_ecdh_make_public.*4b00" \
8584 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008585 -C "! The certificate is not correctly signed by the trusted CA" \
8586 -C "! mbedtls_ssl_handshake returned" \
8587 -C "X509 - Certificate verification failed"
8588
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008589# With USE_PSA enabled we expect only partial restartable behaviour:
8590# everything except ECDH (where TLS calls PSA directly).
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02008591requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008592requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008593requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
8594run_test "EC restart: TLS, max_ops=1000, auth_mode=none badsign (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008595 "$P_SRV groups=secp256r1 auth_mode=required \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008596 crt_file=data_files/server5-badsign.crt \
8597 key_file=data_files/server5.key" \
8598 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8599 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8600 debug_level=1 ec_max_ops=1000 auth_mode=none" \
8601 0 \
8602 -C "x509_verify_cert.*4b00" \
8603 -c "mbedtls_pk_verify.*4b00" \
8604 -C "mbedtls_ecdh_make_public.*4b00" \
8605 -c "mbedtls_pk_sign.*4b00" \
8606 -C "! The certificate is not correctly signed by the trusted CA" \
8607 -C "! mbedtls_ssl_handshake returned" \
8608 -C "X509 - Certificate verification failed"
8609
8610# With USE_PSA disabled we expect full restartable behaviour.
8611requires_config_enabled MBEDTLS_ECP_RESTARTABLE
8612requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008613requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
8614run_test "EC restart: DTLS, max_ops=1000 (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008615 "$P_SRV groups=secp256r1 auth_mode=required dtls=1" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008616 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02008617 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008618 dtls=1 debug_level=1 ec_max_ops=1000" \
8619 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008620 -c "x509_verify_cert.*4b00" \
8621 -c "mbedtls_pk_verify.*4b00" \
8622 -c "mbedtls_ecdh_make_public.*4b00" \
8623 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02008624
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008625# With USE_PSA enabled we expect only partial restartable behaviour:
8626# everything except ECDH (where TLS calls PSA directly).
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02008627requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008628requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008629requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
8630run_test "EC restart: DTLS, max_ops=1000 (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008631 "$P_SRV groups=secp256r1 auth_mode=required dtls=1" \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008632 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8633 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8634 dtls=1 debug_level=1 ec_max_ops=1000" \
8635 0 \
8636 -c "x509_verify_cert.*4b00" \
8637 -c "mbedtls_pk_verify.*4b00" \
8638 -C "mbedtls_ecdh_make_public.*4b00" \
8639 -c "mbedtls_pk_sign.*4b00"
8640
8641# With USE_PSA disabled we expect full restartable behaviour.
8642requires_config_enabled MBEDTLS_ECP_RESTARTABLE
8643requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008644requires_config_disabled MBEDTLS_USE_PSA_CRYPTO
8645run_test "EC restart: TLS, max_ops=1000 no client auth (no USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008646 "$P_SRV groups=secp256r1" \
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02008647 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8648 debug_level=1 ec_max_ops=1000" \
8649 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008650 -c "x509_verify_cert.*4b00" \
8651 -c "mbedtls_pk_verify.*4b00" \
8652 -c "mbedtls_ecdh_make_public.*4b00" \
8653 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02008654
Manuel Pégourié-Gonnard2b7ad642022-12-06 10:42:44 +01008655
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008656# With USE_PSA enabled we expect only partial restartable behaviour:
8657# everything except ECDH (where TLS calls PSA directly).
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02008658requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Gilles Peskine4a02cef2021-06-03 11:12:40 +02008659requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008660requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
8661run_test "EC restart: TLS, max_ops=1000 no client auth (USE_PSA)" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008662 "$P_SRV groups=secp256r1" \
Manuel Pégourié-Gonnard55a188b2022-12-06 12:00:33 +01008663 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
8664 debug_level=1 ec_max_ops=1000" \
8665 0 \
8666 -c "x509_verify_cert.*4b00" \
8667 -c "mbedtls_pk_verify.*4b00" \
8668 -C "mbedtls_ecdh_make_public.*4b00" \
8669 -C "mbedtls_pk_sign.*4b00"
8670
Manuel Pégourié-Gonnard2b7ad642022-12-06 10:42:44 +01008671# Restartable is only for ECDHE-ECDSA, with another ciphersuite we expect no
8672# restartable behaviour at all (not even client auth).
8673# This is the same as "EC restart: TLS, max_ops=1000" except with ECDHE-RSA,
8674# and all 4 assertions negated.
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02008675requires_config_enabled MBEDTLS_ECP_RESTARTABLE
8676requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Manuel Pégourié-Gonnard2b7ad642022-12-06 10:42:44 +01008677run_test "EC restart: TLS, max_ops=1000, ECDHE-RSA" \
Przemek Stekiel45255e42023-06-29 13:56:36 +02008678 "$P_SRV groups=secp256r1 auth_mode=required" \
Manuel Pégourié-Gonnard2b7ad642022-12-06 10:42:44 +01008679 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 \
8680 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8681 debug_level=1 ec_max_ops=1000" \
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02008682 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02008683 -C "x509_verify_cert.*4b00" \
8684 -C "mbedtls_pk_verify.*4b00" \
8685 -C "mbedtls_ecdh_make_public.*4b00" \
8686 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02008687
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008688# Tests of asynchronous private key support in SSL
8689
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008690requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008691run_test "SSL async private: sign, delay=0" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008692 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008693 async_operations=s async_private_delay1=0 async_private_delay2=0" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008694 "$P_CLI" \
8695 0 \
8696 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008697 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008698
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008699requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008700run_test "SSL async private: sign, delay=1" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008701 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008702 async_operations=s async_private_delay1=1 async_private_delay2=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008703 "$P_CLI" \
8704 0 \
8705 -s "Async sign callback: using key slot " \
8706 -s "Async resume (slot [0-9]): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008707 -s "Async resume (slot [0-9]): sign done, status=0"
8708
Gilles Peskine12d0cc12018-04-26 15:06:56 +02008709requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
8710run_test "SSL async private: sign, delay=2" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008711 "$P_SRV force_version=tls12 \
Gilles Peskine12d0cc12018-04-26 15:06:56 +02008712 async_operations=s async_private_delay1=2 async_private_delay2=2" \
8713 "$P_CLI" \
8714 0 \
8715 -s "Async sign callback: using key slot " \
8716 -U "Async sign callback: using key slot " \
8717 -s "Async resume (slot [0-9]): call 1 more times." \
8718 -s "Async resume (slot [0-9]): call 0 more times." \
8719 -s "Async resume (slot [0-9]): sign done, status=0"
8720
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008721requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Hanno Beckerc5722d12020-10-09 11:10:42 +01008722requires_config_disabled MBEDTLS_X509_REMOVE_INFO
Gilles Peskine807d74a2018-04-30 10:30:49 +02008723run_test "SSL async private: sign, SNI" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008724 "$P_SRV force_version=tls12 debug_level=3 \
Gilles Peskine807d74a2018-04-30 10:30:49 +02008725 async_operations=s async_private_delay1=0 async_private_delay2=0 \
8726 crt_file=data_files/server5.crt key_file=data_files/server5.key \
8727 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
8728 "$P_CLI server_name=polarssl.example" \
8729 0 \
8730 -s "Async sign callback: using key slot " \
8731 -s "Async resume (slot [0-9]): sign done, status=0" \
8732 -s "parse ServerName extension" \
8733 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
8734 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
8735
8736requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008737run_test "SSL async private: decrypt, delay=0" \
8738 "$P_SRV \
8739 async_operations=d async_private_delay1=0 async_private_delay2=0" \
8740 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8741 0 \
8742 -s "Async decrypt callback: using key slot " \
8743 -s "Async resume (slot [0-9]): decrypt done, status=0"
8744
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008745requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008746run_test "SSL async private: decrypt, delay=1" \
8747 "$P_SRV \
8748 async_operations=d async_private_delay1=1 async_private_delay2=1" \
8749 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8750 0 \
8751 -s "Async decrypt callback: using key slot " \
8752 -s "Async resume (slot [0-9]): call 0 more times." \
8753 -s "Async resume (slot [0-9]): decrypt done, status=0"
8754
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008755requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008756run_test "SSL async private: decrypt RSA-PSK, delay=0" \
8757 "$P_SRV psk=abc123 \
8758 async_operations=d async_private_delay1=0 async_private_delay2=0" \
8759 "$P_CLI psk=abc123 \
8760 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
8761 0 \
8762 -s "Async decrypt callback: using key slot " \
8763 -s "Async resume (slot [0-9]): decrypt done, status=0"
8764
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008765requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008766run_test "SSL async private: decrypt RSA-PSK, delay=1" \
8767 "$P_SRV psk=abc123 \
8768 async_operations=d async_private_delay1=1 async_private_delay2=1" \
8769 "$P_CLI psk=abc123 \
8770 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
8771 0 \
8772 -s "Async decrypt callback: using key slot " \
8773 -s "Async resume (slot [0-9]): call 0 more times." \
8774 -s "Async resume (slot [0-9]): decrypt done, status=0"
8775
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008776requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008777run_test "SSL async private: sign callback not present" \
8778 "$P_SRV \
8779 async_operations=d async_private_delay1=1 async_private_delay2=1" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008780 "$P_CLI force_version=tls12; [ \$? -eq 1 ] &&
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008781 $P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8782 0 \
8783 -S "Async sign callback" \
8784 -s "! mbedtls_ssl_handshake returned" \
8785 -s "The own private key or pre-shared key is not set, but needed" \
8786 -s "Async resume (slot [0-9]): decrypt done, status=0" \
8787 -s "Successful connection"
8788
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008789requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008790run_test "SSL async private: decrypt callback not present" \
8791 "$P_SRV debug_level=1 \
8792 async_operations=s async_private_delay1=1 async_private_delay2=1" \
8793 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA;
Ronald Cronc5649382023-04-04 15:33:42 +02008794 [ \$? -eq 1 ] && $P_CLI force_version=tls12" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008795 0 \
8796 -S "Async decrypt callback" \
8797 -s "! mbedtls_ssl_handshake returned" \
8798 -s "got no RSA private key" \
8799 -s "Async resume (slot [0-9]): sign done, status=0" \
8800 -s "Successful connection"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008801
8802# key1: ECDSA, key2: RSA; use key1 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008803requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008804run_test "SSL async private: slot 0 used with key1" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008805 "$P_SRV \
8806 async_operations=s async_private_delay1=1 \
8807 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8808 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008809 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
8810 0 \
8811 -s "Async sign callback: using key slot 0," \
8812 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008813 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008814
8815# key1: ECDSA, key2: RSA; use key2 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008816requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008817run_test "SSL async private: slot 0 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008818 "$P_SRV \
8819 async_operations=s async_private_delay2=1 \
8820 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8821 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008822 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8823 0 \
8824 -s "Async sign callback: using key slot 0," \
8825 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008826 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008827
8828# key1: ECDSA, key2: RSA; use key2 from slot 1
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008829requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinead28bf02018-04-26 00:19:16 +02008830run_test "SSL async private: slot 1 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008831 "$P_SRV \
Gilles Peskine168dae82018-04-25 23:35:42 +02008832 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008833 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8834 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008835 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8836 0 \
8837 -s "Async sign callback: using key slot 1," \
8838 -s "Async resume (slot 1): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008839 -s "Async resume (slot 1): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008840
8841# key1: ECDSA, key2: RSA; use key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008842requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008843run_test "SSL async private: fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008844 "$P_SRV \
8845 async_operations=s async_private_delay1=1 \
8846 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8847 key_file2=data_files/server2.key crt_file2=data_files/server2.crt " \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008848 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8849 0 \
8850 -s "Async sign callback: no key matches this certificate."
8851
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008852requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008853run_test "SSL async private: sign, error in start" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008854 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008855 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8856 async_private_error=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008857 "$P_CLI" \
8858 1 \
8859 -s "Async sign callback: injected error" \
8860 -S "Async resume" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02008861 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008862 -s "! mbedtls_ssl_handshake returned"
8863
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008864requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008865run_test "SSL async private: sign, cancel after start" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008866 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008867 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8868 async_private_error=2" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008869 "$P_CLI" \
8870 1 \
8871 -s "Async sign callback: using key slot " \
8872 -S "Async resume" \
8873 -s "Async cancel"
8874
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008875requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008876run_test "SSL async private: sign, error in resume" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008877 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008878 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8879 async_private_error=3" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008880 "$P_CLI" \
8881 1 \
8882 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008883 -s "Async resume callback: sign done but injected error" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02008884 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008885 -s "! mbedtls_ssl_handshake returned"
8886
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008887requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008888run_test "SSL async private: decrypt, error in start" \
8889 "$P_SRV \
8890 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8891 async_private_error=1" \
8892 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8893 1 \
8894 -s "Async decrypt callback: injected error" \
8895 -S "Async resume" \
8896 -S "Async cancel" \
8897 -s "! mbedtls_ssl_handshake returned"
8898
8899requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
8900run_test "SSL async private: decrypt, cancel after start" \
8901 "$P_SRV \
8902 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8903 async_private_error=2" \
8904 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8905 1 \
8906 -s "Async decrypt callback: using key slot " \
8907 -S "Async resume" \
8908 -s "Async cancel"
8909
8910requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
8911run_test "SSL async private: decrypt, error in resume" \
8912 "$P_SRV \
8913 async_operations=d async_private_delay1=1 async_private_delay2=1 \
8914 async_private_error=3" \
8915 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8916 1 \
8917 -s "Async decrypt callback: using key slot " \
8918 -s "Async resume callback: decrypt done but injected error" \
8919 -S "Async cancel" \
8920 -s "! mbedtls_ssl_handshake returned"
8921
8922requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008923run_test "SSL async private: cancel after start then operate correctly" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008924 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008925 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8926 async_private_error=-2" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008927 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
8928 0 \
8929 -s "Async cancel" \
8930 -s "! mbedtls_ssl_handshake returned" \
8931 -s "Async resume" \
8932 -s "Successful connection"
8933
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008934requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008935run_test "SSL async private: error in resume then operate correctly" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008936 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008937 async_operations=s async_private_delay1=1 async_private_delay2=1 \
8938 async_private_error=-3" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008939 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
8940 0 \
8941 -s "! mbedtls_ssl_handshake returned" \
8942 -s "Async resume" \
8943 -s "Successful connection"
8944
8945# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008946requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Valerio Setti3f2309f2023-02-23 13:47:30 +01008947# Note: the function "detect_required_features()" is not able to detect more than
8948# one "force_ciphersuite" per client/server and it only picks the 2nd one.
8949# Therefore the 1st one is added explicitly here
Valerio Settid1f991c2023-02-22 12:54:13 +01008950requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008951run_test "SSL async private: cancel after start then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008952 "$P_SRV \
8953 async_operations=s async_private_delay1=1 async_private_error=-2 \
8954 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8955 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008956 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
8957 [ \$? -eq 1 ] &&
8958 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8959 0 \
Gilles Peskinededa75a2018-04-30 10:02:45 +02008960 -s "Async sign callback: using key slot 0" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008961 -S "Async resume" \
8962 -s "Async cancel" \
8963 -s "! mbedtls_ssl_handshake returned" \
8964 -s "Async sign callback: no key matches this certificate." \
8965 -s "Successful connection"
8966
8967# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008968requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Valerio Setti3f2309f2023-02-23 13:47:30 +01008969# Note: the function "detect_required_features()" is not able to detect more than
8970# one "force_ciphersuite" per client/server and it only picks the 2nd one.
8971# Therefore the 1st one is added explicitly here
Valerio Settid1f991c2023-02-22 12:54:13 +01008972requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Gilles Peskine725f1cb2018-06-12 15:06:40 +02008973run_test "SSL async private: sign, error in resume then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008974 "$P_SRV \
8975 async_operations=s async_private_delay1=1 async_private_error=-3 \
8976 key_file=data_files/server5.key crt_file=data_files/server5.crt \
8977 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01008978 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
8979 [ \$? -eq 1 ] &&
8980 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
8981 0 \
8982 -s "Async resume" \
8983 -s "! mbedtls_ssl_handshake returned" \
8984 -s "Async sign callback: no key matches this certificate." \
8985 -s "Successful connection"
8986
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008987requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008988requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02008989run_test "SSL async private: renegotiation: client-initiated, sign" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01008990 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008991 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008992 exchanges=2 renegotiation=1" \
8993 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1" \
8994 0 \
8995 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01008996 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008997
Gilles Peskineb74a1c72018-04-24 13:09:22 +02008998requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01008999requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02009000run_test "SSL async private: renegotiation: server-initiated, sign" \
Ronald Cronfd4c6af2023-03-11 10:46:01 +01009001 "$P_SRV force_version=tls12 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009002 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01009003 exchanges=2 renegotiation=1 renegotiate=1" \
9004 "$P_CLI exchanges=2 renegotiation=1" \
9005 0 \
9006 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009007 -s "Async resume (slot [0-9]): sign done, status=0"
9008
Gilles Peskineb74a1c72018-04-24 13:09:22 +02009009requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009010requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02009011run_test "SSL async private: renegotiation: client-initiated, decrypt" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009012 "$P_SRV \
9013 async_operations=d async_private_delay1=1 async_private_delay2=1 \
9014 exchanges=2 renegotiation=1" \
9015 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1 \
9016 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
9017 0 \
9018 -s "Async decrypt callback: using key slot " \
9019 -s "Async resume (slot [0-9]): decrypt done, status=0"
9020
Gilles Peskineb74a1c72018-04-24 13:09:22 +02009021requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009022requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskine654bab72019-09-16 15:19:20 +02009023run_test "SSL async private: renegotiation: server-initiated, decrypt" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01009024 "$P_SRV \
9025 async_operations=d async_private_delay1=1 async_private_delay2=1 \
9026 exchanges=2 renegotiation=1 renegotiate=1" \
9027 "$P_CLI exchanges=2 renegotiation=1 \
9028 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
9029 0 \
9030 -s "Async decrypt callback: using key slot " \
9031 -s "Async resume (slot [0-9]): decrypt done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01009032
Ron Eldor58093c82018-06-28 13:22:05 +03009033# Tests for ECC extensions (rfc 4492)
9034
Ron Eldor643df7c2018-06-28 16:17:00 +03009035requires_config_enabled MBEDTLS_AES_C
9036requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009037requires_hash_alg SHA_256
Ron Eldor643df7c2018-06-28 16:17:00 +03009038requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03009039run_test "Force a non ECC ciphersuite in the client side" \
9040 "$P_SRV debug_level=3" \
Ron Eldor643df7c2018-06-28 16:17:00 +03009041 "$P_CLI debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03009042 0 \
Jerry Yu136320b2021-12-21 17:09:00 +08009043 -C "client hello, adding supported_groups extension" \
Ron Eldor58093c82018-06-28 13:22:05 +03009044 -C "client hello, adding supported_point_formats extension" \
9045 -S "found supported elliptic curves extension" \
9046 -S "found supported point formats extension"
9047
Ron Eldor643df7c2018-06-28 16:17:00 +03009048requires_config_enabled MBEDTLS_AES_C
9049requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009050requires_hash_alg SHA_256
Ron Eldor643df7c2018-06-28 16:17:00 +03009051requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03009052run_test "Force a non ECC ciphersuite in the server side" \
Ron Eldor643df7c2018-06-28 16:17:00 +03009053 "$P_SRV debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03009054 "$P_CLI debug_level=3" \
9055 0 \
9056 -C "found supported_point_formats extension" \
9057 -S "server hello, supported_point_formats extension"
9058
Ron Eldor643df7c2018-06-28 16:17:00 +03009059requires_config_enabled MBEDTLS_AES_C
9060requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009061requires_hash_alg SHA_256
Ron Eldor58093c82018-06-28 13:22:05 +03009062run_test "Force an ECC ciphersuite in the client side" \
9063 "$P_SRV debug_level=3" \
9064 "$P_CLI debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
9065 0 \
Jerry Yu136320b2021-12-21 17:09:00 +08009066 -c "client hello, adding supported_groups extension" \
Ron Eldor58093c82018-06-28 13:22:05 +03009067 -c "client hello, adding supported_point_formats extension" \
9068 -s "found supported elliptic curves extension" \
9069 -s "found supported point formats extension"
9070
Ron Eldor643df7c2018-06-28 16:17:00 +03009071requires_config_enabled MBEDTLS_AES_C
9072requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009073requires_hash_alg SHA_256
Ron Eldor58093c82018-06-28 13:22:05 +03009074run_test "Force an ECC ciphersuite in the server side" \
9075 "$P_SRV debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
9076 "$P_CLI debug_level=3" \
9077 0 \
9078 -c "found supported_point_formats extension" \
9079 -s "server hello, supported_point_formats extension"
9080
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02009081# Tests for DTLS HelloVerifyRequest
9082
Jerry Yuab082902021-12-23 18:02:22 +08009083requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02009084run_test "DTLS cookie: enabled" \
9085 "$P_SRV dtls=1 debug_level=2" \
9086 "$P_CLI dtls=1 debug_level=2" \
9087 0 \
9088 -s "cookie verification failed" \
9089 -s "cookie verification passed" \
9090 -S "cookie verification skipped" \
9091 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02009092 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02009093 -S "SSL - The requested feature is not available"
9094
Jerry Yuab082902021-12-23 18:02:22 +08009095requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02009096run_test "DTLS cookie: disabled" \
9097 "$P_SRV dtls=1 debug_level=2 cookies=0" \
9098 "$P_CLI dtls=1 debug_level=2" \
9099 0 \
9100 -S "cookie verification failed" \
9101 -S "cookie verification passed" \
9102 -s "cookie verification skipped" \
9103 -C "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02009104 -S "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02009105 -S "SSL - The requested feature is not available"
9106
Jerry Yuab082902021-12-23 18:02:22 +08009107requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02009108run_test "DTLS cookie: default (failing)" \
9109 "$P_SRV dtls=1 debug_level=2 cookies=-1" \
9110 "$P_CLI dtls=1 debug_level=2 hs_timeout=100-400" \
9111 1 \
9112 -s "cookie verification failed" \
9113 -S "cookie verification passed" \
9114 -S "cookie verification skipped" \
9115 -C "received hello verify request" \
9116 -S "hello verification requested" \
9117 -s "SSL - The requested feature is not available"
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02009118
9119requires_ipv6
Jerry Yuab082902021-12-23 18:02:22 +08009120requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02009121run_test "DTLS cookie: enabled, IPv6" \
9122 "$P_SRV dtls=1 debug_level=2 server_addr=::1" \
9123 "$P_CLI dtls=1 debug_level=2 server_addr=::1" \
9124 0 \
9125 -s "cookie verification failed" \
9126 -s "cookie verification passed" \
9127 -S "cookie verification skipped" \
9128 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02009129 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02009130 -S "SSL - The requested feature is not available"
9131
Jerry Yuab082902021-12-23 18:02:22 +08009132requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02009133run_test "DTLS cookie: enabled, nbio" \
9134 "$P_SRV dtls=1 nbio=2 debug_level=2" \
9135 "$P_CLI dtls=1 nbio=2 debug_level=2" \
9136 0 \
9137 -s "cookie verification failed" \
9138 -s "cookie verification passed" \
9139 -S "cookie verification skipped" \
9140 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02009141 -s "hello verification requested" \
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02009142 -S "SSL - The requested feature is not available"
9143
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02009144# Tests for client reconnecting from the same port with DTLS
9145
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02009146not_with_valgrind # spurious resend
Jerry Yuab082902021-12-23 18:02:22 +08009147requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02009148run_test "DTLS client reconnect from same port: reference" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +02009149 "$P_SRV dtls=1 exchanges=2 read_timeout=20000 hs_timeout=10000-20000" \
9150 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02009151 0 \
9152 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02009153 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02009154 -S "Client initiated reconnection from same port"
9155
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02009156not_with_valgrind # spurious resend
Jerry Yuab082902021-12-23 18:02:22 +08009157requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02009158run_test "DTLS client reconnect from same port: reconnect" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +02009159 "$P_SRV dtls=1 exchanges=2 read_timeout=20000 hs_timeout=10000-20000" \
9160 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=10000-20000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02009161 0 \
9162 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02009163 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02009164 -s "Client initiated reconnection from same port"
9165
Paul Bakker362689d2016-05-13 10:33:25 +01009166not_with_valgrind # server/client too slow to respond in time (next test has higher timeouts)
Jerry Yuab082902021-12-23 18:02:22 +08009167requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Paul Bakker362689d2016-05-13 10:33:25 +01009168run_test "DTLS client reconnect from same port: reconnect, nbio, no valgrind" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02009169 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 nbio=2" \
9170 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02009171 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02009172 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02009173 -s "Client initiated reconnection from same port"
9174
Paul Bakker362689d2016-05-13 10:33:25 +01009175only_with_valgrind # Only with valgrind, do previous test but with higher read_timeout and hs_timeout
Jerry Yuab082902021-12-23 18:02:22 +08009176requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Paul Bakker362689d2016-05-13 10:33:25 +01009177run_test "DTLS client reconnect from same port: reconnect, nbio, valgrind" \
9178 "$P_SRV dtls=1 exchanges=2 read_timeout=2000 nbio=2 hs_timeout=1500-6000" \
9179 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=1500-3000 reconnect_hard=1" \
9180 0 \
9181 -S "The operation timed out" \
9182 -s "Client initiated reconnection from same port"
9183
Jerry Yuab082902021-12-23 18:02:22 +08009184requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02009185run_test "DTLS client reconnect from same port: no cookies" \
9186 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 cookies=0" \
Manuel Pégourié-Gonnard6ad23b92015-09-15 12:57:46 +02009187 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-8000 reconnect_hard=1" \
9188 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02009189 -s "The operation timed out" \
9190 -S "Client initiated reconnection from same port"
9191
Jerry Yuab082902021-12-23 18:02:22 +08009192requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardbaad2de2020-03-13 11:11:02 +01009193run_test "DTLS client reconnect from same port: attacker-injected" \
9194 -p "$P_PXY inject_clihlo=1" \
9195 "$P_SRV dtls=1 exchanges=2 debug_level=1" \
9196 "$P_CLI dtls=1 exchanges=2" \
9197 0 \
9198 -s "possible client reconnect from the same port" \
9199 -S "Client initiated reconnection from same port"
9200
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02009201# Tests for various cases of client authentication with DTLS
9202# (focused on handshake flows and message parsing)
9203
Jerry Yuab082902021-12-23 18:02:22 +08009204requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02009205run_test "DTLS client auth: required" \
9206 "$P_SRV dtls=1 auth_mode=required" \
9207 "$P_CLI dtls=1" \
9208 0 \
9209 -s "Verifying peer X.509 certificate... ok"
9210
Jerry Yuab082902021-12-23 18:02:22 +08009211requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02009212run_test "DTLS client auth: optional, client has no cert" \
9213 "$P_SRV dtls=1 auth_mode=optional" \
9214 "$P_CLI dtls=1 crt_file=none key_file=none" \
9215 0 \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01009216 -s "! Certificate was missing"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02009217
Jerry Yuab082902021-12-23 18:02:22 +08009218requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01009219run_test "DTLS client auth: none, client has no cert" \
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02009220 "$P_SRV dtls=1 auth_mode=none" \
9221 "$P_CLI dtls=1 crt_file=none key_file=none debug_level=2" \
9222 0 \
9223 -c "skip write certificate$" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01009224 -s "! Certificate verification was skipped"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02009225
Manuel Pégourié-Gonnard0a885742015-08-04 12:08:35 +02009226run_test "DTLS wrong PSK: badmac alert" \
9227 "$P_SRV dtls=1 psk=abc123 force_ciphersuite=TLS-PSK-WITH-AES-128-GCM-SHA256" \
9228 "$P_CLI dtls=1 psk=abc124" \
9229 1 \
9230 -s "SSL - Verification of the message MAC failed" \
9231 -c "SSL - A fatal alert message was received from our peer"
9232
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +02009233# Tests for receiving fragmented handshake messages with DTLS
9234
9235requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08009236requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +02009237run_test "DTLS reassembly: no fragmentation (gnutls server)" \
9238 "$G_SRV -u --mtu 2048 -a" \
9239 "$P_CLI dtls=1 debug_level=2" \
9240 0 \
9241 -C "found fragmented DTLS handshake message" \
9242 -C "error"
9243
9244requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08009245requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +02009246run_test "DTLS reassembly: some fragmentation (gnutls server)" \
9247 "$G_SRV -u --mtu 512" \
9248 "$P_CLI dtls=1 debug_level=2" \
9249 0 \
9250 -c "found fragmented DTLS handshake message" \
9251 -C "error"
9252
9253requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08009254requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +02009255run_test "DTLS reassembly: more fragmentation (gnutls server)" \
9256 "$G_SRV -u --mtu 128" \
9257 "$P_CLI dtls=1 debug_level=2" \
9258 0 \
9259 -c "found fragmented DTLS handshake message" \
9260 -C "error"
9261
9262requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +08009263requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +02009264run_test "DTLS reassembly: more fragmentation, nbio (gnutls server)" \
9265 "$G_SRV -u --mtu 128" \
9266 "$P_CLI dtls=1 nbio=2 debug_level=2" \
9267 0 \
9268 -c "found fragmented DTLS handshake message" \
9269 -C "error"
9270
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02009271requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01009272requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08009273requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02009274run_test "DTLS reassembly: fragmentation, renego (gnutls server)" \
9275 "$G_SRV -u --mtu 256" \
9276 "$P_CLI debug_level=3 dtls=1 renegotiation=1 renegotiate=1" \
9277 0 \
9278 -c "found fragmented DTLS handshake message" \
9279 -c "client hello, adding renegotiation extension" \
9280 -c "found renegotiation extension" \
9281 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02009282 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02009283 -C "error" \
9284 -s "Extra-header:"
9285
9286requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01009287requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Jerry Yuab082902021-12-23 18:02:22 +08009288requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02009289run_test "DTLS reassembly: fragmentation, nbio, renego (gnutls server)" \
9290 "$G_SRV -u --mtu 256" \
9291 "$P_CLI debug_level=3 nbio=2 dtls=1 renegotiation=1 renegotiate=1" \
9292 0 \
9293 -c "found fragmented DTLS handshake message" \
9294 -c "client hello, adding renegotiation extension" \
9295 -c "found renegotiation extension" \
9296 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02009297 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02009298 -C "error" \
9299 -s "Extra-header:"
9300
Jerry Yuab082902021-12-23 18:02:22 +08009301requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +02009302run_test "DTLS reassembly: no fragmentation (openssl server)" \
9303 "$O_SRV -dtls -mtu 2048" \
9304 "$P_CLI dtls=1 debug_level=2" \
9305 0 \
9306 -C "found fragmented DTLS handshake message" \
9307 -C "error"
9308
Jerry Yuab082902021-12-23 18:02:22 +08009309requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +02009310run_test "DTLS reassembly: some fragmentation (openssl server)" \
Valerio Setti6ba247c2023-03-14 17:13:43 +01009311 "$O_SRV -dtls -mtu 256" \
TRodziewicz4ca18aa2021-05-20 14:46:20 +02009312 "$P_CLI dtls=1 debug_level=2" \
9313 0 \
9314 -c "found fragmented DTLS handshake message" \
9315 -C "error"
9316
Jerry Yuab082902021-12-23 18:02:22 +08009317requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +02009318run_test "DTLS reassembly: more fragmentation (openssl server)" \
9319 "$O_SRV -dtls -mtu 256" \
9320 "$P_CLI dtls=1 debug_level=2" \
9321 0 \
9322 -c "found fragmented DTLS handshake message" \
9323 -C "error"
9324
Jerry Yuab082902021-12-23 18:02:22 +08009325requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +02009326run_test "DTLS reassembly: fragmentation, nbio (openssl server)" \
9327 "$O_SRV -dtls -mtu 256" \
9328 "$P_CLI dtls=1 nbio=2 debug_level=2" \
9329 0 \
9330 -c "found fragmented DTLS handshake message" \
9331 -C "error"
9332
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009333# Tests for sending fragmented handshake messages with DTLS
9334#
9335# Use client auth when we need the client to send large messages,
9336# and use large cert chains on both sides too (the long chains we have all use
9337# both RSA and ECDSA, but ideally we should have long chains with either).
9338# Sizes reached (UDP payload):
9339# - 2037B for server certificate
9340# - 1542B for client certificate
9341# - 1013B for newsessionticket
9342# - all others below 512B
9343# All those tests assume MAX_CONTENT_LEN is at least 2048
9344
9345requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9346requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009347requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009348requires_max_content_len 4096
Jerry Yuab082902021-12-23 18:02:22 +08009349requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009350run_test "DTLS fragmenting: none (for reference)" \
9351 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9352 crt_file=data_files/server7_int-ca.crt \
9353 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009354 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01009355 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009356 "$P_CLI dtls=1 debug_level=2 \
9357 crt_file=data_files/server8_int-ca2.crt \
9358 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009359 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01009360 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009361 0 \
9362 -S "found fragmented DTLS handshake message" \
9363 -C "found fragmented DTLS handshake message" \
9364 -C "error"
9365
9366requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9367requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009368requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009369requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +08009370requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009371run_test "DTLS fragmenting: server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009372 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9373 crt_file=data_files/server7_int-ca.crt \
9374 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009375 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009376 max_frag_len=1024" \
9377 "$P_CLI dtls=1 debug_level=2 \
9378 crt_file=data_files/server8_int-ca2.crt \
9379 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009380 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009381 max_frag_len=2048" \
9382 0 \
9383 -S "found fragmented DTLS handshake message" \
9384 -c "found fragmented DTLS handshake message" \
9385 -C "error"
9386
Hanno Becker69ca0ad2018-08-24 12:11:35 +01009387# With the MFL extension, the server has no way of forcing
9388# the client to not exceed a certain MTU; hence, the following
9389# test can't be replicated with an MTU proxy such as the one
9390# `client-initiated, server only (max_frag_len)` below.
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009391requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9392requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009393requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009394requires_max_content_len 4096
Jerry Yuab082902021-12-23 18:02:22 +08009395requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009396run_test "DTLS fragmenting: server only (more) (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009397 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9398 crt_file=data_files/server7_int-ca.crt \
9399 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009400 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009401 max_frag_len=512" \
9402 "$P_CLI dtls=1 debug_level=2 \
9403 crt_file=data_files/server8_int-ca2.crt \
9404 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009405 hs_timeout=2500-60000 \
Hanno Becker69ca0ad2018-08-24 12:11:35 +01009406 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009407 0 \
9408 -S "found fragmented DTLS handshake message" \
9409 -c "found fragmented DTLS handshake message" \
9410 -C "error"
9411
9412requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9413requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009414requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009415requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +08009416requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009417run_test "DTLS fragmenting: client-initiated, server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009418 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
9419 crt_file=data_files/server7_int-ca.crt \
9420 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009421 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009422 max_frag_len=2048" \
9423 "$P_CLI dtls=1 debug_level=2 \
9424 crt_file=data_files/server8_int-ca2.crt \
9425 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009426 hs_timeout=2500-60000 \
9427 max_frag_len=1024" \
9428 0 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009429 -S "found fragmented DTLS handshake message" \
9430 -c "found fragmented DTLS handshake message" \
9431 -C "error"
9432
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009433# While not required by the standard defining the MFL extension
9434# (according to which it only applies to records, not to datagrams),
9435# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
9436# as otherwise there wouldn't be any means to communicate MTU restrictions
9437# to the peer.
9438# The next test checks that no datagrams significantly larger than the
9439# negotiated MFL are sent.
9440requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9441requires_config_enabled MBEDTLS_RSA_C
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009442requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009443requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +08009444requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009445run_test "DTLS fragmenting: client-initiated, server only (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04009446 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009447 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
9448 crt_file=data_files/server7_int-ca.crt \
9449 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009450 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009451 max_frag_len=2048" \
9452 "$P_CLI dtls=1 debug_level=2 \
9453 crt_file=data_files/server8_int-ca2.crt \
9454 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009455 hs_timeout=2500-60000 \
9456 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009457 0 \
9458 -S "found fragmented DTLS handshake message" \
9459 -c "found fragmented DTLS handshake message" \
9460 -C "error"
9461
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009462requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9463requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009464requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009465requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +08009466requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009467run_test "DTLS fragmenting: client-initiated, both (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009468 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9469 crt_file=data_files/server7_int-ca.crt \
9470 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009471 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009472 max_frag_len=2048" \
9473 "$P_CLI dtls=1 debug_level=2 \
9474 crt_file=data_files/server8_int-ca2.crt \
9475 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009476 hs_timeout=2500-60000 \
9477 max_frag_len=1024" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02009478 0 \
9479 -s "found fragmented DTLS handshake message" \
9480 -c "found fragmented DTLS handshake message" \
9481 -C "error"
9482
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009483# While not required by the standard defining the MFL extension
9484# (according to which it only applies to records, not to datagrams),
9485# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
9486# as otherwise there wouldn't be any means to communicate MTU restrictions
9487# to the peer.
9488# The next test checks that no datagrams significantly larger than the
9489# negotiated MFL are sent.
9490requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9491requires_config_enabled MBEDTLS_RSA_C
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009492requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009493requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +08009494requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009495run_test "DTLS fragmenting: client-initiated, both (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04009496 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009497 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9498 crt_file=data_files/server7_int-ca.crt \
9499 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009500 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009501 max_frag_len=2048" \
9502 "$P_CLI dtls=1 debug_level=2 \
9503 crt_file=data_files/server8_int-ca2.crt \
9504 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009505 hs_timeout=2500-60000 \
9506 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01009507 0 \
9508 -s "found fragmented DTLS handshake message" \
9509 -c "found fragmented DTLS handshake message" \
9510 -C "error"
9511
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009512requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9513requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009514requires_max_content_len 4096
Jerry Yuab082902021-12-23 18:02:22 +08009515requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009516run_test "DTLS fragmenting: none (for reference) (MTU)" \
9517 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9518 crt_file=data_files/server7_int-ca.crt \
9519 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009520 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01009521 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009522 "$P_CLI dtls=1 debug_level=2 \
9523 crt_file=data_files/server8_int-ca2.crt \
9524 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009525 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01009526 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009527 0 \
9528 -S "found fragmented DTLS handshake message" \
9529 -C "found fragmented DTLS handshake message" \
9530 -C "error"
9531
9532requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9533requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009534requires_max_content_len 4096
Jerry Yuab082902021-12-23 18:02:22 +08009535requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009536run_test "DTLS fragmenting: client (MTU)" \
9537 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9538 crt_file=data_files/server7_int-ca.crt \
9539 key_file=data_files/server7.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04009540 hs_timeout=3500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01009541 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009542 "$P_CLI dtls=1 debug_level=2 \
9543 crt_file=data_files/server8_int-ca2.crt \
9544 key_file=data_files/server8.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04009545 hs_timeout=3500-60000 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009546 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009547 0 \
9548 -s "found fragmented DTLS handshake message" \
9549 -C "found fragmented DTLS handshake message" \
9550 -C "error"
9551
9552requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9553requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009554requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +08009555requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009556run_test "DTLS fragmenting: server (MTU)" \
9557 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9558 crt_file=data_files/server7_int-ca.crt \
9559 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009560 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009561 mtu=512" \
9562 "$P_CLI dtls=1 debug_level=2 \
9563 crt_file=data_files/server8_int-ca2.crt \
9564 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009565 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009566 mtu=2048" \
9567 0 \
9568 -S "found fragmented DTLS handshake message" \
9569 -c "found fragmented DTLS handshake message" \
9570 -C "error"
9571
9572requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9573requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009574requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +08009575requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andrzej Kurek7311c782018-10-11 06:49:41 -04009576run_test "DTLS fragmenting: both (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009577 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009578 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9579 crt_file=data_files/server7_int-ca.crt \
9580 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009581 hs_timeout=2500-60000 \
Andrzej Kurek95805282018-10-11 08:55:37 -04009582 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009583 "$P_CLI dtls=1 debug_level=2 \
9584 crt_file=data_files/server8_int-ca2.crt \
9585 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009586 hs_timeout=2500-60000 \
9587 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02009588 0 \
9589 -s "found fragmented DTLS handshake message" \
9590 -c "found fragmented DTLS handshake message" \
9591 -C "error"
9592
Andrzej Kurek77826052018-10-11 07:34:08 -04009593# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04009594requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9595requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009596requires_hash_alg SHA_256
Andrzej Kurek7311c782018-10-11 06:49:41 -04009597requires_config_enabled MBEDTLS_AES_C
9598requires_config_enabled MBEDTLS_GCM_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009599requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04009600run_test "DTLS fragmenting: both (MTU=512)" \
Hanno Becker8d832182018-03-15 10:14:19 +00009601 -p "$P_PXY mtu=512" \
Hanno Becker72a4f032017-11-15 16:39:20 +00009602 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9603 crt_file=data_files/server7_int-ca.crt \
9604 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009605 hs_timeout=2500-60000 \
Hanno Becker72a4f032017-11-15 16:39:20 +00009606 mtu=512" \
9607 "$P_CLI dtls=1 debug_level=2 \
9608 crt_file=data_files/server8_int-ca2.crt \
9609 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009610 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
9611 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02009612 mtu=512" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02009613 0 \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02009614 -s "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02009615 -c "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02009616 -C "error"
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02009617
Andrzej Kurek7311c782018-10-11 06:49:41 -04009618# Test for automatic MTU reduction on repeated resend.
Andrzej Kurek77826052018-10-11 07:34:08 -04009619# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04009620# The ratio of max/min timeout should ideally equal 4 to accept two
9621# retransmissions, but in some cases (like both the server and client using
9622# fragmentation and auto-reduction) an extra retransmission might occur,
9623# hence the ratio of 8.
Hanno Becker37029eb2018-08-29 17:01:40 +01009624not_with_valgrind
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02009625requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9626requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04009627requires_config_enabled MBEDTLS_AES_C
9628requires_config_enabled MBEDTLS_GCM_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009629requires_max_content_len 2048
Gilles Peskine0d8b86a2019-09-20 18:03:11 +02009630run_test "DTLS fragmenting: proxy MTU: auto-reduction (not valgrind)" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02009631 -p "$P_PXY mtu=508" \
9632 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9633 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009634 key_file=data_files/server7.key \
9635 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02009636 "$P_CLI dtls=1 debug_level=2 \
9637 crt_file=data_files/server8_int-ca2.crt \
9638 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009639 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
9640 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02009641 0 \
9642 -s "found fragmented DTLS handshake message" \
9643 -c "found fragmented DTLS handshake message" \
9644 -C "error"
9645
Andrzej Kurek77826052018-10-11 07:34:08 -04009646# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Hanno Becker108992e2018-08-29 17:04:18 +01009647only_with_valgrind
9648requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9649requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04009650requires_config_enabled MBEDTLS_AES_C
9651requires_config_enabled MBEDTLS_GCM_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009652requires_max_content_len 2048
Gilles Peskine0d8b86a2019-09-20 18:03:11 +02009653run_test "DTLS fragmenting: proxy MTU: auto-reduction (with valgrind)" \
Hanno Becker108992e2018-08-29 17:04:18 +01009654 -p "$P_PXY mtu=508" \
9655 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9656 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009657 key_file=data_files/server7.key \
Hanno Becker108992e2018-08-29 17:04:18 +01009658 hs_timeout=250-10000" \
9659 "$P_CLI dtls=1 debug_level=2 \
9660 crt_file=data_files/server8_int-ca2.crt \
9661 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009662 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Hanno Becker108992e2018-08-29 17:04:18 +01009663 hs_timeout=250-10000" \
9664 0 \
9665 -s "found fragmented DTLS handshake message" \
9666 -c "found fragmented DTLS handshake message" \
9667 -C "error"
9668
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009669# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
Manuel Pégourié-Gonnard3d183ce2018-08-22 09:56:22 +02009670# OTOH the client might resend if the server is to slow to reset after sending
9671# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009672not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009673requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9674requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009675requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +08009676requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andrzej Kurek7311c782018-10-11 06:49:41 -04009677run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009678 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009679 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9680 crt_file=data_files/server7_int-ca.crt \
9681 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009682 hs_timeout=10000-60000 \
9683 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009684 "$P_CLI dtls=1 debug_level=2 \
9685 crt_file=data_files/server8_int-ca2.crt \
9686 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009687 hs_timeout=10000-60000 \
9688 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009689 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009690 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009691 -s "found fragmented DTLS handshake message" \
9692 -c "found fragmented DTLS handshake message" \
9693 -C "error"
9694
Andrzej Kurek77826052018-10-11 07:34:08 -04009695# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04009696# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
9697# OTOH the client might resend if the server is to slow to reset after sending
9698# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009699not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009700requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9701requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04009702requires_config_enabled MBEDTLS_AES_C
9703requires_config_enabled MBEDTLS_GCM_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009704requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04009705run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=512)" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009706 -p "$P_PXY mtu=512" \
9707 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9708 crt_file=data_files/server7_int-ca.crt \
9709 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009710 hs_timeout=10000-60000 \
9711 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009712 "$P_CLI dtls=1 debug_level=2 \
9713 crt_file=data_files/server8_int-ca2.crt \
9714 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009715 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
9716 hs_timeout=10000-60000 \
9717 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009718 0 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009719 -S "autoreduction" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009720 -s "found fragmented DTLS handshake message" \
9721 -c "found fragmented DTLS handshake message" \
9722 -C "error"
9723
Andrzej Kurek7311c782018-10-11 06:49:41 -04009724not_with_valgrind # spurious autoreduction due to timeout
9725requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9726requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009727requires_max_content_len 2048
Jerry Yuab082902021-12-23 18:02:22 +08009728requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Andrzej Kurek7311c782018-10-11 06:49:41 -04009729run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009730 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009731 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9732 crt_file=data_files/server7_int-ca.crt \
9733 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009734 hs_timeout=10000-60000 \
9735 mtu=1024 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009736 "$P_CLI dtls=1 debug_level=2 \
9737 crt_file=data_files/server8_int-ca2.crt \
9738 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009739 hs_timeout=10000-60000 \
9740 mtu=1024 nbio=2" \
9741 0 \
9742 -S "autoreduction" \
9743 -s "found fragmented DTLS handshake message" \
9744 -c "found fragmented DTLS handshake message" \
9745 -C "error"
9746
Andrzej Kurek77826052018-10-11 07:34:08 -04009747# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04009748not_with_valgrind # spurious autoreduction due to timeout
9749requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9750requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04009751requires_config_enabled MBEDTLS_AES_C
9752requires_config_enabled MBEDTLS_GCM_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009753requires_max_content_len 2048
Andrzej Kurek7311c782018-10-11 06:49:41 -04009754run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=512)" \
9755 -p "$P_PXY mtu=512" \
9756 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9757 crt_file=data_files/server7_int-ca.crt \
9758 key_file=data_files/server7.key \
9759 hs_timeout=10000-60000 \
9760 mtu=512 nbio=2" \
9761 "$P_CLI dtls=1 debug_level=2 \
9762 crt_file=data_files/server8_int-ca2.crt \
9763 key_file=data_files/server8.key \
9764 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
9765 hs_timeout=10000-60000 \
9766 mtu=512 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009767 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009768 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009769 -s "found fragmented DTLS handshake message" \
9770 -c "found fragmented DTLS handshake message" \
9771 -C "error"
9772
Andrzej Kurek77826052018-10-11 07:34:08 -04009773# Forcing ciphersuite for this test to fit the MTU of 1450 with full config.
Hanno Beckerb841b4f2018-08-28 10:25:51 +01009774# This ensures things still work after session_reset().
9775# It also exercises the "resumed handshake" flow.
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02009776# Since we don't support reading fragmented ClientHello yet,
9777# up the MTU to 1450 (larger than ClientHello with session ticket,
9778# but still smaller than client's Certificate to ensure fragmentation).
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009779# An autoreduction on the client-side might happen if the server is
9780# slow to reset, therefore omitting '-C "autoreduction"' below.
Manuel Pégourié-Gonnard2f2d9022018-08-21 12:17:54 +02009781# reco_delay avoids races where the client reconnects before the server has
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009782# resumed listening, which would result in a spurious autoreduction.
9783not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02009784requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9785requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04009786requires_config_enabled MBEDTLS_AES_C
9787requires_config_enabled MBEDTLS_GCM_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009788requires_max_content_len 2048
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02009789run_test "DTLS fragmenting: proxy MTU, resumed handshake" \
9790 -p "$P_PXY mtu=1450" \
9791 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9792 crt_file=data_files/server7_int-ca.crt \
9793 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009794 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02009795 mtu=1450" \
9796 "$P_CLI dtls=1 debug_level=2 \
9797 crt_file=data_files/server8_int-ca2.crt \
9798 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009799 hs_timeout=10000-60000 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009800 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Jerry Yua15af372022-12-05 15:55:24 +08009801 mtu=1450 reconnect=1 skip_close_notify=1 reco_delay=1000" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02009802 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009803 -S "autoreduction" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02009804 -s "found fragmented DTLS handshake message" \
9805 -c "found fragmented DTLS handshake message" \
9806 -C "error"
9807
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009808# An autoreduction on the client-side might happen if the server is
9809# slow to reset, therefore omitting '-C "autoreduction"' below.
9810not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009811requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9812requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009813requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009814requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9815requires_config_enabled MBEDTLS_CHACHAPOLY_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009816requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009817run_test "DTLS fragmenting: proxy MTU, ChachaPoly renego" \
9818 -p "$P_PXY mtu=512" \
9819 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9820 crt_file=data_files/server7_int-ca.crt \
9821 key_file=data_files/server7.key \
9822 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009823 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009824 mtu=512" \
9825 "$P_CLI dtls=1 debug_level=2 \
9826 crt_file=data_files/server8_int-ca2.crt \
9827 key_file=data_files/server8.key \
9828 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009829 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009830 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009831 mtu=512" \
9832 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009833 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009834 -s "found fragmented DTLS handshake message" \
9835 -c "found fragmented DTLS handshake message" \
9836 -C "error"
9837
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009838# An autoreduction on the client-side might happen if the server is
9839# slow to reset, therefore omitting '-C "autoreduction"' below.
9840not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009841requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9842requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009843requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009844requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9845requires_config_enabled MBEDTLS_AES_C
9846requires_config_enabled MBEDTLS_GCM_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009847requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009848run_test "DTLS fragmenting: proxy MTU, AES-GCM renego" \
9849 -p "$P_PXY mtu=512" \
9850 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9851 crt_file=data_files/server7_int-ca.crt \
9852 key_file=data_files/server7.key \
9853 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009854 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009855 mtu=512" \
9856 "$P_CLI dtls=1 debug_level=2 \
9857 crt_file=data_files/server8_int-ca2.crt \
9858 key_file=data_files/server8.key \
9859 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009860 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009861 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009862 mtu=512" \
9863 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009864 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009865 -s "found fragmented DTLS handshake message" \
9866 -c "found fragmented DTLS handshake message" \
9867 -C "error"
9868
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009869# An autoreduction on the client-side might happen if the server is
9870# slow to reset, therefore omitting '-C "autoreduction"' below.
9871not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009872requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9873requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009874requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009875requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9876requires_config_enabled MBEDTLS_AES_C
9877requires_config_enabled MBEDTLS_CCM_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009878requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009879run_test "DTLS fragmenting: proxy MTU, AES-CCM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009880 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009881 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9882 crt_file=data_files/server7_int-ca.crt \
9883 key_file=data_files/server7.key \
9884 exchanges=2 renegotiation=1 \
9885 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009886 hs_timeout=10000-60000 \
9887 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009888 "$P_CLI dtls=1 debug_level=2 \
9889 crt_file=data_files/server8_int-ca2.crt \
9890 key_file=data_files/server8.key \
9891 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009892 hs_timeout=10000-60000 \
9893 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009894 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009895 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009896 -s "found fragmented DTLS handshake message" \
9897 -c "found fragmented DTLS handshake message" \
9898 -C "error"
9899
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009900# An autoreduction on the client-side might happen if the server is
9901# slow to reset, therefore omitting '-C "autoreduction"' below.
9902not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009903requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9904requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009905requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009906requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9907requires_config_enabled MBEDTLS_AES_C
9908requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
9909requires_config_enabled MBEDTLS_SSL_ENCRYPT_THEN_MAC
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009910requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009911run_test "DTLS fragmenting: proxy MTU, AES-CBC EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009912 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009913 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9914 crt_file=data_files/server7_int-ca.crt \
9915 key_file=data_files/server7.key \
9916 exchanges=2 renegotiation=1 \
9917 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009918 hs_timeout=10000-60000 \
9919 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009920 "$P_CLI dtls=1 debug_level=2 \
9921 crt_file=data_files/server8_int-ca2.crt \
9922 key_file=data_files/server8.key \
9923 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009924 hs_timeout=10000-60000 \
9925 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009926 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009927 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009928 -s "found fragmented DTLS handshake message" \
9929 -c "found fragmented DTLS handshake message" \
9930 -C "error"
9931
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009932# An autoreduction on the client-side might happen if the server is
9933# slow to reset, therefore omitting '-C "autoreduction"' below.
9934not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009935requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9936requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek934e9cd2022-09-05 14:44:46 -04009937requires_hash_alg SHA_256
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009938requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
9939requires_config_enabled MBEDTLS_AES_C
9940requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009941requires_max_content_len 2048
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009942run_test "DTLS fragmenting: proxy MTU, AES-CBC non-EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009943 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009944 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9945 crt_file=data_files/server7_int-ca.crt \
9946 key_file=data_files/server7.key \
9947 exchanges=2 renegotiation=1 \
9948 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 etm=0 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009949 hs_timeout=10000-60000 \
9950 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009951 "$P_CLI dtls=1 debug_level=2 \
9952 crt_file=data_files/server8_int-ca2.crt \
9953 key_file=data_files/server8.key \
9954 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04009955 hs_timeout=10000-60000 \
9956 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009957 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04009958 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02009959 -s "found fragmented DTLS handshake message" \
9960 -c "found fragmented DTLS handshake message" \
9961 -C "error"
9962
Andrzej Kurek77826052018-10-11 07:34:08 -04009963# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009964requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9965requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04009966requires_config_enabled MBEDTLS_AES_C
9967requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009968client_needs_more_time 2
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009969requires_max_content_len 2048
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009970run_test "DTLS fragmenting: proxy MTU + 3d" \
9971 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009972 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 auth_mode=required \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009973 crt_file=data_files/server7_int-ca.crt \
9974 key_file=data_files/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009975 hs_timeout=250-10000 mtu=512" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01009976 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009977 crt_file=data_files/server8_int-ca2.crt \
9978 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04009979 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02009980 hs_timeout=250-10000 mtu=512" \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02009981 0 \
9982 -s "found fragmented DTLS handshake message" \
9983 -c "found fragmented DTLS handshake message" \
9984 -C "error"
9985
Andrzej Kurek77826052018-10-11 07:34:08 -04009986# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009987requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
9988requires_config_enabled MBEDTLS_RSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04009989requires_config_enabled MBEDTLS_AES_C
9990requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009991client_needs_more_time 2
Yuto Takanobc87b1d2021-07-08 15:56:33 +01009992requires_max_content_len 2048
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02009993run_test "DTLS fragmenting: proxy MTU + 3d, nbio" \
9994 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
9995 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
9996 crt_file=data_files/server7_int-ca.crt \
9997 key_file=data_files/server7.key \
9998 hs_timeout=250-10000 mtu=512 nbio=2" \
9999 "$P_CLI dtls=1 debug_level=2 \
10000 crt_file=data_files/server8_int-ca2.crt \
10001 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -040010002 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +020010003 hs_timeout=250-10000 mtu=512 nbio=2" \
10004 0 \
10005 -s "found fragmented DTLS handshake message" \
10006 -c "found fragmented DTLS handshake message" \
10007 -C "error"
10008
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020010009# interop tests for DTLS fragmentating with reliable connection
10010#
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010011# here and below we just want to test that the we fragment in a way that
10012# pleases other implementations, so we don't need the peer to fragment
10013requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10014requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +020010015requires_gnutls
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010016requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010017run_test "DTLS fragmenting: gnutls server, DTLS 1.2" \
10018 "$G_SRV -u" \
10019 "$P_CLI dtls=1 debug_level=2 \
10020 crt_file=data_files/server8_int-ca2.crt \
10021 key_file=data_files/server8.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000010022 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010023 0 \
10024 -c "fragmenting handshake message" \
10025 -C "error"
10026
Hanno Beckerb9a00862018-08-28 10:20:22 +010010027# We use --insecure for the GnuTLS client because it expects
10028# the hostname / IP it connects to to be the name used in the
10029# certificate obtained from the server. Here, however, it
10030# connects to 127.0.0.1 while our test certificates use 'localhost'
10031# as the server name in the certificate. This will make the
Shaun Case8b0ecbc2021-12-20 21:14:10 -080010032# certificate validation fail, but passing --insecure makes
Hanno Beckerb9a00862018-08-28 10:20:22 +010010033# GnuTLS continue the connection nonetheless.
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010034requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10035requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +020010036requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -040010037requires_not_i686
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010038requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010039run_test "DTLS fragmenting: gnutls client, DTLS 1.2" \
Valerio Setti3b2c0282023-03-08 10:22:29 +010010040 "$P_SRV dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010041 crt_file=data_files/server7_int-ca.crt \
10042 key_file=data_files/server7.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000010043 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +020010044 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010045 0 \
10046 -s "fragmenting handshake message"
10047
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010048requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10049requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010050requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010051run_test "DTLS fragmenting: openssl server, DTLS 1.2" \
10052 "$O_SRV -dtls1_2 -verify 10" \
10053 "$P_CLI dtls=1 debug_level=2 \
10054 crt_file=data_files/server8_int-ca2.crt \
10055 key_file=data_files/server8.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000010056 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010057 0 \
10058 -c "fragmenting handshake message" \
10059 -C "error"
10060
10061requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10062requires_config_enabled MBEDTLS_RSA_C
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010063requires_max_content_len 2048
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010064run_test "DTLS fragmenting: openssl client, DTLS 1.2" \
10065 "$P_SRV dtls=1 debug_level=2 \
10066 crt_file=data_files/server7_int-ca.crt \
10067 key_file=data_files/server7.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000010068 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +020010069 "$O_CLI -dtls1_2" \
10070 0 \
10071 -s "fragmenting handshake message"
10072
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020010073# interop tests for DTLS fragmentating with unreliable connection
10074#
10075# again we just want to test that the we fragment in a way that
10076# pleases other implementations, so we don't need the peer to fragment
10077requires_gnutls_next
10078requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10079requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +020010080client_needs_more_time 4
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010081requires_max_content_len 2048
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020010082run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.2" \
10083 -p "$P_PXY drop=8 delay=8 duplicate=8" \
10084 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010085 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020010086 crt_file=data_files/server8_int-ca2.crt \
10087 key_file=data_files/server8.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000010088 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020010089 0 \
10090 -c "fragmenting handshake message" \
10091 -C "error"
10092
10093requires_gnutls_next
10094requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10095requires_config_enabled MBEDTLS_RSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +010010096client_needs_more_time 4
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010097requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +010010098run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.2" \
10099 -p "$P_PXY drop=8 delay=8 duplicate=8" \
10100 "$P_SRV dtls=1 debug_level=2 \
10101 crt_file=data_files/server7_int-ca.crt \
10102 key_file=data_files/server7.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000010103 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
k-stachowiak17a38d32019-02-18 15:29:56 +010010104 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +010010105 0 \
10106 -s "fragmenting handshake message"
10107
Zhangsen Wang91385122022-07-12 01:48:17 +000010108## The test below requires 1.1.1a or higher version of openssl, otherwise
10109## it might trigger a bug due to openssl server (https://github.com/openssl/openssl/issues/6902)
Zhangsen Wang87a9c862022-06-28 06:10:35 +000010110requires_openssl_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +010010111requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10112requires_config_enabled MBEDTLS_RSA_C
Hanno Becker3b8b40c2018-08-28 10:25:41 +010010113client_needs_more_time 4
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010114requires_max_content_len 2048
Hanno Becker3b8b40c2018-08-28 10:25:41 +010010115run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.2" \
10116 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Zhangsen Wang87a9c862022-06-28 06:10:35 +000010117 "$O_NEXT_SRV -dtls1_2 -verify 10" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +010010118 "$P_CLI dtls=1 debug_level=2 \
10119 crt_file=data_files/server8_int-ca2.crt \
10120 key_file=data_files/server8.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000010121 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +010010122 0 \
10123 -c "fragmenting handshake message" \
10124 -C "error"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020010125
Zhangsen Wangd5e8a482022-07-29 07:53:36 +000010126## the test below will time out with certain seed.
Zhangsen Wangbaeffbb2022-07-29 06:34:47 +000010127## The cause is an openssl bug (https://github.com/openssl/openssl/issues/18887)
10128skip_next_test
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020010129requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
10130requires_config_enabled MBEDTLS_RSA_C
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +020010131client_needs_more_time 4
Yuto Takanobc87b1d2021-07-08 15:56:33 +010010132requires_max_content_len 2048
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +020010133run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.2" \
10134 -p "$P_PXY drop=8 delay=8 duplicate=8" \
10135 "$P_SRV dtls=1 debug_level=2 \
10136 crt_file=data_files/server7_int-ca.crt \
10137 key_file=data_files/server7.key \
Xiaofei Bai8b5c3822021-12-02 08:43:35 +000010138 hs_timeout=250-60000 mtu=512 force_version=dtls12" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +020010139 "$O_CLI -dtls1_2" \
10140 0 \
10141 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020010142
Ron Eldorb4655392018-07-05 18:25:39 +030010143# Tests for DTLS-SRTP (RFC 5764)
10144requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010145requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030010146run_test "DTLS-SRTP all profiles supported" \
10147 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
10148 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10149 0 \
10150 -s "found use_srtp extension" \
10151 -s "found srtp profile" \
10152 -s "selected srtp profile" \
10153 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010154 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030010155 -c "client hello, adding use_srtp extension" \
10156 -c "found use_srtp extension" \
10157 -c "found srtp profile" \
10158 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010159 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020010160 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030010161 -C "error"
10162
Johan Pascal9bc50b02020-09-24 12:01:13 +020010163
Ron Eldorb4655392018-07-05 18:25:39 +030010164requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010165requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030010166run_test "DTLS-SRTP server supports all profiles. Client supports one profile." \
10167 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
Johan Pascal43f94902020-09-22 12:25:52 +020010168 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=5 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +030010169 0 \
10170 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010171 -s "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
10172 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldorb4655392018-07-05 18:25:39 +030010173 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010174 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030010175 -c "client hello, adding use_srtp extension" \
10176 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010177 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldorb4655392018-07-05 18:25:39 +030010178 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010179 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020010180 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030010181 -C "error"
10182
10183requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010184requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010185run_test "DTLS-SRTP server supports one profile. Client supports all profiles." \
Johan Pascal43f94902020-09-22 12:25:52 +020010186 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +030010187 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10188 0 \
10189 -s "found use_srtp extension" \
10190 -s "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +020010191 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030010192 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010193 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030010194 -c "client hello, adding use_srtp extension" \
10195 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010196 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030010197 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010198 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020010199 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030010200 -C "error"
10201
10202requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010203requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030010204run_test "DTLS-SRTP server and Client support only one matching profile." \
10205 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
10206 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
10207 0 \
10208 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010209 -s "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
10210 -s "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030010211 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010212 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030010213 -c "client hello, adding use_srtp extension" \
10214 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010215 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030010216 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010217 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020010218 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030010219 -C "error"
10220
10221requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010222requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030010223run_test "DTLS-SRTP server and Client support only one different profile." \
10224 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
Johan Pascal43f94902020-09-22 12:25:52 +020010225 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldorb4655392018-07-05 18:25:39 +030010226 0 \
10227 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010228 -s "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldorb4655392018-07-05 18:25:39 +030010229 -S "selected srtp profile" \
10230 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010231 -S "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030010232 -c "client hello, adding use_srtp extension" \
10233 -C "found use_srtp extension" \
10234 -C "found srtp profile" \
10235 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010236 -C "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030010237 -C "error"
10238
10239requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010240requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030010241run_test "DTLS-SRTP server doesn't support use_srtp extension." \
10242 "$P_SRV dtls=1 debug_level=3" \
10243 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10244 0 \
10245 -s "found use_srtp extension" \
10246 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010247 -S "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030010248 -c "client hello, adding use_srtp extension" \
10249 -C "found use_srtp extension" \
10250 -C "found srtp profile" \
10251 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010252 -C "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030010253 -C "error"
10254
10255requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010256requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030010257run_test "DTLS-SRTP all profiles supported. mki used" \
10258 "$P_SRV dtls=1 use_srtp=1 support_mki=1 debug_level=3" \
10259 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
10260 0 \
10261 -s "found use_srtp extension" \
10262 -s "found srtp profile" \
10263 -s "selected srtp profile" \
10264 -s "server hello, adding use_srtp extension" \
10265 -s "dumping 'using mki' (8 bytes)" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010266 -s "DTLS-SRTP key material is"\
Ron Eldorb4655392018-07-05 18:25:39 +030010267 -c "client hello, adding use_srtp extension" \
10268 -c "found use_srtp extension" \
10269 -c "found srtp profile" \
10270 -c "selected srtp profile" \
10271 -c "dumping 'sending mki' (8 bytes)" \
10272 -c "dumping 'received mki' (8 bytes)" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010273 -c "DTLS-SRTP key material is"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020010274 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Johan Pascal20c7db32020-10-26 22:45:58 +010010275 -g "find_in_both '^ *DTLS-SRTP mki value: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030010276 -C "error"
10277
10278requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010279requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorb4655392018-07-05 18:25:39 +030010280run_test "DTLS-SRTP all profiles supported. server doesn't support mki." \
10281 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
10282 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
10283 0 \
10284 -s "found use_srtp extension" \
10285 -s "found srtp profile" \
10286 -s "selected srtp profile" \
10287 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010288 -s "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +010010289 -s "DTLS-SRTP no mki value negotiated"\
Ron Eldorb4655392018-07-05 18:25:39 +030010290 -S "dumping 'using mki' (8 bytes)" \
10291 -c "client hello, adding use_srtp extension" \
10292 -c "found use_srtp extension" \
10293 -c "found srtp profile" \
10294 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010295 -c "DTLS-SRTP key material is"\
Johan Pascal5ef72d22020-10-28 17:05:47 +010010296 -c "DTLS-SRTP no mki value negotiated"\
Johan Pascal9bc50b02020-09-24 12:01:13 +020010297 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
Ron Eldorb4655392018-07-05 18:25:39 +030010298 -c "dumping 'sending mki' (8 bytes)" \
10299 -C "dumping 'received mki' (8 bytes)" \
10300 -C "error"
10301
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010302requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010303requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010304run_test "DTLS-SRTP all profiles supported. openssl client." \
10305 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
10306 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10307 0 \
10308 -s "found use_srtp extension" \
10309 -s "found srtp profile" \
10310 -s "selected srtp profile" \
10311 -s "server hello, adding use_srtp extension" \
10312 -s "DTLS-SRTP key material is"\
10313 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
10314 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_80"
10315
10316requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010317requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010318run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. openssl client." \
10319 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
10320 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_32:SRTP_AES128_CM_SHA1_80 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10321 0 \
10322 -s "found use_srtp extension" \
10323 -s "found srtp profile" \
10324 -s "selected srtp profile" \
10325 -s "server hello, adding use_srtp extension" \
10326 -s "DTLS-SRTP key material is"\
10327 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
10328 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
10329
10330requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010331requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010332run_test "DTLS-SRTP server supports all profiles. Client supports one profile. openssl client." \
10333 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
10334 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10335 0 \
10336 -s "found use_srtp extension" \
10337 -s "found srtp profile" \
10338 -s "selected srtp profile" \
10339 -s "server hello, adding use_srtp extension" \
10340 -s "DTLS-SRTP key material is"\
10341 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
10342 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
10343
10344requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010345requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010346run_test "DTLS-SRTP server supports one profile. Client supports all profiles. openssl client." \
10347 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
10348 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10349 0 \
10350 -s "found use_srtp extension" \
10351 -s "found srtp profile" \
10352 -s "selected srtp profile" \
10353 -s "server hello, adding use_srtp extension" \
10354 -s "DTLS-SRTP key material is"\
10355 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
10356 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
10357
10358requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010359requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010360run_test "DTLS-SRTP server and Client support only one matching profile. openssl client." \
10361 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
10362 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10363 0 \
10364 -s "found use_srtp extension" \
10365 -s "found srtp profile" \
10366 -s "selected srtp profile" \
10367 -s "server hello, adding use_srtp extension" \
10368 -s "DTLS-SRTP key material is"\
10369 -g "find_in_both '^ *Keying material: [0-9A-F]*$'"\
10370 -c "SRTP Extension negotiated, profile=SRTP_AES128_CM_SHA1_32"
10371
10372requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010373requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010374run_test "DTLS-SRTP server and Client support only one different profile. openssl client." \
10375 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=1 debug_level=3" \
10376 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10377 0 \
10378 -s "found use_srtp extension" \
10379 -s "found srtp profile" \
10380 -S "selected srtp profile" \
10381 -S "server hello, adding use_srtp extension" \
10382 -S "DTLS-SRTP key material is"\
10383 -C "SRTP Extension negotiated, profile"
10384
10385requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010386requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010387run_test "DTLS-SRTP server doesn't support use_srtp extension. openssl client" \
10388 "$P_SRV dtls=1 debug_level=3" \
10389 "$O_CLI -dtls -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10390 0 \
10391 -s "found use_srtp extension" \
10392 -S "server hello, adding use_srtp extension" \
10393 -S "DTLS-SRTP key material is"\
10394 -C "SRTP Extension negotiated, profile"
10395
10396requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010397requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010398run_test "DTLS-SRTP all profiles supported. openssl server" \
10399 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10400 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10401 0 \
10402 -c "client hello, adding use_srtp extension" \
10403 -c "found use_srtp extension" \
10404 -c "found srtp profile" \
10405 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
10406 -c "DTLS-SRTP key material is"\
10407 -C "error"
10408
10409requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010410requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010411run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. openssl server." \
10412 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32:SRTP_AES128_CM_SHA1_80 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10413 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10414 0 \
10415 -c "client hello, adding use_srtp extension" \
10416 -c "found use_srtp extension" \
10417 -c "found srtp profile" \
10418 -c "selected srtp profile" \
10419 -c "DTLS-SRTP key material is"\
10420 -C "error"
10421
10422requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010423requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010424run_test "DTLS-SRTP server supports all profiles. Client supports one profile. openssl server." \
10425 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10426 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
10427 0 \
10428 -c "client hello, adding use_srtp extension" \
10429 -c "found use_srtp extension" \
10430 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
10431 -c "selected srtp profile" \
10432 -c "DTLS-SRTP key material is"\
10433 -C "error"
10434
10435requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010436requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010437run_test "DTLS-SRTP server supports one profile. Client supports all profiles. openssl server." \
10438 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10439 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10440 0 \
10441 -c "client hello, adding use_srtp extension" \
10442 -c "found use_srtp extension" \
10443 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
10444 -c "selected srtp profile" \
10445 -c "DTLS-SRTP key material is"\
10446 -C "error"
10447
10448requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010449requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010450run_test "DTLS-SRTP server and Client support only one matching profile. openssl server." \
10451 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10452 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
10453 0 \
10454 -c "client hello, adding use_srtp extension" \
10455 -c "found use_srtp extension" \
10456 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
10457 -c "selected srtp profile" \
10458 -c "DTLS-SRTP key material is"\
10459 -C "error"
10460
10461requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010462requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010463run_test "DTLS-SRTP server and Client support only one different profile. openssl server." \
10464 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10465 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
10466 0 \
10467 -c "client hello, adding use_srtp extension" \
10468 -C "found use_srtp extension" \
10469 -C "found srtp profile" \
10470 -C "selected srtp profile" \
10471 -C "DTLS-SRTP key material is"\
10472 -C "error"
10473
10474requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010475requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010476run_test "DTLS-SRTP server doesn't support use_srtp extension. openssl server" \
10477 "$O_SRV -dtls" \
10478 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10479 0 \
10480 -c "client hello, adding use_srtp extension" \
10481 -C "found use_srtp extension" \
10482 -C "found srtp profile" \
10483 -C "selected srtp profile" \
10484 -C "DTLS-SRTP key material is"\
10485 -C "error"
10486
10487requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Jerry Yuab082902021-12-23 18:02:22 +080010488requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
TRodziewicz4ca18aa2021-05-20 14:46:20 +020010489run_test "DTLS-SRTP all profiles supported. server doesn't support mki. openssl server." \
10490 "$O_SRV -dtls -verify 0 -use_srtp SRTP_AES128_CM_SHA1_80:SRTP_AES128_CM_SHA1_32 -keymatexport 'EXTRACTOR-dtls_srtp' -keymatexportlen 60" \
10491 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
10492 0 \
10493 -c "client hello, adding use_srtp extension" \
10494 -c "found use_srtp extension" \
10495 -c "found srtp profile" \
10496 -c "selected srtp profile" \
10497 -c "DTLS-SRTP key material is"\
10498 -c "DTLS-SRTP no mki value negotiated"\
10499 -c "dumping 'sending mki' (8 bytes)" \
10500 -C "dumping 'received mki' (8 bytes)" \
10501 -C "error"
10502
10503requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010504requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010505requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010506run_test "DTLS-SRTP all profiles supported. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020010507 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
10508 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010509 0 \
10510 -s "found use_srtp extension" \
10511 -s "found srtp profile" \
10512 -s "selected srtp profile" \
10513 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010514 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010515 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_80"
10516
10517requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010518requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010519requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010520run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020010521 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
10522 "$G_CLI -u --srtp-profiles=SRTP_NULL_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010523 0 \
10524 -s "found use_srtp extension" \
10525 -s "found srtp profile" \
10526 -s "selected srtp profile" \
10527 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010528 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010529 -c "SRTP profile: SRTP_NULL_HMAC_SHA1_80"
10530
10531requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010532requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010533requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010534run_test "DTLS-SRTP server supports all profiles. Client supports one profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020010535 "$P_SRV dtls=1 use_srtp=1 debug_level=3" \
10536 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010537 0 \
10538 -s "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010539 -s "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
10540 -s "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010541 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010542 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010543 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_32"
10544
10545requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010546requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010547requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010548run_test "DTLS-SRTP server supports one profile. Client supports all profiles. gnutls client." \
Johan Pascal43f94902020-09-22 12:25:52 +020010549 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor5d991c92019-01-15 18:54:03 +020010550 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010551 0 \
10552 -s "found use_srtp extension" \
10553 -s "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +020010554 -s "selected srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010555 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010556 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010557 -c "SRTP profile: SRTP_NULL_SHA1_32"
10558
10559requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010560requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010561requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010562run_test "DTLS-SRTP server and Client support only one matching profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020010563 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
10564 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010565 0 \
10566 -s "found use_srtp extension" \
10567 -s "found srtp profile" \
10568 -s "selected srtp profile" \
10569 -s "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010570 -s "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010571 -c "SRTP profile: SRTP_AES128_CM_HMAC_SHA1_32"
10572
10573requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010574requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010575requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010576run_test "DTLS-SRTP server and Client support only one different profile. gnutls client." \
Ron Eldor5d991c92019-01-15 18:54:03 +020010577 "$P_SRV dtls=1 use_srtp=1 srtp_force_profile=1 debug_level=3" \
10578 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010579 0 \
10580 -s "found use_srtp extension" \
10581 -s "found srtp profile" \
10582 -S "selected srtp profile" \
10583 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010584 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010585 -C "SRTP profile:"
10586
10587requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010588requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010589requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010590run_test "DTLS-SRTP server doesn't support use_srtp extension. gnutls client" \
Ron Eldor5d991c92019-01-15 18:54:03 +020010591 "$P_SRV dtls=1 debug_level=3" \
10592 "$G_CLI -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32 --insecure 127.0.0.1" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010593 0 \
10594 -s "found use_srtp extension" \
10595 -S "server hello, adding use_srtp extension" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010596 -S "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010597 -C "SRTP profile:"
10598
10599requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010600requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010601requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010602run_test "DTLS-SRTP all profiles supported. gnutls server" \
10603 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
10604 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10605 0 \
10606 -c "client hello, adding use_srtp extension" \
10607 -c "found use_srtp extension" \
10608 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +020010609 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010610 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010611 -C "error"
10612
10613requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010614requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010615requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010616run_test "DTLS-SRTP server supports all profiles. Client supports all profiles, in different order. gnutls server." \
10617 "$G_SRV -u --srtp-profiles=SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
10618 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10619 0 \
10620 -c "client hello, adding use_srtp extension" \
10621 -c "found use_srtp extension" \
10622 -c "found srtp profile" \
Johan Pascal43f94902020-09-22 12:25:52 +020010623 -c "selected srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010624 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010625 -C "error"
10626
10627requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010628requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010629requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010630run_test "DTLS-SRTP server supports all profiles. Client supports one profile. gnutls server." \
10631 "$G_SRV -u --srtp-profiles=SRTP_NULL_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_AES128_CM_HMAC_SHA1_80:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
10632 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
10633 0 \
10634 -c "client hello, adding use_srtp extension" \
10635 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010636 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010637 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010638 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010639 -C "error"
10640
10641requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010642requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010643requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010644run_test "DTLS-SRTP server supports one profile. Client supports all profiles. gnutls server." \
10645 "$G_SRV -u --srtp-profiles=SRTP_NULL_HMAC_SHA1_80" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010646 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010647 0 \
10648 -c "client hello, adding use_srtp extension" \
10649 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010650 -c "found srtp profile: MBEDTLS_TLS_SRTP_NULL_HMAC_SHA1_80" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010651 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010652 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010653 -C "error"
10654
10655requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010656requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010657requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010658run_test "DTLS-SRTP server and Client support only one matching profile. gnutls server." \
10659 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32" \
10660 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=2 debug_level=3" \
10661 0 \
10662 -c "client hello, adding use_srtp extension" \
10663 -c "found use_srtp extension" \
Johan Pascal43f94902020-09-22 12:25:52 +020010664 -c "found srtp profile: MBEDTLS_TLS_SRTP_AES128_CM_HMAC_SHA1_32" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010665 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010666 -c "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010667 -C "error"
10668
10669requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010670requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010671requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010672run_test "DTLS-SRTP server and Client support only one different profile. gnutls server." \
10673 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_32" \
Johan Pascal43f94902020-09-22 12:25:52 +020010674 "$P_CLI dtls=1 use_srtp=1 srtp_force_profile=6 debug_level=3" \
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010675 0 \
10676 -c "client hello, adding use_srtp extension" \
10677 -C "found use_srtp extension" \
10678 -C "found srtp profile" \
10679 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010680 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010681 -C "error"
10682
10683requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010684requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010685requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010686run_test "DTLS-SRTP server doesn't support use_srtp extension. gnutls server" \
10687 "$G_SRV -u" \
10688 "$P_CLI dtls=1 use_srtp=1 debug_level=3" \
10689 0 \
10690 -c "client hello, adding use_srtp extension" \
10691 -C "found use_srtp extension" \
10692 -C "found srtp profile" \
10693 -C "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010694 -C "DTLS-SRTP key material is"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010695 -C "error"
10696
10697requires_config_enabled MBEDTLS_SSL_DTLS_SRTP
Ron Eldor5d991c92019-01-15 18:54:03 +020010698requires_gnutls
Jerry Yuab082902021-12-23 18:02:22 +080010699requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010700run_test "DTLS-SRTP all profiles supported. mki used. gnutls server." \
10701 "$G_SRV -u --srtp-profiles=SRTP_AES128_CM_HMAC_SHA1_80:SRTP_AES128_CM_HMAC_SHA1_32:SRTP_NULL_HMAC_SHA1_80:SRTP_NULL_SHA1_32" \
10702 "$P_CLI dtls=1 use_srtp=1 mki=542310ab34290481 debug_level=3" \
10703 0 \
10704 -c "client hello, adding use_srtp extension" \
10705 -c "found use_srtp extension" \
10706 -c "found srtp profile" \
10707 -c "selected srtp profile" \
Johan Pascal9bc97ca2020-09-21 23:44:45 +020010708 -c "DTLS-SRTP key material is"\
Johan Pascal20c7db32020-10-26 22:45:58 +010010709 -c "DTLS-SRTP mki value:"\
Ron Eldor3c6a44b2018-07-10 10:32:10 +030010710 -c "dumping 'sending mki' (8 bytes)" \
10711 -c "dumping 'received mki' (8 bytes)" \
10712 -C "error"
10713
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +020010714# Tests for specific things with "unreliable" UDP connection
10715
10716not_with_valgrind # spurious resend due to timeout
Jerry Yuab082902021-12-23 18:02:22 +080010717requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +020010718run_test "DTLS proxy: reference" \
10719 -p "$P_PXY" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +020010720 "$P_SRV dtls=1 debug_level=2 hs_timeout=10000-20000" \
10721 "$P_CLI dtls=1 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +020010722 0 \
10723 -C "replayed record" \
10724 -S "replayed record" \
Hanno Beckerb2a86c32019-07-19 15:43:09 +010010725 -C "Buffer record from epoch" \
10726 -S "Buffer record from epoch" \
10727 -C "ssl_buffer_message" \
10728 -S "ssl_buffer_message" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +020010729 -C "discarding invalid record" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020010730 -S "discarding invalid record" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020010731 -S "resend" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020010732 -s "Extra-header:" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020010733 -c "HTTP/1.0 200 OK"
10734
10735not_with_valgrind # spurious resend due to timeout
Jerry Yuab082902021-12-23 18:02:22 +080010736requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020010737run_test "DTLS proxy: duplicate every packet" \
10738 -p "$P_PXY duplicate=1" \
Manuel Pégourié-Gonnardb6929892019-09-09 11:14:37 +020010739 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 hs_timeout=10000-20000" \
10740 "$P_CLI dtls=1 dgram_packing=0 debug_level=2 hs_timeout=10000-20000" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020010741 0 \
10742 -c "replayed record" \
10743 -s "replayed record" \
10744 -c "record from another epoch" \
10745 -s "record from another epoch" \
10746 -S "resend" \
10747 -s "Extra-header:" \
10748 -c "HTTP/1.0 200 OK"
10749
Jerry Yuab082902021-12-23 18:02:22 +080010750requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +020010751run_test "DTLS proxy: duplicate every packet, server anti-replay off" \
10752 -p "$P_PXY duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010753 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 anti_replay=0" \
10754 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020010755 0 \
10756 -c "replayed record" \
10757 -S "replayed record" \
10758 -c "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010759 -s "record from another epoch" \
10760 -c "resend" \
10761 -s "resend" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010762 -s "Extra-header:" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010763 -c "HTTP/1.0 200 OK"
10764
Jerry Yuab082902021-12-23 18:02:22 +080010765requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010766run_test "DTLS proxy: multiple records in same datagram" \
10767 -p "$P_PXY pack=50" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010768 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
10769 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020010770 0 \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010771 -c "next record in same datagram" \
10772 -s "next record in same datagram"
10773
Jerry Yuab082902021-12-23 18:02:22 +080010774requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010775run_test "DTLS proxy: multiple records in same datagram, duplicate every packet" \
10776 -p "$P_PXY pack=50 duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010777 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
10778 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010779 0 \
10780 -c "next record in same datagram" \
10781 -s "next record in same datagram"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010782
Jerry Yuab082902021-12-23 18:02:22 +080010783requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +020010784run_test "DTLS proxy: inject invalid AD record, default badmac_limit" \
10785 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010786 "$P_SRV dtls=1 dgram_packing=0 debug_level=1" \
10787 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010788 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010789 -c "discarding invalid record (mac)" \
10790 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010791 -s "Extra-header:" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010792 -c "HTTP/1.0 200 OK" \
10793 -S "too many records with bad MAC" \
10794 -S "Verification of the message MAC failed"
10795
Jerry Yuab082902021-12-23 18:02:22 +080010796requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010797run_test "DTLS proxy: inject invalid AD record, badmac_limit 1" \
10798 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010799 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=1" \
10800 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010801 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010802 -C "discarding invalid record (mac)" \
10803 -S "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010804 -S "Extra-header:" \
10805 -C "HTTP/1.0 200 OK" \
10806 -s "too many records with bad MAC" \
10807 -s "Verification of the message MAC failed"
10808
Jerry Yuab082902021-12-23 18:02:22 +080010809requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010810run_test "DTLS proxy: inject invalid AD record, badmac_limit 2" \
10811 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010812 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2" \
10813 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010814 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010815 -c "discarding invalid record (mac)" \
10816 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010817 -s "Extra-header:" \
10818 -c "HTTP/1.0 200 OK" \
10819 -S "too many records with bad MAC" \
10820 -S "Verification of the message MAC failed"
10821
Jerry Yuab082902021-12-23 18:02:22 +080010822requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010823run_test "DTLS proxy: inject invalid AD record, badmac_limit 2, exchanges 2"\
10824 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +010010825 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2 exchanges=2" \
10826 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100 exchanges=2" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010827 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +020010828 -c "discarding invalid record (mac)" \
10829 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +020010830 -s "Extra-header:" \
10831 -c "HTTP/1.0 200 OK" \
10832 -s "too many records with bad MAC" \
10833 -s "Verification of the message MAC failed"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010834
Jerry Yuab082902021-12-23 18:02:22 +080010835requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010836run_test "DTLS proxy: delay ChangeCipherSpec" \
10837 -p "$P_PXY delay_ccs=1" \
Hanno Beckerc4305232018-08-14 13:41:21 +010010838 "$P_SRV dtls=1 debug_level=1 dgram_packing=0" \
10839 "$P_CLI dtls=1 debug_level=1 dgram_packing=0" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010840 0 \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +020010841 -c "record from another epoch" \
10842 -s "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020010843 -s "Extra-header:" \
10844 -c "HTTP/1.0 200 OK"
10845
Hanno Beckeraa5d0c42018-08-16 13:15:19 +010010846# Tests for reordering support with DTLS
10847
Gilles Peskine6f160ca2022-03-14 18:21:24 +010010848requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080010849requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker56cdfd12018-08-17 13:42:15 +010010850run_test "DTLS reordering: Buffer out-of-order handshake message on client" \
10851 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010852 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10853 hs_timeout=2500-60000" \
10854 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10855 hs_timeout=2500-60000" \
Hanno Beckere3842212018-08-16 15:28:59 +010010856 0 \
10857 -c "Buffering HS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010858 -c "Next handshake message has been buffered - load"\
10859 -S "Buffering HS message" \
10860 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010861 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010862 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010863 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010864 -S "Remember CCS message"
Hanno Beckere3842212018-08-16 15:28:59 +010010865
Gilles Peskine6f160ca2022-03-14 18:21:24 +010010866requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080010867requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckerdc1e9502018-08-28 16:02:33 +010010868run_test "DTLS reordering: Buffer out-of-order handshake message fragment on client" \
10869 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010870 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10871 hs_timeout=2500-60000" \
10872 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10873 hs_timeout=2500-60000" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +010010874 0 \
10875 -c "Buffering HS message" \
10876 -c "found fragmented DTLS handshake message"\
10877 -c "Next handshake message 1 not or only partially bufffered" \
10878 -c "Next handshake message has been buffered - load"\
10879 -S "Buffering HS message" \
10880 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010881 -C "Injecting buffered CCS message" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +010010882 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010883 -S "Injecting buffered CCS message" \
Hanno Beckeraa5d0c42018-08-16 13:15:19 +010010884 -S "Remember CCS message"
10885
Hanno Beckera1adcca2018-08-24 14:41:07 +010010886# The client buffers the ServerKeyExchange before receiving the fragmented
10887# Certificate message; at the time of writing, together these are aroudn 1200b
10888# in size, so that the bound below ensures that the certificate can be reassembled
10889# while keeping the ServerKeyExchange.
Gilles Peskine6f160ca2022-03-14 18:21:24 +010010890requires_certificate_authentication
Hanno Beckera1adcca2018-08-24 14:41:07 +010010891requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1300
Jerry Yuab082902021-12-23 18:02:22 +080010892requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera1adcca2018-08-24 14:41:07 +010010893run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next" \
Hanno Beckere3567052018-08-21 16:50:43 +010010894 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010895 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10896 hs_timeout=2500-60000" \
10897 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10898 hs_timeout=2500-60000" \
Hanno Beckere3567052018-08-21 16:50:43 +010010899 0 \
10900 -c "Buffering HS message" \
10901 -c "Next handshake message has been buffered - load"\
Hanno Beckera1adcca2018-08-24 14:41:07 +010010902 -C "attempt to make space by freeing buffered messages" \
10903 -S "Buffering HS message" \
10904 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010905 -C "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010906 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010907 -S "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010908 -S "Remember CCS message"
10909
10910# The size constraints ensure that the delayed certificate message can't
10911# be reassembled while keeping the ServerKeyExchange message, but it can
10912# when dropping it first.
Gilles Peskine6f160ca2022-03-14 18:21:24 +010010913requires_certificate_authentication
Hanno Beckera1adcca2018-08-24 14:41:07 +010010914requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 900
10915requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1299
Jerry Yuab082902021-12-23 18:02:22 +080010916requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera1adcca2018-08-24 14:41:07 +010010917run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg" \
10918 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010919 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10920 hs_timeout=2500-60000" \
10921 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10922 hs_timeout=2500-60000" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010010923 0 \
10924 -c "Buffering HS message" \
10925 -c "attempt to make space by freeing buffered future messages" \
10926 -c "Enough space available after freeing buffered HS messages" \
Hanno Beckere3567052018-08-21 16:50:43 +010010927 -S "Buffering HS message" \
10928 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +010010929 -C "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +010010930 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010931 -S "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +010010932 -S "Remember CCS message"
10933
Gilles Peskine6f160ca2022-03-14 18:21:24 +010010934requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080010935requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker56cdfd12018-08-17 13:42:15 +010010936run_test "DTLS reordering: Buffer out-of-order handshake message on server" \
10937 -p "$P_PXY delay_cli=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010938 "$P_SRV dgram_packing=0 auth_mode=required cookies=0 dtls=1 debug_level=2 \
10939 hs_timeout=2500-60000" \
10940 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10941 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010942 0 \
10943 -C "Buffering HS message" \
10944 -C "Next handshake message has been buffered - load"\
10945 -s "Buffering HS message" \
10946 -s "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010947 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010948 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010949 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010950 -S "Remember CCS message"
10951
Gilles Peskine6f160ca2022-03-14 18:21:24 +010010952requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080010953requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker56cdfd12018-08-17 13:42:15 +010010954run_test "DTLS reordering: Buffer out-of-order CCS message on client"\
10955 -p "$P_PXY delay_srv=NewSessionTicket" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010956 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10957 hs_timeout=2500-60000" \
10958 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10959 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010960 0 \
10961 -C "Buffering HS message" \
10962 -C "Next handshake message has been buffered - load"\
10963 -S "Buffering HS message" \
10964 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010965 -c "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010966 -c "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010967 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010968 -S "Remember CCS message"
10969
Gilles Peskine6f160ca2022-03-14 18:21:24 +010010970requires_certificate_authentication
Jerry Yuab082902021-12-23 18:02:22 +080010971requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Becker56cdfd12018-08-17 13:42:15 +010010972run_test "DTLS reordering: Buffer out-of-order CCS message on server"\
10973 -p "$P_PXY delay_cli=ClientKeyExchange" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010974 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10975 hs_timeout=2500-60000" \
10976 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10977 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010978 0 \
10979 -C "Buffering HS message" \
10980 -C "Next handshake message has been buffered - load"\
10981 -S "Buffering HS message" \
10982 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010983 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010984 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +010010985 -s "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010986 -s "Remember CCS message"
10987
Jerry Yuab082902021-12-23 18:02:22 +080010988requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Hanno Beckera1adcca2018-08-24 14:41:07 +010010989run_test "DTLS reordering: Buffer encrypted Finished message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010990 -p "$P_PXY delay_ccs=1" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040010991 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
10992 hs_timeout=2500-60000" \
10993 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
10994 hs_timeout=2500-60000" \
Hanno Beckerb34149c2018-08-16 15:29:06 +010010995 0 \
10996 -s "Buffer record from epoch 1" \
Hanno Becker56cdfd12018-08-17 13:42:15 +010010997 -s "Found buffered record from current epoch - load" \
10998 -c "Buffer record from epoch 1" \
10999 -c "Found buffered record from current epoch - load"
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011000
Hanno Beckera1adcca2018-08-24 14:41:07 +010011001# In this test, both the fragmented NewSessionTicket and the ChangeCipherSpec
11002# from the server are delayed, so that the encrypted Finished message
11003# is received and buffered. When the fragmented NewSessionTicket comes
11004# in afterwards, the encrypted Finished message must be freed in order
11005# to make space for the NewSessionTicket to be reassembled.
11006# This works only in very particular circumstances:
11007# - MBEDTLS_SSL_DTLS_MAX_BUFFERING must be large enough to allow buffering
11008# of the NewSessionTicket, but small enough to also allow buffering of
11009# the encrypted Finished message.
11010# - The MTU setting on the server must be so small that the NewSessionTicket
11011# needs to be fragmented.
11012# - All messages sent by the server must be small enough to be either sent
11013# without fragmentation or be reassembled within the bounds of
11014# MBEDTLS_SSL_DTLS_MAX_BUFFERING. Achieve this by testing with a PSK-based
11015# handshake, omitting CRTs.
Manuel Pégourié-Gonnardeef4c752019-05-28 10:21:30 +020011016requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 190
11017requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 230
Hanno Beckera1adcca2018-08-24 14:41:07 +010011018run_test "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket" \
11019 -p "$P_PXY delay_srv=NewSessionTicket delay_srv=NewSessionTicket delay_ccs=1" \
Manuel Pégourié-Gonnardeef4c752019-05-28 10:21:30 +020011020 "$P_SRV mtu=140 response_size=90 dgram_packing=0 psk=abc123 psk_identity=foo cookies=0 dtls=1 debug_level=2" \
Hanno Beckera1adcca2018-08-24 14:41:07 +010011021 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 psk=abc123 psk_identity=foo" \
11022 0 \
11023 -s "Buffer record from epoch 1" \
11024 -s "Found buffered record from current epoch - load" \
11025 -c "Buffer record from epoch 1" \
11026 -C "Found buffered record from current epoch - load" \
11027 -c "Enough space available after freeing future epoch record"
11028
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +020011029# Tests for "randomly unreliable connection": try a variety of flows and peers
11030
11031client_needs_more_time 2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020011032run_test "DTLS proxy: 3d (drop, delay, duplicate), \"short\" PSK handshake" \
11033 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011034 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011035 psk=abc123" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011036 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011037 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
11038 0 \
11039 -s "Extra-header:" \
11040 -c "HTTP/1.0 200 OK"
11041
Janos Follath74537a62016-09-02 13:45:28 +010011042client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011043run_test "DTLS proxy: 3d, \"short\" RSA handshake" \
11044 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011045 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
11046 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011047 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
11048 0 \
11049 -s "Extra-header:" \
11050 -c "HTTP/1.0 200 OK"
11051
Janos Follath74537a62016-09-02 13:45:28 +010011052client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080011053requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011054run_test "DTLS proxy: 3d, \"short\" (no ticket, no cli_auth) FS handshake" \
11055 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011056 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
11057 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011058 0 \
11059 -s "Extra-header:" \
11060 -c "HTTP/1.0 200 OK"
11061
Janos Follath74537a62016-09-02 13:45:28 +010011062client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080011063requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011064run_test "DTLS proxy: 3d, FS, client auth" \
11065 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011066 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=required" \
11067 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011068 0 \
11069 -s "Extra-header:" \
11070 -c "HTTP/1.0 200 OK"
11071
Janos Follath74537a62016-09-02 13:45:28 +010011072client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080011073requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011074run_test "DTLS proxy: 3d, FS, ticket" \
11075 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011076 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=none" \
11077 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011078 0 \
11079 -s "Extra-header:" \
11080 -c "HTTP/1.0 200 OK"
11081
Janos Follath74537a62016-09-02 13:45:28 +010011082client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080011083requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +020011084run_test "DTLS proxy: 3d, max handshake (FS, ticket + client auth)" \
11085 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011086 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=required" \
11087 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +020011088 0 \
11089 -s "Extra-header:" \
11090 -c "HTTP/1.0 200 OK"
11091
Janos Follath74537a62016-09-02 13:45:28 +010011092client_needs_more_time 2
Jerry Yuab082902021-12-23 18:02:22 +080011093requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011094run_test "DTLS proxy: 3d, max handshake, nbio" \
11095 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011096 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020011097 auth_mode=required" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011098 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011099 0 \
11100 -s "Extra-header:" \
11101 -c "HTTP/1.0 200 OK"
11102
Janos Follath74537a62016-09-02 13:45:28 +010011103client_needs_more_time 4
Gilles Peskine2fe796f2022-02-25 19:51:52 +010011104requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020011105run_test "DTLS proxy: 3d, min handshake, resumption" \
11106 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011107 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020011108 psk=abc123 debug_level=3" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011109 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +010011110 debug_level=3 reconnect=1 skip_close_notify=1 read_timeout=1000 max_resend=10 \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +020011111 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
11112 0 \
11113 -s "a session has been resumed" \
11114 -c "a session has been resumed" \
11115 -s "Extra-header:" \
11116 -c "HTTP/1.0 200 OK"
11117
Janos Follath74537a62016-09-02 13:45:28 +010011118client_needs_more_time 4
Gilles Peskine2fe796f2022-02-25 19:51:52 +010011119requires_config_enabled MBEDTLS_SSL_CACHE_C
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020011120run_test "DTLS proxy: 3d, min handshake, resumption, nbio" \
11121 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011122 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020011123 psk=abc123 debug_level=3 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011124 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard56941fe2020-02-17 11:04:33 +010011125 debug_level=3 reconnect=1 skip_close_notify=1 read_timeout=1000 max_resend=10 \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +020011126 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 nbio=2" \
11127 0 \
11128 -s "a session has been resumed" \
11129 -c "a session has been resumed" \
11130 -s "Extra-header:" \
11131 -c "HTTP/1.0 200 OK"
11132
Janos Follath74537a62016-09-02 13:45:28 +010011133client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010011134requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011135run_test "DTLS proxy: 3d, min handshake, client-initiated renego" \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +020011136 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011137 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020011138 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011139 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020011140 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +020011141 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
11142 0 \
11143 -c "=> renegotiate" \
11144 -s "=> renegotiate" \
11145 -s "Extra-header:" \
11146 -c "HTTP/1.0 200 OK"
11147
Janos Follath74537a62016-09-02 13:45:28 +010011148client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010011149requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011150run_test "DTLS proxy: 3d, min handshake, client-initiated renego, nbio" \
11151 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011152 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020011153 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011154 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +020011155 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011156 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
11157 0 \
11158 -c "=> renegotiate" \
11159 -s "=> renegotiate" \
11160 -s "Extra-header:" \
11161 -c "HTTP/1.0 200 OK"
11162
Janos Follath74537a62016-09-02 13:45:28 +010011163client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010011164requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020011165run_test "DTLS proxy: 3d, min handshake, server-initiated renego" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020011166 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011167 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020011168 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020011169 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011170 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020011171 renegotiation=1 exchanges=4 debug_level=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020011172 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
11173 0 \
11174 -c "=> renegotiate" \
11175 -s "=> renegotiate" \
11176 -s "Extra-header:" \
11177 -c "HTTP/1.0 200 OK"
11178
Janos Follath74537a62016-09-02 13:45:28 +010011179client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +010011180requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020011181run_test "DTLS proxy: 3d, min handshake, server-initiated renego, nbio" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020011182 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011183 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020011184 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020011185 debug_level=2 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011186 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +020011187 renegotiation=1 exchanges=4 debug_level=2 nbio=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +020011188 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
11189 0 \
11190 -c "=> renegotiate" \
11191 -s "=> renegotiate" \
11192 -s "Extra-header:" \
11193 -c "HTTP/1.0 200 OK"
11194
Zhangsen Wang87a9c862022-06-28 06:10:35 +000011195## The three tests below require 1.1.1a or higher version of openssl, otherwise
11196## it might trigger a bug due to openssl (https://github.com/openssl/openssl/issues/6902)
11197## Besides, openssl should use dtls1_2 or dtls, otherwise it will cause "SSL alert number 70" error
11198requires_openssl_next
Janos Follath74537a62016-09-02 13:45:28 +010011199client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020011200not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080011201requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020011202run_test "DTLS proxy: 3d, openssl server" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020011203 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
Valerio Setti2f8eb622023-03-16 13:04:44 +010011204 "$O_NEXT_SRV -dtls1_2 -mtu 2048" \
11205 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020011206 0 \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +020011207 -c "HTTP/1.0 200 OK"
11208
Zhangsen Wang87a9c862022-06-28 06:10:35 +000011209requires_openssl_next
Janos Follath74537a62016-09-02 13:45:28 +010011210client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020011211not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080011212requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020011213run_test "DTLS proxy: 3d, openssl server, fragmentation" \
11214 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
Zhangsen Wang87a9c862022-06-28 06:10:35 +000011215 "$O_NEXT_SRV -dtls1_2 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011216 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020011217 0 \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020011218 -c "HTTP/1.0 200 OK"
11219
Zhangsen Wang87a9c862022-06-28 06:10:35 +000011220requires_openssl_next
Janos Follath74537a62016-09-02 13:45:28 +010011221client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020011222not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080011223requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011224run_test "DTLS proxy: 3d, openssl server, fragmentation, nbio" \
11225 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
Zhangsen Wang87a9c862022-06-28 06:10:35 +000011226 "$O_NEXT_SRV -dtls1_2 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011227 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2 tickets=0" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011228 0 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011229 -c "HTTP/1.0 200 OK"
11230
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +000011231requires_gnutls
Janos Follath74537a62016-09-02 13:45:28 +010011232client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020011233not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080011234requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020011235run_test "DTLS proxy: 3d, gnutls server" \
11236 -p "$P_PXY drop=5 delay=5 duplicate=5" \
11237 "$G_SRV -u --mtu 2048 -a" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011238 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020011239 0 \
11240 -s "Extra-header:" \
11241 -c "Extra-header:"
11242
k-stachowiak17a38d32019-02-18 15:29:56 +010011243requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +010011244client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020011245not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080011246requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020011247run_test "DTLS proxy: 3d, gnutls server, fragmentation" \
11248 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +010011249 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011250 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +020011251 0 \
11252 -s "Extra-header:" \
11253 -c "Extra-header:"
11254
k-stachowiak17a38d32019-02-18 15:29:56 +010011255requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +010011256client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +020011257not_with_valgrind # risk of non-mbedtls peer timing out
Jerry Yuab082902021-12-23 18:02:22 +080011258requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011259run_test "DTLS proxy: 3d, gnutls server, fragmentation, nbio" \
11260 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +010011261 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -040011262 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +020011263 0 \
11264 -s "Extra-header:" \
11265 -c "Extra-header:"
11266
Jerry Yuab082902021-12-23 18:02:22 +080011267requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Ron Eldorf75e2522019-05-14 20:38:49 +030011268run_test "export keys functionality" \
11269 "$P_SRV eap_tls=1 debug_level=3" \
Ronald Cronf95d1692023-03-14 17:19:42 +010011270 "$P_CLI force_version=tls12 eap_tls=1 debug_level=3" \
Ron Eldorf75e2522019-05-14 20:38:49 +030011271 0 \
Ron Eldor65d8c262019-06-04 13:05:36 +030011272 -c "EAP-TLS key material is:"\
11273 -s "EAP-TLS key material is:"\
11274 -c "EAP-TLS IV is:" \
11275 -s "EAP-TLS IV is:"
Ron Eldorf75e2522019-05-14 20:38:49 +030011276
Jerry Yu04029792021-08-10 16:45:37 +080011277# openssl feature tests: check if tls1.3 exists.
11278requires_openssl_tls1_3
Jerry Yuc502dff2021-12-03 10:04:08 +080011279run_test "TLS 1.3: Test openssl tls1_3 feature" \
Jerry Yu04029792021-08-10 16:45:37 +080011280 "$O_NEXT_SRV -tls1_3 -msg" \
11281 "$O_NEXT_CLI -tls1_3 -msg" \
11282 0 \
11283 -c "TLS 1.3" \
11284 -s "TLS 1.3"
11285
Jerry Yu75261df2021-09-02 17:40:08 +080011286# gnutls feature tests: check if TLS 1.3 is supported as well as the NO_TICKETS and DISABLE_TLS13_COMPAT_MODE options.
Jerry Yu04029792021-08-10 16:45:37 +080011287requires_gnutls_tls1_3
Jerry Yub12d81d2021-08-17 10:56:08 +080011288requires_gnutls_next_no_ticket
11289requires_gnutls_next_disable_tls13_compat
Jerry Yuc502dff2021-12-03 10:04:08 +080011290run_test "TLS 1.3: Test gnutls tls1_3 feature" \
Jerry Yu937ac672021-10-28 17:39:28 +080011291 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE --disable-client-cert " \
Jerry Yub12d81d2021-08-17 10:56:08 +080011292 "$G_NEXT_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Jerry Yu04029792021-08-10 16:45:37 +080011293 0 \
11294 -s "Version: TLS1.3" \
11295 -c "Version: TLS1.3"
11296
Jerry Yuc46e9b42021-08-06 11:22:24 +080011297# TLS1.3 test cases
Ronald Cronb18c67a2023-02-16 16:57:16 +010011298requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
11299requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron4bb67732023-02-16 15:51:18 +010011300requires_ciphersuite_enabled TLS1-3-CHACHA20-POLY1305-SHA256
Ronald Cronb18c67a2023-02-16 16:57:16 +010011301requires_config_enabled MBEDTLS_ECP_DP_CURVE25519_ENABLED
11302requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
Ronald Cronb18c67a2023-02-16 16:57:16 +010011303run_test "TLS 1.3: Default" \
11304 "$P_SRV allow_sha1=0 debug_level=3 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13" \
11305 "$P_CLI allow_sha1=0" \
11306 0 \
11307 -s "Protocol is TLSv1.3" \
Ronald Cron4bb67732023-02-16 15:51:18 +010011308 -s "Ciphersuite is TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020011309 -s "ECDH/FFDH group: " \
Ronald Cronb18c67a2023-02-16 16:57:16 +010011310 -s "selected signature algorithm ecdsa_secp256r1_sha256"
11311
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011312requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron7c0185f2021-11-30 09:16:24 +010011313requires_config_enabled MBEDTLS_DEBUG_C
11314requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011315requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11316 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuc502dff2021-12-03 10:04:08 +080011317run_test "TLS 1.3: minimal feature sets - openssl" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010011318 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011319 "$P_CLI debug_level=3" \
Jerry Yue1b1e2d2021-10-29 17:46:32 +080011320 0 \
Ronald Cron27c85e72022-03-08 11:37:55 +010011321 -c "client state: MBEDTLS_SSL_HELLO_REQUEST" \
11322 -c "client state: MBEDTLS_SSL_SERVER_HELLO" \
11323 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
11324 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
11325 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
11326 -c "client state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
11327 -c "client state: MBEDTLS_SSL_SERVER_FINISHED" \
11328 -c "client state: MBEDTLS_SSL_CLIENT_FINISHED" \
11329 -c "client state: MBEDTLS_SSL_FLUSH_BUFFERS" \
11330 -c "client state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
Xiaofei Bai746f9482021-11-12 08:53:56 +000011331 -c "<= ssl_tls13_process_server_hello" \
Ronald Cron4bb67732023-02-16 15:51:18 +010011332 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020011333 -c "DHE group name: " \
Xiaofei Bai746f9482021-11-12 08:53:56 +000011334 -c "=> ssl_tls13_process_server_hello" \
Ronald Cron27c85e72022-03-08 11:37:55 +010011335 -c "<= parse encrypted extensions" \
Jerry Yu834886d2021-10-30 13:26:15 +080011336 -c "Certificate verification flags clear" \
Ronald Cron27c85e72022-03-08 11:37:55 +010011337 -c "=> parse certificate verify" \
11338 -c "<= parse certificate verify" \
XiaokangQiand0aa3e92021-11-10 06:17:40 +000011339 -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
Jerry Yu6d38c192021-11-15 14:01:04 +080011340 -c "<= parse finished message" \
Gilles Peskinec63a1e02022-01-13 01:10:24 +010011341 -c "Protocol is TLSv1.3" \
Jerry Yu6d38c192021-11-15 14:01:04 +080011342 -c "HTTP/1.0 200 ok"
Jerry Yued2ef2d2021-08-19 18:11:43 +080011343
Jerry Yu76e31ec2021-09-22 21:16:27 +080011344requires_gnutls_tls1_3
Jerry Yu937ac672021-10-28 17:39:28 +080011345requires_gnutls_next_no_ticket
Ronald Cron7c0185f2021-11-30 09:16:24 +010011346requires_config_enabled MBEDTLS_DEBUG_C
11347requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011348requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11349 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuc502dff2021-12-03 10:04:08 +080011350run_test "TLS 1.3: minimal feature sets - gnutls" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010011351 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011352 "$P_CLI debug_level=3" \
Jerry Yue1b1e2d2021-10-29 17:46:32 +080011353 0 \
Ronald Cron27c85e72022-03-08 11:37:55 +010011354 -s "SERVER HELLO was queued" \
11355 -c "client state: MBEDTLS_SSL_HELLO_REQUEST" \
11356 -c "client state: MBEDTLS_SSL_SERVER_HELLO" \
11357 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
11358 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
11359 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
11360 -c "client state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
11361 -c "client state: MBEDTLS_SSL_SERVER_FINISHED" \
11362 -c "client state: MBEDTLS_SSL_CLIENT_FINISHED" \
11363 -c "client state: MBEDTLS_SSL_FLUSH_BUFFERS" \
11364 -c "client state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
Xiaofei Bai746f9482021-11-12 08:53:56 +000011365 -c "<= ssl_tls13_process_server_hello" \
Ronald Cron4bb67732023-02-16 15:51:18 +010011366 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020011367 -c "DHE group name: " \
Xiaofei Bai746f9482021-11-12 08:53:56 +000011368 -c "=> ssl_tls13_process_server_hello" \
Ronald Cron27c85e72022-03-08 11:37:55 +010011369 -c "<= parse encrypted extensions" \
Jerry Yu834886d2021-10-30 13:26:15 +080011370 -c "Certificate verification flags clear" \
Ronald Cron27c85e72022-03-08 11:37:55 +010011371 -c "=> parse certificate verify" \
11372 -c "<= parse certificate verify" \
XiaokangQiand0aa3e92021-11-10 06:17:40 +000011373 -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
Jerry Yu6d38c192021-11-15 14:01:04 +080011374 -c "<= parse finished message" \
Gilles Peskine860429f2022-02-12 00:44:48 +010011375 -c "Protocol is TLSv1.3" \
Jerry Yu6d38c192021-11-15 14:01:04 +080011376 -c "HTTP/1.0 200 OK"
XiaokangQiand0aa3e92021-11-10 06:17:40 +000011377
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011378requires_openssl_tls1_3_with_compatible_ephemeral
lhuang0486cacac2022-01-21 07:34:27 -080011379requires_config_enabled MBEDTLS_DEBUG_C
11380requires_config_enabled MBEDTLS_SSL_CLI_C
11381requires_config_enabled MBEDTLS_SSL_ALPN
Ronald Cron70ed4172022-10-20 15:48:19 +020011382requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11383 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
lhuang0486cacac2022-01-21 07:34:27 -080011384run_test "TLS 1.3: alpn - openssl" \
11385 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -alpn h2" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011386 "$P_CLI debug_level=3 alpn=h2" \
lhuang0486cacac2022-01-21 07:34:27 -080011387 0 \
Ronald Cron27c85e72022-03-08 11:37:55 +010011388 -c "client state: MBEDTLS_SSL_HELLO_REQUEST" \
11389 -c "client state: MBEDTLS_SSL_SERVER_HELLO" \
11390 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
11391 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
11392 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
11393 -c "client state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
11394 -c "client state: MBEDTLS_SSL_SERVER_FINISHED" \
11395 -c "client state: MBEDTLS_SSL_CLIENT_FINISHED" \
11396 -c "client state: MBEDTLS_SSL_FLUSH_BUFFERS" \
11397 -c "client state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
lhuang0486cacac2022-01-21 07:34:27 -080011398 -c "<= ssl_tls13_process_server_hello" \
Ronald Cron4bb67732023-02-16 15:51:18 +010011399 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020011400 -c "DHE group name: " \
lhuang0486cacac2022-01-21 07:34:27 -080011401 -c "=> ssl_tls13_process_server_hello" \
Ronald Cron27c85e72022-03-08 11:37:55 +010011402 -c "<= parse encrypted extensions" \
lhuang0486cacac2022-01-21 07:34:27 -080011403 -c "Certificate verification flags clear" \
Ronald Cron27c85e72022-03-08 11:37:55 +010011404 -c "=> parse certificate verify" \
11405 -c "<= parse certificate verify" \
lhuang0486cacac2022-01-21 07:34:27 -080011406 -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
11407 -c "<= parse finished message" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011408 -c "Protocol is TLSv1.3" \
lhuang0486cacac2022-01-21 07:34:27 -080011409 -c "HTTP/1.0 200 ok" \
11410 -c "Application Layer Protocol is h2"
11411
11412requires_gnutls_tls1_3
11413requires_gnutls_next_no_ticket
lhuang0486cacac2022-01-21 07:34:27 -080011414requires_config_enabled MBEDTLS_DEBUG_C
11415requires_config_enabled MBEDTLS_SSL_CLI_C
11416requires_config_enabled MBEDTLS_SSL_ALPN
Ronald Cron70ed4172022-10-20 15:48:19 +020011417requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11418 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
lhuang0486cacac2022-01-21 07:34:27 -080011419run_test "TLS 1.3: alpn - gnutls" \
11420 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert --alpn=h2" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011421 "$P_CLI debug_level=3 alpn=h2" \
lhuang0486cacac2022-01-21 07:34:27 -080011422 0 \
Ronald Cron27c85e72022-03-08 11:37:55 +010011423 -s "SERVER HELLO was queued" \
11424 -c "client state: MBEDTLS_SSL_HELLO_REQUEST" \
11425 -c "client state: MBEDTLS_SSL_SERVER_HELLO" \
11426 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
11427 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
11428 -c "client state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
11429 -c "client state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
11430 -c "client state: MBEDTLS_SSL_SERVER_FINISHED" \
11431 -c "client state: MBEDTLS_SSL_CLIENT_FINISHED" \
11432 -c "client state: MBEDTLS_SSL_FLUSH_BUFFERS" \
11433 -c "client state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
lhuang0486cacac2022-01-21 07:34:27 -080011434 -c "<= ssl_tls13_process_server_hello" \
Ronald Cron4bb67732023-02-16 15:51:18 +010011435 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Przemek Stekiel1f5c2ba2023-06-15 17:04:44 +020011436 -c "DHE group name: " \
lhuang0486cacac2022-01-21 07:34:27 -080011437 -c "=> ssl_tls13_process_server_hello" \
Ronald Cron27c85e72022-03-08 11:37:55 +010011438 -c "<= parse encrypted extensions" \
lhuang0486cacac2022-01-21 07:34:27 -080011439 -c "Certificate verification flags clear" \
Ronald Cron27c85e72022-03-08 11:37:55 +010011440 -c "=> parse certificate verify" \
11441 -c "<= parse certificate verify" \
lhuang0486cacac2022-01-21 07:34:27 -080011442 -c "mbedtls_ssl_tls13_process_certificate_verify() returned 0" \
11443 -c "<= parse finished message" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011444 -c "Protocol is TLSv1.3" \
lhuang0486cacac2022-01-21 07:34:27 -080011445 -c "HTTP/1.0 200 OK" \
11446 -c "Application Layer Protocol is h2"
11447
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011448requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQianacb39922022-06-17 10:18:48 +000011449requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian95d5f542022-06-24 02:29:26 +000011450requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQianacb39922022-06-17 10:18:48 +000011451requires_config_enabled MBEDTLS_SSL_ALPN
Ronald Cron928cbd32022-10-04 16:14:26 +020011452requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianacb39922022-06-17 10:18:48 +000011453run_test "TLS 1.3: server alpn - openssl" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010011454 "$P_SRV debug_level=3 tickets=0 crt_file=data_files/server5.crt key_file=data_files/server5.key alpn=h2" \
XiaokangQianacb39922022-06-17 10:18:48 +000011455 "$O_NEXT_CLI -msg -tls1_3 -no_middlebox -alpn h2" \
11456 0 \
XiaokangQianc7403452022-06-23 03:24:12 +000011457 -s "found alpn extension" \
11458 -s "server side, adding alpn extension" \
11459 -s "Protocol is TLSv1.3" \
11460 -s "HTTP/1.0 200 OK" \
11461 -s "Application Layer Protocol is h2"
11462
11463requires_gnutls_tls1_3
XiaokangQianc7403452022-06-23 03:24:12 +000011464requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQian95d5f542022-06-24 02:29:26 +000011465requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQianc7403452022-06-23 03:24:12 +000011466requires_config_enabled MBEDTLS_SSL_ALPN
Ronald Cron928cbd32022-10-04 16:14:26 +020011467requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianc7403452022-06-23 03:24:12 +000011468run_test "TLS 1.3: server alpn - gnutls" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010011469 "$P_SRV debug_level=3 tickets=0 crt_file=data_files/server5.crt key_file=data_files/server5.key alpn=h2" \
XiaokangQianc7403452022-06-23 03:24:12 +000011470 "$G_NEXT_CLI localhost -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V --alpn h2" \
11471 0 \
XiaokangQianacb39922022-06-17 10:18:48 +000011472 -s "found alpn extension" \
11473 -s "server side, adding alpn extension" \
11474 -s "Protocol is TLSv1.3" \
11475 -s "HTTP/1.0 200 OK" \
11476 -s "Application Layer Protocol is h2"
11477
Ronald Cron6f135e12021-12-08 16:57:54 +010011478requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron7c0185f2021-11-30 09:16:24 +010011479requires_config_enabled MBEDTLS_DEBUG_C
11480requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011481skip_handshake_stage_check
11482requires_gnutls_tls1_3
Ronald Crondf5f8682022-04-05 16:01:03 +020011483run_test "TLS 1.3: Not supported version check:gnutls: srv max TLS 1.0" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011484 "$G_NEXT_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.0 -d 4" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011485 "$P_CLI debug_level=4" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011486 1 \
11487 -s "Client's version: 3.3" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011488 -S "Version: TLS1.0" \
11489 -C "Protocol is TLSv1.0"
11490
Ronald Cron6f135e12021-12-08 16:57:54 +010011491requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron7c0185f2021-11-30 09:16:24 +010011492requires_config_enabled MBEDTLS_DEBUG_C
11493requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011494skip_handshake_stage_check
11495requires_gnutls_tls1_3
Ronald Crondf5f8682022-04-05 16:01:03 +020011496run_test "TLS 1.3: Not supported version check:gnutls: srv max TLS 1.1" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011497 "$G_NEXT_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.1 -d 4" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011498 "$P_CLI debug_level=4" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011499 1 \
11500 -s "Client's version: 3.3" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011501 -S "Version: TLS1.1" \
11502 -C "Protocol is TLSv1.1"
11503
Ronald Cron6f135e12021-12-08 16:57:54 +010011504requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron7c0185f2021-11-30 09:16:24 +010011505requires_config_enabled MBEDTLS_DEBUG_C
11506requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011507skip_handshake_stage_check
11508requires_gnutls_tls1_3
Ronald Crondf5f8682022-04-05 16:01:03 +020011509run_test "TLS 1.3: Not supported version check:gnutls: srv max TLS 1.2" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011510 "$G_NEXT_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.2 -d 4" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011511 "$P_CLI force_version=tls13 debug_level=4" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011512 1 \
11513 -s "Client's version: 3.3" \
11514 -c "is a fatal alert message (msg 40)" \
11515 -S "Version: TLS1.2" \
11516 -C "Protocol is TLSv1.2"
11517
Ronald Cron6f135e12021-12-08 16:57:54 +010011518requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron7c0185f2021-11-30 09:16:24 +010011519requires_config_enabled MBEDTLS_DEBUG_C
11520requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011521skip_handshake_stage_check
11522requires_openssl_next
Ronald Crondf5f8682022-04-05 16:01:03 +020011523run_test "TLS 1.3: Not supported version check:openssl: srv max TLS 1.0" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011524 "$O_NEXT_SRV -msg -tls1" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011525 "$P_CLI debug_level=4" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011526 1 \
11527 -s "fatal protocol_version" \
11528 -c "is a fatal alert message (msg 70)" \
11529 -S "Version: TLS1.0" \
11530 -C "Protocol : TLSv1.0"
11531
Ronald Cron6f135e12021-12-08 16:57:54 +010011532requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron7c0185f2021-11-30 09:16:24 +010011533requires_config_enabled MBEDTLS_DEBUG_C
11534requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011535skip_handshake_stage_check
11536requires_openssl_next
Ronald Crondf5f8682022-04-05 16:01:03 +020011537run_test "TLS 1.3: Not supported version check:openssl: srv max TLS 1.1" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011538 "$O_NEXT_SRV -msg -tls1_1" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011539 "$P_CLI debug_level=4" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011540 1 \
11541 -s "fatal protocol_version" \
11542 -c "is a fatal alert message (msg 70)" \
11543 -S "Version: TLS1.1" \
11544 -C "Protocol : TLSv1.1"
11545
Ronald Cron6f135e12021-12-08 16:57:54 +010011546requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
Ronald Cron7c0185f2021-11-30 09:16:24 +010011547requires_config_enabled MBEDTLS_DEBUG_C
11548requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011549skip_handshake_stage_check
11550requires_openssl_next
Ronald Crondf5f8682022-04-05 16:01:03 +020011551run_test "TLS 1.3: Not supported version check:openssl: srv max TLS 1.2" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011552 "$O_NEXT_SRV -msg -tls1_2" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011553 "$P_CLI force_version=tls13 debug_level=4" \
Jerry Yu8f9d7db2021-11-22 17:28:01 +080011554 1 \
11555 -s "fatal protocol_version" \
11556 -c "is a fatal alert message (msg 70)" \
11557 -S "Version: TLS1.2" \
11558 -C "Protocol : TLSv1.2"
11559
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011560requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaa6214a2022-01-30 19:53:28 +080011561requires_config_enabled MBEDTLS_DEBUG_C
11562requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011563requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11564 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011565run_test "TLS 1.3: Client authentication, no client certificate - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080011566 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -verify 10" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011567 "$P_CLI debug_level=4 crt_file=none key_file=none" \
Jerry Yuaa6214a2022-01-30 19:53:28 +080011568 0 \
Jerry Yuaa6214a2022-01-30 19:53:28 +080011569 -c "got a certificate request" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011570 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11571 -s "TLS 1.3" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011572 -c "HTTP/1.0 200 ok" \
11573 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080011574
11575requires_gnutls_tls1_3
11576requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080011577requires_config_enabled MBEDTLS_DEBUG_C
11578requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011579requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11580 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011581run_test "TLS 1.3: Client authentication, no client certificate - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080011582 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --verify-client-cert" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011583 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011584 0 \
11585 -c "got a certificate request" \
11586 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE"\
11587 -s "Version: TLS1.3" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011588 -c "HTTP/1.0 200 OK" \
11589 -c "Protocol is TLSv1.3"
11590
Jerry Yuaa6214a2022-01-30 19:53:28 +080011591
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011592requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu960bc282022-01-26 11:12:34 +080011593requires_config_enabled MBEDTLS_DEBUG_C
11594requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020011595requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu819f2972022-02-22 10:14:24 +080011596run_test "TLS 1.3: Client authentication, no server middlebox compat - openssl" \
Jerry Yu960bc282022-01-26 11:12:34 +080011597 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10 -no_middlebox" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011598 "$P_CLI debug_level=4 crt_file=data_files/cli2.crt key_file=data_files/cli2.key" \
Jerry Yuc19884f2022-01-29 10:44:44 +080011599 0 \
Jerry Yu960bc282022-01-26 11:12:34 +080011600 -c "got a certificate request" \
Jerry Yu200b47b2022-01-28 14:26:30 +080011601 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011602 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11603 -c "Protocol is TLSv1.3"
Jerry Yu960bc282022-01-26 11:12:34 +080011604
11605requires_gnutls_tls1_3
11606requires_gnutls_next_no_ticket
Jerry Yu960bc282022-01-26 11:12:34 +080011607requires_config_enabled MBEDTLS_DEBUG_C
11608requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020011609requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu819f2972022-02-22 10:14:24 +080011610run_test "TLS 1.3: Client authentication, no server middlebox compat - gnutls" \
Jerry Yu960bc282022-01-26 11:12:34 +080011611 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011612 "$P_CLI debug_level=3 crt_file=data_files/cli2.crt \
Jerry Yu25e0ddc2022-01-29 10:33:13 +080011613 key_file=data_files/cli2.key" \
Jerry Yuc19884f2022-01-29 10:44:44 +080011614 0 \
Jerry Yu960bc282022-01-26 11:12:34 +080011615 -c "got a certificate request" \
Jerry Yu200b47b2022-01-28 14:26:30 +080011616 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011617 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11618 -c "Protocol is TLSv1.3"
Jerry Yu200b47b2022-01-28 14:26:30 +080011619
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011620requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu200b47b2022-01-28 14:26:30 +080011621requires_config_enabled MBEDTLS_DEBUG_C
11622requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011623requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11624 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011625run_test "TLS 1.3: Client authentication, ecdsa_secp256r1_sha256 - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080011626 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011627 "$P_CLI debug_level=4 crt_file=data_files/ecdsa_secp256r1.crt \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011628 key_file=data_files/ecdsa_secp256r1.key" \
11629 0 \
11630 -c "got a certificate request" \
11631 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011632 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11633 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080011634
11635requires_gnutls_tls1_3
11636requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080011637requires_config_enabled MBEDTLS_DEBUG_C
11638requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011639requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11640 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011641run_test "TLS 1.3: Client authentication, ecdsa_secp256r1_sha256 - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080011642 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011643 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp256r1.crt \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011644 key_file=data_files/ecdsa_secp256r1.key" \
11645 0 \
11646 -c "got a certificate request" \
11647 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011648 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11649 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080011650
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011651requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu6c3d8212022-02-18 15:23:23 +080011652requires_config_enabled MBEDTLS_DEBUG_C
11653requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011654requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11655 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011656run_test "TLS 1.3: Client authentication, ecdsa_secp384r1_sha384 - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080011657 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011658 "$P_CLI debug_level=4 crt_file=data_files/ecdsa_secp384r1.crt \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011659 key_file=data_files/ecdsa_secp384r1.key" \
11660 0 \
11661 -c "got a certificate request" \
11662 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011663 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11664 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080011665
11666requires_gnutls_tls1_3
11667requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080011668requires_config_enabled MBEDTLS_DEBUG_C
11669requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011670requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11671 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011672run_test "TLS 1.3: Client authentication, ecdsa_secp384r1_sha384 - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080011673 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011674 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp384r1.crt \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011675 key_file=data_files/ecdsa_secp384r1.key" \
11676 0 \
11677 -c "got a certificate request" \
11678 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011679 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11680 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080011681
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011682requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu6c3d8212022-02-18 15:23:23 +080011683requires_config_enabled MBEDTLS_DEBUG_C
11684requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011685requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11686 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011687run_test "TLS 1.3: Client authentication, ecdsa_secp521r1_sha512 - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080011688 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011689 "$P_CLI debug_level=4 crt_file=data_files/ecdsa_secp521r1.crt \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011690 key_file=data_files/ecdsa_secp521r1.key" \
11691 0 \
11692 -c "got a certificate request" \
11693 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011694 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11695 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080011696
11697requires_gnutls_tls1_3
11698requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080011699requires_config_enabled MBEDTLS_DEBUG_C
11700requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011701requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11702 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011703run_test "TLS 1.3: Client authentication, ecdsa_secp521r1_sha512 - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080011704 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011705 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp521r1.crt \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011706 key_file=data_files/ecdsa_secp521r1.key" \
11707 0 \
11708 -c "got a certificate request" \
11709 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011710 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11711 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080011712
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011713requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu6c3d8212022-02-18 15:23:23 +080011714requires_config_enabled MBEDTLS_DEBUG_C
11715requires_config_enabled MBEDTLS_SSL_CLI_C
11716requires_config_enabled MBEDTLS_RSA_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011717requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11718 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011719run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha256 - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080011720 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011721 "$P_CLI debug_level=4 crt_file=data_files/cert_sha256.crt \
Jerry Yu2ff6ba12022-02-23 10:38:25 +080011722 key_file=data_files/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha256" \
Jerry Yu919130c2022-02-23 10:40:19 +080011723 0 \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011724 -c "got a certificate request" \
11725 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011726 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Jerry Yu919130c2022-02-23 10:40:19 +080011727 -c "Protocol is TLSv1.3"
Jerry Yu6c3d8212022-02-18 15:23:23 +080011728
11729requires_gnutls_tls1_3
11730requires_gnutls_next_no_ticket
Jerry Yu6c3d8212022-02-18 15:23:23 +080011731requires_config_enabled MBEDTLS_DEBUG_C
11732requires_config_enabled MBEDTLS_SSL_CLI_C
11733requires_config_enabled MBEDTLS_RSA_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011734requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11735 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu6c3d8212022-02-18 15:23:23 +080011736run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha256 - gnutls" \
Jerry Yu819f2972022-02-22 10:14:24 +080011737 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011738 "$P_CLI debug_level=3 crt_file=data_files/server2-sha256.crt \
Jerry Yu2ff6ba12022-02-23 10:38:25 +080011739 key_file=data_files/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha256" \
Jerry Yu919130c2022-02-23 10:40:19 +080011740 0 \
Jerry Yu6c3d8212022-02-18 15:23:23 +080011741 -c "got a certificate request" \
11742 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
Jerry Yu562a0fd2022-02-18 15:35:11 +080011743 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Jerry Yu919130c2022-02-23 10:40:19 +080011744 -c "Protocol is TLSv1.3"
Jerry Yu960bc282022-01-26 11:12:34 +080011745
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011746requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu2124d052022-02-18 21:07:18 +080011747requires_config_enabled MBEDTLS_DEBUG_C
11748requires_config_enabled MBEDTLS_SSL_CLI_C
11749requires_config_enabled MBEDTLS_RSA_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011750requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11751 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu3a58b462022-02-22 16:42:29 +080011752run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha384 - openssl" \
11753 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
Ronald Cron65f90292023-03-13 17:38:12 +010011754 "$P_CLI debug_level=4 crt_file=data_files/cert_sha256.crt \
Jerry Yu3a58b462022-02-22 16:42:29 +080011755 key_file=data_files/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha384" \
11756 0 \
11757 -c "got a certificate request" \
11758 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11759 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11760 -c "Protocol is TLSv1.3"
11761
11762requires_gnutls_tls1_3
11763requires_gnutls_next_no_ticket
Jerry Yu3a58b462022-02-22 16:42:29 +080011764requires_config_enabled MBEDTLS_DEBUG_C
11765requires_config_enabled MBEDTLS_SSL_CLI_C
11766requires_config_enabled MBEDTLS_RSA_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011767requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11768 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu3a58b462022-02-22 16:42:29 +080011769run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha384 - gnutls" \
11770 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
Ronald Cron65f90292023-03-13 17:38:12 +010011771 "$P_CLI debug_level=3 crt_file=data_files/server2-sha256.crt \
Jerry Yu3a58b462022-02-22 16:42:29 +080011772 key_file=data_files/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha384" \
11773 0 \
11774 -c "got a certificate request" \
11775 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11776 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11777 -c "Protocol is TLSv1.3"
11778
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011779requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu3a58b462022-02-22 16:42:29 +080011780requires_config_enabled MBEDTLS_DEBUG_C
11781requires_config_enabled MBEDTLS_SSL_CLI_C
11782requires_config_enabled MBEDTLS_RSA_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011783requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11784 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu3a58b462022-02-22 16:42:29 +080011785run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha512 - openssl" \
11786 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
Ronald Cron65f90292023-03-13 17:38:12 +010011787 "$P_CLI debug_level=4 crt_file=data_files/cert_sha256.crt \
Jerry Yu3a58b462022-02-22 16:42:29 +080011788 key_file=data_files/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha512" \
11789 0 \
11790 -c "got a certificate request" \
11791 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11792 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11793 -c "Protocol is TLSv1.3"
11794
11795requires_gnutls_tls1_3
11796requires_gnutls_next_no_ticket
Jerry Yu3a58b462022-02-22 16:42:29 +080011797requires_config_enabled MBEDTLS_DEBUG_C
11798requires_config_enabled MBEDTLS_SSL_CLI_C
11799requires_config_enabled MBEDTLS_RSA_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011800requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11801 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu3a58b462022-02-22 16:42:29 +080011802run_test "TLS 1.3: Client authentication, rsa_pss_rsae_sha512 - gnutls" \
11803 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
Ronald Cron65f90292023-03-13 17:38:12 +010011804 "$P_CLI debug_level=3 crt_file=data_files/server2-sha256.crt \
Jerry Yu3a58b462022-02-22 16:42:29 +080011805 key_file=data_files/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha512" \
11806 0 \
11807 -c "got a certificate request" \
11808 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11809 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11810 -c "Protocol is TLSv1.3"
11811
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011812requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu3a58b462022-02-22 16:42:29 +080011813requires_config_enabled MBEDTLS_DEBUG_C
11814requires_config_enabled MBEDTLS_SSL_CLI_C
11815requires_config_enabled MBEDTLS_RSA_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011816requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11817 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuccb005e2022-02-22 17:38:34 +080011818run_test "TLS 1.3: Client authentication, client alg not in server list - openssl" \
Jerry Yu819f2972022-02-22 10:14:24 +080011819 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10
Jerry Yu2124d052022-02-18 21:07:18 +080011820 -sigalgs ecdsa_secp256r1_sha256" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011821 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp521r1.crt \
Jerry Yu2ff6ba12022-02-23 10:38:25 +080011822 key_file=data_files/ecdsa_secp521r1.key sig_algs=ecdsa_secp256r1_sha256,ecdsa_secp521r1_sha512" \
Jerry Yu2124d052022-02-18 21:07:18 +080011823 1 \
11824 -c "got a certificate request" \
11825 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11826 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Xiaokang Qianea3d9332022-12-07 06:19:49 +000011827 -c "no suitable signature algorithm"
Jerry Yu2124d052022-02-18 21:07:18 +080011828
11829requires_gnutls_tls1_3
11830requires_gnutls_next_no_ticket
Jerry Yu2124d052022-02-18 21:07:18 +080011831requires_config_enabled MBEDTLS_DEBUG_C
11832requires_config_enabled MBEDTLS_SSL_CLI_C
11833requires_config_enabled MBEDTLS_RSA_C
Ronald Cron70ed4172022-10-20 15:48:19 +020011834requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11835 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu819f2972022-02-22 10:14:24 +080011836run_test "TLS 1.3: Client authentication, client alg not in server list - gnutls" \
11837 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:-SIGN-ALL:+SIGN-ECDSA-SECP256R1-SHA256:%NO_TICKETS" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010011838 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp521r1.crt \
Jerry Yu2ff6ba12022-02-23 10:38:25 +080011839 key_file=data_files/ecdsa_secp521r1.key sig_algs=ecdsa_secp256r1_sha256,ecdsa_secp521r1_sha512" \
Jerry Yu2124d052022-02-18 21:07:18 +080011840 1 \
11841 -c "got a certificate request" \
11842 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11843 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Xiaokang Qianea3d9332022-12-07 06:19:49 +000011844 -c "no suitable signature algorithm"
Jerry Yu2124d052022-02-18 21:07:18 +080011845
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011846# Test using an opaque private key for client authentication
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011847requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011848requires_config_enabled MBEDTLS_DEBUG_C
11849requires_config_enabled MBEDTLS_SSL_CLI_C
11850requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron928cbd32022-10-04 16:14:26 +020011851requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011852run_test "TLS 1.3: Client authentication - opaque key, no server middlebox compat - openssl" \
11853 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10 -no_middlebox" \
11854 "$P_CLI debug_level=4 crt_file=data_files/cli2.crt key_file=data_files/cli2.key key_opaque=1" \
11855 0 \
11856 -c "got a certificate request" \
11857 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11858 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11859 -c "Protocol is TLSv1.3"
11860
11861requires_gnutls_tls1_3
11862requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011863requires_config_enabled MBEDTLS_DEBUG_C
11864requires_config_enabled MBEDTLS_SSL_CLI_C
11865requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron928cbd32022-10-04 16:14:26 +020011866requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011867run_test "TLS 1.3: Client authentication - opaque key, no server middlebox compat - gnutls" \
11868 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE" \
11869 "$P_CLI debug_level=3 crt_file=data_files/cli2.crt \
11870 key_file=data_files/cli2.key key_opaque=1" \
11871 0 \
11872 -c "got a certificate request" \
11873 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11874 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11875 -c "Protocol is TLSv1.3"
11876
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011877requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011878requires_config_enabled MBEDTLS_DEBUG_C
11879requires_config_enabled MBEDTLS_SSL_CLI_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011880requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020011881requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11882 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011883run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp256r1_sha256 - openssl" \
11884 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
11885 "$P_CLI debug_level=4 crt_file=data_files/ecdsa_secp256r1.crt \
11886 key_file=data_files/ecdsa_secp256r1.key key_opaque=1" \
11887 0 \
11888 -c "got a certificate request" \
11889 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11890 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11891 -c "Protocol is TLSv1.3"
11892
11893requires_gnutls_tls1_3
11894requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011895requires_config_enabled MBEDTLS_DEBUG_C
11896requires_config_enabled MBEDTLS_SSL_CLI_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011897requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020011898requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11899 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011900run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp256r1_sha256 - gnutls" \
11901 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
11902 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp256r1.crt \
11903 key_file=data_files/ecdsa_secp256r1.key key_opaque=1" \
11904 0 \
11905 -c "got a certificate request" \
11906 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11907 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11908 -c "Protocol is TLSv1.3"
11909
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011910requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011911requires_config_enabled MBEDTLS_DEBUG_C
11912requires_config_enabled MBEDTLS_SSL_CLI_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011913requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020011914requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11915 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011916run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp384r1_sha384 - openssl" \
11917 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
11918 "$P_CLI debug_level=4 crt_file=data_files/ecdsa_secp384r1.crt \
11919 key_file=data_files/ecdsa_secp384r1.key key_opaque=1" \
11920 0 \
11921 -c "got a certificate request" \
11922 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11923 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11924 -c "Protocol is TLSv1.3"
11925
11926requires_gnutls_tls1_3
11927requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011928requires_config_enabled MBEDTLS_DEBUG_C
11929requires_config_enabled MBEDTLS_SSL_CLI_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011930requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020011931requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11932 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011933run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp384r1_sha384 - gnutls" \
11934 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
11935 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp384r1.crt \
11936 key_file=data_files/ecdsa_secp384r1.key key_opaque=1" \
11937 0 \
11938 -c "got a certificate request" \
11939 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11940 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11941 -c "Protocol is TLSv1.3"
11942
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011943requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011944requires_config_enabled MBEDTLS_DEBUG_C
11945requires_config_enabled MBEDTLS_SSL_CLI_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011946requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020011947requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11948 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011949run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp521r1_sha512 - openssl" \
11950 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
11951 "$P_CLI debug_level=4 crt_file=data_files/ecdsa_secp521r1.crt \
11952 key_file=data_files/ecdsa_secp521r1.key key_opaque=1" \
11953 0 \
11954 -c "got a certificate request" \
11955 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11956 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11957 -c "Protocol is TLSv1.3"
11958
11959requires_gnutls_tls1_3
11960requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011961requires_config_enabled MBEDTLS_DEBUG_C
11962requires_config_enabled MBEDTLS_SSL_CLI_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011963requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020011964requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11965 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011966run_test "TLS 1.3: Client authentication - opaque key, ecdsa_secp521r1_sha512 - gnutls" \
11967 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
11968 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp521r1.crt \
11969 key_file=data_files/ecdsa_secp521r1.key key_opaque=1" \
11970 0 \
11971 -c "got a certificate request" \
11972 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11973 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11974 -c "Protocol is TLSv1.3"
11975
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020011976requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011977requires_config_enabled MBEDTLS_DEBUG_C
11978requires_config_enabled MBEDTLS_SSL_CLI_C
11979requires_config_enabled MBEDTLS_RSA_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011980requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020011981requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
11982 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011983run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha256 - openssl" \
11984 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
11985 "$P_CLI debug_level=4 crt_file=data_files/cert_sha256.crt \
11986 key_file=data_files/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha256 key_opaque=1" \
11987 0 \
11988 -c "got a certificate request" \
11989 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
11990 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
11991 -c "Protocol is TLSv1.3"
11992
11993requires_gnutls_tls1_3
11994requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011995requires_config_enabled MBEDTLS_DEBUG_C
11996requires_config_enabled MBEDTLS_SSL_CLI_C
11997requires_config_enabled MBEDTLS_RSA_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020011998requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020011999requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12000 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012001run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha256 - gnutls" \
12002 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
12003 "$P_CLI debug_level=3 crt_file=data_files/server2-sha256.crt \
12004 key_file=data_files/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha256 key_opaque=1" \
12005 0 \
12006 -c "got a certificate request" \
12007 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12008 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12009 -c "Protocol is TLSv1.3"
12010
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012011requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012012requires_config_enabled MBEDTLS_DEBUG_C
12013requires_config_enabled MBEDTLS_SSL_CLI_C
12014requires_config_enabled MBEDTLS_RSA_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012015requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020012016requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12017 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012018run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha384 - openssl" \
12019 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
Ronald Cron65f90292023-03-13 17:38:12 +010012020 "$P_CLI debug_level=4 crt_file=data_files/cert_sha256.crt \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012021 key_file=data_files/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha384 key_opaque=1" \
12022 0 \
12023 -c "got a certificate request" \
12024 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12025 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12026 -c "Protocol is TLSv1.3"
12027
12028requires_gnutls_tls1_3
12029requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012030requires_config_enabled MBEDTLS_DEBUG_C
12031requires_config_enabled MBEDTLS_SSL_CLI_C
12032requires_config_enabled MBEDTLS_RSA_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012033requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020012034requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12035 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012036run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha384 - gnutls" \
12037 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
Ronald Cron65f90292023-03-13 17:38:12 +010012038 "$P_CLI debug_level=3 crt_file=data_files/server2-sha256.crt \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012039 key_file=data_files/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha384 key_opaque=1" \
12040 0 \
12041 -c "got a certificate request" \
12042 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12043 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12044 -c "Protocol is TLSv1.3"
12045
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012046requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012047requires_config_enabled MBEDTLS_DEBUG_C
12048requires_config_enabled MBEDTLS_SSL_CLI_C
12049requires_config_enabled MBEDTLS_RSA_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012050requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020012051requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12052 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012053run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha512 - openssl" \
12054 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10" \
Ronald Cron65f90292023-03-13 17:38:12 +010012055 "$P_CLI debug_level=4 crt_file=data_files/cert_sha256.crt \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012056 key_file=data_files/server1.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha512 key_opaque=1" \
12057 0 \
12058 -c "got a certificate request" \
12059 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12060 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12061 -c "Protocol is TLSv1.3"
12062
12063requires_gnutls_tls1_3
12064requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012065requires_config_enabled MBEDTLS_DEBUG_C
12066requires_config_enabled MBEDTLS_SSL_CLI_C
12067requires_config_enabled MBEDTLS_RSA_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012068requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020012069requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12070 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012071run_test "TLS 1.3: Client authentication - opaque key, rsa_pss_rsae_sha512 - gnutls" \
12072 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS" \
Ronald Cron65f90292023-03-13 17:38:12 +010012073 "$P_CLI debug_level=3 crt_file=data_files/server2-sha256.crt \
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012074 key_file=data_files/server2.key sig_algs=ecdsa_secp256r1_sha256,rsa_pss_rsae_sha512 key_opaque=1" \
12075 0 \
12076 -c "got a certificate request" \
12077 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12078 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
12079 -c "Protocol is TLSv1.3"
12080
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012081requires_openssl_tls1_3_with_compatible_ephemeral
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012082requires_config_enabled MBEDTLS_DEBUG_C
12083requires_config_enabled MBEDTLS_SSL_CLI_C
12084requires_config_enabled MBEDTLS_RSA_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012085requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020012086requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12087 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012088run_test "TLS 1.3: Client authentication - opaque key, client alg not in server list - openssl" \
12089 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache -Verify 10
12090 -sigalgs ecdsa_secp256r1_sha256" \
12091 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp521r1.crt \
12092 key_file=data_files/ecdsa_secp521r1.key sig_algs=ecdsa_secp256r1_sha256,ecdsa_secp521r1_sha512 key_opaque=1" \
12093 1 \
12094 -c "got a certificate request" \
12095 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12096 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Xiaokang Qianea3d9332022-12-07 06:19:49 +000012097 -c "no suitable signature algorithm"
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012098
12099requires_gnutls_tls1_3
12100requires_gnutls_next_no_ticket
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012101requires_config_enabled MBEDTLS_DEBUG_C
12102requires_config_enabled MBEDTLS_SSL_CLI_C
12103requires_config_enabled MBEDTLS_RSA_C
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012104requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Ronald Cron70ed4172022-10-20 15:48:19 +020012105requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12106 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012107run_test "TLS 1.3: Client authentication - opaque key, client alg not in server list - gnutls" \
12108 "$G_NEXT_SRV --debug=4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:-SIGN-ALL:+SIGN-ECDSA-SECP256R1-SHA256:%NO_TICKETS" \
12109 "$P_CLI debug_level=3 crt_file=data_files/ecdsa_secp521r1.crt \
12110 key_file=data_files/ecdsa_secp521r1.key sig_algs=ecdsa_secp256r1_sha256,ecdsa_secp521r1_sha512 key_opaque=1" \
12111 1 \
12112 -c "got a certificate request" \
12113 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE" \
12114 -c "client state: MBEDTLS_SSL_CLIENT_CERTIFICATE_VERIFY" \
Xiaokang Qianea3d9332022-12-07 06:19:49 +000012115 -c "no suitable signature algorithm"
Neil Armstrong7f6f6722022-04-15 10:09:11 +020012116
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012117requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cron7c0185f2021-11-30 09:16:24 +010012118requires_config_enabled MBEDTLS_DEBUG_C
12119requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012120requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12121 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crondf5f8682022-04-05 16:01:03 +020012122run_test "TLS 1.3: HRR check, ciphersuite TLS_AES_128_GCM_SHA256 - openssl" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000012123 "$O_NEXT_SRV -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012124 "$P_CLI debug_level=4" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000012125 0 \
12126 -c "received HelloRetryRequest message" \
XiaokangQiana9090612022-01-27 03:48:27 +000012127 -c "<= ssl_tls13_process_server_hello ( HelloRetryRequest )" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012128 -c "client state: MBEDTLS_SSL_CLIENT_HELLO" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012129 -c "Protocol is TLSv1.3" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000012130 -c "HTTP/1.0 200 ok"
12131
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012132requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQian7bae3b62022-01-26 06:31:39 +000012133requires_config_enabled MBEDTLS_DEBUG_C
12134requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012135requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12136 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crondf5f8682022-04-05 16:01:03 +020012137run_test "TLS 1.3: HRR check, ciphersuite TLS_AES_256_GCM_SHA384 - openssl" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012138 "$O_NEXT_SRV -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012139 "$P_CLI debug_level=4" \
XiaokangQian6db08dd2022-01-18 06:36:23 +000012140 0 \
Jerry Yu8c5559d2021-11-22 21:15:41 +080012141 -c "received HelloRetryRequest message" \
XiaokangQiana9090612022-01-27 03:48:27 +000012142 -c "<= ssl_tls13_process_server_hello ( HelloRetryRequest )" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012143 -c "client state: MBEDTLS_SSL_CLIENT_HELLO" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012144 -c "Protocol is TLSv1.3" \
XiaokangQian6db08dd2022-01-18 06:36:23 +000012145 -c "HTTP/1.0 200 ok"
Jerry Yu8c5559d2021-11-22 21:15:41 +080012146
12147requires_gnutls_tls1_3
12148requires_gnutls_next_no_ticket
Ronald Cron7c0185f2021-11-30 09:16:24 +010012149requires_config_enabled MBEDTLS_DEBUG_C
12150requires_config_enabled MBEDTLS_SSL_CLI_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020012151requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron70ed4172022-10-20 15:48:19 +020012152requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12153 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crondf5f8682022-04-05 16:01:03 +020012154run_test "TLS 1.3: HRR check, ciphersuite TLS_AES_128_GCM_SHA256 - gnutls" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000012155 "$G_NEXT_SRV -d 4 --priority=NONE:+GROUP-SECP256R1:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS --disable-client-cert" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012156 "$P_CLI debug_level=4" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000012157 0 \
12158 -c "received HelloRetryRequest message" \
XiaokangQiana9090612022-01-27 03:48:27 +000012159 -c "<= ssl_tls13_process_server_hello ( HelloRetryRequest )" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012160 -c "client state: MBEDTLS_SSL_CLIENT_HELLO" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012161 -c "Protocol is TLSv1.3" \
XiaokangQian7bae3b62022-01-26 06:31:39 +000012162 -c "HTTP/1.0 200 OK"
12163
12164requires_gnutls_tls1_3
12165requires_gnutls_next_no_ticket
XiaokangQian7bae3b62022-01-26 06:31:39 +000012166requires_config_enabled MBEDTLS_DEBUG_C
12167requires_config_enabled MBEDTLS_SSL_CLI_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020012168requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron70ed4172022-10-20 15:48:19 +020012169requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12170 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crondf5f8682022-04-05 16:01:03 +020012171run_test "TLS 1.3: HRR check, ciphersuite TLS_AES_256_GCM_SHA384 - gnutls" \
XiaokangQian355e09a2022-01-20 11:14:50 +000012172 "$G_NEXT_SRV -d 4 --priority=NONE:+GROUP-SECP256R1:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+VERS-TLS1.3:%NO_TICKETS --disable-client-cert" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012173 "$P_CLI debug_level=4" \
XiaokangQian355e09a2022-01-20 11:14:50 +000012174 0 \
Jerry Yu8c5559d2021-11-22 21:15:41 +080012175 -c "received HelloRetryRequest message" \
XiaokangQiana9090612022-01-27 03:48:27 +000012176 -c "<= ssl_tls13_process_server_hello ( HelloRetryRequest )" \
Ronald Cron27c85e72022-03-08 11:37:55 +010012177 -c "client state: MBEDTLS_SSL_CLIENT_HELLO" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012178 -c "Protocol is TLSv1.3" \
XiaokangQian355e09a2022-01-20 11:14:50 +000012179 -c "HTTP/1.0 200 OK"
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012180
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012181requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQian5e4528c2022-02-17 07:51:12 +000012182requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQiane8ff3502022-04-22 02:34:40 +000012183requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012184requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian318dc762022-04-20 09:43:51 +000012185run_test "TLS 1.3: Server side check - openssl" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012186 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Jerry Yu66220492022-04-23 13:53:36 +080012187 "$O_NEXT_CLI -msg -debug -tls1_3 -no_middlebox" \
Jerry Yu4d8567f2022-04-17 10:57:57 +080012188 0 \
Jerry Yuabf20c72022-04-14 18:36:14 +080012189 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
12190 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
12191 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
Jerry Yucef55db2022-04-23 11:02:05 +080012192 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yuc8bdbf72022-04-23 12:37:35 +080012193 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
12194 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
Jerry Yu66220492022-04-23 13:53:36 +080012195 -s "tls13 server state: MBEDTLS_SSL_CLIENT_FINISHED" \
Jerry Yu155493d2022-04-25 13:30:18 +080012196 -s "tls13 server state: MBEDTLS_SSL_HANDSHAKE_WRAPUP"
XiaokangQian5e4528c2022-02-17 07:51:12 +000012197
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012198requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQian2f150e12022-04-29 02:01:19 +000012199requires_config_enabled MBEDTLS_DEBUG_C
12200requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012201requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQiana987e1d2022-05-07 01:25:58 +000012202run_test "TLS 1.3: Server side check - openssl with client authentication" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012203 "$P_SRV debug_level=4 auth_mode=required crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Jerry Yu7eaadae2022-05-23 14:53:27 +080012204 "$O_NEXT_CLI -msg -debug -cert data_files/server5.crt -key data_files/server5.key -tls1_3 -no_middlebox" \
XiaokangQian9a4e1dd2022-05-26 00:58:11 +000012205 0 \
XiaokangQian2f150e12022-04-29 02:01:19 +000012206 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
12207 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
12208 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12209 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
12210 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yuc4505662022-05-10 20:39:21 +080012211 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
12212 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
XiaokangQiana987e1d2022-05-07 01:25:58 +000012213 -s "=> write certificate request" \
XiaokangQian2f150e12022-04-29 02:01:19 +000012214 -s "=> parse client hello" \
12215 -s "<= parse client hello"
12216
XiaokangQian5e4528c2022-02-17 07:51:12 +000012217requires_gnutls_tls1_3
12218requires_gnutls_next_no_ticket
XiaokangQian5e4528c2022-02-17 07:51:12 +000012219requires_config_enabled MBEDTLS_DEBUG_C
XiaokangQiane8ff3502022-04-22 02:34:40 +000012220requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012221requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian318dc762022-04-20 09:43:51 +000012222run_test "TLS 1.3: Server side check - gnutls" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012223 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
XiaokangQian3f84d5d2022-04-19 06:36:17 +000012224 "$G_NEXT_CLI localhost -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Jerry Yu66220492022-04-23 13:53:36 +080012225 0 \
Jerry Yuabf20c72022-04-14 18:36:14 +080012226 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
12227 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
12228 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
Jerry Yucef55db2022-04-23 11:02:05 +080012229 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yuc8bdbf72022-04-23 12:37:35 +080012230 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
12231 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
Jerry Yu66220492022-04-23 13:53:36 +080012232 -s "tls13 server state: MBEDTLS_SSL_CLIENT_FINISHED" \
12233 -s "tls13 server state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
12234 -c "HTTP/1.0 200 OK"
XiaokangQian5e4528c2022-02-17 07:51:12 +000012235
XiaokangQian2f150e12022-04-29 02:01:19 +000012236requires_gnutls_tls1_3
12237requires_gnutls_next_no_ticket
XiaokangQian2f150e12022-04-29 02:01:19 +000012238requires_config_enabled MBEDTLS_DEBUG_C
12239requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012240requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQiana987e1d2022-05-07 01:25:58 +000012241run_test "TLS 1.3: Server side check - gnutls with client authentication" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012242 "$P_SRV debug_level=4 auth_mode=required crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
XiaokangQian2f150e12022-04-29 02:01:19 +000012243 "$G_NEXT_CLI localhost -d 4 --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
XiaokangQianc3017f62022-05-13 05:55:41 +000012244 0 \
XiaokangQian2f150e12022-04-29 02:01:19 +000012245 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
12246 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
12247 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12248 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
12249 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yuc4505662022-05-10 20:39:21 +080012250 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
12251 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
XiaokangQiana987e1d2022-05-07 01:25:58 +000012252 -s "=> write certificate request" \
XiaokangQian2f150e12022-04-29 02:01:19 +000012253 -s "=> parse client hello" \
12254 -s "<= parse client hello"
12255
Jerry Yu8b9fd372022-04-14 20:55:12 +080012256requires_config_enabled MBEDTLS_DEBUG_C
12257requires_config_enabled MBEDTLS_SSL_SRV_C
Jerry Yu955ddd72022-04-22 22:27:33 +080012258requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012259requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yu8b9fd372022-04-14 20:55:12 +080012260run_test "TLS 1.3: Server side check - mbedtls" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012261 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Ronald Cron65f90292023-03-13 17:38:12 +010012262 "$P_CLI debug_level=4" \
XiaokangQianc3017f62022-05-13 05:55:41 +000012263 0 \
Jerry Yu8b9fd372022-04-14 20:55:12 +080012264 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
12265 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
12266 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
Jerry Yua7abc5e2022-05-11 13:32:03 +080012267 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
Jerry Yucef55db2022-04-23 11:02:05 +080012268 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yua7abc5e2022-05-11 13:32:03 +080012269 -s "tls13 server state: MBEDTLS_SSL_CERTIFICATE_VERIFY" \
12270 -s "tls13 server state: MBEDTLS_SSL_SERVER_FINISHED" \
12271 -s "tls13 server state: MBEDTLS_SSL_CLIENT_FINISHED" \
12272 -s "tls13 server state: MBEDTLS_SSL_HANDSHAKE_WRAPUP" \
12273 -c "HTTP/1.0 200 OK"
Jerry Yu8b9fd372022-04-14 20:55:12 +080012274
XiaokangQian45c22202022-05-06 06:54:09 +000012275requires_config_enabled MBEDTLS_DEBUG_C
12276requires_config_enabled MBEDTLS_SSL_SRV_C
12277requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012278requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQiana987e1d2022-05-07 01:25:58 +000012279run_test "TLS 1.3: Server side check - mbedtls with client authentication" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012280 "$P_SRV debug_level=4 auth_mode=required crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Ronald Cron65f90292023-03-13 17:38:12 +010012281 "$P_CLI debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
XiaokangQianc3017f62022-05-13 05:55:41 +000012282 0 \
XiaokangQian45c22202022-05-06 06:54:09 +000012283 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
12284 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
12285 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12286 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
Jerry Yua7abc5e2022-05-11 13:32:03 +080012287 -s "=> write certificate request" \
XiaokangQian45c22202022-05-06 06:54:09 +000012288 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
XiaokangQian45c22202022-05-06 06:54:09 +000012289 -s "=> parse client hello" \
12290 -s "<= parse client hello"
12291
XiaokangQianaca90482022-05-19 07:19:31 +000012292requires_config_enabled MBEDTLS_DEBUG_C
12293requires_config_enabled MBEDTLS_SSL_SRV_C
12294requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012295requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianaca90482022-05-19 07:19:31 +000012296run_test "TLS 1.3: Server side check - mbedtls with client empty certificate" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012297 "$P_SRV debug_level=4 auth_mode=required crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Ronald Cron65f90292023-03-13 17:38:12 +010012298 "$P_CLI debug_level=4 crt_file=none key_file=none" \
XiaokangQianaca90482022-05-19 07:19:31 +000012299 1 \
12300 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
12301 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
12302 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12303 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
12304 -s "=> write certificate request" \
12305 -s "SSL - No client certification received from the client, but required by the authentication mode" \
12306 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
12307 -s "=> parse client hello" \
12308 -s "<= parse client hello"
12309
XiaokangQianaca90482022-05-19 07:19:31 +000012310requires_config_enabled MBEDTLS_DEBUG_C
12311requires_config_enabled MBEDTLS_SSL_SRV_C
12312requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012313requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianaca90482022-05-19 07:19:31 +000012314run_test "TLS 1.3: Server side check - mbedtls with optional client authentication" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012315 "$P_SRV debug_level=4 auth_mode=optional crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Ronald Cron65f90292023-03-13 17:38:12 +010012316 "$P_CLI debug_level=4 crt_file=none key_file=none" \
XiaokangQianaca90482022-05-19 07:19:31 +000012317 0 \
12318 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
12319 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
12320 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12321 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
12322 -s "=> write certificate request" \
12323 -c "client state: MBEDTLS_SSL_CERTIFICATE_REQUEST" \
12324 -s "=> parse client hello" \
12325 -s "<= parse client hello"
Jerry Yuede50ea2022-05-05 11:21:20 +080012326
12327requires_config_enabled MBEDTLS_DEBUG_C
12328requires_config_enabled MBEDTLS_SSL_CLI_C
12329requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012330requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Przemek Stekielc31a7982023-06-27 10:53:33 +020012331requires_config_enabled PSA_WANT_ALG_ECDH
Jerry Yuede50ea2022-05-05 11:21:20 +080012332run_test "TLS 1.3: server: HRR check - mbedtls" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012333 "$P_SRV debug_level=4 groups=secp384r1" \
12334 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Jerry Yu36becb12022-05-12 16:57:20 +080012335 0 \
Jerry Yuede50ea2022-05-05 11:21:20 +080012336 -s "tls13 server state: MBEDTLS_SSL_CLIENT_HELLO" \
12337 -s "tls13 server state: MBEDTLS_SSL_SERVER_HELLO" \
12338 -s "tls13 server state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12339 -s "tls13 server state: MBEDTLS_SSL_HELLO_RETRY_REQUEST" \
12340 -c "client state: MBEDTLS_SSL_ENCRYPTED_EXTENSIONS" \
12341 -s "selected_group: secp384r1" \
Jerry Yuede50ea2022-05-05 11:21:20 +080012342 -s "=> write hello retry request" \
12343 -s "<= write hello retry request"
12344
Jerry Yub89125b2022-05-13 15:45:49 +080012345requires_config_enabled MBEDTLS_DEBUG_C
12346requires_config_enabled MBEDTLS_SSL_SRV_C
12347requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012348requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yub89125b2022-05-13 15:45:49 +080012349run_test "TLS 1.3: Server side check, no server certificate available" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012350 "$P_SRV debug_level=4 crt_file=none key_file=none" \
Ronald Cron65f90292023-03-13 17:38:12 +010012351 "$P_CLI debug_level=4" \
Jerry Yub89125b2022-05-13 15:45:49 +080012352 1 \
12353 -s "tls13 server state: MBEDTLS_SSL_SERVER_CERTIFICATE" \
12354 -s "No certificate available."
12355
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012356requires_openssl_tls1_3_with_compatible_ephemeral
XiaokangQianf2a94202022-05-20 06:44:24 +000012357requires_config_enabled MBEDTLS_DEBUG_C
12358requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012359requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12360 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2ccd97b2022-05-31 08:30:17 +000012361run_test "TLS 1.3: Server side check - openssl with sni" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012362 "$P_SRV debug_level=4 auth_mode=required crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0 \
XiaokangQian23c5be62022-06-07 02:04:34 +000012363 sni=localhost,data_files/server5.crt,data_files/server5.key,data_files/test-ca_cat12.crt,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
XiaokangQianf2a94202022-05-20 06:44:24 +000012364 "$O_NEXT_CLI -msg -debug -servername localhost -CAfile data_files/test-ca_cat12.crt -cert data_files/server5.crt -key data_files/server5.key -tls1_3" \
12365 0 \
XiaokangQianf2a94202022-05-20 06:44:24 +000012366 -s "parse ServerName extension" \
XiaokangQian129aeb92022-06-02 09:29:18 +000012367 -s "HTTP/1.0 200 OK"
XiaokangQianf2a94202022-05-20 06:44:24 +000012368
XiaokangQianac41edf2022-05-31 13:22:13 +000012369requires_gnutls_tls1_3
XiaokangQianf2a94202022-05-20 06:44:24 +000012370requires_config_enabled MBEDTLS_DEBUG_C
12371requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012372requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12373 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2ccd97b2022-05-31 08:30:17 +000012374run_test "TLS 1.3: Server side check - gnutls with sni" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012375 "$P_SRV debug_level=4 auth_mode=required crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0 \
XiaokangQian23c5be62022-06-07 02:04:34 +000012376 sni=localhost,data_files/server5.crt,data_files/server5.key,data_files/test-ca_cat12.crt,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
XiaokangQianf2a94202022-05-20 06:44:24 +000012377 "$G_NEXT_CLI localhost -d 4 --sni-hostname=localhost --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS -V" \
12378 0 \
XiaokangQianf2a94202022-05-20 06:44:24 +000012379 -s "parse ServerName extension" \
XiaokangQian129aeb92022-06-02 09:29:18 +000012380 -s "HTTP/1.0 200 OK"
XiaokangQianf2a94202022-05-20 06:44:24 +000012381
XiaokangQian40a35232022-05-07 09:02:40 +000012382requires_config_enabled MBEDTLS_DEBUG_C
12383requires_config_enabled MBEDTLS_SSL_SRV_C
12384requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012385requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12386 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2ccd97b2022-05-31 08:30:17 +000012387run_test "TLS 1.3: Server side check - mbedtls with sni" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012388 "$P_SRV debug_level=4 auth_mode=required crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0 \
XiaokangQian40a35232022-05-07 09:02:40 +000012389 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Ronald Cron65f90292023-03-13 17:38:12 +010012390 "$P_CLI debug_level=4 server_name=localhost crt_file=data_files/server5.crt key_file=data_files/server5.key" \
XiaokangQianf2a94202022-05-20 06:44:24 +000012391 0 \
XiaokangQianf2a94202022-05-20 06:44:24 +000012392 -s "parse ServerName extension" \
XiaokangQian129aeb92022-06-02 09:29:18 +000012393 -s "HTTP/1.0 200 OK"
XiaokangQian40a35232022-05-07 09:02:40 +000012394
Gilles Peskine2baaf602022-01-07 15:46:12 +010012395for i in opt-testcases/*.sh
Jerry Yucdcb6832021-11-29 16:50:13 +080012396do
Gilles Peskine5eb2b022022-01-07 15:47:02 +010012397 TEST_SUITE_NAME=${i##*/}
12398 TEST_SUITE_NAME=${TEST_SUITE_NAME%.*}
12399 . "$i"
Jerry Yucdcb6832021-11-29 16:50:13 +080012400done
Gilles Peskine5eb2b022022-01-07 15:47:02 +010012401unset TEST_SUITE_NAME
Jerry Yu305bfc32021-11-24 16:04:47 +080012402
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012403# Test 1.3 compatibility mode
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012404requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12405requires_config_enabled MBEDTLS_DEBUG_C
12406requires_config_enabled MBEDTLS_SSL_SRV_C
12407requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012408requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012409run_test "TLS 1.3 m->m both peers do not support middlebox compatibility" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012410 "$P_SRV debug_level=4 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012411 "$P_CLI debug_level=4" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012412 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012413 -s "Protocol is TLSv1.3" \
12414 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012415 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
12416 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12417
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012418requires_config_enabled MBEDTLS_DEBUG_C
12419requires_config_enabled MBEDTLS_SSL_SRV_C
12420requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012421requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12422 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012423run_test "TLS 1.3 m->m both with middlebox compat support" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012424 "$P_SRV debug_level=4 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012425 "$P_CLI debug_level=4" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012426 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012427 -s "Protocol is TLSv1.3" \
12428 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012429 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
12430 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12431
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012432requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012433requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron7c0185f2021-11-30 09:16:24 +010012434requires_config_enabled MBEDTLS_DEBUG_C
12435requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012436requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona55c5a12021-11-30 09:32:47 +010012437run_test "TLS 1.3 m->O both peers do not support middlebox compatibility" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012438 "$O_NEXT_SRV -msg -tls1_3 -no_middlebox -num_tickets 0 -no_resume_ephemeral -no_cache" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012439 "$P_CLI debug_level=4" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012440 0 \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012441 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012442 -C "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode" \
12443 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012444
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012445requires_openssl_tls1_3_with_compatible_ephemeral
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012446requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Ronald Cron7c0185f2021-11-30 09:16:24 +010012447requires_config_enabled MBEDTLS_DEBUG_C
12448requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012449requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona55c5a12021-11-30 09:32:47 +010012450run_test "TLS 1.3 m->O server with middlebox compat support, not client" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012451 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012452 "$P_CLI debug_level=4" \
Ronald Cronfdb0e3f2021-12-09 10:39:19 +010012453 1 \
12454 -c "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode"
12455
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012456requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012457requires_config_enabled MBEDTLS_DEBUG_C
12458requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012459requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12460 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012461run_test "TLS 1.3 m->O both with middlebox compat support" \
12462 "$O_NEXT_SRV -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012463 "$P_CLI debug_level=4" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012464 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012465 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012466 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12467
Ronald Crona55c5a12021-11-30 09:32:47 +010012468requires_gnutls_tls1_3
12469requires_gnutls_next_no_ticket
12470requires_gnutls_next_disable_tls13_compat
Ronald Crona55c5a12021-11-30 09:32:47 +010012471requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12472requires_config_enabled MBEDTLS_DEBUG_C
12473requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012474requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona55c5a12021-11-30 09:32:47 +010012475run_test "TLS 1.3 m->G both peers do not support middlebox compatibility" \
12476 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE --disable-client-cert" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012477 "$P_CLI debug_level=4" \
Ronald Crona55c5a12021-11-30 09:32:47 +010012478 0 \
Ronald Crona1b8f6e2022-03-18 14:04:12 +010012479 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012480 -C "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode" \
12481 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
Ronald Crona55c5a12021-11-30 09:32:47 +010012482
12483requires_gnutls_tls1_3
12484requires_gnutls_next_no_ticket
Ronald Crona55c5a12021-11-30 09:32:47 +010012485requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12486requires_config_enabled MBEDTLS_DEBUG_C
12487requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012488requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Crona55c5a12021-11-30 09:32:47 +010012489run_test "TLS 1.3 m->G server with middlebox compat support, not client" \
12490 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012491 "$P_CLI debug_level=4" \
Ronald Crona55c5a12021-11-30 09:32:47 +010012492 1 \
12493 -c "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode"
12494
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012495requires_gnutls_tls1_3
12496requires_gnutls_next_no_ticket
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012497requires_config_enabled MBEDTLS_DEBUG_C
12498requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012499requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12500 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012501run_test "TLS 1.3 m->G both with middlebox compat support" \
12502 "$G_NEXT_SRV --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012503 "$P_CLI debug_level=4" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012504 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012505 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012506 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12507
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012508requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012509requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12510requires_config_enabled MBEDTLS_DEBUG_C
12511requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012512requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012513run_test "TLS 1.3 O->m both peers do not support middlebox compatibility" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012514 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012515 "$O_NEXT_CLI -msg -debug -no_middlebox" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012516 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012517 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012518 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
12519 -C "14 03 03 00 01"
12520
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012521requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012522requires_config_enabled MBEDTLS_DEBUG_C
12523requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012524requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12525 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012526run_test "TLS 1.3 O->m server with middlebox compat support, not client" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012527 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012528 "$O_NEXT_CLI -msg -debug -no_middlebox" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012529 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012530 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012531 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO"
12532
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012533requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012534requires_config_enabled MBEDTLS_DEBUG_C
12535requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012536requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12537 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012538run_test "TLS 1.3 O->m both with middlebox compat support" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012539 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012540 "$O_NEXT_CLI -msg -debug" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012541 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012542 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012543 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
12544 -c "14 03 03 00 01"
12545
12546requires_gnutls_tls1_3
12547requires_gnutls_next_no_ticket
12548requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012549requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12550requires_config_enabled MBEDTLS_DEBUG_C
12551requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012552requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012553run_test "TLS 1.3 G->m both peers do not support middlebox compatibility" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012554 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012555 "$G_NEXT_CLI localhost --priority=NORMAL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012556 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012557 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012558 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
12559 -C "SSL 3.3 ChangeCipherSpec packet received"
12560
12561requires_gnutls_tls1_3
12562requires_gnutls_next_no_ticket
12563requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012564requires_config_enabled MBEDTLS_DEBUG_C
12565requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012566requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12567 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012568run_test "TLS 1.3 G->m server with middlebox compat support, not client" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012569 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012570 "$G_NEXT_CLI localhost --debug=10 --priority=NORMAL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012571 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012572 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012573 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
12574 -c "SSL 3.3 ChangeCipherSpec packet received" \
12575 -c "discarding change cipher spec in TLS1.3"
12576
12577requires_gnutls_tls1_3
12578requires_gnutls_next_no_ticket
12579requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012580requires_config_enabled MBEDTLS_DEBUG_C
12581requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012582requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12583 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012584run_test "TLS 1.3 G->m both with middlebox compat support" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012585 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012586 "$G_NEXT_CLI localhost --debug=10 --priority=NORMAL:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012587 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012588 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012589 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_SERVER_HELLO" \
12590 -c "SSL 3.3 ChangeCipherSpec packet received"
12591
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012592requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12593requires_config_enabled MBEDTLS_DEBUG_C
12594requires_config_enabled MBEDTLS_SSL_SRV_C
12595requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012596requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012597run_test "TLS 1.3 m->m HRR both peers do not support middlebox compatibility" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012598 "$P_SRV debug_level=4 groups=secp384r1 tickets=0" \
12599 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012600 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012601 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012602 -c "Protocol is TLSv1.3" \
12603 -s "tls13 server state: MBEDTLS_SSL_HELLO_RETRY_REQUEST" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020012604 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012605 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12606
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012607requires_config_enabled MBEDTLS_DEBUG_C
12608requires_config_enabled MBEDTLS_SSL_SRV_C
12609requires_config_enabled MBEDTLS_SSL_CLI_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020012610requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron70ed4172022-10-20 15:48:19 +020012611requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12612 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012613run_test "TLS 1.3 m->m HRR both with middlebox compat support" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012614 "$P_SRV debug_level=4 groups=secp384r1 tickets=0" \
12615 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012616 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012617 -s "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012618 -c "Protocol is TLSv1.3" \
12619 -s "tls13 server state: MBEDTLS_SSL_HELLO_RETRY_REQUEST" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020012620 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012621 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12622
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012623requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012624requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12625requires_config_enabled MBEDTLS_DEBUG_C
12626requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012627requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012628run_test "TLS 1.3 m->O HRR both peers do not support middlebox compatibility" \
12629 "$O_NEXT_SRV -msg -tls1_3 -groups P-384 -no_middlebox -num_tickets 0 -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012630 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012631 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012632 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012633 -c "received HelloRetryRequest message" \
12634 -C "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode" \
12635 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12636
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012637requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012638requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12639requires_config_enabled MBEDTLS_DEBUG_C
12640requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012641requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012642run_test "TLS 1.3 m->O HRR server with middlebox compat support, not client" \
12643 "$O_NEXT_SRV -msg -tls1_3 -groups P-384 -num_tickets 0 -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012644 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012645 1 \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012646 -c "received HelloRetryRequest message" \
12647 -c "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode"
12648
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012649requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012650requires_config_enabled MBEDTLS_DEBUG_C
12651requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012652requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12653 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012654run_test "TLS 1.3 m->O HRR both with middlebox compat support" \
12655 "$O_NEXT_SRV -msg -tls1_3 -groups P-384 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012656 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012657 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012658 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012659 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12660
12661requires_gnutls_tls1_3
12662requires_gnutls_next_no_ticket
12663requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012664requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12665requires_config_enabled MBEDTLS_DEBUG_C
12666requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012667requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012668run_test "TLS 1.3 m->G HRR both peers do not support middlebox compatibility" \
12669 "$G_NEXT_SRV --priority=NORMAL:-GROUP-ALL:+GROUP-SECP384R1:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE --disable-client-cert" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012670 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012671 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012672 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012673 -c "received HelloRetryRequest message" \
12674 -C "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode" \
12675 -C "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12676
12677requires_gnutls_tls1_3
12678requires_gnutls_next_no_ticket
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012679requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12680requires_config_enabled MBEDTLS_DEBUG_C
12681requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012682requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012683run_test "TLS 1.3 m->G HRR server with middlebox compat support, not client" \
12684 "$G_NEXT_SRV --priority=NORMAL:-GROUP-ALL:+GROUP-SECP384R1:-VERS-ALL:+VERS-TLS1.3:%NO_TICKETS --disable-client-cert" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012685 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012686 1 \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012687 -c "received HelloRetryRequest message" \
12688 -c "ChangeCipherSpec invalid in TLS 1.3 without compatibility mode"
12689
12690requires_gnutls_tls1_3
12691requires_gnutls_next_no_ticket
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012692requires_config_enabled MBEDTLS_DEBUG_C
12693requires_config_enabled MBEDTLS_SSL_CLI_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020012694requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron70ed4172022-10-20 15:48:19 +020012695requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12696 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012697run_test "TLS 1.3 m->G HRR both with middlebox compat support" \
12698 "$G_NEXT_SRV --priority=NORMAL:-GROUP-ALL:+GROUP-SECP384R1:-VERS-ALL:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS --disable-client-cert" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012699 "$P_CLI debug_level=4 groups=secp256r1,secp384r1" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012700 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012701 -c "Protocol is TLSv1.3" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012702 -c "Ignore ChangeCipherSpec in TLS 1.3 compatibility mode"
12703
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012704requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012705requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12706requires_config_enabled MBEDTLS_DEBUG_C
12707requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012708requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012709run_test "TLS 1.3 O->m HRR both peers do not support middlebox compatibility" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012710 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012711 "$O_NEXT_CLI -msg -debug -groups P-256:P-384 -no_middlebox" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012712 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012713 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020012714 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012715 -C "14 03 03 00 01"
12716
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012717requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012718requires_config_enabled MBEDTLS_DEBUG_C
12719requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012720requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12721 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012722run_test "TLS 1.3 O->m HRR server with middlebox compat support, not client" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012723 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012724 "$O_NEXT_CLI -msg -debug -groups P-256:P-384 -no_middlebox" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012725 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012726 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020012727 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012728
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012729requires_openssl_tls1_3_with_compatible_ephemeral
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012730requires_config_enabled MBEDTLS_DEBUG_C
12731requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012732requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12733 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012734run_test "TLS 1.3 O->m HRR both with middlebox compat support" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012735 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012736 "$O_NEXT_CLI -msg -debug -groups P-256:P-384" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012737 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012738 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020012739 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012740 -c "14 03 03 00 01"
12741
12742requires_gnutls_tls1_3
12743requires_gnutls_next_no_ticket
12744requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012745requires_config_disabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12746requires_config_enabled MBEDTLS_DEBUG_C
12747requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron928cbd32022-10-04 16:14:26 +020012748requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012749run_test "TLS 1.3 G->m HRR both peers do not support middlebox compatibility" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012750 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012751 "$G_NEXT_CLI localhost --priority=NORMAL:-GROUP-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012752 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012753 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020012754 -S "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012755 -C "SSL 3.3 ChangeCipherSpec packet received"
12756
12757requires_gnutls_tls1_3
12758requires_gnutls_next_no_ticket
12759requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012760requires_config_enabled MBEDTLS_DEBUG_C
12761requires_config_enabled MBEDTLS_SSL_SRV_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020012762requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron70ed4172022-10-20 15:48:19 +020012763requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12764 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012765run_test "TLS 1.3 G->m HRR server with middlebox compat support, not client" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012766 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012767 "$G_NEXT_CLI localhost --debug=10 --priority=NORMAL:-GROUP-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012768 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012769 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020012770 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012771 -c "SSL 3.3 ChangeCipherSpec packet received" \
12772 -c "discarding change cipher spec in TLS1.3"
12773
12774requires_gnutls_tls1_3
12775requires_gnutls_next_no_ticket
12776requires_gnutls_next_disable_tls13_compat
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012777requires_config_enabled MBEDTLS_DEBUG_C
12778requires_config_enabled MBEDTLS_SSL_SRV_C
Przemek Stekielc31a7982023-06-27 10:53:33 +020012779requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron70ed4172022-10-20 15:48:19 +020012780requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12781 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012782run_test "TLS 1.3 G->m HRR both with middlebox compat support" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020012783 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key groups=secp384r1 tickets=0" \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012784 "$G_NEXT_CLI localhost --debug=10 --priority=NORMAL:-GROUP-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1:%NO_TICKETS:%DISABLE_TLS13_COMPAT_MODE -V" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012785 0 \
Gabor Mezei9e4b7bd2022-06-28 16:22:14 +020012786 -s "Protocol is TLSv1.3" \
Gabor Mezeif7044ea2022-06-28 16:01:49 +020012787 -s "tls13 server state: MBEDTLS_SSL_SERVER_CCS_AFTER_HELLO_RETRY_REQUEST" \
Gabor Mezei7e2dbaf2022-05-24 16:05:29 +020012788 -c "SSL 3.3 ChangeCipherSpec packet received"
12789
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012790requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080012791requires_config_enabled MBEDTLS_DEBUG_C
12792requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012793requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12794 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012795run_test "TLS 1.3: Check signature algorithm order, m->O" \
12796 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key
12797 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache
12798 -Verify 10 -sigalgs rsa_pkcs1_sha512:rsa_pss_rsae_sha512:rsa_pss_rsae_sha384:ecdsa_secp256r1_sha256" \
12799 "$P_CLI debug_level=4 crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080012800 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012801 0 \
12802 -c "Protocol is TLSv1.3" \
Ronald Cron067a1e72022-09-16 13:44:49 +020012803 -c "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012804 -c "HTTP/1.0 200 [Oo][Kk]"
12805
12806requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080012807requires_config_enabled MBEDTLS_DEBUG_C
12808requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012809requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12810 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012811run_test "TLS 1.3: Check signature algorithm order, m->G" \
12812 "$G_NEXT_SRV_NO_CERT --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key
12813 -d 4
12814 --priority=NORMAL:-VERS-ALL:-SIGN-ALL:+SIGN-RSA-SHA512:+SIGN-RSA-PSS-RSAE-SHA512:+SIGN-RSA-PSS-RSAE-SHA384:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS " \
12815 "$P_CLI debug_level=4 crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080012816 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012817 0 \
12818 -c "Protocol is TLSv1.3" \
Ronald Cron067a1e72022-09-16 13:44:49 +020012819 -c "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012820 -c "HTTP/1.0 200 [Oo][Kk]"
12821
Jerry Yuaae28f12022-06-29 16:21:32 +080012822requires_config_enabled MBEDTLS_DEBUG_C
12823requires_config_enabled MBEDTLS_SSL_SRV_C
12824requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012825requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12826 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012827run_test "TLS 1.3: Check signature algorithm order, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012828 "$P_SRV debug_level=4 auth_mode=required
Jerry Yuaae28f12022-06-29 16:21:32 +080012829 crt_file2=data_files/server2-sha256.crt key_file2=data_files/server2.key
12830 crt_file=data_files/server5.crt key_file=data_files/server5.key
12831 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
12832 "$P_CLI debug_level=4 crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080012833 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012834 0 \
12835 -c "Protocol is TLSv1.3" \
Ronald Cron067a1e72022-09-16 13:44:49 +020012836 -c "CertificateVerify signature with rsa_pss_rsae_sha512" \
12837 -s "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012838 -s "ssl_tls13_pick_key_cert:selected signature algorithm rsa_pss_rsae_sha512" \
12839 -c "HTTP/1.0 200 [Oo][Kk]"
12840
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012841requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080012842requires_config_enabled MBEDTLS_DEBUG_C
12843requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012844requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12845 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012846run_test "TLS 1.3: Check signature algorithm order, O->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012847 "$P_SRV debug_level=4 auth_mode=required
Jerry Yuaae28f12022-06-29 16:21:32 +080012848 crt_file2=data_files/server2-sha256.crt key_file2=data_files/server2.key
12849 crt_file=data_files/server5.crt key_file=data_files/server5.key
12850 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
12851 "$O_NEXT_CLI_NO_CERT -msg -CAfile data_files/test-ca_cat12.crt \
12852 -cert data_files/server2-sha256.crt -key data_files/server2.key \
12853 -sigalgs rsa_pkcs1_sha512:rsa_pss_rsae_sha512:rsa_pss_rsae_sha384:ecdsa_secp256r1_sha256" \
12854 0 \
12855 -c "TLSv1.3" \
Ronald Cron067a1e72022-09-16 13:44:49 +020012856 -s "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012857 -s "ssl_tls13_pick_key_cert:selected signature algorithm rsa_pss_rsae_sha512"
12858
12859requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080012860requires_config_enabled MBEDTLS_DEBUG_C
12861requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012862requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12863 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012864run_test "TLS 1.3: Check signature algorithm order, G->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012865 "$P_SRV debug_level=4 auth_mode=required
Jerry Yuaae28f12022-06-29 16:21:32 +080012866 crt_file2=data_files/server2-sha256.crt key_file2=data_files/server2.key
12867 crt_file=data_files/server5.crt key_file=data_files/server5.key
12868 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
12869 "$G_NEXT_CLI_NO_CERT localhost -d 4 --x509cafile data_files/test-ca_cat12.crt \
12870 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key \
12871 --priority=NORMAL:-SIGN-ALL:+SIGN-RSA-SHA512:+SIGN-RSA-PSS-RSAE-SHA512:+SIGN-RSA-PSS-RSAE-SHA384" \
12872 0 \
12873 -c "Negotiated version: 3.4" \
12874 -c "HTTP/1.0 200 [Oo][Kk]" \
Ronald Cron067a1e72022-09-16 13:44:49 +020012875 -s "CertificateVerify signature with rsa_pss_rsae_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012876 -s "ssl_tls13_pick_key_cert:selected signature algorithm rsa_pss_rsae_sha512"
12877
12878requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080012879requires_config_enabled MBEDTLS_DEBUG_C
12880requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012881requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12882 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012883run_test "TLS 1.3: Check server no suitable signature algorithm, G->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012884 "$P_SRV debug_level=4 auth_mode=required
Jerry Yuaae28f12022-06-29 16:21:32 +080012885 crt_file2=data_files/server2-sha256.crt key_file2=data_files/server2.key
12886 crt_file=data_files/server5.crt key_file=data_files/server5.key
12887 sig_algs=rsa_pkcs1_sha512,ecdsa_secp256r1_sha256 " \
12888 "$G_NEXT_CLI_NO_CERT localhost -d 4 --x509cafile data_files/test-ca_cat12.crt \
12889 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key \
12890 --priority=NORMAL:-SIGN-ALL:+SIGN-RSA-SHA512:+SIGN-RSA-PSS-RSAE-SHA512:+SIGN-ECDSA-SECP521R1-SHA512" \
12891 1 \
Ronald Cron67ea2542022-09-15 17:34:42 +020012892 -S "ssl_tls13_pick_key_cert:check signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080012893
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012894requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080012895requires_config_enabled MBEDTLS_DEBUG_C
12896requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012897requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12898 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012899run_test "TLS 1.3: Check server no suitable signature algorithm, O->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012900 "$P_SRV debug_level=4 auth_mode=required
Jerry Yuaae28f12022-06-29 16:21:32 +080012901 crt_file2=data_files/server2-sha256.crt key_file2=data_files/server2.key
12902 crt_file=data_files/server5.crt key_file=data_files/server5.key
12903 sig_algs=rsa_pkcs1_sha512,ecdsa_secp256r1_sha256" \
12904 "$O_NEXT_CLI_NO_CERT -msg -CAfile data_files/test-ca_cat12.crt \
12905 -cert data_files/server2-sha256.crt -key data_files/server2.key \
12906 -sigalgs rsa_pkcs1_sha512:rsa_pss_rsae_sha512:ecdsa_secp521r1_sha512" \
12907 1 \
Ronald Cron67ea2542022-09-15 17:34:42 +020012908 -S "ssl_tls13_pick_key_cert:check signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080012909
Jerry Yuaae28f12022-06-29 16:21:32 +080012910requires_config_enabled MBEDTLS_DEBUG_C
12911requires_config_enabled MBEDTLS_SSL_SRV_C
12912requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012913requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12914 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012915run_test "TLS 1.3: Check server no suitable signature algorithm, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012916 "$P_SRV debug_level=4 auth_mode=required
Jerry Yuaae28f12022-06-29 16:21:32 +080012917 crt_file2=data_files/server2-sha256.crt key_file2=data_files/server2.key
12918 crt_file=data_files/server5.crt key_file=data_files/server5.key
12919 sig_algs=rsa_pkcs1_sha512,ecdsa_secp256r1_sha256 " \
12920 "$P_CLI allow_sha1=0 debug_level=4 crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080012921 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,ecdsa_secp521r1_sha512" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012922 1 \
Ronald Cron67ea2542022-09-15 17:34:42 +020012923 -S "ssl_tls13_pick_key_cert:check signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080012924
12925requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080012926requires_config_enabled MBEDTLS_DEBUG_C
12927requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012928requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12929 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012930run_test "TLS 1.3: Check server no suitable certificate, G->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012931 "$P_SRV debug_level=4
Jerry Yuaae28f12022-06-29 16:21:32 +080012932 crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key
12933 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
12934 "$G_NEXT_CLI_NO_CERT localhost -d 4 --x509cafile data_files/test-ca_cat12.crt \
12935 --priority=NORMAL:-SIGN-ALL:+SIGN-ECDSA-SECP521R1-SHA512:+SIGN-ECDSA-SECP256R1-SHA256" \
12936 1 \
12937 -s "ssl_tls13_pick_key_cert:no suitable certificate found"
12938
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012939requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080012940requires_config_enabled MBEDTLS_DEBUG_C
12941requires_config_enabled MBEDTLS_SSL_SRV_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012942requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12943 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012944run_test "TLS 1.3: Check server no suitable certificate, O->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012945 "$P_SRV debug_level=4
Jerry Yuaae28f12022-06-29 16:21:32 +080012946 crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key
12947 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
12948 "$O_NEXT_CLI_NO_CERT -msg -CAfile data_files/test-ca_cat12.crt \
12949 -sigalgs ecdsa_secp521r1_sha512:ecdsa_secp256r1_sha256" \
12950 1 \
12951 -s "ssl_tls13_pick_key_cert:no suitable certificate found"
12952
Jerry Yuaae28f12022-06-29 16:21:32 +080012953requires_config_enabled MBEDTLS_DEBUG_C
12954requires_config_enabled MBEDTLS_SSL_SRV_C
12955requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012956requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12957 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012958run_test "TLS 1.3: Check server no suitable certificate, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010012959 "$P_SRV debug_level=4
Jerry Yuaae28f12022-06-29 16:21:32 +080012960 crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key
12961 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256 " \
12962 "$P_CLI allow_sha1=0 debug_level=4 \
Jerry Yu7ac0d492022-07-01 19:29:30 +080012963 sig_algs=ecdsa_secp521r1_sha512,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012964 1 \
12965 -s "ssl_tls13_pick_key_cert:no suitable certificate found"
12966
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020012967requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yuaae28f12022-06-29 16:21:32 +080012968requires_config_enabled MBEDTLS_DEBUG_C
12969requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012970requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12971 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012972run_test "TLS 1.3: Check client no signature algorithm, m->O" \
12973 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key
12974 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache
12975 -Verify 10 -sigalgs rsa_pkcs1_sha512:rsa_pss_rsae_sha512:rsa_pss_rsae_sha384:ecdsa_secp521r1_sha512" \
12976 "$P_CLI debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080012977 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012978 1 \
Ronald Cron067a1e72022-09-16 13:44:49 +020012979 -c "no suitable signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080012980
12981requires_gnutls_tls1_3
Jerry Yuaae28f12022-06-29 16:21:32 +080012982requires_config_enabled MBEDTLS_DEBUG_C
12983requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012984requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12985 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080012986run_test "TLS 1.3: Check client no signature algorithm, m->G" \
12987 "$G_NEXT_SRV_NO_CERT --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key
12988 -d 4
12989 --priority=NORMAL:-VERS-ALL:-SIGN-ALL:+SIGN-RSA-SHA512:+SIGN-RSA-PSS-RSAE-SHA512:+SIGN-RSA-PSS-RSAE-SHA384:+VERS-TLS1.3:+CIPHER-ALL:%NO_TICKETS " \
12990 "$P_CLI debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080012991 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080012992 1 \
Ronald Cron067a1e72022-09-16 13:44:49 +020012993 -c "no suitable signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080012994
Jerry Yuaae28f12022-06-29 16:21:32 +080012995requires_config_enabled MBEDTLS_DEBUG_C
12996requires_config_enabled MBEDTLS_SSL_SRV_C
12997requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020012998requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
12999 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Jerry Yuaae28f12022-06-29 16:21:32 +080013000run_test "TLS 1.3: Check client no signature algorithm, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013001 "$P_SRV debug_level=4 auth_mode=required
Jerry Yuaae28f12022-06-29 16:21:32 +080013002 crt_file2=data_files/server2-sha256.crt key_file2=data_files/server2.key
13003 crt_file=data_files/server5.crt key_file=data_files/server5.key
13004 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp521r1_sha512" \
13005 "$P_CLI debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Jerry Yu7ac0d492022-07-01 19:29:30 +080013006 sig_algs=rsa_pkcs1_sha512,rsa_pss_rsae_sha512,rsa_pss_rsae_sha384,ecdsa_secp256r1_sha256" \
Jerry Yuaae28f12022-06-29 16:21:32 +080013007 1 \
Ronald Cron067a1e72022-09-16 13:44:49 +020013008 -c "no suitable signature algorithm"
Jerry Yuaae28f12022-06-29 16:21:32 +080013009
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013010requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu29ab32d2022-07-07 11:33:35 +000013011requires_config_enabled MBEDTLS_DEBUG_C
13012requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020013013requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
13014 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
13015 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu29ab32d2022-07-07 11:33:35 +000013016run_test "TLS 1.3: NewSessionTicket: Basic check, m->O" \
Jerry Yue9764922022-08-03 14:34:24 +080013017 "$O_NEXT_SRV -msg -tls1_3 -no_resume_ephemeral -no_cache --num_tickets 4" \
13018 "$P_CLI debug_level=1 reco_mode=1 reconnect=1" \
Jerry Yu29ab32d2022-07-07 11:33:35 +000013019 0 \
13020 -c "Protocol is TLSv1.3" \
Jerry Yu29ab32d2022-07-07 11:33:35 +000013021 -c "got new session ticket." \
Jerry Yu24e38552022-07-15 16:35:26 +080013022 -c "Saving session for reuse... ok" \
Jerry Yue9764922022-08-03 14:34:24 +080013023 -c "Reconnecting with saved session" \
Jerry Yu29ab32d2022-07-07 11:33:35 +000013024 -c "HTTP/1.0 200 ok"
13025
13026requires_gnutls_tls1_3
Jerry Yu29ab32d2022-07-07 11:33:35 +000013027requires_config_enabled MBEDTLS_DEBUG_C
13028requires_config_enabled MBEDTLS_SSL_CLI_C
Ronald Cron70ed4172022-10-20 15:48:19 +020013029requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
13030 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
13031 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu29ab32d2022-07-07 11:33:35 +000013032run_test "TLS 1.3: NewSessionTicket: Basic check, m->G" \
Ronald Crona709a0f2022-09-27 16:46:11 +020013033 "$G_NEXT_SRV -d 10 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 --disable-client-cert" \
Jerry Yue9764922022-08-03 14:34:24 +080013034 "$P_CLI debug_level=1 reco_mode=1 reconnect=1" \
Jerry Yu29ab32d2022-07-07 11:33:35 +000013035 0 \
13036 -c "Protocol is TLSv1.3" \
Jerry Yu29ab32d2022-07-07 11:33:35 +000013037 -c "got new session ticket." \
Jerry Yu24e38552022-07-15 16:35:26 +080013038 -c "Saving session for reuse... ok" \
Jerry Yue9764922022-08-03 14:34:24 +080013039 -c "Reconnecting with saved session" \
13040 -c "HTTP/1.0 200 OK" \
13041 -s "This is a resumed session"
Jerry Yuf7b5b592022-07-07 07:55:53 +000013042
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013043requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu7a513052022-08-09 13:34:21 +080013044requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
13045requires_config_enabled MBEDTLS_SSL_SRV_C
13046requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron70ed4172022-10-20 15:48:19 +020013047requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
13048 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
13049 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yu7a513052022-08-09 13:34:21 +080013050# https://github.com/openssl/openssl/issues/10714
13051# Until now, OpenSSL client does not support reconnect.
13052skip_next_test
13053run_test "TLS 1.3: NewSessionTicket: Basic check, O->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013054 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=4" \
Jerry Yu7a513052022-08-09 13:34:21 +080013055 "$O_NEXT_CLI -msg -debug -tls1_3 -reconnect" \
13056 0 \
13057 -s "=> write NewSessionTicket msg" \
Jerry Yua8d3c502022-10-30 14:51:23 +080013058 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET" \
13059 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET_FLUSH"
Jerry Yu7a513052022-08-09 13:34:21 +080013060
Jerry Yuf7b5b592022-07-07 07:55:53 +000013061requires_gnutls_tls1_3
Jerry Yuf7b5b592022-07-07 07:55:53 +000013062requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
13063requires_config_enabled MBEDTLS_SSL_SRV_C
13064requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron70ed4172022-10-20 15:48:19 +020013065requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
13066 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
13067 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yuf7b5b592022-07-07 07:55:53 +000013068run_test "TLS 1.3: NewSessionTicket: Basic check, G->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013069 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=4" \
Jerry Yu7a513052022-08-09 13:34:21 +080013070 "$G_NEXT_CLI localhost -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3 -V -r" \
Jerry Yuf7b5b592022-07-07 07:55:53 +000013071 0 \
Jerry Yue9764922022-08-03 14:34:24 +080013072 -c "Connecting again- trying to resume previous session" \
13073 -c "NEW SESSION TICKET (4) was received" \
Jerry Yuf7b5b592022-07-07 07:55:53 +000013074 -s "=> write NewSessionTicket msg" \
Jerry Yua8d3c502022-10-30 14:51:23 +080013075 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET" \
13076 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET_FLUSH" \
Jerry Yue9764922022-08-03 14:34:24 +080013077 -s "key exchange mode: ephemeral" \
13078 -s "key exchange mode: psk_ephemeral" \
13079 -s "found pre_shared_key extension"
Jerry Yuf7b5b592022-07-07 07:55:53 +000013080
Ronald Cron0a1c5042023-02-20 10:44:22 +010013081requires_gnutls_tls1_3
13082requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
13083requires_config_enabled MBEDTLS_SSL_SRV_C
13084requires_config_enabled MBEDTLS_DEBUG_C
13085requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
13086 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
13087 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Ronald Crond89360b2023-02-21 08:53:33 +010013088# Test the session resumption when the cipher suite for the original session is
13089# TLS1-3-AES-256-GCM-SHA384. In that case, the PSK is 384 bits long and not
13090# 256 bits long as with all the other TLS 1.3 cipher suites.
Ronald Cron0a1c5042023-02-20 10:44:22 +010013091requires_ciphersuite_enabled TLS1-3-AES-256-GCM-SHA384
13092run_test "TLS 1.3: NewSessionTicket: Basic check with AES-256-GCM only, G->m" \
13093 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key force_version=tls13 tickets=4" \
13094 "$G_NEXT_CLI localhost -d 4 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.3:-CIPHER-ALL:+AES-256-GCM -V -r" \
13095 0 \
13096 -c "Connecting again- trying to resume previous session" \
13097 -c "NEW SESSION TICKET (4) was received" \
13098 -s "Ciphersuite is TLS1-3-AES-256-GCM-SHA384" \
13099 -s "=> write NewSessionTicket msg" \
13100 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET" \
13101 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET_FLUSH" \
13102 -s "key exchange mode: ephemeral" \
13103 -s "key exchange mode: psk_ephemeral" \
13104 -s "found pre_shared_key extension"
Jerry Yuf7b5b592022-07-07 07:55:53 +000013105
Jerry Yuf7b5b592022-07-07 07:55:53 +000013106requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
13107requires_config_enabled MBEDTLS_SSL_SRV_C
13108requires_config_enabled MBEDTLS_SSL_CLI_C
13109requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron70ed4172022-10-20 15:48:19 +020013110requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
13111 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
13112 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Jerry Yuf7b5b592022-07-07 07:55:53 +000013113run_test "TLS 1.3: NewSessionTicket: Basic check, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013114 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=4" \
Jerry Yu24e38552022-07-15 16:35:26 +080013115 "$P_CLI debug_level=4 reco_mode=1 reconnect=1" \
Jerry Yuf7b5b592022-07-07 07:55:53 +000013116 0 \
13117 -c "Protocol is TLSv1.3" \
Jerry Yu7a513052022-08-09 13:34:21 +080013118 -c "got new session ticket ( 3 )" \
Jerry Yu24e38552022-07-15 16:35:26 +080013119 -c "Saving session for reuse... ok" \
Jerry Yue9764922022-08-03 14:34:24 +080013120 -c "Reconnecting with saved session" \
Jerry Yuf7b5b592022-07-07 07:55:53 +000013121 -c "HTTP/1.0 200 OK" \
13122 -s "=> write NewSessionTicket msg" \
Jerry Yua8d3c502022-10-30 14:51:23 +080013123 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET" \
13124 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET_FLUSH" \
Jerry Yue9764922022-08-03 14:34:24 +080013125 -s "key exchange mode: ephemeral" \
13126 -s "key exchange mode: psk_ephemeral" \
13127 -s "found pre_shared_key extension"
13128
Przemek Stekiel8bfe8972023-06-26 12:59:45 +020013129requires_openssl_tls1_3_with_compatible_ephemeral
Jerry Yu6455b682022-06-27 14:18:29 +080013130requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
13131requires_config_enabled MBEDTLS_DEBUG_C
13132requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yueec4f032022-07-23 11:31:51 +080013133run_test "TLS 1.2: Check rsa_pss_rsae compatibility issue, m->O" \
Jerry Yu6455b682022-06-27 14:18:29 +080013134 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key
13135 -msg -tls1_2
13136 -Verify 10 " \
13137 "$P_CLI debug_level=4 crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key
13138 sig_algs=rsa_pss_rsae_sha512,rsa_pkcs1_sha512
13139 min_version=tls12 max_version=tls13 " \
13140 0 \
13141 -c "Protocol is TLSv1.2" \
13142 -c "HTTP/1.0 200 [Oo][Kk]"
13143
13144
13145requires_gnutls_tls1_3
13146requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
13147requires_config_enabled MBEDTLS_DEBUG_C
13148requires_config_enabled MBEDTLS_SSL_CLI_C
Jerry Yueec4f032022-07-23 11:31:51 +080013149run_test "TLS 1.2: Check rsa_pss_rsae compatibility issue, m->G" \
Jerry Yu6455b682022-06-27 14:18:29 +080013150 "$G_NEXT_SRV_NO_CERT --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key
13151 -d 4
13152 --priority=NORMAL:-VERS-ALL:+VERS-TLS1.2" \
13153 "$P_CLI debug_level=4 crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key
13154 sig_algs=rsa_pss_rsae_sha512,rsa_pkcs1_sha512
13155 min_version=tls12 max_version=tls13 " \
13156 0 \
13157 -c "Protocol is TLSv1.2" \
13158 -c "HTTP/1.0 200 [Oo][Kk]"
13159
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013160requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
13161requires_config_enabled MBEDTLS_SSL_SRV_C
13162requires_config_enabled MBEDTLS_SSL_CLI_C
13163requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron70ed4172022-10-20 15:48:19 +020013164requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
13165 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
13166 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013167run_test "TLS 1.3: NewSessionTicket: servername check, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013168 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=4 \
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013169 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
13170 "$P_CLI debug_level=4 server_name=localhost reco_mode=1 reconnect=1" \
13171 0 \
13172 -c "Protocol is TLSv1.3" \
13173 -c "got new session ticket." \
13174 -c "Saving session for reuse... ok" \
13175 -c "Reconnecting with saved session" \
13176 -c "HTTP/1.0 200 OK" \
13177 -s "=> write NewSessionTicket msg" \
Jerry Yua8d3c502022-10-30 14:51:23 +080013178 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET" \
13179 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET_FLUSH" \
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013180 -s "key exchange mode: ephemeral" \
13181 -s "key exchange mode: psk_ephemeral" \
13182 -s "found pre_shared_key extension"
13183
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013184requires_config_enabled MBEDTLS_SSL_SESSION_TICKETS
13185requires_config_enabled MBEDTLS_SSL_SRV_C
13186requires_config_enabled MBEDTLS_SSL_CLI_C
13187requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron70ed4172022-10-20 15:48:19 +020013188requires_all_configs_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE \
13189 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED \
13190 MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_EPHEMERAL_ENABLED
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013191run_test "TLS 1.3: NewSessionTicket: servername negative check, m->m" \
Ronald Cron50ae84e2023-03-14 08:59:56 +010013192 "$P_SRV debug_level=4 crt_file=data_files/server5.crt key_file=data_files/server5.key tickets=4 \
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013193 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Jerry Yuad9e99b2022-10-28 12:18:52 +080013194 "$P_CLI debug_level=4 server_name=localhost reco_server_name=remote reco_mode=1 reconnect=1" \
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013195 1 \
13196 -c "Protocol is TLSv1.3" \
13197 -c "got new session ticket." \
13198 -c "Saving session for reuse... ok" \
13199 -c "Reconnecting with saved session" \
Xiaokang Qianed0620c2022-10-12 06:58:13 +000013200 -c "Hostname mismatch the session ticket, disable session resumption." \
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013201 -s "=> write NewSessionTicket msg" \
Jerry Yua8d3c502022-10-30 14:51:23 +080013202 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET" \
13203 -s "server state: MBEDTLS_SSL_TLS1_3_NEW_SESSION_TICKET_FLUSH"
Xiaokang Qian281fd1b2022-09-20 11:35:41 +000013204
Przemek Stekiel3484db42023-06-28 13:31:38 +020013205requires_config_enabled MBEDTLS_SSL_SRV_C
13206requires_config_enabled MBEDTLS_DEBUG_C
13207requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13208requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13209requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
13210requires_config_enabled PSA_WANT_ALG_FFDH
13211requires_gnutls_tls1_3
13212requires_gnutls_next_no_ticket
13213requires_gnutls_next_disable_tls13_compat
13214run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013215 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe3072 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020013216 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
13217 0 \
13218 -s "Protocol is TLSv1.3" \
13219 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
13220 -s "received signature algorithm: 0x804" \
13221 -s "got named group: ffdhe3072(0101)" \
13222 -s "Certificate verification was skipped" \
13223 -C "received HelloRetryRequest message"
13224
13225
13226requires_gnutls_tls1_3
13227requires_gnutls_next_no_ticket
13228requires_gnutls_next_disable_tls13_compat
13229requires_config_enabled MBEDTLS_SSL_CLI_C
13230requires_config_enabled MBEDTLS_DEBUG_C
13231requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13232requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13233requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
13234requires_config_enabled PSA_WANT_ALG_FFDH
13235run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe3072,rsa_pss_rsae_sha256" \
13236 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE3072:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013237 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe3072" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020013238 0 \
13239 -c "HTTP/1.0 200 OK" \
13240 -c "Protocol is TLSv1.3" \
13241 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
13242 -c "Certificate Verify: Signature algorithm ( 0804 )" \
13243 -c "NamedGroup: ffdhe3072 ( 101 )" \
13244 -c "Verifying peer X.509 certificate... ok" \
13245 -C "received HelloRetryRequest message"
13246
13247requires_config_enabled MBEDTLS_SSL_SRV_C
13248requires_config_enabled MBEDTLS_DEBUG_C
13249requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13250requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13251requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
13252requires_config_enabled PSA_WANT_ALG_FFDH
13253requires_gnutls_tls1_3
13254requires_gnutls_next_no_ticket
13255requires_gnutls_next_disable_tls13_compat
13256run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013257 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe4096 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020013258 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
13259 0 \
13260 -s "Protocol is TLSv1.3" \
13261 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
13262 -s "received signature algorithm: 0x804" \
13263 -s "got named group: ffdhe4096(0102)" \
13264 -s "Certificate verification was skipped" \
13265 -C "received HelloRetryRequest message"
13266
13267
13268requires_gnutls_tls1_3
13269requires_gnutls_next_no_ticket
13270requires_gnutls_next_disable_tls13_compat
13271requires_config_enabled MBEDTLS_SSL_CLI_C
13272requires_config_enabled MBEDTLS_DEBUG_C
13273requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13274requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13275requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
13276requires_config_enabled PSA_WANT_ALG_FFDH
13277run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe4096,rsa_pss_rsae_sha256" \
13278 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE4096:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013279 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe4096" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020013280 0 \
13281 -c "HTTP/1.0 200 OK" \
13282 -c "Protocol is TLSv1.3" \
13283 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
13284 -c "Certificate Verify: Signature algorithm ( 0804 )" \
13285 -c "NamedGroup: ffdhe4096 ( 102 )" \
13286 -c "Verifying peer X.509 certificate... ok" \
13287 -C "received HelloRetryRequest message"
13288
13289requires_config_enabled MBEDTLS_SSL_SRV_C
13290requires_config_enabled MBEDTLS_DEBUG_C
13291requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13292requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13293requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
13294requires_config_enabled PSA_WANT_ALG_FFDH
13295requires_gnutls_tls1_3
13296requires_gnutls_next_no_ticket
13297requires_gnutls_next_disable_tls13_compat
13298run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013299 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe6144 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020013300 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
13301 0 \
13302 -s "Protocol is TLSv1.3" \
13303 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
13304 -s "received signature algorithm: 0x804" \
13305 -s "got named group: ffdhe6144(0103)" \
13306 -s "Certificate verification was skipped" \
13307 -C "received HelloRetryRequest message"
13308
13309requires_gnutls_tls1_3
13310requires_gnutls_next_no_ticket
13311requires_gnutls_next_disable_tls13_compat
13312requires_config_enabled MBEDTLS_SSL_CLI_C
13313requires_config_enabled MBEDTLS_DEBUG_C
13314requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13315requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13316requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
13317requires_config_enabled PSA_WANT_ALG_FFDH
13318run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe6144,rsa_pss_rsae_sha256" \
13319 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE6144:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013320 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe6144" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020013321 0 \
13322 -c "HTTP/1.0 200 OK" \
13323 -c "Protocol is TLSv1.3" \
13324 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
13325 -c "Certificate Verify: Signature algorithm ( 0804 )" \
13326 -c "NamedGroup: ffdhe6144 ( 103 )" \
13327 -c "Verifying peer X.509 certificate... ok" \
13328 -C "received HelloRetryRequest message"
13329
13330requires_config_enabled MBEDTLS_SSL_SRV_C
13331requires_config_enabled MBEDTLS_DEBUG_C
13332requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13333requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13334requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
13335requires_config_enabled PSA_WANT_ALG_FFDH
13336requires_gnutls_tls1_3
13337requires_gnutls_next_no_ticket
13338requires_gnutls_next_disable_tls13_compat
13339client_needs_more_time 4
13340run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013341 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe8192 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020013342 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
13343 0 \
13344 -s "Protocol is TLSv1.3" \
13345 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
13346 -s "received signature algorithm: 0x804" \
13347 -s "got named group: ffdhe8192(0104)" \
13348 -s "Certificate verification was skipped" \
13349 -C "received HelloRetryRequest message"
13350
13351requires_gnutls_tls1_3
13352requires_gnutls_next_no_ticket
13353requires_gnutls_next_disable_tls13_compat
13354requires_config_enabled MBEDTLS_SSL_CLI_C
13355requires_config_enabled MBEDTLS_DEBUG_C
13356requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13357requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
13358requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
13359requires_config_enabled PSA_WANT_ALG_FFDH
13360client_needs_more_time 4
13361run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe8192,rsa_pss_rsae_sha256" \
13362 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE8192:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +020013363 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe8192" \
Przemek Stekiel3484db42023-06-28 13:31:38 +020013364 0 \
13365 -c "HTTP/1.0 200 OK" \
13366 -c "Protocol is TLSv1.3" \
13367 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
13368 -c "Certificate Verify: Signature algorithm ( 0804 )" \
13369 -c "NamedGroup: ffdhe8192 ( 104 )" \
13370 -c "Verifying peer X.509 certificate... ok" \
13371 -C "received HelloRetryRequest message"
13372
Ronald Cron8a74f072023-06-14 17:59:29 +020013373requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
13374requires_config_enabled MBEDTLS_SSL_SRV_C
13375requires_config_enabled MBEDTLS_SSL_CLI_C
13376requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_PSK_ENABLED
13377requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13378run_test "TLS 1.3: no HRR in case of PSK key exchange mode" \
Gilles Peskineb387fcf2023-07-11 09:19:13 +020013379 "$P_SRV nbio=2 psk=010203 psk_identity=0a0b0c tls13_kex_modes=psk groups=none" \
Ronald Cron8a74f072023-06-14 17:59:29 +020013380 "$P_CLI nbio=2 debug_level=3 psk=010203 psk_identity=0a0b0c tls13_kex_modes=all" \
13381 0 \
13382 -C "received HelloRetryRequest message" \
13383 -c "Selected key exchange mode: psk$" \
13384 -c "HTTP/1.0 200 OK"
13385
Piotr Nowicki0937ed22019-11-26 16:32:40 +010013386# Test heap memory usage after handshake
Jerry Yuab082902021-12-23 18:02:22 +080013387requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Piotr Nowicki0937ed22019-11-26 16:32:40 +010013388requires_config_enabled MBEDTLS_MEMORY_DEBUG
13389requires_config_enabled MBEDTLS_MEMORY_BUFFER_ALLOC_C
13390requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Yuto Takanobc87b1d2021-07-08 15:56:33 +010013391requires_max_content_len 16384
Piotr Nowicki0937ed22019-11-26 16:32:40 +010013392run_tests_memory_after_hanshake
13393
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +010013394# Final report
13395
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010013396echo "------------------------------------------------------------------------"
13397
13398if [ $FAILS = 0 ]; then
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +010013399 printf "PASSED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010013400else
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +010013401 printf "FAILED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010013402fi
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +020013403PASSES=$(( $TESTS - $FAILS ))
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +020013404echo " ($PASSES / $TESTS tests ($SKIPS skipped))"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010013405
Tom Cosgrovefc0e79e2023-01-13 12:13:41 +000013406if [ $FAILS -gt 255 ]; then
13407 # Clamp at 255 as caller gets exit code & 0xFF
13408 # (so 256 would be 0, or success, etc)
13409 FAILS=255
13410fi
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010013411exit $FAILS