TrustedFirmware Git Browser
Code Review Sign In
review.trustedfirmware.org / mirror / mbed-tls / 18371ee08f8438f1412cae4739b0985fda7890e0 / . / tests / opt-testcases / tls13-compat.sh
blob: 9cf2550a0667d579c3f70942351e60234e8859d6 [file] [log] [blame]
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1#!/bin/sh
2
3# tls13-compat.sh
4#
5# Copyright The Mbed TLS Contributors
Dave Rodgman16799db2023-11-02 19:47:20 +0000[diff] [blame]6# SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7#
8# Purpose
9#
10# List TLS1.3 compat test cases. They are generated by
Ronald Cronbc5adf42022-10-04 11:06:14 +0200[diff] [blame]11# `./tests/scripts/generate_tls13_compat_tests.py -a -o ./tests/opt-testcases/tls13-compat.sh`.
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]12#
13# PLEASE DO NOT EDIT THIS FILE. IF NEEDED, PLEASE MODIFY `generate_tls13_compat_tests.py`
14# AND REGENERATE THIS FILE.
15#
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]16requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]17requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]18requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]19requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]20requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]21requires_openssl_tls1_3
22run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]23 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]24 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]25 0 \
26 -s "Protocol is TLSv1.3" \
27 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
28 -s "received signature algorithm: 0x403" \
29 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]30 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]31 -C "received HelloRetryRequest message"
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]32
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]33requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]34requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]35requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]36requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]37requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]38requires_openssl_tls1_3
39run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]40 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]41 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]42 0 \
43 -s "Protocol is TLSv1.3" \
44 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
45 -s "received signature algorithm: 0x503" \
46 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]47 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]48 -C "received HelloRetryRequest message"
49
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]50requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]51requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]52requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]53requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]54requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]55requires_openssl_tls1_3
56run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]57 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]58 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]59 0 \
60 -s "Protocol is TLSv1.3" \
61 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
62 -s "received signature algorithm: 0x603" \
63 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]64 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]65 -C "received HelloRetryRequest message"
66
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]67requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]68requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]69requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]70requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
71requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]72requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]73requires_openssl_tls1_3
74run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]75 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]76 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]77 0 \
78 -s "Protocol is TLSv1.3" \
79 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
80 -s "received signature algorithm: 0x804" \
81 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]82 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]83 -C "received HelloRetryRequest message"
84
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]85requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]86requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]87requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]88requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]89requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]90requires_openssl_tls1_3
91run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]92 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]93 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]94 0 \
95 -s "Protocol is TLSv1.3" \
96 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
97 -s "received signature algorithm: 0x403" \
98 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]99 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]100 -C "received HelloRetryRequest message"
101
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]102requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]103requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]104requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]105requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]106requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]107requires_openssl_tls1_3
108run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]109 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]110 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]111 0 \
112 -s "Protocol is TLSv1.3" \
113 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
114 -s "received signature algorithm: 0x503" \
115 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]116 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]117 -C "received HelloRetryRequest message"
118
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]119requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]120requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]121requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]122requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]123requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]124requires_openssl_tls1_3
125run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]126 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]127 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]128 0 \
129 -s "Protocol is TLSv1.3" \
130 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
131 -s "received signature algorithm: 0x603" \
132 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]133 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]134 -C "received HelloRetryRequest message"
135
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]136requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]137requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]138requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]139requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
140requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]141requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]142requires_openssl_tls1_3
143run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]144 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]145 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]146 0 \
147 -s "Protocol is TLSv1.3" \
148 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
149 -s "received signature algorithm: 0x804" \
150 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]151 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]152 -C "received HelloRetryRequest message"
153
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]154requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]155requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]156requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]157requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]158requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]159requires_openssl_tls1_3
160run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]161 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]162 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]163 0 \
164 -s "Protocol is TLSv1.3" \
165 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
166 -s "received signature algorithm: 0x403" \
167 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]168 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]169 -C "received HelloRetryRequest message"
170
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]171requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]172requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]173requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]174requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]175requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]176requires_openssl_tls1_3
177run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]178 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]179 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]180 0 \
181 -s "Protocol is TLSv1.3" \
182 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
183 -s "received signature algorithm: 0x503" \
184 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]185 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]186 -C "received HelloRetryRequest message"
187
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]188requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]189requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]190requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]191requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]192requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]193requires_openssl_tls1_3
194run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]195 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]196 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]197 0 \
198 -s "Protocol is TLSv1.3" \
199 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
200 -s "received signature algorithm: 0x603" \
201 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]202 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]203 -C "received HelloRetryRequest message"
204
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]205requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]206requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]207requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]208requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
209requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]210requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]211requires_openssl_tls1_3
212run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]213 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]214 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]215 0 \
216 -s "Protocol is TLSv1.3" \
217 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
218 -s "received signature algorithm: 0x804" \
219 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]220 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]221 -C "received HelloRetryRequest message"
222
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]223requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]224requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]225requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]226requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]227requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]228requires_openssl_tls1_3
229run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]230 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]231 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]232 0 \
233 -s "Protocol is TLSv1.3" \
234 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
235 -s "received signature algorithm: 0x403" \
236 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]237 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]238 -C "received HelloRetryRequest message"
239
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]240requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]241requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]242requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]243requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]244requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]245requires_openssl_tls1_3
246run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]247 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]248 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]249 0 \
250 -s "Protocol is TLSv1.3" \
251 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
252 -s "received signature algorithm: 0x503" \
253 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]254 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]255 -C "received HelloRetryRequest message"
256
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]257requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]258requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]259requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]260requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]261requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]262requires_openssl_tls1_3
263run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]264 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]265 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]266 0 \
267 -s "Protocol is TLSv1.3" \
268 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
269 -s "received signature algorithm: 0x603" \
270 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]271 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]272 -C "received HelloRetryRequest message"
273
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]274requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]275requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]276requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]277requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
278requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]279requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]280requires_openssl_tls1_3
281run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]282 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]283 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]284 0 \
285 -s "Protocol is TLSv1.3" \
286 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
287 -s "received signature algorithm: 0x804" \
288 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]289 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]290 -C "received HelloRetryRequest message"
291
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]292requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]293requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]294requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]295requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]296requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]297requires_openssl_tls1_3
298run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]299 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]300 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]301 0 \
302 -s "Protocol is TLSv1.3" \
303 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
304 -s "received signature algorithm: 0x403" \
305 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]306 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]307 -C "received HelloRetryRequest message"
308
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]309requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]310requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]311requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]312requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]313requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]314requires_openssl_tls1_3
315run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]316 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]317 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]318 0 \
319 -s "Protocol is TLSv1.3" \
320 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
321 -s "received signature algorithm: 0x503" \
322 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]323 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]324 -C "received HelloRetryRequest message"
325
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]326requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]327requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]328requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]329requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]330requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]331requires_openssl_tls1_3
332run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]333 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]334 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]335 0 \
336 -s "Protocol is TLSv1.3" \
337 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
338 -s "received signature algorithm: 0x603" \
339 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]340 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]341 -C "received HelloRetryRequest message"
342
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]343requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]344requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]345requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]346requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
347requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]348requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]349requires_openssl_tls1_3
350run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]351 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]352 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]353 0 \
354 -s "Protocol is TLSv1.3" \
355 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
356 -s "received signature algorithm: 0x804" \
357 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]358 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]359 -C "received HelloRetryRequest message"
360
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]361requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]362requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]363requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]364requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]365requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]366requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]367requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]368run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]369 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]370 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
371 0 \
372 -s "Protocol is TLSv1.3" \
373 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
374 -s "received signature algorithm: 0x403" \
375 -s "got named group: ffdhe2048(0100)" \
376 -s "Certificate verification was skipped" \
377 -C "received HelloRetryRequest message"
378
379requires_config_enabled MBEDTLS_SSL_SRV_C
380requires_config_enabled MBEDTLS_DEBUG_C
381requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
382requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]383requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]384requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]385requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]386run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]387 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]388 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
389 0 \
390 -s "Protocol is TLSv1.3" \
391 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
392 -s "received signature algorithm: 0x503" \
393 -s "got named group: ffdhe2048(0100)" \
394 -s "Certificate verification was skipped" \
395 -C "received HelloRetryRequest message"
396
397requires_config_enabled MBEDTLS_SSL_SRV_C
398requires_config_enabled MBEDTLS_DEBUG_C
399requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
400requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]401requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]402requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]403requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]404run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]405 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]406 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
407 0 \
408 -s "Protocol is TLSv1.3" \
409 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
410 -s "received signature algorithm: 0x603" \
411 -s "got named group: ffdhe2048(0100)" \
412 -s "Certificate verification was skipped" \
413 -C "received HelloRetryRequest message"
414
415requires_config_enabled MBEDTLS_SSL_SRV_C
416requires_config_enabled MBEDTLS_DEBUG_C
417requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
418requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
419requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]420requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]421requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]422requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]423run_test "TLS 1.3 O->m: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]424 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]425 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
426 0 \
427 -s "Protocol is TLSv1.3" \
428 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
429 -s "received signature algorithm: 0x804" \
430 -s "got named group: ffdhe2048(0100)" \
431 -s "Certificate verification was skipped" \
432 -C "received HelloRetryRequest message"
433
434requires_config_enabled MBEDTLS_SSL_SRV_C
435requires_config_enabled MBEDTLS_DEBUG_C
436requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
437requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]438requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]439requires_openssl_tls1_3
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]440run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]441 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]442 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]443 0 \
444 -s "Protocol is TLSv1.3" \
445 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
446 -s "received signature algorithm: 0x403" \
447 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]448 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]449 -C "received HelloRetryRequest message"
450
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]451requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]452requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]453requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]454requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]455requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]456requires_openssl_tls1_3
457run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]458 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]459 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]460 0 \
461 -s "Protocol is TLSv1.3" \
462 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
463 -s "received signature algorithm: 0x503" \
464 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]465 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]466 -C "received HelloRetryRequest message"
467
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]468requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]469requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]470requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]471requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]472requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]473requires_openssl_tls1_3
474run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]475 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]476 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]477 0 \
478 -s "Protocol is TLSv1.3" \
479 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
480 -s "received signature algorithm: 0x603" \
481 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]482 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]483 -C "received HelloRetryRequest message"
484
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]485requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]486requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]487requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]488requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
489requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]490requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]491requires_openssl_tls1_3
492run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]493 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]494 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]495 0 \
496 -s "Protocol is TLSv1.3" \
497 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
498 -s "received signature algorithm: 0x804" \
499 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]500 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]501 -C "received HelloRetryRequest message"
502
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]503requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]504requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]505requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]506requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]507requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]508requires_openssl_tls1_3
509run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]510 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]511 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]512 0 \
513 -s "Protocol is TLSv1.3" \
514 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
515 -s "received signature algorithm: 0x403" \
516 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]517 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]518 -C "received HelloRetryRequest message"
519
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]520requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]521requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]522requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]523requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]524requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]525requires_openssl_tls1_3
526run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]527 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]528 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]529 0 \
530 -s "Protocol is TLSv1.3" \
531 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
532 -s "received signature algorithm: 0x503" \
533 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]534 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]535 -C "received HelloRetryRequest message"
536
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]537requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]538requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]539requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]540requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]541requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]542requires_openssl_tls1_3
543run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]544 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]545 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]546 0 \
547 -s "Protocol is TLSv1.3" \
548 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
549 -s "received signature algorithm: 0x603" \
550 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]551 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]552 -C "received HelloRetryRequest message"
553
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]554requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]555requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]556requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]557requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
558requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]559requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]560requires_openssl_tls1_3
561run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]562 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]563 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]564 0 \
565 -s "Protocol is TLSv1.3" \
566 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
567 -s "received signature algorithm: 0x804" \
568 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]569 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]570 -C "received HelloRetryRequest message"
571
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]572requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]573requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]574requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]575requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]576requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]577requires_openssl_tls1_3
578run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]579 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]580 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]581 0 \
582 -s "Protocol is TLSv1.3" \
583 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
584 -s "received signature algorithm: 0x403" \
585 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]586 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]587 -C "received HelloRetryRequest message"
588
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]589requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]590requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]591requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]592requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]593requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]594requires_openssl_tls1_3
595run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]596 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]597 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]598 0 \
599 -s "Protocol is TLSv1.3" \
600 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
601 -s "received signature algorithm: 0x503" \
602 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]603 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]604 -C "received HelloRetryRequest message"
605
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]606requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]607requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]608requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]609requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]610requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]611requires_openssl_tls1_3
612run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]613 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]614 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]615 0 \
616 -s "Protocol is TLSv1.3" \
617 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
618 -s "received signature algorithm: 0x603" \
619 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]620 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]621 -C "received HelloRetryRequest message"
622
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]623requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]624requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]625requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]626requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
627requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]628requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]629requires_openssl_tls1_3
630run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]631 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]632 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]633 0 \
634 -s "Protocol is TLSv1.3" \
635 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
636 -s "received signature algorithm: 0x804" \
637 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]638 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]639 -C "received HelloRetryRequest message"
640
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]641requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]642requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]643requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]644requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]645requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]646requires_openssl_tls1_3
647run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]648 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]649 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]650 0 \
651 -s "Protocol is TLSv1.3" \
652 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
653 -s "received signature algorithm: 0x403" \
654 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]655 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]656 -C "received HelloRetryRequest message"
657
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]658requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]659requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]660requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]661requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]662requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]663requires_openssl_tls1_3
664run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]665 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]666 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]667 0 \
668 -s "Protocol is TLSv1.3" \
669 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
670 -s "received signature algorithm: 0x503" \
671 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]672 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]673 -C "received HelloRetryRequest message"
674
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]675requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]676requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]677requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]678requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]679requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]680requires_openssl_tls1_3
681run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]682 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]683 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]684 0 \
685 -s "Protocol is TLSv1.3" \
686 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
687 -s "received signature algorithm: 0x603" \
688 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]689 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]690 -C "received HelloRetryRequest message"
691
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]692requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]693requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]694requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]695requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
696requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]697requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]698requires_openssl_tls1_3
699run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]700 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]701 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]702 0 \
703 -s "Protocol is TLSv1.3" \
704 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
705 -s "received signature algorithm: 0x804" \
706 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]707 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]708 -C "received HelloRetryRequest message"
709
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]710requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]711requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]712requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]713requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]714requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]715requires_openssl_tls1_3
716run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]717 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]718 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]719 0 \
720 -s "Protocol is TLSv1.3" \
721 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
722 -s "received signature algorithm: 0x403" \
723 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]724 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]725 -C "received HelloRetryRequest message"
726
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]727requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]728requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]729requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]730requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]731requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]732requires_openssl_tls1_3
733run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]734 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]735 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]736 0 \
737 -s "Protocol is TLSv1.3" \
738 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
739 -s "received signature algorithm: 0x503" \
740 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]741 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]742 -C "received HelloRetryRequest message"
743
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]744requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]745requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]746requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]747requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]748requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]749requires_openssl_tls1_3
750run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]751 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]752 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]753 0 \
754 -s "Protocol is TLSv1.3" \
755 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
756 -s "received signature algorithm: 0x603" \
757 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]758 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]759 -C "received HelloRetryRequest message"
760
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]761requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]762requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]763requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]764requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
765requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]766requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]767requires_openssl_tls1_3
768run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]769 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]770 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]771 0 \
772 -s "Protocol is TLSv1.3" \
773 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
774 -s "received signature algorithm: 0x804" \
775 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]776 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]777 -C "received HelloRetryRequest message"
778
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]779requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]780requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]781requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]782requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]783requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]784requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]785requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]786run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]787 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]788 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
789 0 \
790 -s "Protocol is TLSv1.3" \
791 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
792 -s "received signature algorithm: 0x403" \
793 -s "got named group: ffdhe2048(0100)" \
794 -s "Certificate verification was skipped" \
795 -C "received HelloRetryRequest message"
796
797requires_config_enabled MBEDTLS_SSL_SRV_C
798requires_config_enabled MBEDTLS_DEBUG_C
799requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
800requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]801requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]802requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]803requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]804run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]805 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]806 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
807 0 \
808 -s "Protocol is TLSv1.3" \
809 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
810 -s "received signature algorithm: 0x503" \
811 -s "got named group: ffdhe2048(0100)" \
812 -s "Certificate verification was skipped" \
813 -C "received HelloRetryRequest message"
814
815requires_config_enabled MBEDTLS_SSL_SRV_C
816requires_config_enabled MBEDTLS_DEBUG_C
817requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
818requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]819requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]820requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]821requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]822run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]823 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]824 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
825 0 \
826 -s "Protocol is TLSv1.3" \
827 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
828 -s "received signature algorithm: 0x603" \
829 -s "got named group: ffdhe2048(0100)" \
830 -s "Certificate verification was skipped" \
831 -C "received HelloRetryRequest message"
832
833requires_config_enabled MBEDTLS_SSL_SRV_C
834requires_config_enabled MBEDTLS_DEBUG_C
835requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
836requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
837requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]838requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]839requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]840requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]841run_test "TLS 1.3 O->m: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]842 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]843 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
844 0 \
845 -s "Protocol is TLSv1.3" \
846 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
847 -s "received signature algorithm: 0x804" \
848 -s "got named group: ffdhe2048(0100)" \
849 -s "Certificate verification was skipped" \
850 -C "received HelloRetryRequest message"
851
852requires_config_enabled MBEDTLS_SSL_SRV_C
853requires_config_enabled MBEDTLS_DEBUG_C
854requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
855requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]856requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]857requires_openssl_tls1_3
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]858run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]859 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]860 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]861 0 \
862 -s "Protocol is TLSv1.3" \
863 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
864 -s "received signature algorithm: 0x403" \
865 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]866 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]867 -C "received HelloRetryRequest message"
868
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]869requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]870requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]871requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]872requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]873requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]874requires_openssl_tls1_3
875run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]876 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]877 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]878 0 \
879 -s "Protocol is TLSv1.3" \
880 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
881 -s "received signature algorithm: 0x503" \
882 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]883 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]884 -C "received HelloRetryRequest message"
885
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]886requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]887requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]888requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]889requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]890requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]891requires_openssl_tls1_3
892run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]893 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]894 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]895 0 \
896 -s "Protocol is TLSv1.3" \
897 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
898 -s "received signature algorithm: 0x603" \
899 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]900 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]901 -C "received HelloRetryRequest message"
902
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]903requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]904requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]905requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]906requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
907requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]908requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]909requires_openssl_tls1_3
910run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]911 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]912 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]913 0 \
914 -s "Protocol is TLSv1.3" \
915 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
916 -s "received signature algorithm: 0x804" \
917 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]918 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]919 -C "received HelloRetryRequest message"
920
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]921requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]922requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]923requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]924requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]925requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]926requires_openssl_tls1_3
927run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]928 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]929 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]930 0 \
931 -s "Protocol is TLSv1.3" \
932 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
933 -s "received signature algorithm: 0x403" \
934 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]935 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]936 -C "received HelloRetryRequest message"
937
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]938requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]939requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]940requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]941requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]942requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]943requires_openssl_tls1_3
944run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]945 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]946 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]947 0 \
948 -s "Protocol is TLSv1.3" \
949 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
950 -s "received signature algorithm: 0x503" \
951 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]952 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]953 -C "received HelloRetryRequest message"
954
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]955requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]956requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]957requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]958requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]959requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]960requires_openssl_tls1_3
961run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]962 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]963 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]964 0 \
965 -s "Protocol is TLSv1.3" \
966 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
967 -s "received signature algorithm: 0x603" \
968 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]969 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]970 -C "received HelloRetryRequest message"
971
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]972requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]973requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]974requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]975requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
976requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]977requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]978requires_openssl_tls1_3
979run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]980 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]981 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]982 0 \
983 -s "Protocol is TLSv1.3" \
984 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
985 -s "received signature algorithm: 0x804" \
986 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]987 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]988 -C "received HelloRetryRequest message"
989
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]990requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]991requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]992requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]993requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]994requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]995requires_openssl_tls1_3
996run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]997 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]998 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]999 0 \
1000 -s "Protocol is TLSv1.3" \
1001 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1002 -s "received signature algorithm: 0x403" \
1003 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1004 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1005 -C "received HelloRetryRequest message"
1006
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1007requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1008requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1009requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1010requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1011requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1012requires_openssl_tls1_3
1013run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1014 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1015 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1016 0 \
1017 -s "Protocol is TLSv1.3" \
1018 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1019 -s "received signature algorithm: 0x503" \
1020 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1021 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1022 -C "received HelloRetryRequest message"
1023
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1024requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1025requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1026requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1027requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1028requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1029requires_openssl_tls1_3
1030run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1031 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1032 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1033 0 \
1034 -s "Protocol is TLSv1.3" \
1035 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1036 -s "received signature algorithm: 0x603" \
1037 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1038 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1039 -C "received HelloRetryRequest message"
1040
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1041requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1042requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1043requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1044requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1045requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1046requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1047requires_openssl_tls1_3
1048run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1049 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1050 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1051 0 \
1052 -s "Protocol is TLSv1.3" \
1053 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1054 -s "received signature algorithm: 0x804" \
1055 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1056 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1057 -C "received HelloRetryRequest message"
1058
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1059requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1060requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1061requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1062requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1063requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1064requires_openssl_tls1_3
1065run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1066 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1067 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1068 0 \
1069 -s "Protocol is TLSv1.3" \
1070 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1071 -s "received signature algorithm: 0x403" \
1072 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1073 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1074 -C "received HelloRetryRequest message"
1075
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1076requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1077requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1078requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1079requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1080requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1081requires_openssl_tls1_3
1082run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1083 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1084 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1085 0 \
1086 -s "Protocol is TLSv1.3" \
1087 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1088 -s "received signature algorithm: 0x503" \
1089 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1090 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1091 -C "received HelloRetryRequest message"
1092
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1093requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1094requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1095requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1096requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1097requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1098requires_openssl_tls1_3
1099run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1100 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1101 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1102 0 \
1103 -s "Protocol is TLSv1.3" \
1104 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1105 -s "received signature algorithm: 0x603" \
1106 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1107 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1108 -C "received HelloRetryRequest message"
1109
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1110requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1111requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1112requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1113requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1114requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1115requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1116requires_openssl_tls1_3
1117run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1118 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1119 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1120 0 \
1121 -s "Protocol is TLSv1.3" \
1122 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1123 -s "received signature algorithm: 0x804" \
1124 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1125 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1126 -C "received HelloRetryRequest message"
1127
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1128requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1129requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1130requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1131requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1132requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1133requires_openssl_tls1_3
1134run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1135 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1136 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1137 0 \
1138 -s "Protocol is TLSv1.3" \
1139 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1140 -s "received signature algorithm: 0x403" \
1141 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1142 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1143 -C "received HelloRetryRequest message"
1144
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1145requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1146requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1147requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1148requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1149requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1150requires_openssl_tls1_3
1151run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1152 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1153 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1154 0 \
1155 -s "Protocol is TLSv1.3" \
1156 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1157 -s "received signature algorithm: 0x503" \
1158 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1159 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1160 -C "received HelloRetryRequest message"
1161
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1162requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1163requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1164requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1165requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1166requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1167requires_openssl_tls1_3
1168run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1169 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1170 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1171 0 \
1172 -s "Protocol is TLSv1.3" \
1173 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1174 -s "received signature algorithm: 0x603" \
1175 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1176 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1177 -C "received HelloRetryRequest message"
1178
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1179requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1180requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1181requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1182requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1183requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1184requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1185requires_openssl_tls1_3
1186run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1187 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1188 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1189 0 \
1190 -s "Protocol is TLSv1.3" \
1191 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1192 -s "received signature algorithm: 0x804" \
1193 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1194 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1195 -C "received HelloRetryRequest message"
1196
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1197requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1198requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1199requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1200requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1201requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]1202requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]1203requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1204run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1205 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1206 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
1207 0 \
1208 -s "Protocol is TLSv1.3" \
1209 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1210 -s "received signature algorithm: 0x403" \
1211 -s "got named group: ffdhe2048(0100)" \
1212 -s "Certificate verification was skipped" \
1213 -C "received HelloRetryRequest message"
1214
1215requires_config_enabled MBEDTLS_SSL_SRV_C
1216requires_config_enabled MBEDTLS_DEBUG_C
1217requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1218requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1219requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]1220requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]1221requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1222run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1223 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1224 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
1225 0 \
1226 -s "Protocol is TLSv1.3" \
1227 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1228 -s "received signature algorithm: 0x503" \
1229 -s "got named group: ffdhe2048(0100)" \
1230 -s "Certificate verification was skipped" \
1231 -C "received HelloRetryRequest message"
1232
1233requires_config_enabled MBEDTLS_SSL_SRV_C
1234requires_config_enabled MBEDTLS_DEBUG_C
1235requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1236requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1237requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]1238requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]1239requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1240run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1241 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1242 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
1243 0 \
1244 -s "Protocol is TLSv1.3" \
1245 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1246 -s "received signature algorithm: 0x603" \
1247 -s "got named group: ffdhe2048(0100)" \
1248 -s "Certificate verification was skipped" \
1249 -C "received HelloRetryRequest message"
1250
1251requires_config_enabled MBEDTLS_SSL_SRV_C
1252requires_config_enabled MBEDTLS_DEBUG_C
1253requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1254requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1255requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1256requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]1257requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]1258requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1259run_test "TLS 1.3 O->m: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1260 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1261 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
1262 0 \
1263 -s "Protocol is TLSv1.3" \
1264 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
1265 -s "received signature algorithm: 0x804" \
1266 -s "got named group: ffdhe2048(0100)" \
1267 -s "Certificate verification was skipped" \
1268 -C "received HelloRetryRequest message"
1269
1270requires_config_enabled MBEDTLS_SSL_SRV_C
1271requires_config_enabled MBEDTLS_DEBUG_C
1272requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1273requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1274requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1275requires_openssl_tls1_3
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1276run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1277 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1278 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1279 0 \
1280 -s "Protocol is TLSv1.3" \
1281 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1282 -s "received signature algorithm: 0x403" \
1283 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1284 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1285 -C "received HelloRetryRequest message"
1286
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1287requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1288requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1289requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1290requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1291requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1292requires_openssl_tls1_3
1293run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1294 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1295 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1296 0 \
1297 -s "Protocol is TLSv1.3" \
1298 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1299 -s "received signature algorithm: 0x503" \
1300 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1301 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1302 -C "received HelloRetryRequest message"
1303
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1304requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1305requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1306requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1307requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1308requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1309requires_openssl_tls1_3
1310run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1311 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1312 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1313 0 \
1314 -s "Protocol is TLSv1.3" \
1315 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1316 -s "received signature algorithm: 0x603" \
1317 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1318 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1319 -C "received HelloRetryRequest message"
1320
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1321requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1322requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1323requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1324requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1325requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1326requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1327requires_openssl_tls1_3
1328run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1329 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1330 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1331 0 \
1332 -s "Protocol is TLSv1.3" \
1333 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1334 -s "received signature algorithm: 0x804" \
1335 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1336 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1337 -C "received HelloRetryRequest message"
1338
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1339requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1340requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1341requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1342requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1343requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1344requires_openssl_tls1_3
1345run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1346 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1347 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1348 0 \
1349 -s "Protocol is TLSv1.3" \
1350 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1351 -s "received signature algorithm: 0x403" \
1352 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1353 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1354 -C "received HelloRetryRequest message"
1355
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1356requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1357requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1358requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1359requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1360requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1361requires_openssl_tls1_3
1362run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1363 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1364 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1365 0 \
1366 -s "Protocol is TLSv1.3" \
1367 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1368 -s "received signature algorithm: 0x503" \
1369 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1370 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1371 -C "received HelloRetryRequest message"
1372
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1373requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1374requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1375requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1376requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1377requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1378requires_openssl_tls1_3
1379run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1380 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1381 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1382 0 \
1383 -s "Protocol is TLSv1.3" \
1384 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1385 -s "received signature algorithm: 0x603" \
1386 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1387 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1388 -C "received HelloRetryRequest message"
1389
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1390requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1391requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1392requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1393requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1394requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1395requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1396requires_openssl_tls1_3
1397run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1398 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1399 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1400 0 \
1401 -s "Protocol is TLSv1.3" \
1402 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1403 -s "received signature algorithm: 0x804" \
1404 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1405 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1406 -C "received HelloRetryRequest message"
1407
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1408requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1409requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1410requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1411requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1412requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1413requires_openssl_tls1_3
1414run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1415 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1416 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1417 0 \
1418 -s "Protocol is TLSv1.3" \
1419 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1420 -s "received signature algorithm: 0x403" \
1421 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1422 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1423 -C "received HelloRetryRequest message"
1424
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1425requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1426requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1427requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1428requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1429requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1430requires_openssl_tls1_3
1431run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1432 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1433 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1434 0 \
1435 -s "Protocol is TLSv1.3" \
1436 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1437 -s "received signature algorithm: 0x503" \
1438 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1439 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1440 -C "received HelloRetryRequest message"
1441
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1442requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1443requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1444requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1445requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1446requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1447requires_openssl_tls1_3
1448run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1449 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1450 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1451 0 \
1452 -s "Protocol is TLSv1.3" \
1453 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1454 -s "received signature algorithm: 0x603" \
1455 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1456 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1457 -C "received HelloRetryRequest message"
1458
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1459requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1460requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1461requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1462requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1463requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1464requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1465requires_openssl_tls1_3
1466run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1467 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1468 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1469 0 \
1470 -s "Protocol is TLSv1.3" \
1471 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1472 -s "received signature algorithm: 0x804" \
1473 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1474 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1475 -C "received HelloRetryRequest message"
1476
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1477requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1478requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1479requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1480requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1481requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1482requires_openssl_tls1_3
1483run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1484 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1485 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1486 0 \
1487 -s "Protocol is TLSv1.3" \
1488 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1489 -s "received signature algorithm: 0x403" \
1490 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1491 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1492 -C "received HelloRetryRequest message"
1493
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1494requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1495requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1496requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1497requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1498requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1499requires_openssl_tls1_3
1500run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1501 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1502 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1503 0 \
1504 -s "Protocol is TLSv1.3" \
1505 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1506 -s "received signature algorithm: 0x503" \
1507 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1508 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1509 -C "received HelloRetryRequest message"
1510
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1511requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1512requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1513requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1514requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1515requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1516requires_openssl_tls1_3
1517run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1518 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1519 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1520 0 \
1521 -s "Protocol is TLSv1.3" \
1522 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1523 -s "received signature algorithm: 0x603" \
1524 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1525 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1526 -C "received HelloRetryRequest message"
1527
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1528requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1529requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1530requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1531requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1532requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1533requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1534requires_openssl_tls1_3
1535run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1536 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1537 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1538 0 \
1539 -s "Protocol is TLSv1.3" \
1540 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1541 -s "received signature algorithm: 0x804" \
1542 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1543 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1544 -C "received HelloRetryRequest message"
1545
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1546requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1547requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1548requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1549requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1550requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1551requires_openssl_tls1_3
1552run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1553 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1554 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1555 0 \
1556 -s "Protocol is TLSv1.3" \
1557 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1558 -s "received signature algorithm: 0x403" \
1559 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1560 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1561 -C "received HelloRetryRequest message"
1562
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1563requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1564requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1565requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1566requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1567requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1568requires_openssl_tls1_3
1569run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1570 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1571 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1572 0 \
1573 -s "Protocol is TLSv1.3" \
1574 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1575 -s "received signature algorithm: 0x503" \
1576 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1577 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1578 -C "received HelloRetryRequest message"
1579
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1580requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1581requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1582requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1583requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1584requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1585requires_openssl_tls1_3
1586run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1587 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1588 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1589 0 \
1590 -s "Protocol is TLSv1.3" \
1591 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1592 -s "received signature algorithm: 0x603" \
1593 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1594 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1595 -C "received HelloRetryRequest message"
1596
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1597requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1598requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1599requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1600requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1601requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1602requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1603requires_openssl_tls1_3
1604run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1605 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1606 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1607 0 \
1608 -s "Protocol is TLSv1.3" \
1609 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1610 -s "received signature algorithm: 0x804" \
1611 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1612 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1613 -C "received HelloRetryRequest message"
1614
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1615requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1616requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1617requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1618requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1619requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]1620requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]1621requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1622run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1623 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1624 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
1625 0 \
1626 -s "Protocol is TLSv1.3" \
1627 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1628 -s "received signature algorithm: 0x403" \
1629 -s "got named group: ffdhe2048(0100)" \
1630 -s "Certificate verification was skipped" \
1631 -C "received HelloRetryRequest message"
1632
1633requires_config_enabled MBEDTLS_SSL_SRV_C
1634requires_config_enabled MBEDTLS_DEBUG_C
1635requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1636requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1637requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]1638requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]1639requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1640run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1641 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1642 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
1643 0 \
1644 -s "Protocol is TLSv1.3" \
1645 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1646 -s "received signature algorithm: 0x503" \
1647 -s "got named group: ffdhe2048(0100)" \
1648 -s "Certificate verification was skipped" \
1649 -C "received HelloRetryRequest message"
1650
1651requires_config_enabled MBEDTLS_SSL_SRV_C
1652requires_config_enabled MBEDTLS_DEBUG_C
1653requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1654requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1655requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]1656requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]1657requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1658run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1659 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1660 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
1661 0 \
1662 -s "Protocol is TLSv1.3" \
1663 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1664 -s "received signature algorithm: 0x603" \
1665 -s "got named group: ffdhe2048(0100)" \
1666 -s "Certificate verification was skipped" \
1667 -C "received HelloRetryRequest message"
1668
1669requires_config_enabled MBEDTLS_SSL_SRV_C
1670requires_config_enabled MBEDTLS_DEBUG_C
1671requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1672requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1673requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1674requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]1675requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]1676requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1677run_test "TLS 1.3 O->m: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1678 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1679 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
1680 0 \
1681 -s "Protocol is TLSv1.3" \
1682 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
1683 -s "received signature algorithm: 0x804" \
1684 -s "got named group: ffdhe2048(0100)" \
1685 -s "Certificate verification was skipped" \
1686 -C "received HelloRetryRequest message"
1687
1688requires_config_enabled MBEDTLS_SSL_SRV_C
1689requires_config_enabled MBEDTLS_DEBUG_C
1690requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
1691requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1692requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]1693requires_openssl_tls1_3
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1694run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1695 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1696 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1697 0 \
1698 -s "Protocol is TLSv1.3" \
1699 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1700 -s "received signature algorithm: 0x403" \
1701 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1702 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1703 -C "received HelloRetryRequest message"
1704
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1705requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1706requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1707requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1708requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1709requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1710requires_openssl_tls1_3
1711run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1712 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1713 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1714 0 \
1715 -s "Protocol is TLSv1.3" \
1716 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1717 -s "received signature algorithm: 0x503" \
1718 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1719 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1720 -C "received HelloRetryRequest message"
1721
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1722requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1723requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1724requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1725requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1726requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1727requires_openssl_tls1_3
1728run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1729 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1730 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1731 0 \
1732 -s "Protocol is TLSv1.3" \
1733 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1734 -s "received signature algorithm: 0x603" \
1735 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1736 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1737 -C "received HelloRetryRequest message"
1738
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1739requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1740requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1741requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1742requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1743requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1744requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1745requires_openssl_tls1_3
1746run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1747 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1748 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1749 0 \
1750 -s "Protocol is TLSv1.3" \
1751 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1752 -s "received signature algorithm: 0x804" \
1753 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1754 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1755 -C "received HelloRetryRequest message"
1756
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1757requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1758requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1759requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1760requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1761requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1762requires_openssl_tls1_3
1763run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1764 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1765 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1766 0 \
1767 -s "Protocol is TLSv1.3" \
1768 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1769 -s "received signature algorithm: 0x403" \
1770 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1771 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1772 -C "received HelloRetryRequest message"
1773
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1774requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1775requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1776requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1777requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1778requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1779requires_openssl_tls1_3
1780run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1781 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1782 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1783 0 \
1784 -s "Protocol is TLSv1.3" \
1785 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1786 -s "received signature algorithm: 0x503" \
1787 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1788 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1789 -C "received HelloRetryRequest message"
1790
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1791requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1792requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1793requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1794requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1795requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1796requires_openssl_tls1_3
1797run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1798 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1799 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1800 0 \
1801 -s "Protocol is TLSv1.3" \
1802 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1803 -s "received signature algorithm: 0x603" \
1804 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1805 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1806 -C "received HelloRetryRequest message"
1807
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1808requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1809requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1810requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1811requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1812requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1813requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1814requires_openssl_tls1_3
1815run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1816 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1817 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1818 0 \
1819 -s "Protocol is TLSv1.3" \
1820 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1821 -s "received signature algorithm: 0x804" \
1822 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1823 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1824 -C "received HelloRetryRequest message"
1825
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1826requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1827requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1828requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1829requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1830requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1831requires_openssl_tls1_3
1832run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1833 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1834 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1835 0 \
1836 -s "Protocol is TLSv1.3" \
1837 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1838 -s "received signature algorithm: 0x403" \
1839 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1840 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1841 -C "received HelloRetryRequest message"
1842
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1843requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1844requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1845requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1846requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1847requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1848requires_openssl_tls1_3
1849run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1850 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1851 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1852 0 \
1853 -s "Protocol is TLSv1.3" \
1854 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1855 -s "received signature algorithm: 0x503" \
1856 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1857 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1858 -C "received HelloRetryRequest message"
1859
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1860requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1861requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1862requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1863requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1864requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1865requires_openssl_tls1_3
1866run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1867 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1868 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1869 0 \
1870 -s "Protocol is TLSv1.3" \
1871 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1872 -s "received signature algorithm: 0x603" \
1873 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1874 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1875 -C "received HelloRetryRequest message"
1876
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1877requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1878requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1879requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1880requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1881requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1882requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1883requires_openssl_tls1_3
1884run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1885 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1886 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1887 0 \
1888 -s "Protocol is TLSv1.3" \
1889 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1890 -s "received signature algorithm: 0x804" \
1891 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1892 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1893 -C "received HelloRetryRequest message"
1894
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1895requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1896requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1897requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1898requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1899requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1900requires_openssl_tls1_3
1901run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1902 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1903 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1904 0 \
1905 -s "Protocol is TLSv1.3" \
1906 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1907 -s "received signature algorithm: 0x403" \
1908 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1909 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1910 -C "received HelloRetryRequest message"
1911
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1912requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1913requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1914requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1915requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1916requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1917requires_openssl_tls1_3
1918run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1919 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1920 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1921 0 \
1922 -s "Protocol is TLSv1.3" \
1923 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1924 -s "received signature algorithm: 0x503" \
1925 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1926 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1927 -C "received HelloRetryRequest message"
1928
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1929requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1930requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1931requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1932requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1933requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1934requires_openssl_tls1_3
1935run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1936 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1937 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1938 0 \
1939 -s "Protocol is TLSv1.3" \
1940 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1941 -s "received signature algorithm: 0x603" \
1942 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1943 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1944 -C "received HelloRetryRequest message"
1945
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1946requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1947requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1948requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1949requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
1950requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1951requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1952requires_openssl_tls1_3
1953run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1954 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1955 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1956 0 \
1957 -s "Protocol is TLSv1.3" \
1958 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1959 -s "received signature algorithm: 0x804" \
1960 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1961 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1962 -C "received HelloRetryRequest message"
1963
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1964requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1965requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1966requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1967requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1968requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1969requires_openssl_tls1_3
1970run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1971 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1972 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1973 0 \
1974 -s "Protocol is TLSv1.3" \
1975 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1976 -s "received signature algorithm: 0x403" \
1977 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1978 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1979 -C "received HelloRetryRequest message"
1980
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1981requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1982requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]1983requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1984requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]1985requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1986requires_openssl_tls1_3
1987run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]1988 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]1989 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1990 0 \
1991 -s "Protocol is TLSv1.3" \
1992 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
1993 -s "received signature algorithm: 0x503" \
1994 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]1995 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]1996 -C "received HelloRetryRequest message"
1997
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]1998requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]1999requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2000requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2001requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2002requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2003requires_openssl_tls1_3
2004run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2005 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2006 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2007 0 \
2008 -s "Protocol is TLSv1.3" \
2009 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
2010 -s "received signature algorithm: 0x603" \
2011 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2012 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2013 -C "received HelloRetryRequest message"
2014
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2015requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2016requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2017requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2018requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2019requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2020requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2021requires_openssl_tls1_3
2022run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2023 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2024 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2025 0 \
2026 -s "Protocol is TLSv1.3" \
2027 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
2028 -s "received signature algorithm: 0x804" \
2029 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2030 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2031 -C "received HelloRetryRequest message"
2032
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2033requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2034requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2035requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2036requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2037requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2038requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]2039requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2040run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2041 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2042 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3" \
2043 0 \
2044 -s "Protocol is TLSv1.3" \
2045 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
2046 -s "received signature algorithm: 0x403" \
2047 -s "got named group: ffdhe2048(0100)" \
2048 -s "Certificate verification was skipped" \
2049 -C "received HelloRetryRequest message"
2050
2051requires_config_enabled MBEDTLS_SSL_SRV_C
2052requires_config_enabled MBEDTLS_DEBUG_C
2053requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2054requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2055requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2056requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]2057requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2058run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2059 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2060 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3" \
2061 0 \
2062 -s "Protocol is TLSv1.3" \
2063 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
2064 -s "received signature algorithm: 0x503" \
2065 -s "got named group: ffdhe2048(0100)" \
2066 -s "Certificate verification was skipped" \
2067 -C "received HelloRetryRequest message"
2068
2069requires_config_enabled MBEDTLS_SSL_SRV_C
2070requires_config_enabled MBEDTLS_DEBUG_C
2071requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2072requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2073requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2074requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]2075requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2076run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2077 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2078 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3" \
2079 0 \
2080 -s "Protocol is TLSv1.3" \
2081 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
2082 -s "received signature algorithm: 0x603" \
2083 -s "got named group: ffdhe2048(0100)" \
2084 -s "Certificate verification was skipped" \
2085 -C "received HelloRetryRequest message"
2086
2087requires_config_enabled MBEDTLS_SSL_SRV_C
2088requires_config_enabled MBEDTLS_DEBUG_C
2089requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2090requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2091requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2092requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2093requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]2094requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2095run_test "TLS 1.3 O->m: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2096 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2097 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca_cat12.crt -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3" \
2098 0 \
2099 -s "Protocol is TLSv1.3" \
2100 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
2101 -s "received signature algorithm: 0x804" \
2102 -s "got named group: ffdhe2048(0100)" \
2103 -s "Certificate verification was skipped" \
2104 -C "received HelloRetryRequest message"
2105
2106requires_config_enabled MBEDTLS_SSL_SRV_C
2107requires_config_enabled MBEDTLS_DEBUG_C
2108requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2109requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2110requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2111requires_gnutls_tls1_3
2112requires_gnutls_next_no_ticket
2113requires_gnutls_next_disable_tls13_compat
2114run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2115 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2116 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2117 0 \
2118 -s "Protocol is TLSv1.3" \
2119 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2120 -s "received signature algorithm: 0x403" \
2121 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2122 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2123 -C "received HelloRetryRequest message"
2124
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2125requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2126requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2127requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2128requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2129requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2130requires_gnutls_tls1_3
2131requires_gnutls_next_no_ticket
2132requires_gnutls_next_disable_tls13_compat
2133run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2134 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2135 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2136 0 \
2137 -s "Protocol is TLSv1.3" \
2138 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2139 -s "received signature algorithm: 0x503" \
2140 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2141 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2142 -C "received HelloRetryRequest message"
2143
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2144requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2145requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2146requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2147requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2148requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2149requires_gnutls_tls1_3
2150requires_gnutls_next_no_ticket
2151requires_gnutls_next_disable_tls13_compat
2152run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2153 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2154 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2155 0 \
2156 -s "Protocol is TLSv1.3" \
2157 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2158 -s "received signature algorithm: 0x603" \
2159 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2160 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2161 -C "received HelloRetryRequest message"
2162
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2163requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2164requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2165requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2166requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2167requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2168requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2169requires_gnutls_tls1_3
2170requires_gnutls_next_no_ticket
2171requires_gnutls_next_disable_tls13_compat
2172run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2173 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2174 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2175 0 \
2176 -s "Protocol is TLSv1.3" \
2177 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2178 -s "received signature algorithm: 0x804" \
2179 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2180 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2181 -C "received HelloRetryRequest message"
2182
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2183requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2184requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2185requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2186requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2187requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2188requires_gnutls_tls1_3
2189requires_gnutls_next_no_ticket
2190requires_gnutls_next_disable_tls13_compat
2191run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2192 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2193 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2194 0 \
2195 -s "Protocol is TLSv1.3" \
2196 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2197 -s "received signature algorithm: 0x403" \
2198 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2199 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2200 -C "received HelloRetryRequest message"
2201
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2202requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2203requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2204requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2205requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2206requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2207requires_gnutls_tls1_3
2208requires_gnutls_next_no_ticket
2209requires_gnutls_next_disable_tls13_compat
2210run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2211 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2212 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2213 0 \
2214 -s "Protocol is TLSv1.3" \
2215 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2216 -s "received signature algorithm: 0x503" \
2217 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2218 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2219 -C "received HelloRetryRequest message"
2220
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2221requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2222requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2223requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2224requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2225requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2226requires_gnutls_tls1_3
2227requires_gnutls_next_no_ticket
2228requires_gnutls_next_disable_tls13_compat
2229run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2230 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2231 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2232 0 \
2233 -s "Protocol is TLSv1.3" \
2234 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2235 -s "received signature algorithm: 0x603" \
2236 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2237 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2238 -C "received HelloRetryRequest message"
2239
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2240requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2241requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2242requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2243requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2244requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2245requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2246requires_gnutls_tls1_3
2247requires_gnutls_next_no_ticket
2248requires_gnutls_next_disable_tls13_compat
2249run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2250 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2251 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2252 0 \
2253 -s "Protocol is TLSv1.3" \
2254 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2255 -s "received signature algorithm: 0x804" \
2256 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2257 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2258 -C "received HelloRetryRequest message"
2259
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2260requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2261requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2262requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2263requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2264requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2265requires_gnutls_tls1_3
2266requires_gnutls_next_no_ticket
2267requires_gnutls_next_disable_tls13_compat
2268run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2269 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2270 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2271 0 \
2272 -s "Protocol is TLSv1.3" \
2273 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2274 -s "received signature algorithm: 0x403" \
2275 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2276 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2277 -C "received HelloRetryRequest message"
2278
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2279requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2280requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2281requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2282requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2283requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2284requires_gnutls_tls1_3
2285requires_gnutls_next_no_ticket
2286requires_gnutls_next_disable_tls13_compat
2287run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2288 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2289 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2290 0 \
2291 -s "Protocol is TLSv1.3" \
2292 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2293 -s "received signature algorithm: 0x503" \
2294 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2295 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2296 -C "received HelloRetryRequest message"
2297
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2298requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2299requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2300requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2301requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2302requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2303requires_gnutls_tls1_3
2304requires_gnutls_next_no_ticket
2305requires_gnutls_next_disable_tls13_compat
2306run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2307 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2308 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2309 0 \
2310 -s "Protocol is TLSv1.3" \
2311 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2312 -s "received signature algorithm: 0x603" \
2313 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2314 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2315 -C "received HelloRetryRequest message"
2316
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2317requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2318requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2319requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2320requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2321requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2322requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2323requires_gnutls_tls1_3
2324requires_gnutls_next_no_ticket
2325requires_gnutls_next_disable_tls13_compat
2326run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2327 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2328 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2329 0 \
2330 -s "Protocol is TLSv1.3" \
2331 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2332 -s "received signature algorithm: 0x804" \
2333 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2334 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2335 -C "received HelloRetryRequest message"
2336
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2337requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2338requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2339requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2340requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2341requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2342requires_gnutls_tls1_3
2343requires_gnutls_next_no_ticket
2344requires_gnutls_next_disable_tls13_compat
2345run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2346 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2347 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2348 0 \
2349 -s "Protocol is TLSv1.3" \
2350 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2351 -s "received signature algorithm: 0x403" \
2352 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2353 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2354 -C "received HelloRetryRequest message"
2355
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2356requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2357requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2358requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2359requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2360requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2361requires_gnutls_tls1_3
2362requires_gnutls_next_no_ticket
2363requires_gnutls_next_disable_tls13_compat
2364run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2365 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2366 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2367 0 \
2368 -s "Protocol is TLSv1.3" \
2369 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2370 -s "received signature algorithm: 0x503" \
2371 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2372 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2373 -C "received HelloRetryRequest message"
2374
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2375requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2376requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2377requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2378requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2379requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2380requires_gnutls_tls1_3
2381requires_gnutls_next_no_ticket
2382requires_gnutls_next_disable_tls13_compat
2383run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2384 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2385 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2386 0 \
2387 -s "Protocol is TLSv1.3" \
2388 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2389 -s "received signature algorithm: 0x603" \
2390 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2391 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2392 -C "received HelloRetryRequest message"
2393
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2394requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2395requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2396requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2397requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2398requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2399requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2400requires_gnutls_tls1_3
2401requires_gnutls_next_no_ticket
2402requires_gnutls_next_disable_tls13_compat
2403run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2404 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2405 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2406 0 \
2407 -s "Protocol is TLSv1.3" \
2408 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2409 -s "received signature algorithm: 0x804" \
2410 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2411 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2412 -C "received HelloRetryRequest message"
2413
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2414requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2415requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2416requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2417requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2418requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2419requires_gnutls_tls1_3
2420requires_gnutls_next_no_ticket
2421requires_gnutls_next_disable_tls13_compat
2422run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2423 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2424 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2425 0 \
2426 -s "Protocol is TLSv1.3" \
2427 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2428 -s "received signature algorithm: 0x403" \
2429 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2430 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2431 -C "received HelloRetryRequest message"
2432
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2433requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2434requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2435requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2436requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2437requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2438requires_gnutls_tls1_3
2439requires_gnutls_next_no_ticket
2440requires_gnutls_next_disable_tls13_compat
2441run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2442 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2443 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2444 0 \
2445 -s "Protocol is TLSv1.3" \
2446 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2447 -s "received signature algorithm: 0x503" \
2448 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2449 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2450 -C "received HelloRetryRequest message"
2451
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2452requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2453requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2454requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2455requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2456requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2457requires_gnutls_tls1_3
2458requires_gnutls_next_no_ticket
2459requires_gnutls_next_disable_tls13_compat
2460run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2461 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2462 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2463 0 \
2464 -s "Protocol is TLSv1.3" \
2465 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2466 -s "received signature algorithm: 0x603" \
2467 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2468 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2469 -C "received HelloRetryRequest message"
2470
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2471requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2472requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2473requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2474requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2475requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2476requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2477requires_gnutls_tls1_3
2478requires_gnutls_next_no_ticket
2479requires_gnutls_next_disable_tls13_compat
2480run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2481 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2482 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2483 0 \
2484 -s "Protocol is TLSv1.3" \
2485 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2486 -s "received signature algorithm: 0x804" \
2487 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2488 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2489 -C "received HelloRetryRequest message"
2490
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2491requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2492requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2493requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2494requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2495requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2496requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2497requires_gnutls_tls1_3
2498requires_gnutls_next_no_ticket
2499requires_gnutls_next_disable_tls13_compat
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2500run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2501 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2502 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
2503 0 \
2504 -s "Protocol is TLSv1.3" \
2505 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2506 -s "received signature algorithm: 0x403" \
2507 -s "got named group: ffdhe2048(0100)" \
2508 -s "Certificate verification was skipped" \
2509 -C "received HelloRetryRequest message"
2510
2511requires_config_enabled MBEDTLS_SSL_SRV_C
2512requires_config_enabled MBEDTLS_DEBUG_C
2513requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2514requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2515requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2516requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2517requires_gnutls_tls1_3
2518requires_gnutls_next_no_ticket
2519requires_gnutls_next_disable_tls13_compat
2520run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2521 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2522 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
2523 0 \
2524 -s "Protocol is TLSv1.3" \
2525 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2526 -s "received signature algorithm: 0x503" \
2527 -s "got named group: ffdhe2048(0100)" \
2528 -s "Certificate verification was skipped" \
2529 -C "received HelloRetryRequest message"
2530
2531requires_config_enabled MBEDTLS_SSL_SRV_C
2532requires_config_enabled MBEDTLS_DEBUG_C
2533requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2534requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2535requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2536requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2537requires_gnutls_tls1_3
2538requires_gnutls_next_no_ticket
2539requires_gnutls_next_disable_tls13_compat
2540run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2541 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2542 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
2543 0 \
2544 -s "Protocol is TLSv1.3" \
2545 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2546 -s "received signature algorithm: 0x603" \
2547 -s "got named group: ffdhe2048(0100)" \
2548 -s "Certificate verification was skipped" \
2549 -C "received HelloRetryRequest message"
2550
2551requires_config_enabled MBEDTLS_SSL_SRV_C
2552requires_config_enabled MBEDTLS_DEBUG_C
2553requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2554requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2555requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2556requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2557requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2558requires_gnutls_tls1_3
2559requires_gnutls_next_no_ticket
2560requires_gnutls_next_disable_tls13_compat
2561run_test "TLS 1.3 G->m: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2562 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2563 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
2564 0 \
2565 -s "Protocol is TLSv1.3" \
2566 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
2567 -s "received signature algorithm: 0x804" \
2568 -s "got named group: ffdhe2048(0100)" \
2569 -s "Certificate verification was skipped" \
2570 -C "received HelloRetryRequest message"
2571
2572requires_config_enabled MBEDTLS_SSL_SRV_C
2573requires_config_enabled MBEDTLS_DEBUG_C
2574requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2575requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2576requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2577requires_gnutls_tls1_3
2578requires_gnutls_next_no_ticket
2579requires_gnutls_next_disable_tls13_compat
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2580run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2581 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2582 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2583 0 \
2584 -s "Protocol is TLSv1.3" \
2585 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2586 -s "received signature algorithm: 0x403" \
2587 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2588 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2589 -C "received HelloRetryRequest message"
2590
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2591requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2592requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2593requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2594requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2595requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2596requires_gnutls_tls1_3
2597requires_gnutls_next_no_ticket
2598requires_gnutls_next_disable_tls13_compat
2599run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2600 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2601 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2602 0 \
2603 -s "Protocol is TLSv1.3" \
2604 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2605 -s "received signature algorithm: 0x503" \
2606 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2607 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2608 -C "received HelloRetryRequest message"
2609
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2610requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2611requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2612requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2613requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2614requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2615requires_gnutls_tls1_3
2616requires_gnutls_next_no_ticket
2617requires_gnutls_next_disable_tls13_compat
2618run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2619 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2620 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2621 0 \
2622 -s "Protocol is TLSv1.3" \
2623 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2624 -s "received signature algorithm: 0x603" \
2625 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2626 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2627 -C "received HelloRetryRequest message"
2628
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2629requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2630requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2631requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2632requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2633requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2634requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2635requires_gnutls_tls1_3
2636requires_gnutls_next_no_ticket
2637requires_gnutls_next_disable_tls13_compat
2638run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2639 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2640 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2641 0 \
2642 -s "Protocol is TLSv1.3" \
2643 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2644 -s "received signature algorithm: 0x804" \
2645 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2646 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2647 -C "received HelloRetryRequest message"
2648
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2649requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2650requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2651requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2652requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2653requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2654requires_gnutls_tls1_3
2655requires_gnutls_next_no_ticket
2656requires_gnutls_next_disable_tls13_compat
2657run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2658 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2659 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2660 0 \
2661 -s "Protocol is TLSv1.3" \
2662 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2663 -s "received signature algorithm: 0x403" \
2664 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2665 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2666 -C "received HelloRetryRequest message"
2667
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2668requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2669requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2670requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2671requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2672requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2673requires_gnutls_tls1_3
2674requires_gnutls_next_no_ticket
2675requires_gnutls_next_disable_tls13_compat
2676run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2677 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2678 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2679 0 \
2680 -s "Protocol is TLSv1.3" \
2681 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2682 -s "received signature algorithm: 0x503" \
2683 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2684 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2685 -C "received HelloRetryRequest message"
2686
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2687requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2688requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2689requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2690requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2691requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2692requires_gnutls_tls1_3
2693requires_gnutls_next_no_ticket
2694requires_gnutls_next_disable_tls13_compat
2695run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2696 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2697 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2698 0 \
2699 -s "Protocol is TLSv1.3" \
2700 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2701 -s "received signature algorithm: 0x603" \
2702 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2703 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2704 -C "received HelloRetryRequest message"
2705
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2706requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2707requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2708requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2709requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2710requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2711requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2712requires_gnutls_tls1_3
2713requires_gnutls_next_no_ticket
2714requires_gnutls_next_disable_tls13_compat
2715run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2716 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2717 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2718 0 \
2719 -s "Protocol is TLSv1.3" \
2720 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2721 -s "received signature algorithm: 0x804" \
2722 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2723 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2724 -C "received HelloRetryRequest message"
2725
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2726requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2727requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2728requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2729requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2730requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2731requires_gnutls_tls1_3
2732requires_gnutls_next_no_ticket
2733requires_gnutls_next_disable_tls13_compat
2734run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2735 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2736 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2737 0 \
2738 -s "Protocol is TLSv1.3" \
2739 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2740 -s "received signature algorithm: 0x403" \
2741 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2742 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2743 -C "received HelloRetryRequest message"
2744
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2745requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2746requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2747requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2748requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2749requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2750requires_gnutls_tls1_3
2751requires_gnutls_next_no_ticket
2752requires_gnutls_next_disable_tls13_compat
2753run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2754 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2755 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2756 0 \
2757 -s "Protocol is TLSv1.3" \
2758 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2759 -s "received signature algorithm: 0x503" \
2760 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2761 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2762 -C "received HelloRetryRequest message"
2763
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2764requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2765requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2766requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2767requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2768requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2769requires_gnutls_tls1_3
2770requires_gnutls_next_no_ticket
2771requires_gnutls_next_disable_tls13_compat
2772run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2773 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2774 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2775 0 \
2776 -s "Protocol is TLSv1.3" \
2777 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2778 -s "received signature algorithm: 0x603" \
2779 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2780 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2781 -C "received HelloRetryRequest message"
2782
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2783requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2784requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2785requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2786requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2787requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2788requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2789requires_gnutls_tls1_3
2790requires_gnutls_next_no_ticket
2791requires_gnutls_next_disable_tls13_compat
2792run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2793 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2794 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2795 0 \
2796 -s "Protocol is TLSv1.3" \
2797 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2798 -s "received signature algorithm: 0x804" \
2799 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2800 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2801 -C "received HelloRetryRequest message"
2802
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2803requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2804requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2805requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2806requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2807requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2808requires_gnutls_tls1_3
2809requires_gnutls_next_no_ticket
2810requires_gnutls_next_disable_tls13_compat
2811run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2812 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2813 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2814 0 \
2815 -s "Protocol is TLSv1.3" \
2816 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2817 -s "received signature algorithm: 0x403" \
2818 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2819 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2820 -C "received HelloRetryRequest message"
2821
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2822requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2823requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2824requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2825requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2826requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2827requires_gnutls_tls1_3
2828requires_gnutls_next_no_ticket
2829requires_gnutls_next_disable_tls13_compat
2830run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2831 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2832 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2833 0 \
2834 -s "Protocol is TLSv1.3" \
2835 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2836 -s "received signature algorithm: 0x503" \
2837 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2838 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2839 -C "received HelloRetryRequest message"
2840
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2841requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2842requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2843requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2844requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2845requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2846requires_gnutls_tls1_3
2847requires_gnutls_next_no_ticket
2848requires_gnutls_next_disable_tls13_compat
2849run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2850 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2851 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2852 0 \
2853 -s "Protocol is TLSv1.3" \
2854 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2855 -s "received signature algorithm: 0x603" \
2856 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2857 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2858 -C "received HelloRetryRequest message"
2859
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2860requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2861requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2862requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2863requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2864requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2865requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2866requires_gnutls_tls1_3
2867requires_gnutls_next_no_ticket
2868requires_gnutls_next_disable_tls13_compat
2869run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2870 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2871 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2872 0 \
2873 -s "Protocol is TLSv1.3" \
2874 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2875 -s "received signature algorithm: 0x804" \
2876 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2877 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2878 -C "received HelloRetryRequest message"
2879
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2880requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2881requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2882requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2883requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2884requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2885requires_gnutls_tls1_3
2886requires_gnutls_next_no_ticket
2887requires_gnutls_next_disable_tls13_compat
2888run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2889 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2890 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2891 0 \
2892 -s "Protocol is TLSv1.3" \
2893 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2894 -s "received signature algorithm: 0x403" \
2895 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2896 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2897 -C "received HelloRetryRequest message"
2898
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2899requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2900requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2901requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2902requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2903requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2904requires_gnutls_tls1_3
2905requires_gnutls_next_no_ticket
2906requires_gnutls_next_disable_tls13_compat
2907run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2908 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2909 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2910 0 \
2911 -s "Protocol is TLSv1.3" \
2912 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2913 -s "received signature algorithm: 0x503" \
2914 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2915 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2916 -C "received HelloRetryRequest message"
2917
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2918requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2919requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2920requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2921requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2922requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2923requires_gnutls_tls1_3
2924requires_gnutls_next_no_ticket
2925requires_gnutls_next_disable_tls13_compat
2926run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2927 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2928 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2929 0 \
2930 -s "Protocol is TLSv1.3" \
2931 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2932 -s "received signature algorithm: 0x603" \
2933 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2934 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2935 -C "received HelloRetryRequest message"
2936
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2937requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2938requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2939requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2940requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
2941requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2942requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2943requires_gnutls_tls1_3
2944requires_gnutls_next_no_ticket
2945requires_gnutls_next_disable_tls13_compat
2946run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2947 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]2948 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2949 0 \
2950 -s "Protocol is TLSv1.3" \
2951 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2952 -s "received signature algorithm: 0x804" \
2953 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]2954 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2955 -C "received HelloRetryRequest message"
2956
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]2957requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]2958requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]2959requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2960requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2961requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2962requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]2963requires_gnutls_tls1_3
2964requires_gnutls_next_no_ticket
2965requires_gnutls_next_disable_tls13_compat
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2966run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2967 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2968 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
2969 0 \
2970 -s "Protocol is TLSv1.3" \
2971 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2972 -s "received signature algorithm: 0x403" \
2973 -s "got named group: ffdhe2048(0100)" \
2974 -s "Certificate verification was skipped" \
2975 -C "received HelloRetryRequest message"
2976
2977requires_config_enabled MBEDTLS_SSL_SRV_C
2978requires_config_enabled MBEDTLS_DEBUG_C
2979requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
2980requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]2981requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]2982requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2983requires_gnutls_tls1_3
2984requires_gnutls_next_no_ticket
2985requires_gnutls_next_disable_tls13_compat
2986run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]2987 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]2988 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
2989 0 \
2990 -s "Protocol is TLSv1.3" \
2991 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
2992 -s "received signature algorithm: 0x503" \
2993 -s "got named group: ffdhe2048(0100)" \
2994 -s "Certificate verification was skipped" \
2995 -C "received HelloRetryRequest message"
2996
2997requires_config_enabled MBEDTLS_SSL_SRV_C
2998requires_config_enabled MBEDTLS_DEBUG_C
2999requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3000requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3001requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3002requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3003requires_gnutls_tls1_3
3004requires_gnutls_next_no_ticket
3005requires_gnutls_next_disable_tls13_compat
3006run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3007 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3008 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3009 0 \
3010 -s "Protocol is TLSv1.3" \
3011 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
3012 -s "received signature algorithm: 0x603" \
3013 -s "got named group: ffdhe2048(0100)" \
3014 -s "Certificate verification was skipped" \
3015 -C "received HelloRetryRequest message"
3016
3017requires_config_enabled MBEDTLS_SSL_SRV_C
3018requires_config_enabled MBEDTLS_DEBUG_C
3019requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3020requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3021requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3022requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3023requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3024requires_gnutls_tls1_3
3025requires_gnutls_next_no_ticket
3026requires_gnutls_next_disable_tls13_compat
3027run_test "TLS 1.3 G->m: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3028 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3029 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3030 0 \
3031 -s "Protocol is TLSv1.3" \
3032 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
3033 -s "received signature algorithm: 0x804" \
3034 -s "got named group: ffdhe2048(0100)" \
3035 -s "Certificate verification was skipped" \
3036 -C "received HelloRetryRequest message"
3037
3038requires_config_enabled MBEDTLS_SSL_SRV_C
3039requires_config_enabled MBEDTLS_DEBUG_C
3040requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3041requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3042requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3043requires_gnutls_tls1_3
3044requires_gnutls_next_no_ticket
3045requires_gnutls_next_disable_tls13_compat
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3046run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3047 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3048 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3049 0 \
3050 -s "Protocol is TLSv1.3" \
3051 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3052 -s "received signature algorithm: 0x403" \
3053 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3054 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3055 -C "received HelloRetryRequest message"
3056
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3057requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3058requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3059requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3060requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3061requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3062requires_gnutls_tls1_3
3063requires_gnutls_next_no_ticket
3064requires_gnutls_next_disable_tls13_compat
3065run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3066 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3067 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3068 0 \
3069 -s "Protocol is TLSv1.3" \
3070 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3071 -s "received signature algorithm: 0x503" \
3072 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3073 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3074 -C "received HelloRetryRequest message"
3075
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3076requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3077requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3078requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3079requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3080requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3081requires_gnutls_tls1_3
3082requires_gnutls_next_no_ticket
3083requires_gnutls_next_disable_tls13_compat
3084run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3085 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3086 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3087 0 \
3088 -s "Protocol is TLSv1.3" \
3089 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3090 -s "received signature algorithm: 0x603" \
3091 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3092 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3093 -C "received HelloRetryRequest message"
3094
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3095requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3096requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3097requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3098requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3099requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3100requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3101requires_gnutls_tls1_3
3102requires_gnutls_next_no_ticket
3103requires_gnutls_next_disable_tls13_compat
3104run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3105 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3106 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3107 0 \
3108 -s "Protocol is TLSv1.3" \
3109 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3110 -s "received signature algorithm: 0x804" \
3111 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3112 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3113 -C "received HelloRetryRequest message"
3114
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3115requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3116requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3117requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3118requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3119requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3120requires_gnutls_tls1_3
3121requires_gnutls_next_no_ticket
3122requires_gnutls_next_disable_tls13_compat
3123run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3124 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3125 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3126 0 \
3127 -s "Protocol is TLSv1.3" \
3128 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3129 -s "received signature algorithm: 0x403" \
3130 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3131 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3132 -C "received HelloRetryRequest message"
3133
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3134requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3135requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3136requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3137requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3138requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3139requires_gnutls_tls1_3
3140requires_gnutls_next_no_ticket
3141requires_gnutls_next_disable_tls13_compat
3142run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3143 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3144 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3145 0 \
3146 -s "Protocol is TLSv1.3" \
3147 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3148 -s "received signature algorithm: 0x503" \
3149 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3150 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3151 -C "received HelloRetryRequest message"
3152
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3153requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3154requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3155requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3156requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3157requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3158requires_gnutls_tls1_3
3159requires_gnutls_next_no_ticket
3160requires_gnutls_next_disable_tls13_compat
3161run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3162 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3163 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3164 0 \
3165 -s "Protocol is TLSv1.3" \
3166 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3167 -s "received signature algorithm: 0x603" \
3168 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3169 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3170 -C "received HelloRetryRequest message"
3171
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3172requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3173requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3174requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3175requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3176requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3177requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3178requires_gnutls_tls1_3
3179requires_gnutls_next_no_ticket
3180requires_gnutls_next_disable_tls13_compat
3181run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3182 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3183 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3184 0 \
3185 -s "Protocol is TLSv1.3" \
3186 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3187 -s "received signature algorithm: 0x804" \
3188 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3189 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3190 -C "received HelloRetryRequest message"
3191
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3192requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3193requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3194requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3195requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3196requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3197requires_gnutls_tls1_3
3198requires_gnutls_next_no_ticket
3199requires_gnutls_next_disable_tls13_compat
3200run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3201 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3202 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3203 0 \
3204 -s "Protocol is TLSv1.3" \
3205 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3206 -s "received signature algorithm: 0x403" \
3207 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3208 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3209 -C "received HelloRetryRequest message"
3210
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3211requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3212requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3213requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3214requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3215requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3216requires_gnutls_tls1_3
3217requires_gnutls_next_no_ticket
3218requires_gnutls_next_disable_tls13_compat
3219run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3220 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3221 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3222 0 \
3223 -s "Protocol is TLSv1.3" \
3224 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3225 -s "received signature algorithm: 0x503" \
3226 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3227 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3228 -C "received HelloRetryRequest message"
3229
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3230requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3231requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3232requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3233requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3234requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3235requires_gnutls_tls1_3
3236requires_gnutls_next_no_ticket
3237requires_gnutls_next_disable_tls13_compat
3238run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3239 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3240 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3241 0 \
3242 -s "Protocol is TLSv1.3" \
3243 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3244 -s "received signature algorithm: 0x603" \
3245 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3246 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3247 -C "received HelloRetryRequest message"
3248
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3249requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3250requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3251requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3252requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3253requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3254requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3255requires_gnutls_tls1_3
3256requires_gnutls_next_no_ticket
3257requires_gnutls_next_disable_tls13_compat
3258run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3259 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3260 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3261 0 \
3262 -s "Protocol is TLSv1.3" \
3263 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3264 -s "received signature algorithm: 0x804" \
3265 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3266 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3267 -C "received HelloRetryRequest message"
3268
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3269requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3270requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3271requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3272requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3273requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3274requires_gnutls_tls1_3
3275requires_gnutls_next_no_ticket
3276requires_gnutls_next_disable_tls13_compat
3277run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3278 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3279 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3280 0 \
3281 -s "Protocol is TLSv1.3" \
3282 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3283 -s "received signature algorithm: 0x403" \
3284 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3285 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3286 -C "received HelloRetryRequest message"
3287
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3288requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3289requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3290requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3291requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3292requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3293requires_gnutls_tls1_3
3294requires_gnutls_next_no_ticket
3295requires_gnutls_next_disable_tls13_compat
3296run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3297 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3298 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3299 0 \
3300 -s "Protocol is TLSv1.3" \
3301 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3302 -s "received signature algorithm: 0x503" \
3303 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3304 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3305 -C "received HelloRetryRequest message"
3306
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3307requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3308requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3309requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3310requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3311requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3312requires_gnutls_tls1_3
3313requires_gnutls_next_no_ticket
3314requires_gnutls_next_disable_tls13_compat
3315run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3316 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3317 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3318 0 \
3319 -s "Protocol is TLSv1.3" \
3320 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3321 -s "received signature algorithm: 0x603" \
3322 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3323 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3324 -C "received HelloRetryRequest message"
3325
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3326requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3327requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3328requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3329requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3330requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3331requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3332requires_gnutls_tls1_3
3333requires_gnutls_next_no_ticket
3334requires_gnutls_next_disable_tls13_compat
3335run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3336 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3337 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3338 0 \
3339 -s "Protocol is TLSv1.3" \
3340 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3341 -s "received signature algorithm: 0x804" \
3342 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3343 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3344 -C "received HelloRetryRequest message"
3345
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3346requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3347requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3348requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3349requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3350requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3351requires_gnutls_tls1_3
3352requires_gnutls_next_no_ticket
3353requires_gnutls_next_disable_tls13_compat
3354run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3355 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3356 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3357 0 \
3358 -s "Protocol is TLSv1.3" \
3359 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3360 -s "received signature algorithm: 0x403" \
3361 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3362 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3363 -C "received HelloRetryRequest message"
3364
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3365requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3366requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3367requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3368requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3369requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3370requires_gnutls_tls1_3
3371requires_gnutls_next_no_ticket
3372requires_gnutls_next_disable_tls13_compat
3373run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3374 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3375 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3376 0 \
3377 -s "Protocol is TLSv1.3" \
3378 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3379 -s "received signature algorithm: 0x503" \
3380 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3381 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3382 -C "received HelloRetryRequest message"
3383
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3384requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3385requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3386requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3387requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3388requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3389requires_gnutls_tls1_3
3390requires_gnutls_next_no_ticket
3391requires_gnutls_next_disable_tls13_compat
3392run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3393 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3394 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3395 0 \
3396 -s "Protocol is TLSv1.3" \
3397 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3398 -s "received signature algorithm: 0x603" \
3399 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3400 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3401 -C "received HelloRetryRequest message"
3402
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3403requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3404requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3405requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3406requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3407requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3408requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3409requires_gnutls_tls1_3
3410requires_gnutls_next_no_ticket
3411requires_gnutls_next_disable_tls13_compat
3412run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3413 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3414 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3415 0 \
3416 -s "Protocol is TLSv1.3" \
3417 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3418 -s "received signature algorithm: 0x804" \
3419 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3420 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3421 -C "received HelloRetryRequest message"
3422
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3423requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3424requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3425requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3426requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3427requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3428requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3429requires_gnutls_tls1_3
3430requires_gnutls_next_no_ticket
3431requires_gnutls_next_disable_tls13_compat
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3432run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3433 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3434 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3435 0 \
3436 -s "Protocol is TLSv1.3" \
3437 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3438 -s "received signature algorithm: 0x403" \
3439 -s "got named group: ffdhe2048(0100)" \
3440 -s "Certificate verification was skipped" \
3441 -C "received HelloRetryRequest message"
3442
3443requires_config_enabled MBEDTLS_SSL_SRV_C
3444requires_config_enabled MBEDTLS_DEBUG_C
3445requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3446requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3447requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3448requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3449requires_gnutls_tls1_3
3450requires_gnutls_next_no_ticket
3451requires_gnutls_next_disable_tls13_compat
3452run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3453 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3454 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3455 0 \
3456 -s "Protocol is TLSv1.3" \
3457 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3458 -s "received signature algorithm: 0x503" \
3459 -s "got named group: ffdhe2048(0100)" \
3460 -s "Certificate verification was skipped" \
3461 -C "received HelloRetryRequest message"
3462
3463requires_config_enabled MBEDTLS_SSL_SRV_C
3464requires_config_enabled MBEDTLS_DEBUG_C
3465requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3466requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3467requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3468requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3469requires_gnutls_tls1_3
3470requires_gnutls_next_no_ticket
3471requires_gnutls_next_disable_tls13_compat
3472run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3473 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3474 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3475 0 \
3476 -s "Protocol is TLSv1.3" \
3477 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3478 -s "received signature algorithm: 0x603" \
3479 -s "got named group: ffdhe2048(0100)" \
3480 -s "Certificate verification was skipped" \
3481 -C "received HelloRetryRequest message"
3482
3483requires_config_enabled MBEDTLS_SSL_SRV_C
3484requires_config_enabled MBEDTLS_DEBUG_C
3485requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3486requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3487requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3488requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3489requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3490requires_gnutls_tls1_3
3491requires_gnutls_next_no_ticket
3492requires_gnutls_next_disable_tls13_compat
3493run_test "TLS 1.3 G->m: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3494 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3495 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3496 0 \
3497 -s "Protocol is TLSv1.3" \
3498 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
3499 -s "received signature algorithm: 0x804" \
3500 -s "got named group: ffdhe2048(0100)" \
3501 -s "Certificate verification was skipped" \
3502 -C "received HelloRetryRequest message"
3503
3504requires_config_enabled MBEDTLS_SSL_SRV_C
3505requires_config_enabled MBEDTLS_DEBUG_C
3506requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3507requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3508requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3509requires_gnutls_tls1_3
3510requires_gnutls_next_no_ticket
3511requires_gnutls_next_disable_tls13_compat
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3512run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3513 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3514 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3515 0 \
3516 -s "Protocol is TLSv1.3" \
3517 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3518 -s "received signature algorithm: 0x403" \
3519 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3520 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3521 -C "received HelloRetryRequest message"
3522
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3523requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3524requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3525requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3526requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3527requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3528requires_gnutls_tls1_3
3529requires_gnutls_next_no_ticket
3530requires_gnutls_next_disable_tls13_compat
3531run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3532 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3533 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3534 0 \
3535 -s "Protocol is TLSv1.3" \
3536 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3537 -s "received signature algorithm: 0x503" \
3538 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3539 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3540 -C "received HelloRetryRequest message"
3541
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3542requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3543requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3544requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3545requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3546requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3547requires_gnutls_tls1_3
3548requires_gnutls_next_no_ticket
3549requires_gnutls_next_disable_tls13_compat
3550run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3551 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3552 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3553 0 \
3554 -s "Protocol is TLSv1.3" \
3555 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3556 -s "received signature algorithm: 0x603" \
3557 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3558 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3559 -C "received HelloRetryRequest message"
3560
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3561requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3562requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3563requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3564requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3565requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3566requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3567requires_gnutls_tls1_3
3568requires_gnutls_next_no_ticket
3569requires_gnutls_next_disable_tls13_compat
3570run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3571 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3572 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3573 0 \
3574 -s "Protocol is TLSv1.3" \
3575 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3576 -s "received signature algorithm: 0x804" \
3577 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3578 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3579 -C "received HelloRetryRequest message"
3580
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3581requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3582requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3583requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3584requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3585requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3586requires_gnutls_tls1_3
3587requires_gnutls_next_no_ticket
3588requires_gnutls_next_disable_tls13_compat
3589run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3590 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3591 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3592 0 \
3593 -s "Protocol is TLSv1.3" \
3594 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3595 -s "received signature algorithm: 0x403" \
3596 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3597 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3598 -C "received HelloRetryRequest message"
3599
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3600requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3601requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3602requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3603requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3604requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3605requires_gnutls_tls1_3
3606requires_gnutls_next_no_ticket
3607requires_gnutls_next_disable_tls13_compat
3608run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3609 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3610 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3611 0 \
3612 -s "Protocol is TLSv1.3" \
3613 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3614 -s "received signature algorithm: 0x503" \
3615 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3616 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3617 -C "received HelloRetryRequest message"
3618
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3619requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3620requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3621requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3622requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3623requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3624requires_gnutls_tls1_3
3625requires_gnutls_next_no_ticket
3626requires_gnutls_next_disable_tls13_compat
3627run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3628 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3629 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3630 0 \
3631 -s "Protocol is TLSv1.3" \
3632 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3633 -s "received signature algorithm: 0x603" \
3634 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3635 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3636 -C "received HelloRetryRequest message"
3637
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3638requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3639requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3640requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3641requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3642requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3643requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3644requires_gnutls_tls1_3
3645requires_gnutls_next_no_ticket
3646requires_gnutls_next_disable_tls13_compat
3647run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3648 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3649 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3650 0 \
3651 -s "Protocol is TLSv1.3" \
3652 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3653 -s "received signature algorithm: 0x804" \
3654 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3655 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3656 -C "received HelloRetryRequest message"
3657
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3658requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3659requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3660requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3661requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3662requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3663requires_gnutls_tls1_3
3664requires_gnutls_next_no_ticket
3665requires_gnutls_next_disable_tls13_compat
3666run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3667 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3668 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3669 0 \
3670 -s "Protocol is TLSv1.3" \
3671 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3672 -s "received signature algorithm: 0x403" \
3673 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3674 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3675 -C "received HelloRetryRequest message"
3676
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3677requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3678requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3679requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3680requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3681requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3682requires_gnutls_tls1_3
3683requires_gnutls_next_no_ticket
3684requires_gnutls_next_disable_tls13_compat
3685run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3686 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3687 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3688 0 \
3689 -s "Protocol is TLSv1.3" \
3690 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3691 -s "received signature algorithm: 0x503" \
3692 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3693 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3694 -C "received HelloRetryRequest message"
3695
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3696requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3697requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3698requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3699requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3700requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3701requires_gnutls_tls1_3
3702requires_gnutls_next_no_ticket
3703requires_gnutls_next_disable_tls13_compat
3704run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3705 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3706 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3707 0 \
3708 -s "Protocol is TLSv1.3" \
3709 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3710 -s "received signature algorithm: 0x603" \
3711 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3712 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3713 -C "received HelloRetryRequest message"
3714
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3715requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3716requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3717requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3718requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3719requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3720requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3721requires_gnutls_tls1_3
3722requires_gnutls_next_no_ticket
3723requires_gnutls_next_disable_tls13_compat
3724run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3725 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3726 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3727 0 \
3728 -s "Protocol is TLSv1.3" \
3729 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3730 -s "received signature algorithm: 0x804" \
3731 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3732 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3733 -C "received HelloRetryRequest message"
3734
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3735requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3736requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3737requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3738requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3739requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3740requires_gnutls_tls1_3
3741requires_gnutls_next_no_ticket
3742requires_gnutls_next_disable_tls13_compat
3743run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3744 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3745 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3746 0 \
3747 -s "Protocol is TLSv1.3" \
3748 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3749 -s "received signature algorithm: 0x403" \
3750 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3751 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3752 -C "received HelloRetryRequest message"
3753
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3754requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3755requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3756requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3757requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3758requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3759requires_gnutls_tls1_3
3760requires_gnutls_next_no_ticket
3761requires_gnutls_next_disable_tls13_compat
3762run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3763 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3764 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3765 0 \
3766 -s "Protocol is TLSv1.3" \
3767 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3768 -s "received signature algorithm: 0x503" \
3769 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3770 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3771 -C "received HelloRetryRequest message"
3772
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3773requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3774requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3775requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3776requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3777requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3778requires_gnutls_tls1_3
3779requires_gnutls_next_no_ticket
3780requires_gnutls_next_disable_tls13_compat
3781run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3782 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3783 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3784 0 \
3785 -s "Protocol is TLSv1.3" \
3786 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3787 -s "received signature algorithm: 0x603" \
3788 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3789 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3790 -C "received HelloRetryRequest message"
3791
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3792requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3793requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3794requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3795requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3796requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3797requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3798requires_gnutls_tls1_3
3799requires_gnutls_next_no_ticket
3800requires_gnutls_next_disable_tls13_compat
3801run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3802 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3803 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3804 0 \
3805 -s "Protocol is TLSv1.3" \
3806 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3807 -s "received signature algorithm: 0x804" \
3808 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3809 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3810 -C "received HelloRetryRequest message"
3811
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3812requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3813requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3814requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3815requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3816requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3817requires_gnutls_tls1_3
3818requires_gnutls_next_no_ticket
3819requires_gnutls_next_disable_tls13_compat
3820run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3821 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3822 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3823 0 \
3824 -s "Protocol is TLSv1.3" \
3825 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3826 -s "received signature algorithm: 0x403" \
3827 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3828 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3829 -C "received HelloRetryRequest message"
3830
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3831requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3832requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3833requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3834requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3835requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3836requires_gnutls_tls1_3
3837requires_gnutls_next_no_ticket
3838requires_gnutls_next_disable_tls13_compat
3839run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3840 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3841 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3842 0 \
3843 -s "Protocol is TLSv1.3" \
3844 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3845 -s "received signature algorithm: 0x503" \
3846 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3847 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3848 -C "received HelloRetryRequest message"
3849
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3850requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3851requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3852requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3853requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3854requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3855requires_gnutls_tls1_3
3856requires_gnutls_next_no_ticket
3857requires_gnutls_next_disable_tls13_compat
3858run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3859 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3860 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3861 0 \
3862 -s "Protocol is TLSv1.3" \
3863 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3864 -s "received signature algorithm: 0x603" \
3865 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3866 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3867 -C "received HelloRetryRequest message"
3868
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3869requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3870requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3871requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3872requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3873requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3874requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3875requires_gnutls_tls1_3
3876requires_gnutls_next_no_ticket
3877requires_gnutls_next_disable_tls13_compat
3878run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3879 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3880 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3881 0 \
3882 -s "Protocol is TLSv1.3" \
3883 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3884 -s "received signature algorithm: 0x804" \
3885 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3886 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3887 -C "received HelloRetryRequest message"
3888
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3889requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3890requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3891requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3892requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3893requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3894requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3895requires_gnutls_tls1_3
3896requires_gnutls_next_no_ticket
3897requires_gnutls_next_disable_tls13_compat
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3898run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3899 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3900 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3901 0 \
3902 -s "Protocol is TLSv1.3" \
3903 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3904 -s "received signature algorithm: 0x403" \
3905 -s "got named group: ffdhe2048(0100)" \
3906 -s "Certificate verification was skipped" \
3907 -C "received HelloRetryRequest message"
3908
3909requires_config_enabled MBEDTLS_SSL_SRV_C
3910requires_config_enabled MBEDTLS_DEBUG_C
3911requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3912requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3913requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3914requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3915requires_gnutls_tls1_3
3916requires_gnutls_next_no_ticket
3917requires_gnutls_next_disable_tls13_compat
3918run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3919 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3920 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3921 0 \
3922 -s "Protocol is TLSv1.3" \
3923 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3924 -s "received signature algorithm: 0x503" \
3925 -s "got named group: ffdhe2048(0100)" \
3926 -s "Certificate verification was skipped" \
3927 -C "received HelloRetryRequest message"
3928
3929requires_config_enabled MBEDTLS_SSL_SRV_C
3930requires_config_enabled MBEDTLS_DEBUG_C
3931requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3932requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3933requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3934requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3935requires_gnutls_tls1_3
3936requires_gnutls_next_no_ticket
3937requires_gnutls_next_disable_tls13_compat
3938run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3939 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3940 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3941 0 \
3942 -s "Protocol is TLSv1.3" \
3943 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3944 -s "received signature algorithm: 0x603" \
3945 -s "got named group: ffdhe2048(0100)" \
3946 -s "Certificate verification was skipped" \
3947 -C "received HelloRetryRequest message"
3948
3949requires_config_enabled MBEDTLS_SSL_SRV_C
3950requires_config_enabled MBEDTLS_DEBUG_C
3951requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3952requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
3953requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3954requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]3955requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3956requires_gnutls_tls1_3
3957requires_gnutls_next_no_ticket
3958requires_gnutls_next_disable_tls13_compat
3959run_test "TLS 1.3 G->m: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3960 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3961 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
3962 0 \
3963 -s "Protocol is TLSv1.3" \
3964 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
3965 -s "received signature algorithm: 0x804" \
3966 -s "got named group: ffdhe2048(0100)" \
3967 -s "Certificate verification was skipped" \
3968 -C "received HelloRetryRequest message"
3969
3970requires_config_enabled MBEDTLS_SSL_SRV_C
3971requires_config_enabled MBEDTLS_DEBUG_C
3972requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
3973requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3974requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]3975requires_gnutls_tls1_3
3976requires_gnutls_next_no_ticket
3977requires_gnutls_next_disable_tls13_compat
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3978run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3979 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3980 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3981 0 \
3982 -s "Protocol is TLSv1.3" \
3983 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
3984 -s "received signature algorithm: 0x403" \
3985 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]3986 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3987 -C "received HelloRetryRequest message"
3988
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]3989requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]3990requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]3991requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3992requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]3993requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]3994requires_gnutls_tls1_3
3995requires_gnutls_next_no_ticket
3996requires_gnutls_next_disable_tls13_compat
3997run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]3998 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]3999 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4000 0 \
4001 -s "Protocol is TLSv1.3" \
4002 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4003 -s "received signature algorithm: 0x503" \
4004 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4005 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4006 -C "received HelloRetryRequest message"
4007
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4008requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4009requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4010requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4011requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4012requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4013requires_gnutls_tls1_3
4014requires_gnutls_next_no_ticket
4015requires_gnutls_next_disable_tls13_compat
4016run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4017 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4018 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4019 0 \
4020 -s "Protocol is TLSv1.3" \
4021 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4022 -s "received signature algorithm: 0x603" \
4023 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4024 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4025 -C "received HelloRetryRequest message"
4026
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4027requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4028requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4029requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4030requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4031requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4032requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4033requires_gnutls_tls1_3
4034requires_gnutls_next_no_ticket
4035requires_gnutls_next_disable_tls13_compat
4036run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4037 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4038 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4039 0 \
4040 -s "Protocol is TLSv1.3" \
4041 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4042 -s "received signature algorithm: 0x804" \
4043 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4044 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4045 -C "received HelloRetryRequest message"
4046
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4047requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4048requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4049requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4050requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4051requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4052requires_gnutls_tls1_3
4053requires_gnutls_next_no_ticket
4054requires_gnutls_next_disable_tls13_compat
4055run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4056 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4057 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4058 0 \
4059 -s "Protocol is TLSv1.3" \
4060 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4061 -s "received signature algorithm: 0x403" \
4062 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4063 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4064 -C "received HelloRetryRequest message"
4065
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4066requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4067requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4068requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4069requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4070requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4071requires_gnutls_tls1_3
4072requires_gnutls_next_no_ticket
4073requires_gnutls_next_disable_tls13_compat
4074run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4075 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4076 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4077 0 \
4078 -s "Protocol is TLSv1.3" \
4079 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4080 -s "received signature algorithm: 0x503" \
4081 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4082 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4083 -C "received HelloRetryRequest message"
4084
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4085requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4086requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4087requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4088requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4089requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4090requires_gnutls_tls1_3
4091requires_gnutls_next_no_ticket
4092requires_gnutls_next_disable_tls13_compat
4093run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4094 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4095 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4096 0 \
4097 -s "Protocol is TLSv1.3" \
4098 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4099 -s "received signature algorithm: 0x603" \
4100 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4101 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4102 -C "received HelloRetryRequest message"
4103
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4104requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4105requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4106requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4107requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4108requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4109requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4110requires_gnutls_tls1_3
4111requires_gnutls_next_no_ticket
4112requires_gnutls_next_disable_tls13_compat
4113run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4114 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4115 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4116 0 \
4117 -s "Protocol is TLSv1.3" \
4118 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4119 -s "received signature algorithm: 0x804" \
4120 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4121 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4122 -C "received HelloRetryRequest message"
4123
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4124requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4125requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4126requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4127requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4128requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4129requires_gnutls_tls1_3
4130requires_gnutls_next_no_ticket
4131requires_gnutls_next_disable_tls13_compat
4132run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4133 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4134 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4135 0 \
4136 -s "Protocol is TLSv1.3" \
4137 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4138 -s "received signature algorithm: 0x403" \
4139 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4140 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4141 -C "received HelloRetryRequest message"
4142
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4143requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4144requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4145requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4146requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4147requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4148requires_gnutls_tls1_3
4149requires_gnutls_next_no_ticket
4150requires_gnutls_next_disable_tls13_compat
4151run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4152 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4153 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4154 0 \
4155 -s "Protocol is TLSv1.3" \
4156 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4157 -s "received signature algorithm: 0x503" \
4158 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4159 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4160 -C "received HelloRetryRequest message"
4161
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4162requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4163requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4164requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4165requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4166requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4167requires_gnutls_tls1_3
4168requires_gnutls_next_no_ticket
4169requires_gnutls_next_disable_tls13_compat
4170run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4171 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4172 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4173 0 \
4174 -s "Protocol is TLSv1.3" \
4175 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4176 -s "received signature algorithm: 0x603" \
4177 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4178 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4179 -C "received HelloRetryRequest message"
4180
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4181requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4182requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4183requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4184requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4185requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4186requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4187requires_gnutls_tls1_3
4188requires_gnutls_next_no_ticket
4189requires_gnutls_next_disable_tls13_compat
4190run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4191 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4192 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4193 0 \
4194 -s "Protocol is TLSv1.3" \
4195 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4196 -s "received signature algorithm: 0x804" \
4197 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4198 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4199 -C "received HelloRetryRequest message"
4200
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4201requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4202requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4203requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4204requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4205requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4206requires_gnutls_tls1_3
4207requires_gnutls_next_no_ticket
4208requires_gnutls_next_disable_tls13_compat
4209run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4210 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4211 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4212 0 \
4213 -s "Protocol is TLSv1.3" \
4214 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4215 -s "received signature algorithm: 0x403" \
4216 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4217 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4218 -C "received HelloRetryRequest message"
4219
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4220requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4221requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4222requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4223requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4224requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4225requires_gnutls_tls1_3
4226requires_gnutls_next_no_ticket
4227requires_gnutls_next_disable_tls13_compat
4228run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4229 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4230 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4231 0 \
4232 -s "Protocol is TLSv1.3" \
4233 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4234 -s "received signature algorithm: 0x503" \
4235 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4236 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4237 -C "received HelloRetryRequest message"
4238
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4239requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4240requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4241requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4242requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4243requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4244requires_gnutls_tls1_3
4245requires_gnutls_next_no_ticket
4246requires_gnutls_next_disable_tls13_compat
4247run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4248 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4249 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4250 0 \
4251 -s "Protocol is TLSv1.3" \
4252 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4253 -s "received signature algorithm: 0x603" \
4254 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4255 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4256 -C "received HelloRetryRequest message"
4257
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4258requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4259requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4260requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4261requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4262requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4263requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4264requires_gnutls_tls1_3
4265requires_gnutls_next_no_ticket
4266requires_gnutls_next_disable_tls13_compat
4267run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4268 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4269 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4270 0 \
4271 -s "Protocol is TLSv1.3" \
4272 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4273 -s "received signature algorithm: 0x804" \
4274 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4275 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4276 -C "received HelloRetryRequest message"
4277
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4278requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4279requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4280requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4281requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4282requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4283requires_gnutls_tls1_3
4284requires_gnutls_next_no_ticket
4285requires_gnutls_next_disable_tls13_compat
4286run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4287 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4288 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4289 0 \
4290 -s "Protocol is TLSv1.3" \
4291 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4292 -s "received signature algorithm: 0x403" \
4293 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4294 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4295 -C "received HelloRetryRequest message"
4296
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4297requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4298requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4299requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4300requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4301requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4302requires_gnutls_tls1_3
4303requires_gnutls_next_no_ticket
4304requires_gnutls_next_disable_tls13_compat
4305run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4306 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4307 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4308 0 \
4309 -s "Protocol is TLSv1.3" \
4310 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4311 -s "received signature algorithm: 0x503" \
4312 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4313 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4314 -C "received HelloRetryRequest message"
4315
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4316requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4317requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4318requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4319requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4320requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4321requires_gnutls_tls1_3
4322requires_gnutls_next_no_ticket
4323requires_gnutls_next_disable_tls13_compat
4324run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4325 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4326 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4327 0 \
4328 -s "Protocol is TLSv1.3" \
4329 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4330 -s "received signature algorithm: 0x603" \
4331 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4332 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4333 -C "received HelloRetryRequest message"
4334
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]4335requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4336requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4337requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4338requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4339requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4340requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4341requires_gnutls_tls1_3
4342requires_gnutls_next_no_ticket
4343requires_gnutls_next_disable_tls13_compat
4344run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4345 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4346 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4347 0 \
4348 -s "Protocol is TLSv1.3" \
4349 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4350 -s "received signature algorithm: 0x804" \
4351 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]4352 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]4353 -C "received HelloRetryRequest message"
4354
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4355requires_config_enabled MBEDTLS_SSL_SRV_C
4356requires_config_enabled MBEDTLS_DEBUG_C
4357requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
4358requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4359requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]4360requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4361requires_gnutls_tls1_3
4362requires_gnutls_next_no_ticket
4363requires_gnutls_next_disable_tls13_compat
4364run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4365 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4366 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
4367 0 \
4368 -s "Protocol is TLSv1.3" \
4369 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4370 -s "received signature algorithm: 0x403" \
4371 -s "got named group: ffdhe2048(0100)" \
4372 -s "Certificate verification was skipped" \
4373 -C "received HelloRetryRequest message"
4374
4375requires_config_enabled MBEDTLS_SSL_SRV_C
4376requires_config_enabled MBEDTLS_DEBUG_C
4377requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
4378requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4379requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]4380requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4381requires_gnutls_tls1_3
4382requires_gnutls_next_no_ticket
4383requires_gnutls_next_disable_tls13_compat
4384run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4385 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4386 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
4387 0 \
4388 -s "Protocol is TLSv1.3" \
4389 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4390 -s "received signature algorithm: 0x503" \
4391 -s "got named group: ffdhe2048(0100)" \
4392 -s "Certificate verification was skipped" \
4393 -C "received HelloRetryRequest message"
4394
4395requires_config_enabled MBEDTLS_SSL_SRV_C
4396requires_config_enabled MBEDTLS_DEBUG_C
4397requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
4398requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4399requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]4400requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4401requires_gnutls_tls1_3
4402requires_gnutls_next_no_ticket
4403requires_gnutls_next_disable_tls13_compat
4404run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4405 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4406 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
4407 0 \
4408 -s "Protocol is TLSv1.3" \
4409 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4410 -s "received signature algorithm: 0x603" \
4411 -s "got named group: ffdhe2048(0100)" \
4412 -s "Certificate verification was skipped" \
4413 -C "received HelloRetryRequest message"
4414
4415requires_config_enabled MBEDTLS_SSL_SRV_C
4416requires_config_enabled MBEDTLS_DEBUG_C
4417requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
4418requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4419requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4420requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]4421requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4422requires_gnutls_tls1_3
4423requires_gnutls_next_no_ticket
4424requires_gnutls_next_disable_tls13_compat
4425run_test "TLS 1.3 G->m: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4426 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4427 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca_cat12.crt --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
4428 0 \
4429 -s "Protocol is TLSv1.3" \
4430 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
4431 -s "received signature algorithm: 0x804" \
4432 -s "got named group: ffdhe2048(0100)" \
4433 -s "Certificate verification was skipped" \
4434 -C "received HelloRetryRequest message"
4435
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4436requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4437requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4438requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4439requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4440requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4441requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4442run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4443 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4444 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4445 0 \
4446 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4447 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4448 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4449 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4450 -c "NamedGroup: secp256r1 ( 17 )" \
4451 -c "Verifying peer X.509 certificate... ok" \
4452 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4453
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4454requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4455requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4456requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4457requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4458requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4459requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4460run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4461 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4462 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4463 0 \
4464 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4465 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4466 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4467 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4468 -c "NamedGroup: secp256r1 ( 17 )" \
4469 -c "Verifying peer X.509 certificate... ok" \
4470 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4471
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4472requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4473requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4474requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4475requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4476requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4477requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4478run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4479 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4480 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4481 0 \
4482 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4483 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4484 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4485 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4486 -c "NamedGroup: secp256r1 ( 17 )" \
4487 -c "Verifying peer X.509 certificate... ok" \
4488 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4489
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4490requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4491requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4492requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4493requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4494requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4495requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4496requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4497run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4498 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4499 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4500 0 \
4501 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4502 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4503 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4504 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4505 -c "NamedGroup: secp256r1 ( 17 )" \
4506 -c "Verifying peer X.509 certificate... ok" \
4507 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4508
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4509requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4510requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4511requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4512requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4513requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4514requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4515run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4516 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4517 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4518 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4519 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4520 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4521 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4522 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4523 -c "NamedGroup: secp384r1 ( 18 )" \
4524 -c "Verifying peer X.509 certificate... ok" \
4525 -C "received HelloRetryRequest message"
4526
4527requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4528requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4529requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4530requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4531requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4532requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4533run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4534 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4535 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4536 0 \
4537 -c "HTTP/1.0 200 ok" \
4538 -c "Protocol is TLSv1.3" \
4539 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4540 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4541 -c "NamedGroup: secp384r1 ( 18 )" \
4542 -c "Verifying peer X.509 certificate... ok" \
4543 -C "received HelloRetryRequest message"
4544
4545requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4546requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4547requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4548requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4549requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4550requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4551run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4552 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4553 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4554 0 \
4555 -c "HTTP/1.0 200 ok" \
4556 -c "Protocol is TLSv1.3" \
4557 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4558 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4559 -c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4560 -c "Verifying peer X.509 certificate... ok" \
4561 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4562
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4563requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4564requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4565requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4566requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4567requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4568requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4569requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4570run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4571 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4572 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4573 0 \
4574 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4575 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4576 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4577 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4578 -c "NamedGroup: secp384r1 ( 18 )" \
4579 -c "Verifying peer X.509 certificate... ok" \
4580 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4581
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4582requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4583requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4584requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4585requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4586requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4587requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4588run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4589 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4590 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4591 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4592 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4593 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4594 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4595 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4596 -c "NamedGroup: secp521r1 ( 19 )" \
4597 -c "Verifying peer X.509 certificate... ok" \
4598 -C "received HelloRetryRequest message"
4599
4600requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4601requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4602requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4603requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4604requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4605requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4606run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4607 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4608 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4609 0 \
4610 -c "HTTP/1.0 200 ok" \
4611 -c "Protocol is TLSv1.3" \
4612 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4613 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4614 -c "NamedGroup: secp521r1 ( 19 )" \
4615 -c "Verifying peer X.509 certificate... ok" \
4616 -C "received HelloRetryRequest message"
4617
4618requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4619requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4620requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4621requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4622requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4623requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4624run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4625 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4626 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4627 0 \
4628 -c "HTTP/1.0 200 ok" \
4629 -c "Protocol is TLSv1.3" \
4630 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4631 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4632 -c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4633 -c "Verifying peer X.509 certificate... ok" \
4634 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4635
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4636requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4637requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4638requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4639requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4640requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4641requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4642requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4643run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4644 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4645 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4646 0 \
4647 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4648 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4649 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4650 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4651 -c "NamedGroup: secp521r1 ( 19 )" \
4652 -c "Verifying peer X.509 certificate... ok" \
4653 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4654
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4655requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4656requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4657requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4658requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4659requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4660requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4661run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4662 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4663 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4664 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4665 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4666 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4667 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4668 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4669 -c "NamedGroup: x25519 ( 1d )" \
4670 -c "Verifying peer X.509 certificate... ok" \
4671 -C "received HelloRetryRequest message"
4672
4673requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4674requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4675requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4676requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4677requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4678requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4679run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4680 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4681 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4682 0 \
4683 -c "HTTP/1.0 200 ok" \
4684 -c "Protocol is TLSv1.3" \
4685 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4686 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4687 -c "NamedGroup: x25519 ( 1d )" \
4688 -c "Verifying peer X.509 certificate... ok" \
4689 -C "received HelloRetryRequest message"
4690
4691requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4692requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4693requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4694requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4695requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4696requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4697run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4698 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4699 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4700 0 \
4701 -c "HTTP/1.0 200 ok" \
4702 -c "Protocol is TLSv1.3" \
4703 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4704 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4705 -c "NamedGroup: x25519 ( 1d )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4706 -c "Verifying peer X.509 certificate... ok" \
4707 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4708
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4709requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4710requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4711requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4712requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4713requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4714requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4715requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4716run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4717 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4718 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4719 0 \
4720 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4721 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4722 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4723 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4724 -c "NamedGroup: x25519 ( 1d )" \
4725 -c "Verifying peer X.509 certificate... ok" \
4726 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4727
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4728requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4729requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4730requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4731requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4732requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4733requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4734run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4735 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4736 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4737 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4738 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4739 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4740 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4741 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4742 -c "NamedGroup: x448 ( 1e )" \
4743 -c "Verifying peer X.509 certificate... ok" \
4744 -C "received HelloRetryRequest message"
4745
4746requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4747requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4748requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4749requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4750requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4751requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4752run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4753 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4754 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4755 0 \
4756 -c "HTTP/1.0 200 ok" \
4757 -c "Protocol is TLSv1.3" \
4758 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4759 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4760 -c "NamedGroup: x448 ( 1e )" \
4761 -c "Verifying peer X.509 certificate... ok" \
4762 -C "received HelloRetryRequest message"
4763
4764requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4765requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4766requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4767requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4768requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4769requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4770run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4771 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4772 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4773 0 \
4774 -c "HTTP/1.0 200 ok" \
4775 -c "Protocol is TLSv1.3" \
4776 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4777 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4778 -c "NamedGroup: x448 ( 1e )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4779 -c "Verifying peer X.509 certificate... ok" \
4780 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4781
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4782requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4783requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4784requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4785requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4786requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4787requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4788requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4789run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4790 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4791 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4792 0 \
4793 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4794 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4795 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4796 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4797 -c "NamedGroup: x448 ( 1e )" \
4798 -c "Verifying peer X.509 certificate... ok" \
4799 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4800
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]4801requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4802requires_config_enabled MBEDTLS_SSL_CLI_C
4803requires_config_enabled MBEDTLS_DEBUG_C
4804requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
4805requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4806requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]4807requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4808run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
4809 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4810 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4811 0 \
4812 -c "HTTP/1.0 200 ok" \
4813 -c "Protocol is TLSv1.3" \
4814 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4815 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4816 -c "NamedGroup: ffdhe2048 ( 100 )" \
4817 -c "Verifying peer X.509 certificate... ok" \
4818 -C "received HelloRetryRequest message"
4819
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]4820requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4821requires_config_enabled MBEDTLS_SSL_CLI_C
4822requires_config_enabled MBEDTLS_DEBUG_C
4823requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
4824requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4825requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]4826requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4827run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
4828 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4829 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4830 0 \
4831 -c "HTTP/1.0 200 ok" \
4832 -c "Protocol is TLSv1.3" \
4833 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4834 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4835 -c "NamedGroup: ffdhe2048 ( 100 )" \
4836 -c "Verifying peer X.509 certificate... ok" \
4837 -C "received HelloRetryRequest message"
4838
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]4839requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4840requires_config_enabled MBEDTLS_SSL_CLI_C
4841requires_config_enabled MBEDTLS_DEBUG_C
4842requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
4843requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4844requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]4845requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4846run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
4847 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4848 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4849 0 \
4850 -c "HTTP/1.0 200 ok" \
4851 -c "Protocol is TLSv1.3" \
4852 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4853 -c "Certificate Verify: Signature algorithm ( 0603 )" \
4854 -c "NamedGroup: ffdhe2048 ( 100 )" \
4855 -c "Verifying peer X.509 certificate... ok" \
4856 -C "received HelloRetryRequest message"
4857
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]4858requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4859requires_config_enabled MBEDTLS_SSL_CLI_C
4860requires_config_enabled MBEDTLS_DEBUG_C
4861requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
4862requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
4863requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4864requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]4865requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4866run_test "TLS 1.3 m->O: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
4867 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_GCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4868 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4869 0 \
4870 -c "HTTP/1.0 200 ok" \
4871 -c "Protocol is TLSv1.3" \
4872 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
4873 -c "Certificate Verify: Signature algorithm ( 0804 )" \
4874 -c "NamedGroup: ffdhe2048 ( 100 )" \
4875 -c "Verifying peer X.509 certificate... ok" \
4876 -C "received HelloRetryRequest message"
4877
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]4878requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4879requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4880requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4881requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4882requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4883requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4884run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4885 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4886 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4887 0 \
4888 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4889 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4890 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4891 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4892 -c "NamedGroup: secp256r1 ( 17 )" \
4893 -c "Verifying peer X.509 certificate... ok" \
4894 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4895
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4896requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4897requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4898requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4899requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4900requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4901requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4902run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4903 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4904 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4905 0 \
4906 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4907 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4908 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4909 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4910 -c "NamedGroup: secp256r1 ( 17 )" \
4911 -c "Verifying peer X.509 certificate... ok" \
4912 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4913
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4914requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4915requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4916requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4917requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4918requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4919requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4920run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4921 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4922 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4923 0 \
4924 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4925 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4926 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4927 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4928 -c "NamedGroup: secp256r1 ( 17 )" \
4929 -c "Verifying peer X.509 certificate... ok" \
4930 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4931
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4932requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4933requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4934requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4935requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4936requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4937requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4938requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]4939run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4940 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4941 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4942 0 \
4943 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4944 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4945 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4946 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]4947 -c "NamedGroup: secp256r1 ( 17 )" \
4948 -c "Verifying peer X.509 certificate... ok" \
4949 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]4950
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4951requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]4952requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4953requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4954requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]4955requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4956requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4957run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4958 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4959 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4960 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4961 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]4962 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]4963 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4964 -c "Certificate Verify: Signature algorithm ( 0403 )" \
4965 -c "NamedGroup: secp384r1 ( 18 )" \
4966 -c "Verifying peer X.509 certificate... ok" \
4967 -C "received HelloRetryRequest message"
4968
4969requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4970requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4971requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4972requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4973requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4974requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4975run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4976 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4977 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4978 0 \
4979 -c "HTTP/1.0 200 ok" \
4980 -c "Protocol is TLSv1.3" \
4981 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
4982 -c "Certificate Verify: Signature algorithm ( 0503 )" \
4983 -c "NamedGroup: secp384r1 ( 18 )" \
4984 -c "Verifying peer X.509 certificate... ok" \
4985 -C "received HelloRetryRequest message"
4986
4987requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4988requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]4989requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]4990requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4991requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]4992requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4993run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]4994 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]4995 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]4996 0 \
4997 -c "HTTP/1.0 200 ok" \
4998 -c "Protocol is TLSv1.3" \
4999 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5000 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5001 -c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5002 -c "Verifying peer X.509 certificate... ok" \
5003 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5004
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5005requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5006requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5007requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5008requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5009requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5010requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5011requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5012run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5013 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5014 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5015 0 \
5016 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5017 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5018 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5019 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5020 -c "NamedGroup: secp384r1 ( 18 )" \
5021 -c "Verifying peer X.509 certificate... ok" \
5022 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5023
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5024requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5025requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5026requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5027requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5028requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5029requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5030run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5031 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5032 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5033 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5034 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5035 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5036 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5037 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5038 -c "NamedGroup: secp521r1 ( 19 )" \
5039 -c "Verifying peer X.509 certificate... ok" \
5040 -C "received HelloRetryRequest message"
5041
5042requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5043requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5044requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5045requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5046requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5047requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5048run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5049 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5050 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5051 0 \
5052 -c "HTTP/1.0 200 ok" \
5053 -c "Protocol is TLSv1.3" \
5054 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5055 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5056 -c "NamedGroup: secp521r1 ( 19 )" \
5057 -c "Verifying peer X.509 certificate... ok" \
5058 -C "received HelloRetryRequest message"
5059
5060requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5061requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5062requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5063requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5064requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5065requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5066run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5067 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5068 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5069 0 \
5070 -c "HTTP/1.0 200 ok" \
5071 -c "Protocol is TLSv1.3" \
5072 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5073 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5074 -c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5075 -c "Verifying peer X.509 certificate... ok" \
5076 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5077
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5078requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5079requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5080requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5081requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5082requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5083requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5084requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5085run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5086 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5087 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5088 0 \
5089 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5090 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5091 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5092 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5093 -c "NamedGroup: secp521r1 ( 19 )" \
5094 -c "Verifying peer X.509 certificate... ok" \
5095 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5096
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5097requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5098requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5099requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5100requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5101requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5102requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5103run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5104 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5105 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5106 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5107 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5108 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5109 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5110 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5111 -c "NamedGroup: x25519 ( 1d )" \
5112 -c "Verifying peer X.509 certificate... ok" \
5113 -C "received HelloRetryRequest message"
5114
5115requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5116requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5117requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5118requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5119requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5120requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5121run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5122 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5123 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5124 0 \
5125 -c "HTTP/1.0 200 ok" \
5126 -c "Protocol is TLSv1.3" \
5127 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5128 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5129 -c "NamedGroup: x25519 ( 1d )" \
5130 -c "Verifying peer X.509 certificate... ok" \
5131 -C "received HelloRetryRequest message"
5132
5133requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5134requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5135requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5136requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5137requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5138requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5139run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5140 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5141 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5142 0 \
5143 -c "HTTP/1.0 200 ok" \
5144 -c "Protocol is TLSv1.3" \
5145 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5146 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5147 -c "NamedGroup: x25519 ( 1d )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5148 -c "Verifying peer X.509 certificate... ok" \
5149 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5150
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5151requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5152requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5153requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5154requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5155requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5156requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5157requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5158run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5159 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5160 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5161 0 \
5162 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5163 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5164 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5165 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5166 -c "NamedGroup: x25519 ( 1d )" \
5167 -c "Verifying peer X.509 certificate... ok" \
5168 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5169
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5170requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5171requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5172requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5173requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5174requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5175requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5176run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5177 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5178 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5179 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5180 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5181 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5182 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5183 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5184 -c "NamedGroup: x448 ( 1e )" \
5185 -c "Verifying peer X.509 certificate... ok" \
5186 -C "received HelloRetryRequest message"
5187
5188requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5189requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5190requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5191requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5192requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5193requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5194run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5195 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5196 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5197 0 \
5198 -c "HTTP/1.0 200 ok" \
5199 -c "Protocol is TLSv1.3" \
5200 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5201 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5202 -c "NamedGroup: x448 ( 1e )" \
5203 -c "Verifying peer X.509 certificate... ok" \
5204 -C "received HelloRetryRequest message"
5205
5206requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5207requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5208requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5209requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5210requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5211requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5212run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5213 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5214 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5215 0 \
5216 -c "HTTP/1.0 200 ok" \
5217 -c "Protocol is TLSv1.3" \
5218 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5219 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5220 -c "NamedGroup: x448 ( 1e )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5221 -c "Verifying peer X.509 certificate... ok" \
5222 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5223
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5224requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5225requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5226requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5227requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5228requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5229requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5230requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5231run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5232 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5233 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5234 0 \
5235 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5236 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5237 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5238 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5239 -c "NamedGroup: x448 ( 1e )" \
5240 -c "Verifying peer X.509 certificate... ok" \
5241 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5242
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]5243requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5244requires_config_enabled MBEDTLS_SSL_CLI_C
5245requires_config_enabled MBEDTLS_DEBUG_C
5246requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5247requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5248requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]5249requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5250run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
5251 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5252 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5253 0 \
5254 -c "HTTP/1.0 200 ok" \
5255 -c "Protocol is TLSv1.3" \
5256 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5257 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5258 -c "NamedGroup: ffdhe2048 ( 100 )" \
5259 -c "Verifying peer X.509 certificate... ok" \
5260 -C "received HelloRetryRequest message"
5261
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]5262requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5263requires_config_enabled MBEDTLS_SSL_CLI_C
5264requires_config_enabled MBEDTLS_DEBUG_C
5265requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5266requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5267requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]5268requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5269run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
5270 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5271 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5272 0 \
5273 -c "HTTP/1.0 200 ok" \
5274 -c "Protocol is TLSv1.3" \
5275 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5276 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5277 -c "NamedGroup: ffdhe2048 ( 100 )" \
5278 -c "Verifying peer X.509 certificate... ok" \
5279 -C "received HelloRetryRequest message"
5280
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]5281requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5282requires_config_enabled MBEDTLS_SSL_CLI_C
5283requires_config_enabled MBEDTLS_DEBUG_C
5284requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5285requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5286requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]5287requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5288run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
5289 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5290 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5291 0 \
5292 -c "HTTP/1.0 200 ok" \
5293 -c "Protocol is TLSv1.3" \
5294 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5295 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5296 -c "NamedGroup: ffdhe2048 ( 100 )" \
5297 -c "Verifying peer X.509 certificate... ok" \
5298 -C "received HelloRetryRequest message"
5299
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]5300requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5301requires_config_enabled MBEDTLS_SSL_CLI_C
5302requires_config_enabled MBEDTLS_DEBUG_C
5303requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5304requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5305requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5306requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]5307requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5308run_test "TLS 1.3 m->O: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
5309 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_256_GCM_SHA384 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5310 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5311 0 \
5312 -c "HTTP/1.0 200 ok" \
5313 -c "Protocol is TLSv1.3" \
5314 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
5315 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5316 -c "NamedGroup: ffdhe2048 ( 100 )" \
5317 -c "Verifying peer X.509 certificate... ok" \
5318 -C "received HelloRetryRequest message"
5319
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5320requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5321requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5322requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5323requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5324requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5325requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5326run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5327 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5328 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5329 0 \
5330 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5331 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5332 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5333 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5334 -c "NamedGroup: secp256r1 ( 17 )" \
5335 -c "Verifying peer X.509 certificate... ok" \
5336 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5337
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5338requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5339requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5340requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5341requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5342requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5343requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5344run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5345 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5346 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5347 0 \
5348 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5349 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5350 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5351 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5352 -c "NamedGroup: secp256r1 ( 17 )" \
5353 -c "Verifying peer X.509 certificate... ok" \
5354 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5355
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5356requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5357requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5358requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5359requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5360requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5361requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5362run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5363 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5364 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5365 0 \
5366 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5367 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5368 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5369 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5370 -c "NamedGroup: secp256r1 ( 17 )" \
5371 -c "Verifying peer X.509 certificate... ok" \
5372 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5373
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5374requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5375requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5376requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5377requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5378requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5379requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5380requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5381run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5382 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5383 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5384 0 \
5385 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5386 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5387 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5388 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5389 -c "NamedGroup: secp256r1 ( 17 )" \
5390 -c "Verifying peer X.509 certificate... ok" \
5391 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5392
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5393requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5394requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5395requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5396requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5397requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5398requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5399run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5400 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5401 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5402 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5403 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5404 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5405 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5406 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5407 -c "NamedGroup: secp384r1 ( 18 )" \
5408 -c "Verifying peer X.509 certificate... ok" \
5409 -C "received HelloRetryRequest message"
5410
5411requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5412requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5413requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5414requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5415requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5416requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5417run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5418 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5419 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5420 0 \
5421 -c "HTTP/1.0 200 ok" \
5422 -c "Protocol is TLSv1.3" \
5423 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5424 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5425 -c "NamedGroup: secp384r1 ( 18 )" \
5426 -c "Verifying peer X.509 certificate... ok" \
5427 -C "received HelloRetryRequest message"
5428
5429requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5430requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5431requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5432requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5433requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5434requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5435run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5436 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5437 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5438 0 \
5439 -c "HTTP/1.0 200 ok" \
5440 -c "Protocol is TLSv1.3" \
5441 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5442 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5443 -c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5444 -c "Verifying peer X.509 certificate... ok" \
5445 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5446
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5447requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5448requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5449requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5450requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5451requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5452requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5453requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5454run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5455 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5456 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5457 0 \
5458 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5459 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5460 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5461 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5462 -c "NamedGroup: secp384r1 ( 18 )" \
5463 -c "Verifying peer X.509 certificate... ok" \
5464 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5465
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5466requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5467requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5468requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5469requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5470requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5471requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5472run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5473 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5474 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5475 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5476 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5477 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5478 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5479 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5480 -c "NamedGroup: secp521r1 ( 19 )" \
5481 -c "Verifying peer X.509 certificate... ok" \
5482 -C "received HelloRetryRequest message"
5483
5484requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5485requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5486requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5487requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5488requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5489requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5490run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5491 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5492 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5493 0 \
5494 -c "HTTP/1.0 200 ok" \
5495 -c "Protocol is TLSv1.3" \
5496 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5497 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5498 -c "NamedGroup: secp521r1 ( 19 )" \
5499 -c "Verifying peer X.509 certificate... ok" \
5500 -C "received HelloRetryRequest message"
5501
5502requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5503requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5504requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5505requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5506requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5507requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5508run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5509 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5510 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5511 0 \
5512 -c "HTTP/1.0 200 ok" \
5513 -c "Protocol is TLSv1.3" \
5514 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5515 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5516 -c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5517 -c "Verifying peer X.509 certificate... ok" \
5518 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5519
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5520requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5521requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5522requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5523requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5524requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5525requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5526requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5527run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5528 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5529 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5530 0 \
5531 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5532 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5533 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5534 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5535 -c "NamedGroup: secp521r1 ( 19 )" \
5536 -c "Verifying peer X.509 certificate... ok" \
5537 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5538
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5539requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5540requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5541requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5542requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5543requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5544requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5545run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5546 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5547 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5548 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5549 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5550 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5551 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5552 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5553 -c "NamedGroup: x25519 ( 1d )" \
5554 -c "Verifying peer X.509 certificate... ok" \
5555 -C "received HelloRetryRequest message"
5556
5557requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5558requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5559requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5560requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5561requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5562requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5563run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5564 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5565 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5566 0 \
5567 -c "HTTP/1.0 200 ok" \
5568 -c "Protocol is TLSv1.3" \
5569 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5570 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5571 -c "NamedGroup: x25519 ( 1d )" \
5572 -c "Verifying peer X.509 certificate... ok" \
5573 -C "received HelloRetryRequest message"
5574
5575requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5576requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5577requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5578requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5579requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5580requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5581run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5582 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5583 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5584 0 \
5585 -c "HTTP/1.0 200 ok" \
5586 -c "Protocol is TLSv1.3" \
5587 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5588 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5589 -c "NamedGroup: x25519 ( 1d )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5590 -c "Verifying peer X.509 certificate... ok" \
5591 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5592
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5593requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5594requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5595requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5596requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5597requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5598requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5599requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5600run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5601 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5602 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5603 0 \
5604 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5605 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5606 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5607 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5608 -c "NamedGroup: x25519 ( 1d )" \
5609 -c "Verifying peer X.509 certificate... ok" \
5610 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5611
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5612requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5613requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5614requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5615requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5616requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5617requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5618run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5619 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5620 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5621 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5622 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5623 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5624 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5625 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5626 -c "NamedGroup: x448 ( 1e )" \
5627 -c "Verifying peer X.509 certificate... ok" \
5628 -C "received HelloRetryRequest message"
5629
5630requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5631requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5632requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5633requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5634requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5635requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5636run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5637 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5638 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5639 0 \
5640 -c "HTTP/1.0 200 ok" \
5641 -c "Protocol is TLSv1.3" \
5642 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5643 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5644 -c "NamedGroup: x448 ( 1e )" \
5645 -c "Verifying peer X.509 certificate... ok" \
5646 -C "received HelloRetryRequest message"
5647
5648requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5649requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5650requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5651requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5652requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5653requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5654run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5655 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5656 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5657 0 \
5658 -c "HTTP/1.0 200 ok" \
5659 -c "Protocol is TLSv1.3" \
5660 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5661 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5662 -c "NamedGroup: x448 ( 1e )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5663 -c "Verifying peer X.509 certificate... ok" \
5664 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5665
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5666requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5667requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5668requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5669requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5670requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5671requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5672requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5673run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5674 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5675 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5676 0 \
5677 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5678 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5679 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5680 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5681 -c "NamedGroup: x448 ( 1e )" \
5682 -c "Verifying peer X.509 certificate... ok" \
5683 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5684
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]5685requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5686requires_config_enabled MBEDTLS_SSL_CLI_C
5687requires_config_enabled MBEDTLS_DEBUG_C
5688requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5689requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5690requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]5691requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5692run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
5693 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5694 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5695 0 \
5696 -c "HTTP/1.0 200 ok" \
5697 -c "Protocol is TLSv1.3" \
5698 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5699 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5700 -c "NamedGroup: ffdhe2048 ( 100 )" \
5701 -c "Verifying peer X.509 certificate... ok" \
5702 -C "received HelloRetryRequest message"
5703
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]5704requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5705requires_config_enabled MBEDTLS_SSL_CLI_C
5706requires_config_enabled MBEDTLS_DEBUG_C
5707requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5708requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5709requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]5710requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5711run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
5712 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5713 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5714 0 \
5715 -c "HTTP/1.0 200 ok" \
5716 -c "Protocol is TLSv1.3" \
5717 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5718 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5719 -c "NamedGroup: ffdhe2048 ( 100 )" \
5720 -c "Verifying peer X.509 certificate... ok" \
5721 -C "received HelloRetryRequest message"
5722
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]5723requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5724requires_config_enabled MBEDTLS_SSL_CLI_C
5725requires_config_enabled MBEDTLS_DEBUG_C
5726requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5727requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5728requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]5729requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5730run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
5731 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5732 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5733 0 \
5734 -c "HTTP/1.0 200 ok" \
5735 -c "Protocol is TLSv1.3" \
5736 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5737 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5738 -c "NamedGroup: ffdhe2048 ( 100 )" \
5739 -c "Verifying peer X.509 certificate... ok" \
5740 -C "received HelloRetryRequest message"
5741
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]5742requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5743requires_config_enabled MBEDTLS_SSL_CLI_C
5744requires_config_enabled MBEDTLS_DEBUG_C
5745requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
5746requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
5747requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5748requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]5749requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5750run_test "TLS 1.3 m->O: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
5751 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_CHACHA20_POLY1305_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5752 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5753 0 \
5754 -c "HTTP/1.0 200 ok" \
5755 -c "Protocol is TLSv1.3" \
5756 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
5757 -c "Certificate Verify: Signature algorithm ( 0804 )" \
5758 -c "NamedGroup: ffdhe2048 ( 100 )" \
5759 -c "Verifying peer X.509 certificate... ok" \
5760 -C "received HelloRetryRequest message"
5761
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]5762requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5763requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5764requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5765requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5766requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5767requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5768run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5769 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5770 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5771 0 \
5772 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5773 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5774 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5775 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5776 -c "NamedGroup: secp256r1 ( 17 )" \
5777 -c "Verifying peer X.509 certificate... ok" \
5778 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5779
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5780requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5781requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5782requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5783requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5784requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5785requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5786run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5787 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5788 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5789 0 \
5790 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5791 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5792 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5793 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5794 -c "NamedGroup: secp256r1 ( 17 )" \
5795 -c "Verifying peer X.509 certificate... ok" \
5796 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5797
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5798requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5799requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5800requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5801requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5802requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5803requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5804run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5805 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5806 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5807 0 \
5808 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5809 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5810 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5811 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5812 -c "NamedGroup: secp256r1 ( 17 )" \
5813 -c "Verifying peer X.509 certificate... ok" \
5814 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5815
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5816requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5817requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5818requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5819requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5820requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5821requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5822requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5823run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5824 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5825 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5826 0 \
5827 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5828 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5829 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5830 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5831 -c "NamedGroup: secp256r1 ( 17 )" \
5832 -c "Verifying peer X.509 certificate... ok" \
5833 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5834
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5835requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5836requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5837requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5838requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5839requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5840requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5841run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5842 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5843 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5844 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5845 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5846 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5847 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5848 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5849 -c "NamedGroup: secp384r1 ( 18 )" \
5850 -c "Verifying peer X.509 certificate... ok" \
5851 -C "received HelloRetryRequest message"
5852
5853requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5854requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5855requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5856requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5857requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5858requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5859run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5860 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5861 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5862 0 \
5863 -c "HTTP/1.0 200 ok" \
5864 -c "Protocol is TLSv1.3" \
5865 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5866 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5867 -c "NamedGroup: secp384r1 ( 18 )" \
5868 -c "Verifying peer X.509 certificate... ok" \
5869 -C "received HelloRetryRequest message"
5870
5871requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5872requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5873requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5874requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5875requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5876requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5877run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5878 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5879 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5880 0 \
5881 -c "HTTP/1.0 200 ok" \
5882 -c "Protocol is TLSv1.3" \
5883 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5884 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5885 -c "NamedGroup: secp384r1 ( 18 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5886 -c "Verifying peer X.509 certificate... ok" \
5887 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5888
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5889requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5890requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5891requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5892requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5893requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5894requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5895requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5896run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5897 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5898 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5899 0 \
5900 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5901 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5902 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5903 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5904 -c "NamedGroup: secp384r1 ( 18 )" \
5905 -c "Verifying peer X.509 certificate... ok" \
5906 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5907
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5908requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5909requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5910requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5911requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5912requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5913requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5914run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5915 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5916 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5917 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5918 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5919 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5920 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5921 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5922 -c "NamedGroup: secp521r1 ( 19 )" \
5923 -c "Verifying peer X.509 certificate... ok" \
5924 -C "received HelloRetryRequest message"
5925
5926requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5927requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5928requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5929requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5930requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5931requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5932run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5933 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5934 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5935 0 \
5936 -c "HTTP/1.0 200 ok" \
5937 -c "Protocol is TLSv1.3" \
5938 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5939 -c "Certificate Verify: Signature algorithm ( 0503 )" \
5940 -c "NamedGroup: secp521r1 ( 19 )" \
5941 -c "Verifying peer X.509 certificate... ok" \
5942 -C "received HelloRetryRequest message"
5943
5944requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5945requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5946requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5947requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5948requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5949requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5950run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5951 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5952 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5953 0 \
5954 -c "HTTP/1.0 200 ok" \
5955 -c "Protocol is TLSv1.3" \
5956 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5957 -c "Certificate Verify: Signature algorithm ( 0603 )" \
5958 -c "NamedGroup: secp521r1 ( 19 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5959 -c "Verifying peer X.509 certificate... ok" \
5960 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5961
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5962requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5963requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5964requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5965requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5966requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5967requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5968requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]5969run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5970 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5971 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5972 0 \
5973 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5974 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5975 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
5976 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]5977 -c "NamedGroup: secp521r1 ( 19 )" \
5978 -c "Verifying peer X.509 certificate... ok" \
5979 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]5980
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5981requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]5982requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]5983requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]5984requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]5985requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]5986requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5987run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]5988 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]5989 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5990 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5991 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]5992 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]5993 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]5994 -c "Certificate Verify: Signature algorithm ( 0403 )" \
5995 -c "NamedGroup: x25519 ( 1d )" \
5996 -c "Verifying peer X.509 certificate... ok" \
5997 -C "received HelloRetryRequest message"
5998
5999requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6000requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6001requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6002requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6003requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6004requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6005run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6006 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6007 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6008 0 \
6009 -c "HTTP/1.0 200 ok" \
6010 -c "Protocol is TLSv1.3" \
6011 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6012 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6013 -c "NamedGroup: x25519 ( 1d )" \
6014 -c "Verifying peer X.509 certificate... ok" \
6015 -C "received HelloRetryRequest message"
6016
6017requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6018requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6019requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6020requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6021requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6022requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6023run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6024 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6025 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6026 0 \
6027 -c "HTTP/1.0 200 ok" \
6028 -c "Protocol is TLSv1.3" \
6029 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6030 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6031 -c "NamedGroup: x25519 ( 1d )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6032 -c "Verifying peer X.509 certificate... ok" \
6033 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6034
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6035requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6036requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6037requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6038requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6039requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6040requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6041requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6042run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6043 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6044 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6045 0 \
6046 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6047 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6048 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6049 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6050 -c "NamedGroup: x25519 ( 1d )" \
6051 -c "Verifying peer X.509 certificate... ok" \
6052 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6053
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6054requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6055requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6056requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6057requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6058requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6059requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6060run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6061 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6062 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6063 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6064 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6065 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6066 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6067 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6068 -c "NamedGroup: x448 ( 1e )" \
6069 -c "Verifying peer X.509 certificate... ok" \
6070 -C "received HelloRetryRequest message"
6071
6072requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6073requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6074requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6075requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6076requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6077requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6078run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6079 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6080 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6081 0 \
6082 -c "HTTP/1.0 200 ok" \
6083 -c "Protocol is TLSv1.3" \
6084 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6085 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6086 -c "NamedGroup: x448 ( 1e )" \
6087 -c "Verifying peer X.509 certificate... ok" \
6088 -C "received HelloRetryRequest message"
6089
6090requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6091requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6092requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6093requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6094requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6095requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6096run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6097 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6098 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6099 0 \
6100 -c "HTTP/1.0 200 ok" \
6101 -c "Protocol is TLSv1.3" \
6102 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6103 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6104 -c "NamedGroup: x448 ( 1e )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6105 -c "Verifying peer X.509 certificate... ok" \
6106 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6107
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6108requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6109requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6110requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6111requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6112requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6113requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6114requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6115run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6116 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6117 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6118 0 \
6119 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6120 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6121 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6122 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6123 -c "NamedGroup: x448 ( 1e )" \
6124 -c "Verifying peer X.509 certificate... ok" \
6125 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6126
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]6127requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6128requires_config_enabled MBEDTLS_SSL_CLI_C
6129requires_config_enabled MBEDTLS_DEBUG_C
6130requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6131requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6132requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]6133requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6134run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
6135 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6136 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6137 0 \
6138 -c "HTTP/1.0 200 ok" \
6139 -c "Protocol is TLSv1.3" \
6140 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6141 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6142 -c "NamedGroup: ffdhe2048 ( 100 )" \
6143 -c "Verifying peer X.509 certificate... ok" \
6144 -C "received HelloRetryRequest message"
6145
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]6146requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6147requires_config_enabled MBEDTLS_SSL_CLI_C
6148requires_config_enabled MBEDTLS_DEBUG_C
6149requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6150requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6151requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]6152requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6153run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
6154 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6155 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6156 0 \
6157 -c "HTTP/1.0 200 ok" \
6158 -c "Protocol is TLSv1.3" \
6159 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6160 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6161 -c "NamedGroup: ffdhe2048 ( 100 )" \
6162 -c "Verifying peer X.509 certificate... ok" \
6163 -C "received HelloRetryRequest message"
6164
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]6165requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6166requires_config_enabled MBEDTLS_SSL_CLI_C
6167requires_config_enabled MBEDTLS_DEBUG_C
6168requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6169requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6170requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]6171requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6172run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
6173 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6174 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6175 0 \
6176 -c "HTTP/1.0 200 ok" \
6177 -c "Protocol is TLSv1.3" \
6178 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6179 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6180 -c "NamedGroup: ffdhe2048 ( 100 )" \
6181 -c "Verifying peer X.509 certificate... ok" \
6182 -C "received HelloRetryRequest message"
6183
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]6184requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6185requires_config_enabled MBEDTLS_SSL_CLI_C
6186requires_config_enabled MBEDTLS_DEBUG_C
6187requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6188requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6189requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6190requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]6191requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6192run_test "TLS 1.3 m->O: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
6193 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6194 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6195 0 \
6196 -c "HTTP/1.0 200 ok" \
6197 -c "Protocol is TLSv1.3" \
6198 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
6199 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6200 -c "NamedGroup: ffdhe2048 ( 100 )" \
6201 -c "Verifying peer X.509 certificate... ok" \
6202 -C "received HelloRetryRequest message"
6203
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6204requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6205requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6206requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6207requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6208requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6209requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6210run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6211 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6212 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6213 0 \
6214 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6215 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6216 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6217 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6218 -c "NamedGroup: secp256r1 ( 17 )" \
6219 -c "Verifying peer X.509 certificate... ok" \
6220 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6221
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6222requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6223requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6224requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6225requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6226requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6227requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6228run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6229 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6230 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6231 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6232 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6233 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6234 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6235 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6236 -c "NamedGroup: secp256r1 ( 17 )" \
6237 -c "Verifying peer X.509 certificate... ok" \
6238 -C "received HelloRetryRequest message"
6239
6240requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6241requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6242requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6243requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6244requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6245requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6246run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6247 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6248 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6249 0 \
6250 -c "HTTP/1.0 200 ok" \
6251 -c "Protocol is TLSv1.3" \
6252 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6253 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6254 -c "NamedGroup: secp256r1 ( 17 )" \
6255 -c "Verifying peer X.509 certificate... ok" \
6256 -C "received HelloRetryRequest message"
6257
6258requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6259requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6260requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6261requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6262requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6263requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6264requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6265run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6266 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6267 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6268 0 \
6269 -c "HTTP/1.0 200 ok" \
6270 -c "Protocol is TLSv1.3" \
6271 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6272 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6273 -c "NamedGroup: secp256r1 ( 17 )" \
6274 -c "Verifying peer X.509 certificate... ok" \
6275 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6276
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6277requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6278requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6279requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6280requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6281requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6282requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6283run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6284 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6285 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6286 0 \
6287 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6288 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6289 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6290 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6291 -c "NamedGroup: secp384r1 ( 18 )" \
6292 -c "Verifying peer X.509 certificate... ok" \
6293 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6294
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6295requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6296requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6297requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6298requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6299requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6300requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6301run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6302 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6303 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6304 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6305 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6306 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6307 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6308 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6309 -c "NamedGroup: secp384r1 ( 18 )" \
6310 -c "Verifying peer X.509 certificate... ok" \
6311 -C "received HelloRetryRequest message"
6312
6313requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6314requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6315requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6316requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6317requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6318requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6319run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6320 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6321 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6322 0 \
6323 -c "HTTP/1.0 200 ok" \
6324 -c "Protocol is TLSv1.3" \
6325 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6326 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6327 -c "NamedGroup: secp384r1 ( 18 )" \
6328 -c "Verifying peer X.509 certificate... ok" \
6329 -C "received HelloRetryRequest message"
6330
6331requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6332requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6333requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6334requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6335requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6336requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6337requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6338run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6339 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6340 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6341 0 \
6342 -c "HTTP/1.0 200 ok" \
6343 -c "Protocol is TLSv1.3" \
6344 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6345 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6346 -c "NamedGroup: secp384r1 ( 18 )" \
6347 -c "Verifying peer X.509 certificate... ok" \
6348 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6349
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6350requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6351requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6352requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6353requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6354requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6355requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6356run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6357 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6358 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6359 0 \
6360 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6361 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6362 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6363 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6364 -c "NamedGroup: secp521r1 ( 19 )" \
6365 -c "Verifying peer X.509 certificate... ok" \
6366 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6367
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6368requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6369requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6370requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6371requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6372requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6373requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6374run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6375 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6376 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6377 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6378 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6379 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6380 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6381 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6382 -c "NamedGroup: secp521r1 ( 19 )" \
6383 -c "Verifying peer X.509 certificate... ok" \
6384 -C "received HelloRetryRequest message"
6385
6386requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6387requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6388requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6389requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6390requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6391requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6392run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6393 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6394 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6395 0 \
6396 -c "HTTP/1.0 200 ok" \
6397 -c "Protocol is TLSv1.3" \
6398 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6399 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6400 -c "NamedGroup: secp521r1 ( 19 )" \
6401 -c "Verifying peer X.509 certificate... ok" \
6402 -C "received HelloRetryRequest message"
6403
6404requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6405requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6406requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6407requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6408requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6409requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6410requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6411run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6412 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6413 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6414 0 \
6415 -c "HTTP/1.0 200 ok" \
6416 -c "Protocol is TLSv1.3" \
6417 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6418 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6419 -c "NamedGroup: secp521r1 ( 19 )" \
6420 -c "Verifying peer X.509 certificate... ok" \
6421 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6422
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6423requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6424requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6425requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6426requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6427requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6428requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6429run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6430 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6431 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6432 0 \
6433 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6434 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6435 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6436 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6437 -c "NamedGroup: x25519 ( 1d )" \
6438 -c "Verifying peer X.509 certificate... ok" \
6439 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6440
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6441requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6442requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6443requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6444requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6445requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6446requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6447run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6448 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6449 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6450 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6451 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6452 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6453 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6454 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6455 -c "NamedGroup: x25519 ( 1d )" \
6456 -c "Verifying peer X.509 certificate... ok" \
6457 -C "received HelloRetryRequest message"
6458
6459requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6460requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6461requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6462requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6463requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6464requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6465run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6466 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6467 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6468 0 \
6469 -c "HTTP/1.0 200 ok" \
6470 -c "Protocol is TLSv1.3" \
6471 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6472 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6473 -c "NamedGroup: x25519 ( 1d )" \
6474 -c "Verifying peer X.509 certificate... ok" \
6475 -C "received HelloRetryRequest message"
6476
6477requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6478requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6479requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6480requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6481requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6482requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6483requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6484run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6485 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6486 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6487 0 \
6488 -c "HTTP/1.0 200 ok" \
6489 -c "Protocol is TLSv1.3" \
6490 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6491 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6492 -c "NamedGroup: x25519 ( 1d )" \
6493 -c "Verifying peer X.509 certificate... ok" \
6494 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6495
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6496requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6497requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6498requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6499requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6500requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6501requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]6502run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6503 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6504 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6505 0 \
6506 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6507 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6508 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6509 -c "Certificate Verify: Signature algorithm ( 0403 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6510 -c "NamedGroup: x448 ( 1e )" \
6511 -c "Verifying peer X.509 certificate... ok" \
6512 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6513
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6514requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6515requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6516requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6517requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6518requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6519requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6520run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6521 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6522 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6523 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6524 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6525 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6526 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6527 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6528 -c "NamedGroup: x448 ( 1e )" \
6529 -c "Verifying peer X.509 certificate... ok" \
6530 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6531
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6532requires_openssl_tls1_3
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6533requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6534requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6535requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6536requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6537requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6538run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6539 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6540 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6541 0 \
6542 -c "HTTP/1.0 200 ok" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]6543 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6544 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6545 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6546 -c "NamedGroup: x448 ( 1e )" \
6547 -c "Verifying peer X.509 certificate... ok" \
6548 -C "received HelloRetryRequest message"
6549
6550requires_openssl_tls1_3
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6551requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6552requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6553requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6554requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6555requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6556requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6557run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]6558 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6559 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6560 0 \
6561 -c "HTTP/1.0 200 ok" \
6562 -c "Protocol is TLSv1.3" \
6563 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6564 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6565 -c "NamedGroup: x448 ( 1e )" \
6566 -c "Verifying peer X.509 certificate... ok" \
6567 -C "received HelloRetryRequest message"
6568
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]6569requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6570requires_config_enabled MBEDTLS_SSL_CLI_C
6571requires_config_enabled MBEDTLS_DEBUG_C
6572requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6573requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6574requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]6575requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6576run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
6577 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp256r1_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6578 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6579 0 \
6580 -c "HTTP/1.0 200 ok" \
6581 -c "Protocol is TLSv1.3" \
6582 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6583 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6584 -c "NamedGroup: ffdhe2048 ( 100 )" \
6585 -c "Verifying peer X.509 certificate... ok" \
6586 -C "received HelloRetryRequest message"
6587
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]6588requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6589requires_config_enabled MBEDTLS_SSL_CLI_C
6590requires_config_enabled MBEDTLS_DEBUG_C
6591requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6592requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6593requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]6594requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6595run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
6596 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp384r1.crt -key data_files/ecdsa_secp384r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp384r1_sha384 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6597 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6598 0 \
6599 -c "HTTP/1.0 200 ok" \
6600 -c "Protocol is TLSv1.3" \
6601 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6602 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6603 -c "NamedGroup: ffdhe2048 ( 100 )" \
6604 -c "Verifying peer X.509 certificate... ok" \
6605 -C "received HelloRetryRequest message"
6606
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]6607requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6608requires_config_enabled MBEDTLS_SSL_CLI_C
6609requires_config_enabled MBEDTLS_DEBUG_C
6610requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6611requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6612requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]6613requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6614run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
6615 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp521r1.crt -key data_files/ecdsa_secp521r1.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs ecdsa_secp521r1_sha512 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6616 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6617 0 \
6618 -c "HTTP/1.0 200 ok" \
6619 -c "Protocol is TLSv1.3" \
6620 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6621 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6622 -c "NamedGroup: ffdhe2048 ( 100 )" \
6623 -c "Verifying peer X.509 certificate... ok" \
6624 -C "received HelloRetryRequest message"
6625
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]6626requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6627requires_config_enabled MBEDTLS_SSL_CLI_C
6628requires_config_enabled MBEDTLS_DEBUG_C
6629requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
6630requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6631requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6632requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]6633requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6634run_test "TLS 1.3 m->O: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
6635 "$O_NEXT_SRV_NO_CERT -cert data_files/server2-sha256.crt -key data_files/server2.key -ciphersuites TLS_AES_128_CCM_8_SHA256 -sigalgs rsa_pss_rsae_sha256 -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6636 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]6637 0 \
6638 -c "HTTP/1.0 200 ok" \
6639 -c "Protocol is TLSv1.3" \
6640 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
6641 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6642 -c "NamedGroup: ffdhe2048 ( 100 )" \
6643 -c "Verifying peer X.509 certificate... ok" \
6644 -C "received HelloRetryRequest message"
6645
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6646requires_gnutls_tls1_3
6647requires_gnutls_next_no_ticket
6648requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6649requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6650requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6651requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6652requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6653requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6654run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6655 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6656 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6657 0 \
6658 -c "HTTP/1.0 200 OK" \
6659 -c "Protocol is TLSv1.3" \
6660 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6661 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6662 -c "NamedGroup: secp256r1 ( 17 )" \
6663 -c "Verifying peer X.509 certificate... ok" \
6664 -C "received HelloRetryRequest message"
6665
6666requires_gnutls_tls1_3
6667requires_gnutls_next_no_ticket
6668requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6669requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6670requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6671requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6672requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6673requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6674run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6675 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6676 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6677 0 \
6678 -c "HTTP/1.0 200 OK" \
6679 -c "Protocol is TLSv1.3" \
6680 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]6681 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]6682 -c "NamedGroup: secp256r1 ( 17 )" \
6683 -c "Verifying peer X.509 certificate... ok" \
6684 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]6685
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6686requires_gnutls_tls1_3
6687requires_gnutls_next_no_ticket
6688requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]6689requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6690requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6691requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]6692requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6693requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6694run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6695 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6696 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6697 0 \
6698 -c "HTTP/1.0 200 OK" \
6699 -c "Protocol is TLSv1.3" \
6700 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6701 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6702 -c "NamedGroup: secp256r1 ( 17 )" \
6703 -c "Verifying peer X.509 certificate... ok" \
6704 -C "received HelloRetryRequest message"
6705
6706requires_gnutls_tls1_3
6707requires_gnutls_next_no_ticket
6708requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6709requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6710requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6711requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6712requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6713requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6714requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6715run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6716 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6717 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6718 0 \
6719 -c "HTTP/1.0 200 OK" \
6720 -c "Protocol is TLSv1.3" \
6721 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6722 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6723 -c "NamedGroup: secp256r1 ( 17 )" \
6724 -c "Verifying peer X.509 certificate... ok" \
6725 -C "received HelloRetryRequest message"
6726
6727requires_gnutls_tls1_3
6728requires_gnutls_next_no_ticket
6729requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6730requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6731requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6732requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6733requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6734requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6735run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6736 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6737 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6738 0 \
6739 -c "HTTP/1.0 200 OK" \
6740 -c "Protocol is TLSv1.3" \
6741 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6742 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6743 -c "NamedGroup: secp384r1 ( 18 )" \
6744 -c "Verifying peer X.509 certificate... ok" \
6745 -C "received HelloRetryRequest message"
6746
6747requires_gnutls_tls1_3
6748requires_gnutls_next_no_ticket
6749requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6750requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6751requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6752requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6753requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6754requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6755run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6756 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6757 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6758 0 \
6759 -c "HTTP/1.0 200 OK" \
6760 -c "Protocol is TLSv1.3" \
6761 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6762 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6763 -c "NamedGroup: secp384r1 ( 18 )" \
6764 -c "Verifying peer X.509 certificate... ok" \
6765 -C "received HelloRetryRequest message"
6766
6767requires_gnutls_tls1_3
6768requires_gnutls_next_no_ticket
6769requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6770requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6771requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6772requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6773requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6774requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6775run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6776 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6777 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6778 0 \
6779 -c "HTTP/1.0 200 OK" \
6780 -c "Protocol is TLSv1.3" \
6781 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6782 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6783 -c "NamedGroup: secp384r1 ( 18 )" \
6784 -c "Verifying peer X.509 certificate... ok" \
6785 -C "received HelloRetryRequest message"
6786
6787requires_gnutls_tls1_3
6788requires_gnutls_next_no_ticket
6789requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6790requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6791requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6792requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6793requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6794requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6795requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6796run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6797 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6798 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6799 0 \
6800 -c "HTTP/1.0 200 OK" \
6801 -c "Protocol is TLSv1.3" \
6802 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6803 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6804 -c "NamedGroup: secp384r1 ( 18 )" \
6805 -c "Verifying peer X.509 certificate... ok" \
6806 -C "received HelloRetryRequest message"
6807
6808requires_gnutls_tls1_3
6809requires_gnutls_next_no_ticket
6810requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6811requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6812requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6813requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6814requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6815requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6816run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6817 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6818 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6819 0 \
6820 -c "HTTP/1.0 200 OK" \
6821 -c "Protocol is TLSv1.3" \
6822 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6823 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6824 -c "NamedGroup: secp521r1 ( 19 )" \
6825 -c "Verifying peer X.509 certificate... ok" \
6826 -C "received HelloRetryRequest message"
6827
6828requires_gnutls_tls1_3
6829requires_gnutls_next_no_ticket
6830requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6831requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6832requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6833requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6834requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6835requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6836run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6837 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6838 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6839 0 \
6840 -c "HTTP/1.0 200 OK" \
6841 -c "Protocol is TLSv1.3" \
6842 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6843 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6844 -c "NamedGroup: secp521r1 ( 19 )" \
6845 -c "Verifying peer X.509 certificate... ok" \
6846 -C "received HelloRetryRequest message"
6847
6848requires_gnutls_tls1_3
6849requires_gnutls_next_no_ticket
6850requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6851requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6852requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6853requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6854requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6855requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6856run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6857 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6858 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6859 0 \
6860 -c "HTTP/1.0 200 OK" \
6861 -c "Protocol is TLSv1.3" \
6862 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6863 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6864 -c "NamedGroup: secp521r1 ( 19 )" \
6865 -c "Verifying peer X.509 certificate... ok" \
6866 -C "received HelloRetryRequest message"
6867
6868requires_gnutls_tls1_3
6869requires_gnutls_next_no_ticket
6870requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6871requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6872requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6873requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6874requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6875requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6876requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6877run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6878 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6879 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6880 0 \
6881 -c "HTTP/1.0 200 OK" \
6882 -c "Protocol is TLSv1.3" \
6883 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6884 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6885 -c "NamedGroup: secp521r1 ( 19 )" \
6886 -c "Verifying peer X.509 certificate... ok" \
6887 -C "received HelloRetryRequest message"
6888
6889requires_gnutls_tls1_3
6890requires_gnutls_next_no_ticket
6891requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6892requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6893requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6894requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6895requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6896requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6897run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6898 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6899 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6900 0 \
6901 -c "HTTP/1.0 200 OK" \
6902 -c "Protocol is TLSv1.3" \
6903 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6904 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6905 -c "NamedGroup: x25519 ( 1d )" \
6906 -c "Verifying peer X.509 certificate... ok" \
6907 -C "received HelloRetryRequest message"
6908
6909requires_gnutls_tls1_3
6910requires_gnutls_next_no_ticket
6911requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6912requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6913requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6914requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6915requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6916requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6917run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6918 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6919 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6920 0 \
6921 -c "HTTP/1.0 200 OK" \
6922 -c "Protocol is TLSv1.3" \
6923 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6924 -c "Certificate Verify: Signature algorithm ( 0503 )" \
6925 -c "NamedGroup: x25519 ( 1d )" \
6926 -c "Verifying peer X.509 certificate... ok" \
6927 -C "received HelloRetryRequest message"
6928
6929requires_gnutls_tls1_3
6930requires_gnutls_next_no_ticket
6931requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6932requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6933requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6934requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6935requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6936requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6937run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6938 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6939 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6940 0 \
6941 -c "HTTP/1.0 200 OK" \
6942 -c "Protocol is TLSv1.3" \
6943 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6944 -c "Certificate Verify: Signature algorithm ( 0603 )" \
6945 -c "NamedGroup: x25519 ( 1d )" \
6946 -c "Verifying peer X.509 certificate... ok" \
6947 -C "received HelloRetryRequest message"
6948
6949requires_gnutls_tls1_3
6950requires_gnutls_next_no_ticket
6951requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6952requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6953requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6954requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6955requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
6956requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6957requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6958run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6959 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6960 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6961 0 \
6962 -c "HTTP/1.0 200 OK" \
6963 -c "Protocol is TLSv1.3" \
6964 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6965 -c "Certificate Verify: Signature algorithm ( 0804 )" \
6966 -c "NamedGroup: x25519 ( 1d )" \
6967 -c "Verifying peer X.509 certificate... ok" \
6968 -C "received HelloRetryRequest message"
6969
6970requires_gnutls_tls1_3
6971requires_gnutls_next_no_ticket
6972requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6973requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6974requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6975requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6976requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6977requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6978run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6979 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]6980 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6981 0 \
6982 -c "HTTP/1.0 200 OK" \
6983 -c "Protocol is TLSv1.3" \
6984 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
6985 -c "Certificate Verify: Signature algorithm ( 0403 )" \
6986 -c "NamedGroup: x448 ( 1e )" \
6987 -c "Verifying peer X.509 certificate... ok" \
6988 -C "received HelloRetryRequest message"
6989
6990requires_gnutls_tls1_3
6991requires_gnutls_next_no_ticket
6992requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6993requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]6994requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]6995requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6996requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]6997requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]6998run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]6999 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7000 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7001 0 \
7002 -c "HTTP/1.0 200 OK" \
7003 -c "Protocol is TLSv1.3" \
7004 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7005 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7006 -c "NamedGroup: x448 ( 1e )" \
7007 -c "Verifying peer X.509 certificate... ok" \
7008 -C "received HelloRetryRequest message"
7009
7010requires_gnutls_tls1_3
7011requires_gnutls_next_no_ticket
7012requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7013requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7014requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7015requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7016requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7017requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7018run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7019 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7020 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7021 0 \
7022 -c "HTTP/1.0 200 OK" \
7023 -c "Protocol is TLSv1.3" \
7024 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7025 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7026 -c "NamedGroup: x448 ( 1e )" \
7027 -c "Verifying peer X.509 certificate... ok" \
7028 -C "received HelloRetryRequest message"
7029
7030requires_gnutls_tls1_3
7031requires_gnutls_next_no_ticket
7032requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7033requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7034requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7035requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7036requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7037requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7038requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7039run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7040 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7041 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7042 0 \
7043 -c "HTTP/1.0 200 OK" \
7044 -c "Protocol is TLSv1.3" \
7045 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7046 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7047 -c "NamedGroup: x448 ( 1e )" \
7048 -c "Verifying peer X.509 certificate... ok" \
7049 -C "received HelloRetryRequest message"
7050
7051requires_gnutls_tls1_3
7052requires_gnutls_next_no_ticket
7053requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7054requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7055requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7056requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7057requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7058requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]7059requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7060run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
7061 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7062 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7063 0 \
7064 -c "HTTP/1.0 200 OK" \
7065 -c "Protocol is TLSv1.3" \
7066 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7067 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7068 -c "NamedGroup: ffdhe2048 ( 100 )" \
7069 -c "Verifying peer X.509 certificate... ok" \
7070 -C "received HelloRetryRequest message"
7071
7072requires_gnutls_tls1_3
7073requires_gnutls_next_no_ticket
7074requires_gnutls_next_disable_tls13_compat
7075requires_config_enabled MBEDTLS_SSL_CLI_C
7076requires_config_enabled MBEDTLS_DEBUG_C
7077requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7078requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7079requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]7080requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7081run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
7082 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7083 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7084 0 \
7085 -c "HTTP/1.0 200 OK" \
7086 -c "Protocol is TLSv1.3" \
7087 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7088 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7089 -c "NamedGroup: ffdhe2048 ( 100 )" \
7090 -c "Verifying peer X.509 certificate... ok" \
7091 -C "received HelloRetryRequest message"
7092
7093requires_gnutls_tls1_3
7094requires_gnutls_next_no_ticket
7095requires_gnutls_next_disable_tls13_compat
7096requires_config_enabled MBEDTLS_SSL_CLI_C
7097requires_config_enabled MBEDTLS_DEBUG_C
7098requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7099requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7100requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]7101requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7102run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
7103 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7104 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7105 0 \
7106 -c "HTTP/1.0 200 OK" \
7107 -c "Protocol is TLSv1.3" \
7108 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7109 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7110 -c "NamedGroup: ffdhe2048 ( 100 )" \
7111 -c "Verifying peer X.509 certificate... ok" \
7112 -C "received HelloRetryRequest message"
7113
7114requires_gnutls_tls1_3
7115requires_gnutls_next_no_ticket
7116requires_gnutls_next_disable_tls13_compat
7117requires_config_enabled MBEDTLS_SSL_CLI_C
7118requires_config_enabled MBEDTLS_DEBUG_C
7119requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7120requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7121requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7122requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]7123requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7124run_test "TLS 1.3 m->G: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
7125 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-GCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7126 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7127 0 \
7128 -c "HTTP/1.0 200 OK" \
7129 -c "Protocol is TLSv1.3" \
7130 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
7131 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7132 -c "NamedGroup: ffdhe2048 ( 100 )" \
7133 -c "Verifying peer X.509 certificate... ok" \
7134 -C "received HelloRetryRequest message"
7135
7136requires_gnutls_tls1_3
7137requires_gnutls_next_no_ticket
7138requires_gnutls_next_disable_tls13_compat
7139requires_config_enabled MBEDTLS_SSL_CLI_C
7140requires_config_enabled MBEDTLS_DEBUG_C
7141requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7142requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7143requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7144run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7145 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7146 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7147 0 \
7148 -c "HTTP/1.0 200 OK" \
7149 -c "Protocol is TLSv1.3" \
7150 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7151 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7152 -c "NamedGroup: secp256r1 ( 17 )" \
7153 -c "Verifying peer X.509 certificate... ok" \
7154 -C "received HelloRetryRequest message"
7155
7156requires_gnutls_tls1_3
7157requires_gnutls_next_no_ticket
7158requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7159requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7160requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7161requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7162requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7163requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7164run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7165 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7166 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7167 0 \
7168 -c "HTTP/1.0 200 OK" \
7169 -c "Protocol is TLSv1.3" \
7170 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7171 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7172 -c "NamedGroup: secp256r1 ( 17 )" \
7173 -c "Verifying peer X.509 certificate... ok" \
7174 -C "received HelloRetryRequest message"
7175
7176requires_gnutls_tls1_3
7177requires_gnutls_next_no_ticket
7178requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7179requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7180requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7181requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7182requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7183requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7184run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7185 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7186 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7187 0 \
7188 -c "HTTP/1.0 200 OK" \
7189 -c "Protocol is TLSv1.3" \
7190 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7191 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7192 -c "NamedGroup: secp256r1 ( 17 )" \
7193 -c "Verifying peer X.509 certificate... ok" \
7194 -C "received HelloRetryRequest message"
7195
7196requires_gnutls_tls1_3
7197requires_gnutls_next_no_ticket
7198requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7199requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7200requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7201requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7202requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7203requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7204requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7205run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7206 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7207 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7208 0 \
7209 -c "HTTP/1.0 200 OK" \
7210 -c "Protocol is TLSv1.3" \
7211 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7212 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7213 -c "NamedGroup: secp256r1 ( 17 )" \
7214 -c "Verifying peer X.509 certificate... ok" \
7215 -C "received HelloRetryRequest message"
7216
7217requires_gnutls_tls1_3
7218requires_gnutls_next_no_ticket
7219requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7220requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7221requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7222requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7223requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7224requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7225run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7226 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7227 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7228 0 \
7229 -c "HTTP/1.0 200 OK" \
7230 -c "Protocol is TLSv1.3" \
7231 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7232 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7233 -c "NamedGroup: secp384r1 ( 18 )" \
7234 -c "Verifying peer X.509 certificate... ok" \
7235 -C "received HelloRetryRequest message"
7236
7237requires_gnutls_tls1_3
7238requires_gnutls_next_no_ticket
7239requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7240requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7241requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7242requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7243requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7244requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7245run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7246 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7247 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7248 0 \
7249 -c "HTTP/1.0 200 OK" \
7250 -c "Protocol is TLSv1.3" \
7251 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7252 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7253 -c "NamedGroup: secp384r1 ( 18 )" \
7254 -c "Verifying peer X.509 certificate... ok" \
7255 -C "received HelloRetryRequest message"
7256
7257requires_gnutls_tls1_3
7258requires_gnutls_next_no_ticket
7259requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7260requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7261requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7262requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7263requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7264requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7265run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7266 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7267 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7268 0 \
7269 -c "HTTP/1.0 200 OK" \
7270 -c "Protocol is TLSv1.3" \
7271 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7272 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7273 -c "NamedGroup: secp384r1 ( 18 )" \
7274 -c "Verifying peer X.509 certificate... ok" \
7275 -C "received HelloRetryRequest message"
7276
7277requires_gnutls_tls1_3
7278requires_gnutls_next_no_ticket
7279requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7280requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7281requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7282requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7283requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7284requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7285requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7286run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7287 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7288 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7289 0 \
7290 -c "HTTP/1.0 200 OK" \
7291 -c "Protocol is TLSv1.3" \
7292 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7293 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7294 -c "NamedGroup: secp384r1 ( 18 )" \
7295 -c "Verifying peer X.509 certificate... ok" \
7296 -C "received HelloRetryRequest message"
7297
7298requires_gnutls_tls1_3
7299requires_gnutls_next_no_ticket
7300requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7301requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7302requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7303requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7304requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7305requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7306run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7307 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7308 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7309 0 \
7310 -c "HTTP/1.0 200 OK" \
7311 -c "Protocol is TLSv1.3" \
7312 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7313 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7314 -c "NamedGroup: secp521r1 ( 19 )" \
7315 -c "Verifying peer X.509 certificate... ok" \
7316 -C "received HelloRetryRequest message"
7317
7318requires_gnutls_tls1_3
7319requires_gnutls_next_no_ticket
7320requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7321requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7322requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7323requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7324requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7325requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7326run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7327 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7328 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7329 0 \
7330 -c "HTTP/1.0 200 OK" \
7331 -c "Protocol is TLSv1.3" \
7332 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7333 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7334 -c "NamedGroup: secp521r1 ( 19 )" \
7335 -c "Verifying peer X.509 certificate... ok" \
7336 -C "received HelloRetryRequest message"
7337
7338requires_gnutls_tls1_3
7339requires_gnutls_next_no_ticket
7340requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7341requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7342requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7343requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7344requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7345requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7346run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7347 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7348 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7349 0 \
7350 -c "HTTP/1.0 200 OK" \
7351 -c "Protocol is TLSv1.3" \
7352 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7353 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7354 -c "NamedGroup: secp521r1 ( 19 )" \
7355 -c "Verifying peer X.509 certificate... ok" \
7356 -C "received HelloRetryRequest message"
7357
7358requires_gnutls_tls1_3
7359requires_gnutls_next_no_ticket
7360requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7361requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7362requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7363requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7364requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7365requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7366requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7367run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7368 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7369 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7370 0 \
7371 -c "HTTP/1.0 200 OK" \
7372 -c "Protocol is TLSv1.3" \
7373 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7374 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7375 -c "NamedGroup: secp521r1 ( 19 )" \
7376 -c "Verifying peer X.509 certificate... ok" \
7377 -C "received HelloRetryRequest message"
7378
7379requires_gnutls_tls1_3
7380requires_gnutls_next_no_ticket
7381requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7382requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7383requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7384requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7385requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7386requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7387run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7388 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7389 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7390 0 \
7391 -c "HTTP/1.0 200 OK" \
7392 -c "Protocol is TLSv1.3" \
7393 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7394 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7395 -c "NamedGroup: x25519 ( 1d )" \
7396 -c "Verifying peer X.509 certificate... ok" \
7397 -C "received HelloRetryRequest message"
7398
7399requires_gnutls_tls1_3
7400requires_gnutls_next_no_ticket
7401requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7402requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7403requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7404requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7405requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7406requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7407run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7408 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7409 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7410 0 \
7411 -c "HTTP/1.0 200 OK" \
7412 -c "Protocol is TLSv1.3" \
7413 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7414 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7415 -c "NamedGroup: x25519 ( 1d )" \
7416 -c "Verifying peer X.509 certificate... ok" \
7417 -C "received HelloRetryRequest message"
7418
7419requires_gnutls_tls1_3
7420requires_gnutls_next_no_ticket
7421requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7422requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7423requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7424requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7425requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7426requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7427run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7428 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7429 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7430 0 \
7431 -c "HTTP/1.0 200 OK" \
7432 -c "Protocol is TLSv1.3" \
7433 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7434 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7435 -c "NamedGroup: x25519 ( 1d )" \
7436 -c "Verifying peer X.509 certificate... ok" \
7437 -C "received HelloRetryRequest message"
7438
7439requires_gnutls_tls1_3
7440requires_gnutls_next_no_ticket
7441requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7442requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7443requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7444requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7445requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7446requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7447requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7448run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7449 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7450 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7451 0 \
7452 -c "HTTP/1.0 200 OK" \
7453 -c "Protocol is TLSv1.3" \
7454 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7455 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7456 -c "NamedGroup: x25519 ( 1d )" \
7457 -c "Verifying peer X.509 certificate... ok" \
7458 -C "received HelloRetryRequest message"
7459
7460requires_gnutls_tls1_3
7461requires_gnutls_next_no_ticket
7462requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7463requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7464requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7465requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7466requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7467requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7468run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7469 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7470 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7471 0 \
7472 -c "HTTP/1.0 200 OK" \
7473 -c "Protocol is TLSv1.3" \
7474 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7475 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7476 -c "NamedGroup: x448 ( 1e )" \
7477 -c "Verifying peer X.509 certificate... ok" \
7478 -C "received HelloRetryRequest message"
7479
7480requires_gnutls_tls1_3
7481requires_gnutls_next_no_ticket
7482requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7483requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7484requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7485requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7486requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7487requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7488run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7489 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7490 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7491 0 \
7492 -c "HTTP/1.0 200 OK" \
7493 -c "Protocol is TLSv1.3" \
7494 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7495 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7496 -c "NamedGroup: x448 ( 1e )" \
7497 -c "Verifying peer X.509 certificate... ok" \
7498 -C "received HelloRetryRequest message"
7499
7500requires_gnutls_tls1_3
7501requires_gnutls_next_no_ticket
7502requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7503requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7504requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7505requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7506requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7507requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7508run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7509 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7510 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7511 0 \
7512 -c "HTTP/1.0 200 OK" \
7513 -c "Protocol is TLSv1.3" \
7514 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7515 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7516 -c "NamedGroup: x448 ( 1e )" \
7517 -c "Verifying peer X.509 certificate... ok" \
7518 -C "received HelloRetryRequest message"
7519
7520requires_gnutls_tls1_3
7521requires_gnutls_next_no_ticket
7522requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7523requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7524requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7525requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7526requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7527requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7528requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7529run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7530 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7531 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7532 0 \
7533 -c "HTTP/1.0 200 OK" \
7534 -c "Protocol is TLSv1.3" \
7535 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7536 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7537 -c "NamedGroup: x448 ( 1e )" \
7538 -c "Verifying peer X.509 certificate... ok" \
7539 -C "received HelloRetryRequest message"
7540
7541requires_gnutls_tls1_3
7542requires_gnutls_next_no_ticket
7543requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7544requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7545requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7546requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7547requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7548requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]7549requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7550run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
7551 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7552 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7553 0 \
7554 -c "HTTP/1.0 200 OK" \
7555 -c "Protocol is TLSv1.3" \
7556 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7557 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7558 -c "NamedGroup: ffdhe2048 ( 100 )" \
7559 -c "Verifying peer X.509 certificate... ok" \
7560 -C "received HelloRetryRequest message"
7561
7562requires_gnutls_tls1_3
7563requires_gnutls_next_no_ticket
7564requires_gnutls_next_disable_tls13_compat
7565requires_config_enabled MBEDTLS_SSL_CLI_C
7566requires_config_enabled MBEDTLS_DEBUG_C
7567requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7568requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7569requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]7570requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7571run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
7572 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7573 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7574 0 \
7575 -c "HTTP/1.0 200 OK" \
7576 -c "Protocol is TLSv1.3" \
7577 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7578 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7579 -c "NamedGroup: ffdhe2048 ( 100 )" \
7580 -c "Verifying peer X.509 certificate... ok" \
7581 -C "received HelloRetryRequest message"
7582
7583requires_gnutls_tls1_3
7584requires_gnutls_next_no_ticket
7585requires_gnutls_next_disable_tls13_compat
7586requires_config_enabled MBEDTLS_SSL_CLI_C
7587requires_config_enabled MBEDTLS_DEBUG_C
7588requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7589requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7590requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]7591requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7592run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
7593 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7594 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7595 0 \
7596 -c "HTTP/1.0 200 OK" \
7597 -c "Protocol is TLSv1.3" \
7598 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7599 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7600 -c "NamedGroup: ffdhe2048 ( 100 )" \
7601 -c "Verifying peer X.509 certificate... ok" \
7602 -C "received HelloRetryRequest message"
7603
7604requires_gnutls_tls1_3
7605requires_gnutls_next_no_ticket
7606requires_gnutls_next_disable_tls13_compat
7607requires_config_enabled MBEDTLS_SSL_CLI_C
7608requires_config_enabled MBEDTLS_DEBUG_C
7609requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7610requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7611requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7612requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]7613requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7614run_test "TLS 1.3 m->G: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
7615 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-256-GCM:+SHA384:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7616 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]7617 0 \
7618 -c "HTTP/1.0 200 OK" \
7619 -c "Protocol is TLSv1.3" \
7620 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
7621 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7622 -c "NamedGroup: ffdhe2048 ( 100 )" \
7623 -c "Verifying peer X.509 certificate... ok" \
7624 -C "received HelloRetryRequest message"
7625
7626requires_gnutls_tls1_3
7627requires_gnutls_next_no_ticket
7628requires_gnutls_next_disable_tls13_compat
7629requires_config_enabled MBEDTLS_SSL_CLI_C
7630requires_config_enabled MBEDTLS_DEBUG_C
7631requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
7632requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7633requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7634run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7635 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7636 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7637 0 \
7638 -c "HTTP/1.0 200 OK" \
7639 -c "Protocol is TLSv1.3" \
7640 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7641 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7642 -c "NamedGroup: secp256r1 ( 17 )" \
7643 -c "Verifying peer X.509 certificate... ok" \
7644 -C "received HelloRetryRequest message"
7645
7646requires_gnutls_tls1_3
7647requires_gnutls_next_no_ticket
7648requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7649requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7650requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7651requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7652requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7653requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7654run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7655 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7656 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7657 0 \
7658 -c "HTTP/1.0 200 OK" \
7659 -c "Protocol is TLSv1.3" \
7660 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7661 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7662 -c "NamedGroup: secp256r1 ( 17 )" \
7663 -c "Verifying peer X.509 certificate... ok" \
7664 -C "received HelloRetryRequest message"
7665
7666requires_gnutls_tls1_3
7667requires_gnutls_next_no_ticket
7668requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7669requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7670requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7671requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7672requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7673requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7674run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7675 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7676 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7677 0 \
7678 -c "HTTP/1.0 200 OK" \
7679 -c "Protocol is TLSv1.3" \
7680 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7681 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7682 -c "NamedGroup: secp256r1 ( 17 )" \
7683 -c "Verifying peer X.509 certificate... ok" \
7684 -C "received HelloRetryRequest message"
7685
7686requires_gnutls_tls1_3
7687requires_gnutls_next_no_ticket
7688requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7689requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7690requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7691requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7692requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7693requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7694requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7695run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7696 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7697 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7698 0 \
7699 -c "HTTP/1.0 200 OK" \
7700 -c "Protocol is TLSv1.3" \
7701 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7702 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7703 -c "NamedGroup: secp256r1 ( 17 )" \
7704 -c "Verifying peer X.509 certificate... ok" \
7705 -C "received HelloRetryRequest message"
7706
7707requires_gnutls_tls1_3
7708requires_gnutls_next_no_ticket
7709requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7710requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7711requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7712requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7713requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7714requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7715run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7716 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7717 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7718 0 \
7719 -c "HTTP/1.0 200 OK" \
7720 -c "Protocol is TLSv1.3" \
7721 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7722 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7723 -c "NamedGroup: secp384r1 ( 18 )" \
7724 -c "Verifying peer X.509 certificate... ok" \
7725 -C "received HelloRetryRequest message"
7726
7727requires_gnutls_tls1_3
7728requires_gnutls_next_no_ticket
7729requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7730requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7731requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7732requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7733requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7734requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7735run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7736 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7737 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7738 0 \
7739 -c "HTTP/1.0 200 OK" \
7740 -c "Protocol is TLSv1.3" \
7741 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7742 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7743 -c "NamedGroup: secp384r1 ( 18 )" \
7744 -c "Verifying peer X.509 certificate... ok" \
7745 -C "received HelloRetryRequest message"
7746
7747requires_gnutls_tls1_3
7748requires_gnutls_next_no_ticket
7749requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7750requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7751requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7752requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7753requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7754requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7755run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7756 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7757 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7758 0 \
7759 -c "HTTP/1.0 200 OK" \
7760 -c "Protocol is TLSv1.3" \
7761 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7762 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7763 -c "NamedGroup: secp384r1 ( 18 )" \
7764 -c "Verifying peer X.509 certificate... ok" \
7765 -C "received HelloRetryRequest message"
7766
7767requires_gnutls_tls1_3
7768requires_gnutls_next_no_ticket
7769requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7770requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7771requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7772requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7773requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7774requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7775requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7776run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7777 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7778 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7779 0 \
7780 -c "HTTP/1.0 200 OK" \
7781 -c "Protocol is TLSv1.3" \
7782 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7783 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7784 -c "NamedGroup: secp384r1 ( 18 )" \
7785 -c "Verifying peer X.509 certificate... ok" \
7786 -C "received HelloRetryRequest message"
7787
7788requires_gnutls_tls1_3
7789requires_gnutls_next_no_ticket
7790requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7791requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7792requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7793requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7794requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7795requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7796run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7797 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7798 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7799 0 \
7800 -c "HTTP/1.0 200 OK" \
7801 -c "Protocol is TLSv1.3" \
7802 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7803 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7804 -c "NamedGroup: secp521r1 ( 19 )" \
7805 -c "Verifying peer X.509 certificate... ok" \
7806 -C "received HelloRetryRequest message"
7807
7808requires_gnutls_tls1_3
7809requires_gnutls_next_no_ticket
7810requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7811requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7812requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7813requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7814requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7815requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7816run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7817 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7818 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7819 0 \
7820 -c "HTTP/1.0 200 OK" \
7821 -c "Protocol is TLSv1.3" \
7822 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7823 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7824 -c "NamedGroup: secp521r1 ( 19 )" \
7825 -c "Verifying peer X.509 certificate... ok" \
7826 -C "received HelloRetryRequest message"
7827
7828requires_gnutls_tls1_3
7829requires_gnutls_next_no_ticket
7830requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7831requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7832requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7833requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7834requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7835requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7836run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7837 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7838 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7839 0 \
7840 -c "HTTP/1.0 200 OK" \
7841 -c "Protocol is TLSv1.3" \
7842 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7843 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7844 -c "NamedGroup: secp521r1 ( 19 )" \
7845 -c "Verifying peer X.509 certificate... ok" \
7846 -C "received HelloRetryRequest message"
7847
7848requires_gnutls_tls1_3
7849requires_gnutls_next_no_ticket
7850requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7851requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7852requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7853requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7854requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7855requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7856requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7857run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7858 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7859 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7860 0 \
7861 -c "HTTP/1.0 200 OK" \
7862 -c "Protocol is TLSv1.3" \
7863 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7864 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7865 -c "NamedGroup: secp521r1 ( 19 )" \
7866 -c "Verifying peer X.509 certificate... ok" \
7867 -C "received HelloRetryRequest message"
7868
7869requires_gnutls_tls1_3
7870requires_gnutls_next_no_ticket
7871requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7872requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7873requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7874requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7875requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7876requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7877run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7878 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7879 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7880 0 \
7881 -c "HTTP/1.0 200 OK" \
7882 -c "Protocol is TLSv1.3" \
7883 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7884 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7885 -c "NamedGroup: x25519 ( 1d )" \
7886 -c "Verifying peer X.509 certificate... ok" \
7887 -C "received HelloRetryRequest message"
7888
7889requires_gnutls_tls1_3
7890requires_gnutls_next_no_ticket
7891requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7892requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7893requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7894requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7895requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7896requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7897run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7898 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7899 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7900 0 \
7901 -c "HTTP/1.0 200 OK" \
7902 -c "Protocol is TLSv1.3" \
7903 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7904 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7905 -c "NamedGroup: x25519 ( 1d )" \
7906 -c "Verifying peer X.509 certificate... ok" \
7907 -C "received HelloRetryRequest message"
7908
7909requires_gnutls_tls1_3
7910requires_gnutls_next_no_ticket
7911requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7912requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7913requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7914requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7915requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7916requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7917run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7918 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7919 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7920 0 \
7921 -c "HTTP/1.0 200 OK" \
7922 -c "Protocol is TLSv1.3" \
7923 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7924 -c "Certificate Verify: Signature algorithm ( 0603 )" \
7925 -c "NamedGroup: x25519 ( 1d )" \
7926 -c "Verifying peer X.509 certificate... ok" \
7927 -C "received HelloRetryRequest message"
7928
7929requires_gnutls_tls1_3
7930requires_gnutls_next_no_ticket
7931requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7932requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7933requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7934requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7935requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
7936requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7937requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7938run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7939 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7940 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7941 0 \
7942 -c "HTTP/1.0 200 OK" \
7943 -c "Protocol is TLSv1.3" \
7944 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7945 -c "Certificate Verify: Signature algorithm ( 0804 )" \
7946 -c "NamedGroup: x25519 ( 1d )" \
7947 -c "Verifying peer X.509 certificate... ok" \
7948 -C "received HelloRetryRequest message"
7949
7950requires_gnutls_tls1_3
7951requires_gnutls_next_no_ticket
7952requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7953requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7954requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7955requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7956requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7957requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7958run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7959 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7960 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7961 0 \
7962 -c "HTTP/1.0 200 OK" \
7963 -c "Protocol is TLSv1.3" \
7964 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7965 -c "Certificate Verify: Signature algorithm ( 0403 )" \
7966 -c "NamedGroup: x448 ( 1e )" \
7967 -c "Verifying peer X.509 certificate... ok" \
7968 -C "received HelloRetryRequest message"
7969
7970requires_gnutls_tls1_3
7971requires_gnutls_next_no_ticket
7972requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7973requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7974requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7975requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7976requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7977requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7978run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7979 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]7980 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7981 0 \
7982 -c "HTTP/1.0 200 OK" \
7983 -c "Protocol is TLSv1.3" \
7984 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
7985 -c "Certificate Verify: Signature algorithm ( 0503 )" \
7986 -c "NamedGroup: x448 ( 1e )" \
7987 -c "Verifying peer X.509 certificate... ok" \
7988 -C "received HelloRetryRequest message"
7989
7990requires_gnutls_tls1_3
7991requires_gnutls_next_no_ticket
7992requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7993requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]7994requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]7995requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7996requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]7997requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]7998run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]7999 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8000 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8001 0 \
8002 -c "HTTP/1.0 200 OK" \
8003 -c "Protocol is TLSv1.3" \
8004 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8005 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8006 -c "NamedGroup: x448 ( 1e )" \
8007 -c "Verifying peer X.509 certificate... ok" \
8008 -C "received HelloRetryRequest message"
8009
8010requires_gnutls_tls1_3
8011requires_gnutls_next_no_ticket
8012requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8013requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8014requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8015requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8016requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8017requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8018requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8019run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8020 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8021 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8022 0 \
8023 -c "HTTP/1.0 200 OK" \
8024 -c "Protocol is TLSv1.3" \
8025 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8026 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8027 -c "NamedGroup: x448 ( 1e )" \
8028 -c "Verifying peer X.509 certificate... ok" \
8029 -C "received HelloRetryRequest message"
8030
8031requires_gnutls_tls1_3
8032requires_gnutls_next_no_ticket
8033requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8034requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8035requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8036requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8037requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8038requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]8039requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8040run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
8041 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8042 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8043 0 \
8044 -c "HTTP/1.0 200 OK" \
8045 -c "Protocol is TLSv1.3" \
8046 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8047 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8048 -c "NamedGroup: ffdhe2048 ( 100 )" \
8049 -c "Verifying peer X.509 certificate... ok" \
8050 -C "received HelloRetryRequest message"
8051
8052requires_gnutls_tls1_3
8053requires_gnutls_next_no_ticket
8054requires_gnutls_next_disable_tls13_compat
8055requires_config_enabled MBEDTLS_SSL_CLI_C
8056requires_config_enabled MBEDTLS_DEBUG_C
8057requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
8058requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8059requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]8060requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8061run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
8062 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8063 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8064 0 \
8065 -c "HTTP/1.0 200 OK" \
8066 -c "Protocol is TLSv1.3" \
8067 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8068 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8069 -c "NamedGroup: ffdhe2048 ( 100 )" \
8070 -c "Verifying peer X.509 certificate... ok" \
8071 -C "received HelloRetryRequest message"
8072
8073requires_gnutls_tls1_3
8074requires_gnutls_next_no_ticket
8075requires_gnutls_next_disable_tls13_compat
8076requires_config_enabled MBEDTLS_SSL_CLI_C
8077requires_config_enabled MBEDTLS_DEBUG_C
8078requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
8079requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8080requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]8081requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8082run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
8083 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8084 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8085 0 \
8086 -c "HTTP/1.0 200 OK" \
8087 -c "Protocol is TLSv1.3" \
8088 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8089 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8090 -c "NamedGroup: ffdhe2048 ( 100 )" \
8091 -c "Verifying peer X.509 certificate... ok" \
8092 -C "received HelloRetryRequest message"
8093
8094requires_gnutls_tls1_3
8095requires_gnutls_next_no_ticket
8096requires_gnutls_next_disable_tls13_compat
8097requires_config_enabled MBEDTLS_SSL_CLI_C
8098requires_config_enabled MBEDTLS_DEBUG_C
8099requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
8100requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8101requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8102requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]8103requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8104run_test "TLS 1.3 m->G: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
8105 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+CHACHA20-POLY1305:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8106 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8107 0 \
8108 -c "HTTP/1.0 200 OK" \
8109 -c "Protocol is TLSv1.3" \
8110 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
8111 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8112 -c "NamedGroup: ffdhe2048 ( 100 )" \
8113 -c "Verifying peer X.509 certificate... ok" \
8114 -C "received HelloRetryRequest message"
8115
8116requires_gnutls_tls1_3
8117requires_gnutls_next_no_ticket
8118requires_gnutls_next_disable_tls13_compat
8119requires_config_enabled MBEDTLS_SSL_CLI_C
8120requires_config_enabled MBEDTLS_DEBUG_C
8121requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
8122requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8123requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8124run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8125 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8126 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8127 0 \
8128 -c "HTTP/1.0 200 OK" \
8129 -c "Protocol is TLSv1.3" \
8130 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8131 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8132 -c "NamedGroup: secp256r1 ( 17 )" \
8133 -c "Verifying peer X.509 certificate... ok" \
8134 -C "received HelloRetryRequest message"
8135
8136requires_gnutls_tls1_3
8137requires_gnutls_next_no_ticket
8138requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8139requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8140requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8141requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8142requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8143requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8144run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8145 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8146 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8147 0 \
8148 -c "HTTP/1.0 200 OK" \
8149 -c "Protocol is TLSv1.3" \
8150 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8151 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8152 -c "NamedGroup: secp256r1 ( 17 )" \
8153 -c "Verifying peer X.509 certificate... ok" \
8154 -C "received HelloRetryRequest message"
8155
8156requires_gnutls_tls1_3
8157requires_gnutls_next_no_ticket
8158requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8159requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8160requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8161requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8162requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8163requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8164run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8165 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8166 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8167 0 \
8168 -c "HTTP/1.0 200 OK" \
8169 -c "Protocol is TLSv1.3" \
8170 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8171 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8172 -c "NamedGroup: secp256r1 ( 17 )" \
8173 -c "Verifying peer X.509 certificate... ok" \
8174 -C "received HelloRetryRequest message"
8175
8176requires_gnutls_tls1_3
8177requires_gnutls_next_no_ticket
8178requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8179requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8180requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8181requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8182requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8183requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8184requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8185run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8186 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8187 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8188 0 \
8189 -c "HTTP/1.0 200 OK" \
8190 -c "Protocol is TLSv1.3" \
8191 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8192 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8193 -c "NamedGroup: secp256r1 ( 17 )" \
8194 -c "Verifying peer X.509 certificate... ok" \
8195 -C "received HelloRetryRequest message"
8196
8197requires_gnutls_tls1_3
8198requires_gnutls_next_no_ticket
8199requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8200requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8201requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8202requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8203requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8204requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8205run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8206 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8207 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8208 0 \
8209 -c "HTTP/1.0 200 OK" \
8210 -c "Protocol is TLSv1.3" \
8211 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8212 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8213 -c "NamedGroup: secp384r1 ( 18 )" \
8214 -c "Verifying peer X.509 certificate... ok" \
8215 -C "received HelloRetryRequest message"
8216
8217requires_gnutls_tls1_3
8218requires_gnutls_next_no_ticket
8219requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8220requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8221requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8222requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8223requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8224requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8225run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8226 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8227 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8228 0 \
8229 -c "HTTP/1.0 200 OK" \
8230 -c "Protocol is TLSv1.3" \
8231 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8232 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8233 -c "NamedGroup: secp384r1 ( 18 )" \
8234 -c "Verifying peer X.509 certificate... ok" \
8235 -C "received HelloRetryRequest message"
8236
8237requires_gnutls_tls1_3
8238requires_gnutls_next_no_ticket
8239requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8240requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8241requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8242requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8243requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8244requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8245run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8246 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8247 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8248 0 \
8249 -c "HTTP/1.0 200 OK" \
8250 -c "Protocol is TLSv1.3" \
8251 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8252 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8253 -c "NamedGroup: secp384r1 ( 18 )" \
8254 -c "Verifying peer X.509 certificate... ok" \
8255 -C "received HelloRetryRequest message"
8256
8257requires_gnutls_tls1_3
8258requires_gnutls_next_no_ticket
8259requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8260requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8261requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8262requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8263requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8264requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8265requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8266run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8267 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8268 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8269 0 \
8270 -c "HTTP/1.0 200 OK" \
8271 -c "Protocol is TLSv1.3" \
8272 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8273 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8274 -c "NamedGroup: secp384r1 ( 18 )" \
8275 -c "Verifying peer X.509 certificate... ok" \
8276 -C "received HelloRetryRequest message"
8277
8278requires_gnutls_tls1_3
8279requires_gnutls_next_no_ticket
8280requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8281requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8282requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8283requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8284requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8285requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8286run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8287 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8288 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8289 0 \
8290 -c "HTTP/1.0 200 OK" \
8291 -c "Protocol is TLSv1.3" \
8292 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8293 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8294 -c "NamedGroup: secp521r1 ( 19 )" \
8295 -c "Verifying peer X.509 certificate... ok" \
8296 -C "received HelloRetryRequest message"
8297
8298requires_gnutls_tls1_3
8299requires_gnutls_next_no_ticket
8300requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8301requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8302requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8303requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8304requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8305requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8306run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8307 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8308 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8309 0 \
8310 -c "HTTP/1.0 200 OK" \
8311 -c "Protocol is TLSv1.3" \
8312 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8313 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8314 -c "NamedGroup: secp521r1 ( 19 )" \
8315 -c "Verifying peer X.509 certificate... ok" \
8316 -C "received HelloRetryRequest message"
8317
8318requires_gnutls_tls1_3
8319requires_gnutls_next_no_ticket
8320requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8321requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8322requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8323requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8324requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8325requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8326run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8327 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8328 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8329 0 \
8330 -c "HTTP/1.0 200 OK" \
8331 -c "Protocol is TLSv1.3" \
8332 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8333 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8334 -c "NamedGroup: secp521r1 ( 19 )" \
8335 -c "Verifying peer X.509 certificate... ok" \
8336 -C "received HelloRetryRequest message"
8337
8338requires_gnutls_tls1_3
8339requires_gnutls_next_no_ticket
8340requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8341requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8342requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8343requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8344requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8345requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8346requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8347run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8348 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8349 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8350 0 \
8351 -c "HTTP/1.0 200 OK" \
8352 -c "Protocol is TLSv1.3" \
8353 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8354 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8355 -c "NamedGroup: secp521r1 ( 19 )" \
8356 -c "Verifying peer X.509 certificate... ok" \
8357 -C "received HelloRetryRequest message"
8358
8359requires_gnutls_tls1_3
8360requires_gnutls_next_no_ticket
8361requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8362requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8363requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8364requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8365requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8366requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8367run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8368 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8369 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8370 0 \
8371 -c "HTTP/1.0 200 OK" \
8372 -c "Protocol is TLSv1.3" \
8373 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8374 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8375 -c "NamedGroup: x25519 ( 1d )" \
8376 -c "Verifying peer X.509 certificate... ok" \
8377 -C "received HelloRetryRequest message"
8378
8379requires_gnutls_tls1_3
8380requires_gnutls_next_no_ticket
8381requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8382requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8383requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8384requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8385requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8386requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8387run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8388 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8389 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8390 0 \
8391 -c "HTTP/1.0 200 OK" \
8392 -c "Protocol is TLSv1.3" \
8393 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8394 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8395 -c "NamedGroup: x25519 ( 1d )" \
8396 -c "Verifying peer X.509 certificate... ok" \
8397 -C "received HelloRetryRequest message"
8398
8399requires_gnutls_tls1_3
8400requires_gnutls_next_no_ticket
8401requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8402requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8403requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8404requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8405requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8406requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8407run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8408 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8409 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8410 0 \
8411 -c "HTTP/1.0 200 OK" \
8412 -c "Protocol is TLSv1.3" \
8413 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8414 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8415 -c "NamedGroup: x25519 ( 1d )" \
8416 -c "Verifying peer X.509 certificate... ok" \
8417 -C "received HelloRetryRequest message"
8418
8419requires_gnutls_tls1_3
8420requires_gnutls_next_no_ticket
8421requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8422requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8423requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8424requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8425requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8426requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8427requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8428run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8429 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8430 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8431 0 \
8432 -c "HTTP/1.0 200 OK" \
8433 -c "Protocol is TLSv1.3" \
8434 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8435 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8436 -c "NamedGroup: x25519 ( 1d )" \
8437 -c "Verifying peer X.509 certificate... ok" \
8438 -C "received HelloRetryRequest message"
8439
8440requires_gnutls_tls1_3
8441requires_gnutls_next_no_ticket
8442requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8443requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8444requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8445requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8446requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8447requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8448run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8449 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8450 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8451 0 \
8452 -c "HTTP/1.0 200 OK" \
8453 -c "Protocol is TLSv1.3" \
8454 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8455 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8456 -c "NamedGroup: x448 ( 1e )" \
8457 -c "Verifying peer X.509 certificate... ok" \
8458 -C "received HelloRetryRequest message"
8459
8460requires_gnutls_tls1_3
8461requires_gnutls_next_no_ticket
8462requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8463requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8464requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8465requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8466requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8467requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8468run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8469 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8470 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8471 0 \
8472 -c "HTTP/1.0 200 OK" \
8473 -c "Protocol is TLSv1.3" \
8474 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8475 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8476 -c "NamedGroup: x448 ( 1e )" \
8477 -c "Verifying peer X.509 certificate... ok" \
8478 -C "received HelloRetryRequest message"
8479
8480requires_gnutls_tls1_3
8481requires_gnutls_next_no_ticket
8482requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8483requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8484requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8485requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8486requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8487requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8488run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8489 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8490 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8491 0 \
8492 -c "HTTP/1.0 200 OK" \
8493 -c "Protocol is TLSv1.3" \
8494 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8495 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8496 -c "NamedGroup: x448 ( 1e )" \
8497 -c "Verifying peer X.509 certificate... ok" \
8498 -C "received HelloRetryRequest message"
8499
8500requires_gnutls_tls1_3
8501requires_gnutls_next_no_ticket
8502requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8503requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8504requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8505requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8506requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8507requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8508requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8509run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8510 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8511 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8512 0 \
8513 -c "HTTP/1.0 200 OK" \
8514 -c "Protocol is TLSv1.3" \
8515 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8516 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8517 -c "NamedGroup: x448 ( 1e )" \
8518 -c "Verifying peer X.509 certificate... ok" \
8519 -C "received HelloRetryRequest message"
8520
8521requires_gnutls_tls1_3
8522requires_gnutls_next_no_ticket
8523requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8524requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8525requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8526requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8527requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8528requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]8529requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8530run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
8531 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8532 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8533 0 \
8534 -c "HTTP/1.0 200 OK" \
8535 -c "Protocol is TLSv1.3" \
8536 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8537 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8538 -c "NamedGroup: ffdhe2048 ( 100 )" \
8539 -c "Verifying peer X.509 certificate... ok" \
8540 -C "received HelloRetryRequest message"
8541
8542requires_gnutls_tls1_3
8543requires_gnutls_next_no_ticket
8544requires_gnutls_next_disable_tls13_compat
8545requires_config_enabled MBEDTLS_SSL_CLI_C
8546requires_config_enabled MBEDTLS_DEBUG_C
8547requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
8548requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8549requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]8550requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8551run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
8552 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8553 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8554 0 \
8555 -c "HTTP/1.0 200 OK" \
8556 -c "Protocol is TLSv1.3" \
8557 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8558 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8559 -c "NamedGroup: ffdhe2048 ( 100 )" \
8560 -c "Verifying peer X.509 certificate... ok" \
8561 -C "received HelloRetryRequest message"
8562
8563requires_gnutls_tls1_3
8564requires_gnutls_next_no_ticket
8565requires_gnutls_next_disable_tls13_compat
8566requires_config_enabled MBEDTLS_SSL_CLI_C
8567requires_config_enabled MBEDTLS_DEBUG_C
8568requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
8569requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8570requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]8571requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8572run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
8573 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8574 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8575 0 \
8576 -c "HTTP/1.0 200 OK" \
8577 -c "Protocol is TLSv1.3" \
8578 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8579 -c "Certificate Verify: Signature algorithm ( 0603 )" \
8580 -c "NamedGroup: ffdhe2048 ( 100 )" \
8581 -c "Verifying peer X.509 certificate... ok" \
8582 -C "received HelloRetryRequest message"
8583
8584requires_gnutls_tls1_3
8585requires_gnutls_next_no_ticket
8586requires_gnutls_next_disable_tls13_compat
8587requires_config_enabled MBEDTLS_SSL_CLI_C
8588requires_config_enabled MBEDTLS_DEBUG_C
8589requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
8590requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
8591requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8592requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]8593requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8594run_test "TLS 1.3 m->G: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
8595 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8596 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]8597 0 \
8598 -c "HTTP/1.0 200 OK" \
8599 -c "Protocol is TLSv1.3" \
8600 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
8601 -c "Certificate Verify: Signature algorithm ( 0804 )" \
8602 -c "NamedGroup: ffdhe2048 ( 100 )" \
8603 -c "Verifying peer X.509 certificate... ok" \
8604 -C "received HelloRetryRequest message"
8605
8606requires_gnutls_tls1_3
8607requires_gnutls_next_no_ticket
8608requires_gnutls_next_disable_tls13_compat
8609requires_config_enabled MBEDTLS_SSL_CLI_C
8610requires_config_enabled MBEDTLS_DEBUG_C
8611requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
8612requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8613requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8614run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8615 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8616 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8617 0 \
8618 -c "HTTP/1.0 200 OK" \
8619 -c "Protocol is TLSv1.3" \
8620 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8621 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8622 -c "NamedGroup: secp256r1 ( 17 )" \
8623 -c "Verifying peer X.509 certificate... ok" \
8624 -C "received HelloRetryRequest message"
8625
8626requires_gnutls_tls1_3
8627requires_gnutls_next_no_ticket
8628requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8629requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8630requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8631requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8632requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8633requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]8634run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8635 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8636 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8637 0 \
8638 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8639 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8640 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8641 -c "Certificate Verify: Signature algorithm ( 0503 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8642 -c "NamedGroup: secp256r1 ( 17 )" \
8643 -c "Verifying peer X.509 certificate... ok" \
8644 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8645
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8646requires_gnutls_tls1_3
8647requires_gnutls_next_no_ticket
8648requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8649requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8650requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8651requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8652requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8653requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]8654run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8655 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8656 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8657 0 \
8658 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8659 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8660 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8661 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8662 -c "NamedGroup: secp256r1 ( 17 )" \
8663 -c "Verifying peer X.509 certificate... ok" \
8664 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8665
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8666requires_gnutls_tls1_3
8667requires_gnutls_next_no_ticket
8668requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8669requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8670requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8671requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8672requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8673requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8674requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]8675run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8676 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8677 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8678 0 \
8679 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8680 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8681 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8682 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8683 -c "NamedGroup: secp256r1 ( 17 )" \
8684 -c "Verifying peer X.509 certificate... ok" \
8685 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8686
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8687requires_gnutls_tls1_3
8688requires_gnutls_next_no_ticket
8689requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8690requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8691requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8692requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8693requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8694requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8695run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8696 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8697 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8698 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8699 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8700 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8701 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8702 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8703 -c "NamedGroup: secp384r1 ( 18 )" \
8704 -c "Verifying peer X.509 certificate... ok" \
8705 -C "received HelloRetryRequest message"
8706
8707requires_gnutls_tls1_3
8708requires_gnutls_next_no_ticket
8709requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8710requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8711requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8712requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8713requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8714requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8715run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8716 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8717 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8718 0 \
8719 -c "HTTP/1.0 200 OK" \
8720 -c "Protocol is TLSv1.3" \
8721 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8722 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8723 -c "NamedGroup: secp384r1 ( 18 )" \
8724 -c "Verifying peer X.509 certificate... ok" \
8725 -C "received HelloRetryRequest message"
8726
8727requires_gnutls_tls1_3
8728requires_gnutls_next_no_ticket
8729requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8730requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8731requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8732requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8733requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8734requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8735run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8736 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8737 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8738 0 \
8739 -c "HTTP/1.0 200 OK" \
8740 -c "Protocol is TLSv1.3" \
8741 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8742 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8743 -c "NamedGroup: secp384r1 ( 18 )" \
8744 -c "Verifying peer X.509 certificate... ok" \
8745 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8746
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8747requires_gnutls_tls1_3
8748requires_gnutls_next_no_ticket
8749requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8750requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8751requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8752requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8753requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8754requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8755requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]8756run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8757 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8758 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8759 0 \
8760 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8761 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8762 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8763 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8764 -c "NamedGroup: secp384r1 ( 18 )" \
8765 -c "Verifying peer X.509 certificate... ok" \
8766 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8767
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8768requires_gnutls_tls1_3
8769requires_gnutls_next_no_ticket
8770requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8771requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8772requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8773requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8774requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8775requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8776run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8777 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8778 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8779 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8780 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8781 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8782 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8783 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8784 -c "NamedGroup: secp521r1 ( 19 )" \
8785 -c "Verifying peer X.509 certificate... ok" \
8786 -C "received HelloRetryRequest message"
8787
8788requires_gnutls_tls1_3
8789requires_gnutls_next_no_ticket
8790requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8791requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8792requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8793requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8794requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8795requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8796run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8797 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8798 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8799 0 \
8800 -c "HTTP/1.0 200 OK" \
8801 -c "Protocol is TLSv1.3" \
8802 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8803 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8804 -c "NamedGroup: secp521r1 ( 19 )" \
8805 -c "Verifying peer X.509 certificate... ok" \
8806 -C "received HelloRetryRequest message"
8807
8808requires_gnutls_tls1_3
8809requires_gnutls_next_no_ticket
8810requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8811requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8812requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8813requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8814requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8815requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8816run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8817 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8818 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8819 0 \
8820 -c "HTTP/1.0 200 OK" \
8821 -c "Protocol is TLSv1.3" \
8822 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8823 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8824 -c "NamedGroup: secp521r1 ( 19 )" \
8825 -c "Verifying peer X.509 certificate... ok" \
8826 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8827
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8828requires_gnutls_tls1_3
8829requires_gnutls_next_no_ticket
8830requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8831requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8832requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8833requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8834requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8835requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8836requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]8837run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8838 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8839 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8840 0 \
8841 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8842 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8843 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8844 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8845 -c "NamedGroup: secp521r1 ( 19 )" \
8846 -c "Verifying peer X.509 certificate... ok" \
8847 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8848
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8849requires_gnutls_tls1_3
8850requires_gnutls_next_no_ticket
8851requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8852requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8853requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8854requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8855requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8856requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8857run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8858 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8859 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8860 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8861 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8862 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8863 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8864 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8865 -c "NamedGroup: x25519 ( 1d )" \
8866 -c "Verifying peer X.509 certificate... ok" \
8867 -C "received HelloRetryRequest message"
8868
8869requires_gnutls_tls1_3
8870requires_gnutls_next_no_ticket
8871requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8872requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8873requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8874requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8875requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8876requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8877run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8878 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8879 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8880 0 \
8881 -c "HTTP/1.0 200 OK" \
8882 -c "Protocol is TLSv1.3" \
8883 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8884 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8885 -c "NamedGroup: x25519 ( 1d )" \
8886 -c "Verifying peer X.509 certificate... ok" \
8887 -C "received HelloRetryRequest message"
8888
8889requires_gnutls_tls1_3
8890requires_gnutls_next_no_ticket
8891requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8892requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8893requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8894requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8895requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8896requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8897run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8898 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8899 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8900 0 \
8901 -c "HTTP/1.0 200 OK" \
8902 -c "Protocol is TLSv1.3" \
8903 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8904 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8905 -c "NamedGroup: x25519 ( 1d )" \
8906 -c "Verifying peer X.509 certificate... ok" \
8907 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8908
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8909requires_gnutls_tls1_3
8910requires_gnutls_next_no_ticket
8911requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8912requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8913requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8914requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8915requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8916requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8917requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]8918run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8919 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8920 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8921 0 \
8922 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8923 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8924 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8925 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8926 -c "NamedGroup: x25519 ( 1d )" \
8927 -c "Verifying peer X.509 certificate... ok" \
8928 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8929
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8930requires_gnutls_tls1_3
8931requires_gnutls_next_no_ticket
8932requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8933requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8934requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8935requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8936requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8937requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8938run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8939 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8940 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8941 0 \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8942 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]8943 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]8944 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8945 -c "Certificate Verify: Signature algorithm ( 0403 )" \
8946 -c "NamedGroup: x448 ( 1e )" \
8947 -c "Verifying peer X.509 certificate... ok" \
8948 -C "received HelloRetryRequest message"
8949
8950requires_gnutls_tls1_3
8951requires_gnutls_next_no_ticket
8952requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8953requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8954requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8955requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8956requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8957requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8958run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8959 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8960 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8961 0 \
8962 -c "HTTP/1.0 200 OK" \
8963 -c "Protocol is TLSv1.3" \
8964 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8965 -c "Certificate Verify: Signature algorithm ( 0503 )" \
8966 -c "NamedGroup: x448 ( 1e )" \
8967 -c "Verifying peer X.509 certificate... ok" \
8968 -C "received HelloRetryRequest message"
8969
8970requires_gnutls_tls1_3
8971requires_gnutls_next_no_ticket
8972requires_gnutls_next_disable_tls13_compat
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8973requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8974requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8975requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8976requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8977requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8978run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]8979 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]8980 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
Ronald Cron9d0a3e82022-04-05 16:13:38 +0200[diff] [blame]8981 0 \
8982 -c "HTTP/1.0 200 OK" \
8983 -c "Protocol is TLSv1.3" \
8984 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
8985 -c "Certificate Verify: Signature algorithm ( 0603 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]8986 -c "NamedGroup: x448 ( 1e )" \
8987 -c "Verifying peer X.509 certificate... ok" \
8988 -C "received HelloRetryRequest message"
Jerry Yudda036d2021-11-30 11:19:41 +0800[diff] [blame]8989
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8990requires_gnutls_tls1_3
8991requires_gnutls_next_no_ticket
8992requires_gnutls_next_disable_tls13_compat
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8993requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]8994requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]8995requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
Ronald Cronae937252021-12-10 09:55:15 +0100[diff] [blame]8996requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Jerry Yu31018ad2021-11-26 20:36:17 +0800[diff] [blame]8997requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]8998requires_config_enabled PSA_WANT_ALG_ECDH
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]8999run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9000 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9001 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]9002 0 \
9003 -c "HTTP/1.0 200 OK" \
Ronald Crona1b8f6e2022-03-18 14:04:12 +0100[diff] [blame]9004 -c "Protocol is TLSv1.3" \
Jerry Yucdcb6832021-11-29 16:50:13 +0800[diff] [blame]9005 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]9006 -c "Certificate Verify: Signature algorithm ( 0804 )" \
Jerry Yu7de79852022-03-23 16:50:47 +0800[diff] [blame]9007 -c "NamedGroup: x448 ( 1e )" \
9008 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]9009 -C "received HelloRetryRequest message"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]9010
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9011requires_gnutls_tls1_3
9012requires_gnutls_next_no_ticket
9013requires_gnutls_next_disable_tls13_compat
9014requires_config_enabled MBEDTLS_SSL_CLI_C
9015requires_config_enabled MBEDTLS_DEBUG_C
9016requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9017requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9018requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9019requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9020run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
9021 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP256R1-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9022 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9023 0 \
9024 -c "HTTP/1.0 200 OK" \
9025 -c "Protocol is TLSv1.3" \
9026 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9027 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9028 -c "NamedGroup: ffdhe2048 ( 100 )" \
9029 -c "Verifying peer X.509 certificate... ok" \
9030 -C "received HelloRetryRequest message"
9031
9032requires_gnutls_tls1_3
9033requires_gnutls_next_no_ticket
9034requires_gnutls_next_disable_tls13_compat
9035requires_config_enabled MBEDTLS_SSL_CLI_C
9036requires_config_enabled MBEDTLS_DEBUG_C
9037requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9038requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9039requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9040requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9041run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
9042 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp384r1.crt --x509keyfile data_files/ecdsa_secp384r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP384R1-SHA384:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9043 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9044 0 \
9045 -c "HTTP/1.0 200 OK" \
9046 -c "Protocol is TLSv1.3" \
9047 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9048 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9049 -c "NamedGroup: ffdhe2048 ( 100 )" \
9050 -c "Verifying peer X.509 certificate... ok" \
9051 -C "received HelloRetryRequest message"
9052
9053requires_gnutls_tls1_3
9054requires_gnutls_next_no_ticket
9055requires_gnutls_next_disable_tls13_compat
9056requires_config_enabled MBEDTLS_SSL_CLI_C
9057requires_config_enabled MBEDTLS_DEBUG_C
9058requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9059requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9060requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9061requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9062run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
9063 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp521r1.crt --x509keyfile data_files/ecdsa_secp521r1.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-ECDSA-SECP521R1-SHA512:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9064 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9065 0 \
9066 -c "HTTP/1.0 200 OK" \
9067 -c "Protocol is TLSv1.3" \
9068 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9069 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9070 -c "NamedGroup: ffdhe2048 ( 100 )" \
9071 -c "Verifying peer X.509 certificate... ok" \
9072 -C "received HelloRetryRequest message"
9073
9074requires_gnutls_tls1_3
9075requires_gnutls_next_no_ticket
9076requires_gnutls_next_disable_tls13_compat
9077requires_config_enabled MBEDTLS_SSL_CLI_C
9078requires_config_enabled MBEDTLS_DEBUG_C
9079requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9080requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9081requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9082requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9083requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9084run_test "TLS 1.3 m->G: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
9085 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/server2-sha256.crt --x509keyfile data_files/server2.key --priority=NONE:+AES-128-CCM-8:+SHA256:+AEAD:+SIGN-RSA-PSS-RSAE-SHA256:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9086 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9087 0 \
9088 -c "HTTP/1.0 200 OK" \
9089 -c "Protocol is TLSv1.3" \
9090 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
9091 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9092 -c "NamedGroup: ffdhe2048 ( 100 )" \
9093 -c "Verifying peer X.509 certificate... ok" \
9094 -C "received HelloRetryRequest message"
9095
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9096requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9097requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9098requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9099requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9100requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9101requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9102requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9103requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9104requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9105requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9106run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9107 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9108 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9109 0 \
9110 -s "Protocol is TLSv1.3" \
9111 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9112 -s "received signature algorithm: 0x403" \
9113 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9114 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9115 -c "Protocol is TLSv1.3" \
9116 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9117 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9118 -c "NamedGroup: secp256r1 ( 17 )" \
9119 -c "Verifying peer X.509 certificate... ok" \
9120 -C "received HelloRetryRequest message"
9121
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9122requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9123requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9124requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9125requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9126requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9127requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9128requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9129requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9130requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9131requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9132run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9133 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9134 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9135 0 \
9136 -s "Protocol is TLSv1.3" \
9137 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9138 -s "received signature algorithm: 0x503" \
9139 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9140 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9141 -c "Protocol is TLSv1.3" \
9142 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9143 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9144 -c "NamedGroup: secp256r1 ( 17 )" \
9145 -c "Verifying peer X.509 certificate... ok" \
9146 -C "received HelloRetryRequest message"
9147
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9148requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9149requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9150requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9151requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9152requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9153requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9154requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9155requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9156requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9157requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9158run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9159 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9160 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9161 0 \
9162 -s "Protocol is TLSv1.3" \
9163 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9164 -s "received signature algorithm: 0x603" \
9165 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9166 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9167 -c "Protocol is TLSv1.3" \
9168 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9169 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9170 -c "NamedGroup: secp256r1 ( 17 )" \
9171 -c "Verifying peer X.509 certificate... ok" \
9172 -C "received HelloRetryRequest message"
9173
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9174requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9175requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9176requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9177requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9178requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9179requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9180requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9181requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9182requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9183requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9184requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9185requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9186run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9187 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9188 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9189 0 \
9190 -s "Protocol is TLSv1.3" \
9191 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9192 -s "received signature algorithm: 0x804" \
9193 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9194 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9195 -c "Protocol is TLSv1.3" \
9196 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9197 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9198 -c "NamedGroup: secp256r1 ( 17 )" \
9199 -c "Verifying peer X.509 certificate... ok" \
9200 -C "received HelloRetryRequest message"
9201
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9202requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9203requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9204requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9205requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9206requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9207requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9208requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9209requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9210requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9211requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9212run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9213 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9214 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9215 0 \
9216 -s "Protocol is TLSv1.3" \
9217 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9218 -s "received signature algorithm: 0x403" \
9219 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9220 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9221 -c "Protocol is TLSv1.3" \
9222 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9223 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9224 -c "NamedGroup: secp384r1 ( 18 )" \
9225 -c "Verifying peer X.509 certificate... ok" \
9226 -C "received HelloRetryRequest message"
9227
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9228requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9229requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9230requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9231requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9232requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9233requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9234requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9235requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9236requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9237requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9238run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9239 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9240 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9241 0 \
9242 -s "Protocol is TLSv1.3" \
9243 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9244 -s "received signature algorithm: 0x503" \
9245 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9246 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9247 -c "Protocol is TLSv1.3" \
9248 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9249 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9250 -c "NamedGroup: secp384r1 ( 18 )" \
9251 -c "Verifying peer X.509 certificate... ok" \
9252 -C "received HelloRetryRequest message"
9253
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9254requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9255requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9256requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9257requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9258requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9259requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9260requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9261requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9262requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9263requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9264run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9265 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9266 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9267 0 \
9268 -s "Protocol is TLSv1.3" \
9269 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9270 -s "received signature algorithm: 0x603" \
9271 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9272 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9273 -c "Protocol is TLSv1.3" \
9274 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9275 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9276 -c "NamedGroup: secp384r1 ( 18 )" \
9277 -c "Verifying peer X.509 certificate... ok" \
9278 -C "received HelloRetryRequest message"
9279
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9280requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9281requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9282requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9283requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9284requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9285requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9286requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9287requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9288requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9289requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9290requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9291requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9292run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9293 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9294 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9295 0 \
9296 -s "Protocol is TLSv1.3" \
9297 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9298 -s "received signature algorithm: 0x804" \
9299 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9300 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9301 -c "Protocol is TLSv1.3" \
9302 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9303 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9304 -c "NamedGroup: secp384r1 ( 18 )" \
9305 -c "Verifying peer X.509 certificate... ok" \
9306 -C "received HelloRetryRequest message"
9307
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9308requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9309requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9310requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9311requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9312requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9313requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9314requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9315requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9316requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9317requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9318run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9319 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9320 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9321 0 \
9322 -s "Protocol is TLSv1.3" \
9323 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9324 -s "received signature algorithm: 0x403" \
9325 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9326 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9327 -c "Protocol is TLSv1.3" \
9328 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9329 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9330 -c "NamedGroup: secp521r1 ( 19 )" \
9331 -c "Verifying peer X.509 certificate... ok" \
9332 -C "received HelloRetryRequest message"
9333
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9334requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9335requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9336requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9337requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9338requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9339requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9340requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9341requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9342requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9343requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9344run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9345 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9346 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9347 0 \
9348 -s "Protocol is TLSv1.3" \
9349 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9350 -s "received signature algorithm: 0x503" \
9351 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9352 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9353 -c "Protocol is TLSv1.3" \
9354 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9355 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9356 -c "NamedGroup: secp521r1 ( 19 )" \
9357 -c "Verifying peer X.509 certificate... ok" \
9358 -C "received HelloRetryRequest message"
9359
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9360requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9361requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9362requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9363requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9364requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9365requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9366requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9367requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9368requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9369requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9370run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9371 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9372 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9373 0 \
9374 -s "Protocol is TLSv1.3" \
9375 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9376 -s "received signature algorithm: 0x603" \
9377 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9378 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9379 -c "Protocol is TLSv1.3" \
9380 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9381 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9382 -c "NamedGroup: secp521r1 ( 19 )" \
9383 -c "Verifying peer X.509 certificate... ok" \
9384 -C "received HelloRetryRequest message"
9385
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9386requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9387requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9388requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9389requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9390requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9391requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9392requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9393requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9394requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9395requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9396requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9397requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9398run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9399 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9400 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9401 0 \
9402 -s "Protocol is TLSv1.3" \
9403 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9404 -s "received signature algorithm: 0x804" \
9405 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9406 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9407 -c "Protocol is TLSv1.3" \
9408 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9409 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9410 -c "NamedGroup: secp521r1 ( 19 )" \
9411 -c "Verifying peer X.509 certificate... ok" \
9412 -C "received HelloRetryRequest message"
9413
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9414requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9415requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9416requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9417requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9418requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9419requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9420requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9421requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9422requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9423requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9424run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9425 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9426 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9427 0 \
9428 -s "Protocol is TLSv1.3" \
9429 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9430 -s "received signature algorithm: 0x403" \
9431 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9432 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9433 -c "Protocol is TLSv1.3" \
9434 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9435 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9436 -c "NamedGroup: x25519 ( 1d )" \
9437 -c "Verifying peer X.509 certificate... ok" \
9438 -C "received HelloRetryRequest message"
9439
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9440requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9441requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9442requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9443requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9444requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9445requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9446requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9447requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9448requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9449requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9450run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9451 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9452 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9453 0 \
9454 -s "Protocol is TLSv1.3" \
9455 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9456 -s "received signature algorithm: 0x503" \
9457 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9458 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9459 -c "Protocol is TLSv1.3" \
9460 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9461 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9462 -c "NamedGroup: x25519 ( 1d )" \
9463 -c "Verifying peer X.509 certificate... ok" \
9464 -C "received HelloRetryRequest message"
9465
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9466requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9467requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9468requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9469requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9470requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9471requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9472requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9473requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9474requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9475requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9476run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9477 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9478 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9479 0 \
9480 -s "Protocol is TLSv1.3" \
9481 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9482 -s "received signature algorithm: 0x603" \
9483 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9484 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9485 -c "Protocol is TLSv1.3" \
9486 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9487 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9488 -c "NamedGroup: x25519 ( 1d )" \
9489 -c "Verifying peer X.509 certificate... ok" \
9490 -C "received HelloRetryRequest message"
9491
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9492requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9493requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9494requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9495requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9496requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9497requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9498requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9499requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9500requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9501requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9502requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9503requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9504run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9505 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9506 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9507 0 \
9508 -s "Protocol is TLSv1.3" \
9509 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9510 -s "received signature algorithm: 0x804" \
9511 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9512 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9513 -c "Protocol is TLSv1.3" \
9514 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9515 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9516 -c "NamedGroup: x25519 ( 1d )" \
9517 -c "Verifying peer X.509 certificate... ok" \
9518 -C "received HelloRetryRequest message"
9519
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9520requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9521requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9522requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9523requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9524requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9525requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9526requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9527requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9528requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9529requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9530run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9531 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9532 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9533 0 \
9534 -s "Protocol is TLSv1.3" \
9535 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9536 -s "received signature algorithm: 0x403" \
9537 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9538 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9539 -c "Protocol is TLSv1.3" \
9540 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9541 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9542 -c "NamedGroup: x448 ( 1e )" \
9543 -c "Verifying peer X.509 certificate... ok" \
9544 -C "received HelloRetryRequest message"
9545
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9546requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9547requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9548requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9549requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9550requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9551requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9552requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9553requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9554requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9555requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9556run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9557 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9558 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9559 0 \
9560 -s "Protocol is TLSv1.3" \
9561 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9562 -s "received signature algorithm: 0x503" \
9563 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9564 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9565 -c "Protocol is TLSv1.3" \
9566 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9567 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9568 -c "NamedGroup: x448 ( 1e )" \
9569 -c "Verifying peer X.509 certificate... ok" \
9570 -C "received HelloRetryRequest message"
9571
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9572requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9573requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9574requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9575requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9576requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9577requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9578requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9579requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9580requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9581requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9582run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9583 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9584 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9585 0 \
9586 -s "Protocol is TLSv1.3" \
9587 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9588 -s "received signature algorithm: 0x603" \
9589 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9590 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9591 -c "Protocol is TLSv1.3" \
9592 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9593 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9594 -c "NamedGroup: x448 ( 1e )" \
9595 -c "Verifying peer X.509 certificate... ok" \
9596 -C "received HelloRetryRequest message"
9597
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9598requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9599requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9600requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9601requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9602requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9603requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9604requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9605requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9606requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9607requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9608requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9609requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9610run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9611 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9612 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9613 0 \
9614 -s "Protocol is TLSv1.3" \
9615 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9616 -s "received signature algorithm: 0x804" \
9617 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9618 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9619 -c "Protocol is TLSv1.3" \
9620 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9621 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9622 -c "NamedGroup: x448 ( 1e )" \
9623 -c "Verifying peer X.509 certificate... ok" \
9624 -C "received HelloRetryRequest message"
9625
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9626requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9627requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9628requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9629requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9630requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9631requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9632requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9633requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9634requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9635requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9636requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9637requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9638run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9639 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9640 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9641 0 \
9642 -s "Protocol is TLSv1.3" \
9643 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9644 -s "received signature algorithm: 0x403" \
9645 -s "got named group: ffdhe2048(0100)" \
9646 -s "Certificate verification was skipped" \
9647 -c "Protocol is TLSv1.3" \
9648 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9649 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9650 -c "NamedGroup: ffdhe2048 ( 100 )" \
9651 -c "Verifying peer X.509 certificate... ok" \
9652 -C "received HelloRetryRequest message"
9653
9654requires_config_enabled MBEDTLS_SSL_SRV_C
9655requires_config_enabled MBEDTLS_DEBUG_C
9656requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9657requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9658requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9659requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9660requires_config_enabled MBEDTLS_SSL_CLI_C
9661requires_config_enabled MBEDTLS_DEBUG_C
9662requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9663requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9664requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9665requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9666run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9667 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9668 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9669 0 \
9670 -s "Protocol is TLSv1.3" \
9671 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9672 -s "received signature algorithm: 0x503" \
9673 -s "got named group: ffdhe2048(0100)" \
9674 -s "Certificate verification was skipped" \
9675 -c "Protocol is TLSv1.3" \
9676 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9677 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9678 -c "NamedGroup: ffdhe2048 ( 100 )" \
9679 -c "Verifying peer X.509 certificate... ok" \
9680 -C "received HelloRetryRequest message"
9681
9682requires_config_enabled MBEDTLS_SSL_SRV_C
9683requires_config_enabled MBEDTLS_DEBUG_C
9684requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9685requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9686requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9687requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9688requires_config_enabled MBEDTLS_SSL_CLI_C
9689requires_config_enabled MBEDTLS_DEBUG_C
9690requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9691requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9692requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9693requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9694run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9695 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9696 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9697 0 \
9698 -s "Protocol is TLSv1.3" \
9699 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9700 -s "received signature algorithm: 0x603" \
9701 -s "got named group: ffdhe2048(0100)" \
9702 -s "Certificate verification was skipped" \
9703 -c "Protocol is TLSv1.3" \
9704 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9705 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9706 -c "NamedGroup: ffdhe2048 ( 100 )" \
9707 -c "Verifying peer X.509 certificate... ok" \
9708 -C "received HelloRetryRequest message"
9709
9710requires_config_enabled MBEDTLS_SSL_SRV_C
9711requires_config_enabled MBEDTLS_DEBUG_C
9712requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9713requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9714requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9715requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9716requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9717requires_config_enabled MBEDTLS_SSL_CLI_C
9718requires_config_enabled MBEDTLS_DEBUG_C
9719requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9720requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9721requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9722requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]9723requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9724run_test "TLS 1.3 m->m: AES_128_GCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9725 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9726 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-GCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9727 0 \
9728 -s "Protocol is TLSv1.3" \
9729 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-GCM-SHA256 ( id=4865 )" \
9730 -s "received signature algorithm: 0x804" \
9731 -s "got named group: ffdhe2048(0100)" \
9732 -s "Certificate verification was skipped" \
9733 -c "Protocol is TLSv1.3" \
9734 -c "server hello, chosen ciphersuite: ( 1301 ) - TLS1-3-AES-128-GCM-SHA256" \
9735 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9736 -c "NamedGroup: ffdhe2048 ( 100 )" \
9737 -c "Verifying peer X.509 certificate... ok" \
9738 -C "received HelloRetryRequest message"
9739
9740requires_config_enabled MBEDTLS_SSL_SRV_C
9741requires_config_enabled MBEDTLS_DEBUG_C
9742requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9743requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9744requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]9745requires_config_enabled MBEDTLS_SSL_CLI_C
9746requires_config_enabled MBEDTLS_DEBUG_C
9747requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
9748requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9749requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9750run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9751 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9752 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9753 0 \
9754 -s "Protocol is TLSv1.3" \
9755 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9756 -s "received signature algorithm: 0x403" \
9757 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9758 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9759 -c "Protocol is TLSv1.3" \
9760 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9761 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9762 -c "NamedGroup: secp256r1 ( 17 )" \
9763 -c "Verifying peer X.509 certificate... ok" \
9764 -C "received HelloRetryRequest message"
9765
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9766requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9767requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9768requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9769requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9770requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9771requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9772requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9773requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9774requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9775requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9776run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9777 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9778 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9779 0 \
9780 -s "Protocol is TLSv1.3" \
9781 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9782 -s "received signature algorithm: 0x503" \
9783 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9784 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9785 -c "Protocol is TLSv1.3" \
9786 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9787 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9788 -c "NamedGroup: secp256r1 ( 17 )" \
9789 -c "Verifying peer X.509 certificate... ok" \
9790 -C "received HelloRetryRequest message"
9791
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9792requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9793requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9794requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9795requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9796requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9797requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9798requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9799requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9800requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9801requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9802run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9803 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9804 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9805 0 \
9806 -s "Protocol is TLSv1.3" \
9807 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9808 -s "received signature algorithm: 0x603" \
9809 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9810 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9811 -c "Protocol is TLSv1.3" \
9812 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9813 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9814 -c "NamedGroup: secp256r1 ( 17 )" \
9815 -c "Verifying peer X.509 certificate... ok" \
9816 -C "received HelloRetryRequest message"
9817
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9818requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9819requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9820requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9821requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9822requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9823requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9824requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9825requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9826requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9827requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9828requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9829requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9830run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9831 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9832 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9833 0 \
9834 -s "Protocol is TLSv1.3" \
9835 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9836 -s "received signature algorithm: 0x804" \
9837 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9838 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9839 -c "Protocol is TLSv1.3" \
9840 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9841 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9842 -c "NamedGroup: secp256r1 ( 17 )" \
9843 -c "Verifying peer X.509 certificate... ok" \
9844 -C "received HelloRetryRequest message"
9845
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9846requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9847requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9848requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9849requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9850requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9851requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9852requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9853requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9854requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9855requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9856run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9857 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9858 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9859 0 \
9860 -s "Protocol is TLSv1.3" \
9861 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9862 -s "received signature algorithm: 0x403" \
9863 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9864 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9865 -c "Protocol is TLSv1.3" \
9866 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9867 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9868 -c "NamedGroup: secp384r1 ( 18 )" \
9869 -c "Verifying peer X.509 certificate... ok" \
9870 -C "received HelloRetryRequest message"
9871
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9872requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9873requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9874requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9875requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9876requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9877requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9878requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9879requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9880requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9881requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9882run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9883 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9884 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9885 0 \
9886 -s "Protocol is TLSv1.3" \
9887 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9888 -s "received signature algorithm: 0x503" \
9889 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9890 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9891 -c "Protocol is TLSv1.3" \
9892 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9893 -c "Certificate Verify: Signature algorithm ( 0503 )" \
9894 -c "NamedGroup: secp384r1 ( 18 )" \
9895 -c "Verifying peer X.509 certificate... ok" \
9896 -C "received HelloRetryRequest message"
9897
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9898requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9899requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9900requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9901requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9902requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9903requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9904requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9905requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9906requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9907requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9908run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9909 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9910 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9911 0 \
9912 -s "Protocol is TLSv1.3" \
9913 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9914 -s "received signature algorithm: 0x603" \
9915 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9916 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9917 -c "Protocol is TLSv1.3" \
9918 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9919 -c "Certificate Verify: Signature algorithm ( 0603 )" \
9920 -c "NamedGroup: secp384r1 ( 18 )" \
9921 -c "Verifying peer X.509 certificate... ok" \
9922 -C "received HelloRetryRequest message"
9923
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9924requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9925requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9926requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9927requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9928requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9929requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9930requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9931requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9932requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9933requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
9934requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9935requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9936run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9937 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9938 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9939 0 \
9940 -s "Protocol is TLSv1.3" \
9941 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9942 -s "received signature algorithm: 0x804" \
9943 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9944 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9945 -c "Protocol is TLSv1.3" \
9946 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9947 -c "Certificate Verify: Signature algorithm ( 0804 )" \
9948 -c "NamedGroup: secp384r1 ( 18 )" \
9949 -c "Verifying peer X.509 certificate... ok" \
9950 -C "received HelloRetryRequest message"
9951
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9952requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9953requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9954requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9955requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9956requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9957requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9958requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9959requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9960requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9961requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9962run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9963 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9964 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9965 0 \
9966 -s "Protocol is TLSv1.3" \
9967 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9968 -s "received signature algorithm: 0x403" \
9969 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9970 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9971 -c "Protocol is TLSv1.3" \
9972 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9973 -c "Certificate Verify: Signature algorithm ( 0403 )" \
9974 -c "NamedGroup: secp521r1 ( 19 )" \
9975 -c "Verifying peer X.509 certificate... ok" \
9976 -C "received HelloRetryRequest message"
9977
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]9978requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9979requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9980requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9981requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9982requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9983requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]9984requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]9985requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9986requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]9987requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9988run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]9989 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
9990 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9991 0 \
9992 -s "Protocol is TLSv1.3" \
9993 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
9994 -s "received signature algorithm: 0x503" \
9995 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]9996 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]9997 -c "Protocol is TLSv1.3" \
9998 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
9999 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10000 -c "NamedGroup: secp521r1 ( 19 )" \
10001 -c "Verifying peer X.509 certificate... ok" \
10002 -C "received HelloRetryRequest message"
10003
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10004requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10005requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10006requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10007requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10008requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10009requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10010requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10011requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10012requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10013requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10014run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10015 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10016 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10017 0 \
10018 -s "Protocol is TLSv1.3" \
10019 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10020 -s "received signature algorithm: 0x603" \
10021 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10022 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10023 -c "Protocol is TLSv1.3" \
10024 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10025 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10026 -c "NamedGroup: secp521r1 ( 19 )" \
10027 -c "Verifying peer X.509 certificate... ok" \
10028 -C "received HelloRetryRequest message"
10029
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10030requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10031requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10032requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10033requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10034requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10035requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10036requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10037requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10038requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10039requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10040requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10041requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10042run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10043 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10044 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10045 0 \
10046 -s "Protocol is TLSv1.3" \
10047 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10048 -s "received signature algorithm: 0x804" \
10049 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10050 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10051 -c "Protocol is TLSv1.3" \
10052 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10053 -c "Certificate Verify: Signature algorithm ( 0804 )" \
10054 -c "NamedGroup: secp521r1 ( 19 )" \
10055 -c "Verifying peer X.509 certificate... ok" \
10056 -C "received HelloRetryRequest message"
10057
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10058requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10059requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10060requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10061requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10062requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10063requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10064requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10065requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10066requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10067requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10068run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10069 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10070 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10071 0 \
10072 -s "Protocol is TLSv1.3" \
10073 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10074 -s "received signature algorithm: 0x403" \
10075 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10076 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10077 -c "Protocol is TLSv1.3" \
10078 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10079 -c "Certificate Verify: Signature algorithm ( 0403 )" \
10080 -c "NamedGroup: x25519 ( 1d )" \
10081 -c "Verifying peer X.509 certificate... ok" \
10082 -C "received HelloRetryRequest message"
10083
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10084requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10085requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10086requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10087requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10088requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10089requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10090requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10091requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10092requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10093requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10094run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10095 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10096 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10097 0 \
10098 -s "Protocol is TLSv1.3" \
10099 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10100 -s "received signature algorithm: 0x503" \
10101 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10102 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10103 -c "Protocol is TLSv1.3" \
10104 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10105 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10106 -c "NamedGroup: x25519 ( 1d )" \
10107 -c "Verifying peer X.509 certificate... ok" \
10108 -C "received HelloRetryRequest message"
10109
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10110requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10111requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10112requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10113requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10114requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10115requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10116requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10117requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10118requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10119requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10120run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10121 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10122 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10123 0 \
10124 -s "Protocol is TLSv1.3" \
10125 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10126 -s "received signature algorithm: 0x603" \
10127 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10128 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10129 -c "Protocol is TLSv1.3" \
10130 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10131 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10132 -c "NamedGroup: x25519 ( 1d )" \
10133 -c "Verifying peer X.509 certificate... ok" \
10134 -C "received HelloRetryRequest message"
10135
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10136requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10137requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10138requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10139requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10140requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10141requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10142requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10143requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10144requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10145requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10146requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10147requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10148run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10149 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10150 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10151 0 \
10152 -s "Protocol is TLSv1.3" \
10153 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10154 -s "received signature algorithm: 0x804" \
10155 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10156 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10157 -c "Protocol is TLSv1.3" \
10158 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10159 -c "Certificate Verify: Signature algorithm ( 0804 )" \
10160 -c "NamedGroup: x25519 ( 1d )" \
10161 -c "Verifying peer X.509 certificate... ok" \
10162 -C "received HelloRetryRequest message"
10163
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10164requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10165requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10166requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10167requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10168requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10169requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10170requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10171requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10172requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10173requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10174run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10175 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10176 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10177 0 \
10178 -s "Protocol is TLSv1.3" \
10179 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10180 -s "received signature algorithm: 0x403" \
10181 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10182 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10183 -c "Protocol is TLSv1.3" \
10184 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10185 -c "Certificate Verify: Signature algorithm ( 0403 )" \
10186 -c "NamedGroup: x448 ( 1e )" \
10187 -c "Verifying peer X.509 certificate... ok" \
10188 -C "received HelloRetryRequest message"
10189
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10190requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10191requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10192requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10193requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10194requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10195requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10196requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10197requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10198requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10199requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10200run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10201 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10202 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10203 0 \
10204 -s "Protocol is TLSv1.3" \
10205 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10206 -s "received signature algorithm: 0x503" \
10207 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10208 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10209 -c "Protocol is TLSv1.3" \
10210 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10211 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10212 -c "NamedGroup: x448 ( 1e )" \
10213 -c "Verifying peer X.509 certificate... ok" \
10214 -C "received HelloRetryRequest message"
10215
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10216requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10217requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10218requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10219requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10220requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10221requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10222requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10223requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10224requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10225requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10226run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10227 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10228 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10229 0 \
10230 -s "Protocol is TLSv1.3" \
10231 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10232 -s "received signature algorithm: 0x603" \
10233 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10234 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10235 -c "Protocol is TLSv1.3" \
10236 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10237 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10238 -c "NamedGroup: x448 ( 1e )" \
10239 -c "Verifying peer X.509 certificate... ok" \
10240 -C "received HelloRetryRequest message"
10241
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10242requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10243requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10244requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10245requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10246requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10247requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10248requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10249requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10250requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10251requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10252requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10253requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10254run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10255 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10256 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10257 0 \
10258 -s "Protocol is TLSv1.3" \
10259 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10260 -s "received signature algorithm: 0x804" \
10261 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10262 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10263 -c "Protocol is TLSv1.3" \
10264 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10265 -c "Certificate Verify: Signature algorithm ( 0804 )" \
10266 -c "NamedGroup: x448 ( 1e )" \
10267 -c "Verifying peer X.509 certificate... ok" \
10268 -C "received HelloRetryRequest message"
10269
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10270requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10271requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10272requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10273requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10274requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10275requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10276requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10277requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10278requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10279requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10280requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10281requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10282run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10283 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10284 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10285 0 \
10286 -s "Protocol is TLSv1.3" \
10287 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10288 -s "received signature algorithm: 0x403" \
10289 -s "got named group: ffdhe2048(0100)" \
10290 -s "Certificate verification was skipped" \
10291 -c "Protocol is TLSv1.3" \
10292 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10293 -c "Certificate Verify: Signature algorithm ( 0403 )" \
10294 -c "NamedGroup: ffdhe2048 ( 100 )" \
10295 -c "Verifying peer X.509 certificate... ok" \
10296 -C "received HelloRetryRequest message"
10297
10298requires_config_enabled MBEDTLS_SSL_SRV_C
10299requires_config_enabled MBEDTLS_DEBUG_C
10300requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10301requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10302requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10303requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10304requires_config_enabled MBEDTLS_SSL_CLI_C
10305requires_config_enabled MBEDTLS_DEBUG_C
10306requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10307requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10308requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10309requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10310run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10311 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10312 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10313 0 \
10314 -s "Protocol is TLSv1.3" \
10315 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10316 -s "received signature algorithm: 0x503" \
10317 -s "got named group: ffdhe2048(0100)" \
10318 -s "Certificate verification was skipped" \
10319 -c "Protocol is TLSv1.3" \
10320 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10321 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10322 -c "NamedGroup: ffdhe2048 ( 100 )" \
10323 -c "Verifying peer X.509 certificate... ok" \
10324 -C "received HelloRetryRequest message"
10325
10326requires_config_enabled MBEDTLS_SSL_SRV_C
10327requires_config_enabled MBEDTLS_DEBUG_C
10328requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10329requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10330requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10331requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10332requires_config_enabled MBEDTLS_SSL_CLI_C
10333requires_config_enabled MBEDTLS_DEBUG_C
10334requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10335requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10336requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10337requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10338run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10339 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10340 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10341 0 \
10342 -s "Protocol is TLSv1.3" \
10343 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10344 -s "received signature algorithm: 0x603" \
10345 -s "got named group: ffdhe2048(0100)" \
10346 -s "Certificate verification was skipped" \
10347 -c "Protocol is TLSv1.3" \
10348 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10349 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10350 -c "NamedGroup: ffdhe2048 ( 100 )" \
10351 -c "Verifying peer X.509 certificate... ok" \
10352 -C "received HelloRetryRequest message"
10353
10354requires_config_enabled MBEDTLS_SSL_SRV_C
10355requires_config_enabled MBEDTLS_DEBUG_C
10356requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10357requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10358requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10359requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10360requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10361requires_config_enabled MBEDTLS_SSL_CLI_C
10362requires_config_enabled MBEDTLS_DEBUG_C
10363requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10364requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10365requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10366requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10367requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10368run_test "TLS 1.3 m->m: AES_256_GCM_SHA384,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10369 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10370 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-256-GCM-SHA384 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10371 0 \
10372 -s "Protocol is TLSv1.3" \
10373 -s "server hello, chosen ciphersuite: TLS1-3-AES-256-GCM-SHA384 ( id=4866 )" \
10374 -s "received signature algorithm: 0x804" \
10375 -s "got named group: ffdhe2048(0100)" \
10376 -s "Certificate verification was skipped" \
10377 -c "Protocol is TLSv1.3" \
10378 -c "server hello, chosen ciphersuite: ( 1302 ) - TLS1-3-AES-256-GCM-SHA384" \
10379 -c "Certificate Verify: Signature algorithm ( 0804 )" \
10380 -c "NamedGroup: ffdhe2048 ( 100 )" \
10381 -c "Verifying peer X.509 certificate... ok" \
10382 -C "received HelloRetryRequest message"
10383
10384requires_config_enabled MBEDTLS_SSL_SRV_C
10385requires_config_enabled MBEDTLS_DEBUG_C
10386requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10387requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10388requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10389requires_config_enabled MBEDTLS_SSL_CLI_C
10390requires_config_enabled MBEDTLS_DEBUG_C
10391requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10392requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10393requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10394run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10395 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10396 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10397 0 \
10398 -s "Protocol is TLSv1.3" \
10399 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10400 -s "received signature algorithm: 0x403" \
10401 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10402 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10403 -c "Protocol is TLSv1.3" \
10404 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10405 -c "Certificate Verify: Signature algorithm ( 0403 )" \
10406 -c "NamedGroup: secp256r1 ( 17 )" \
10407 -c "Verifying peer X.509 certificate... ok" \
10408 -C "received HelloRetryRequest message"
10409
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10410requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10411requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10412requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10413requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10414requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10415requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10416requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10417requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10418requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10419requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10420run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10421 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10422 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10423 0 \
10424 -s "Protocol is TLSv1.3" \
10425 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10426 -s "received signature algorithm: 0x503" \
10427 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10428 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10429 -c "Protocol is TLSv1.3" \
10430 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10431 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10432 -c "NamedGroup: secp256r1 ( 17 )" \
10433 -c "Verifying peer X.509 certificate... ok" \
10434 -C "received HelloRetryRequest message"
10435
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10436requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10437requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10438requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10439requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10440requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10441requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10442requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10443requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10444requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10445requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10446run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10447 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10448 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10449 0 \
10450 -s "Protocol is TLSv1.3" \
10451 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10452 -s "received signature algorithm: 0x603" \
10453 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10454 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10455 -c "Protocol is TLSv1.3" \
10456 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10457 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10458 -c "NamedGroup: secp256r1 ( 17 )" \
10459 -c "Verifying peer X.509 certificate... ok" \
10460 -C "received HelloRetryRequest message"
10461
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10462requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10463requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10464requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10465requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10466requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10467requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10468requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10469requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10470requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10471requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10472requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10473requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10474run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10475 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10476 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10477 0 \
10478 -s "Protocol is TLSv1.3" \
10479 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10480 -s "received signature algorithm: 0x804" \
10481 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10482 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10483 -c "Protocol is TLSv1.3" \
10484 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10485 -c "Certificate Verify: Signature algorithm ( 0804 )" \
10486 -c "NamedGroup: secp256r1 ( 17 )" \
10487 -c "Verifying peer X.509 certificate... ok" \
10488 -C "received HelloRetryRequest message"
10489
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10490requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10491requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10492requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10493requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10494requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10495requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10496requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10497requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10498requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10499requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10500run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10501 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10502 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10503 0 \
10504 -s "Protocol is TLSv1.3" \
10505 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10506 -s "received signature algorithm: 0x403" \
10507 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10508 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10509 -c "Protocol is TLSv1.3" \
10510 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10511 -c "Certificate Verify: Signature algorithm ( 0403 )" \
10512 -c "NamedGroup: secp384r1 ( 18 )" \
10513 -c "Verifying peer X.509 certificate... ok" \
10514 -C "received HelloRetryRequest message"
10515
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10516requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10517requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10518requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10519requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10520requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10521requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10522requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10523requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10524requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10525requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10526run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10527 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10528 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10529 0 \
10530 -s "Protocol is TLSv1.3" \
10531 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10532 -s "received signature algorithm: 0x503" \
10533 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10534 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10535 -c "Protocol is TLSv1.3" \
10536 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10537 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10538 -c "NamedGroup: secp384r1 ( 18 )" \
10539 -c "Verifying peer X.509 certificate... ok" \
10540 -C "received HelloRetryRequest message"
10541
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10542requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10543requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10544requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10545requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10546requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10547requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10548requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10549requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10550requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10551requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10552run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10553 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10554 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10555 0 \
10556 -s "Protocol is TLSv1.3" \
10557 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10558 -s "received signature algorithm: 0x603" \
10559 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10560 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10561 -c "Protocol is TLSv1.3" \
10562 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10563 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10564 -c "NamedGroup: secp384r1 ( 18 )" \
10565 -c "Verifying peer X.509 certificate... ok" \
10566 -C "received HelloRetryRequest message"
10567
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10568requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10569requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10570requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10571requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10572requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10573requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10574requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10575requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10576requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10577requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10578requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10579requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10580run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10581 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10582 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10583 0 \
10584 -s "Protocol is TLSv1.3" \
10585 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10586 -s "received signature algorithm: 0x804" \
10587 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10588 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10589 -c "Protocol is TLSv1.3" \
10590 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10591 -c "Certificate Verify: Signature algorithm ( 0804 )" \
10592 -c "NamedGroup: secp384r1 ( 18 )" \
10593 -c "Verifying peer X.509 certificate... ok" \
10594 -C "received HelloRetryRequest message"
10595
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10596requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10597requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10598requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10599requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10600requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10601requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10602requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10603requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10604requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10605requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10606run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10607 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10608 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10609 0 \
10610 -s "Protocol is TLSv1.3" \
10611 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10612 -s "received signature algorithm: 0x403" \
10613 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10614 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10615 -c "Protocol is TLSv1.3" \
10616 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10617 -c "Certificate Verify: Signature algorithm ( 0403 )" \
10618 -c "NamedGroup: secp521r1 ( 19 )" \
10619 -c "Verifying peer X.509 certificate... ok" \
10620 -C "received HelloRetryRequest message"
10621
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10622requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10623requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10624requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10625requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10626requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10627requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10628requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10629requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10630requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10631requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10632run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10633 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10634 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10635 0 \
10636 -s "Protocol is TLSv1.3" \
10637 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10638 -s "received signature algorithm: 0x503" \
10639 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10640 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10641 -c "Protocol is TLSv1.3" \
10642 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10643 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10644 -c "NamedGroup: secp521r1 ( 19 )" \
10645 -c "Verifying peer X.509 certificate... ok" \
10646 -C "received HelloRetryRequest message"
10647
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10648requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10649requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10650requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10651requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10652requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10653requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10654requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10655requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10656requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10657requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10658run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10659 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10660 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10661 0 \
10662 -s "Protocol is TLSv1.3" \
10663 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10664 -s "received signature algorithm: 0x603" \
10665 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10666 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10667 -c "Protocol is TLSv1.3" \
10668 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10669 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10670 -c "NamedGroup: secp521r1 ( 19 )" \
10671 -c "Verifying peer X.509 certificate... ok" \
10672 -C "received HelloRetryRequest message"
10673
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10674requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10675requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10676requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10677requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10678requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10679requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10680requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10681requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10682requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10683requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10684requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10685requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10686run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10687 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10688 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10689 0 \
10690 -s "Protocol is TLSv1.3" \
10691 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10692 -s "received signature algorithm: 0x804" \
10693 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10694 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10695 -c "Protocol is TLSv1.3" \
10696 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10697 -c "Certificate Verify: Signature algorithm ( 0804 )" \
10698 -c "NamedGroup: secp521r1 ( 19 )" \
10699 -c "Verifying peer X.509 certificate... ok" \
10700 -C "received HelloRetryRequest message"
10701
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10702requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10703requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10704requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10705requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10706requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10707requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10708requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10709requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10710requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10711requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10712run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10713 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10714 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10715 0 \
10716 -s "Protocol is TLSv1.3" \
10717 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10718 -s "received signature algorithm: 0x403" \
10719 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10720 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10721 -c "Protocol is TLSv1.3" \
10722 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10723 -c "Certificate Verify: Signature algorithm ( 0403 )" \
10724 -c "NamedGroup: x25519 ( 1d )" \
10725 -c "Verifying peer X.509 certificate... ok" \
10726 -C "received HelloRetryRequest message"
10727
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10728requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10729requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10730requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10731requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10732requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10733requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10734requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10735requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10736requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10737requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10738run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10739 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10740 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10741 0 \
10742 -s "Protocol is TLSv1.3" \
10743 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10744 -s "received signature algorithm: 0x503" \
10745 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10746 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10747 -c "Protocol is TLSv1.3" \
10748 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10749 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10750 -c "NamedGroup: x25519 ( 1d )" \
10751 -c "Verifying peer X.509 certificate... ok" \
10752 -C "received HelloRetryRequest message"
10753
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10754requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10755requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10756requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10757requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10758requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10759requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10760requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10761requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10762requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10763requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10764run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10765 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10766 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10767 0 \
10768 -s "Protocol is TLSv1.3" \
10769 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10770 -s "received signature algorithm: 0x603" \
10771 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10772 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10773 -c "Protocol is TLSv1.3" \
10774 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10775 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10776 -c "NamedGroup: x25519 ( 1d )" \
10777 -c "Verifying peer X.509 certificate... ok" \
10778 -C "received HelloRetryRequest message"
10779
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10780requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10781requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10782requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10783requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10784requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10785requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10786requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10787requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10788requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10789requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10790requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10791requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10792run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10793 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10794 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10795 0 \
10796 -s "Protocol is TLSv1.3" \
10797 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10798 -s "received signature algorithm: 0x804" \
10799 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10800 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10801 -c "Protocol is TLSv1.3" \
10802 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10803 -c "Certificate Verify: Signature algorithm ( 0804 )" \
10804 -c "NamedGroup: x25519 ( 1d )" \
10805 -c "Verifying peer X.509 certificate... ok" \
10806 -C "received HelloRetryRequest message"
10807
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10808requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10809requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10810requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10811requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10812requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10813requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10814requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10815requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10816requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10817requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10818run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10819 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10820 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10821 0 \
10822 -s "Protocol is TLSv1.3" \
10823 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10824 -s "received signature algorithm: 0x403" \
10825 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10826 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10827 -c "Protocol is TLSv1.3" \
10828 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10829 -c "Certificate Verify: Signature algorithm ( 0403 )" \
10830 -c "NamedGroup: x448 ( 1e )" \
10831 -c "Verifying peer X.509 certificate... ok" \
10832 -C "received HelloRetryRequest message"
10833
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10834requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10835requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10836requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10837requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10838requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10839requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10840requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10841requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10842requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10843requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10844run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10845 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10846 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10847 0 \
10848 -s "Protocol is TLSv1.3" \
10849 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10850 -s "received signature algorithm: 0x503" \
10851 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10852 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10853 -c "Protocol is TLSv1.3" \
10854 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10855 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10856 -c "NamedGroup: x448 ( 1e )" \
10857 -c "Verifying peer X.509 certificate... ok" \
10858 -C "received HelloRetryRequest message"
10859
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10860requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10861requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10862requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10863requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10864requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10865requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10866requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10867requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10868requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10869requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10870run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10871 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10872 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10873 0 \
10874 -s "Protocol is TLSv1.3" \
10875 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10876 -s "received signature algorithm: 0x603" \
10877 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10878 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10879 -c "Protocol is TLSv1.3" \
10880 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10881 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10882 -c "NamedGroup: x448 ( 1e )" \
10883 -c "Verifying peer X.509 certificate... ok" \
10884 -C "received HelloRetryRequest message"
10885
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10886requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10887requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10888requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10889requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10890requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10891requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10892requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10893requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10894requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10895requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
10896requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10897requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10898run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10899 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10900 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10901 0 \
10902 -s "Protocol is TLSv1.3" \
10903 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10904 -s "received signature algorithm: 0x804" \
10905 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]10906 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10907 -c "Protocol is TLSv1.3" \
10908 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10909 -c "Certificate Verify: Signature algorithm ( 0804 )" \
10910 -c "NamedGroup: x448 ( 1e )" \
10911 -c "Verifying peer X.509 certificate... ok" \
10912 -C "received HelloRetryRequest message"
10913
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]10914requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10915requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10916requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10917requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10918requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10919requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10920requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]10921requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]10922requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]10923requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10924requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10925requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10926run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10927 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10928 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10929 0 \
10930 -s "Protocol is TLSv1.3" \
10931 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10932 -s "received signature algorithm: 0x403" \
10933 -s "got named group: ffdhe2048(0100)" \
10934 -s "Certificate verification was skipped" \
10935 -c "Protocol is TLSv1.3" \
10936 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10937 -c "Certificate Verify: Signature algorithm ( 0403 )" \
10938 -c "NamedGroup: ffdhe2048 ( 100 )" \
10939 -c "Verifying peer X.509 certificate... ok" \
10940 -C "received HelloRetryRequest message"
10941
10942requires_config_enabled MBEDTLS_SSL_SRV_C
10943requires_config_enabled MBEDTLS_DEBUG_C
10944requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10945requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10946requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10947requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10948requires_config_enabled MBEDTLS_SSL_CLI_C
10949requires_config_enabled MBEDTLS_DEBUG_C
10950requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10951requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10952requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10953requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10954run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10955 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10956 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10957 0 \
10958 -s "Protocol is TLSv1.3" \
10959 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10960 -s "received signature algorithm: 0x503" \
10961 -s "got named group: ffdhe2048(0100)" \
10962 -s "Certificate verification was skipped" \
10963 -c "Protocol is TLSv1.3" \
10964 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10965 -c "Certificate Verify: Signature algorithm ( 0503 )" \
10966 -c "NamedGroup: ffdhe2048 ( 100 )" \
10967 -c "Verifying peer X.509 certificate... ok" \
10968 -C "received HelloRetryRequest message"
10969
10970requires_config_enabled MBEDTLS_SSL_SRV_C
10971requires_config_enabled MBEDTLS_DEBUG_C
10972requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10973requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10974requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10975requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10976requires_config_enabled MBEDTLS_SSL_CLI_C
10977requires_config_enabled MBEDTLS_DEBUG_C
10978requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
10979requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]10980requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]10981requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10982run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]10983 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
10984 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]10985 0 \
10986 -s "Protocol is TLSv1.3" \
10987 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
10988 -s "received signature algorithm: 0x603" \
10989 -s "got named group: ffdhe2048(0100)" \
10990 -s "Certificate verification was skipped" \
10991 -c "Protocol is TLSv1.3" \
10992 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
10993 -c "Certificate Verify: Signature algorithm ( 0603 )" \
10994 -c "NamedGroup: ffdhe2048 ( 100 )" \
10995 -c "Verifying peer X.509 certificate... ok" \
10996 -C "received HelloRetryRequest message"
10997
10998requires_config_enabled MBEDTLS_SSL_SRV_C
10999requires_config_enabled MBEDTLS_DEBUG_C
11000requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11001requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11002requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11003requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11004requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11005requires_config_enabled MBEDTLS_SSL_CLI_C
11006requires_config_enabled MBEDTLS_DEBUG_C
11007requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11008requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11009requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11010requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11011requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11012run_test "TLS 1.3 m->m: CHACHA20_POLY1305_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11013 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11014 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-CHACHA20-POLY1305-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11015 0 \
11016 -s "Protocol is TLSv1.3" \
11017 -s "server hello, chosen ciphersuite: TLS1-3-CHACHA20-POLY1305-SHA256 ( id=4867 )" \
11018 -s "received signature algorithm: 0x804" \
11019 -s "got named group: ffdhe2048(0100)" \
11020 -s "Certificate verification was skipped" \
11021 -c "Protocol is TLSv1.3" \
11022 -c "server hello, chosen ciphersuite: ( 1303 ) - TLS1-3-CHACHA20-POLY1305-SHA256" \
11023 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11024 -c "NamedGroup: ffdhe2048 ( 100 )" \
11025 -c "Verifying peer X.509 certificate... ok" \
11026 -C "received HelloRetryRequest message"
11027
11028requires_config_enabled MBEDTLS_SSL_SRV_C
11029requires_config_enabled MBEDTLS_DEBUG_C
11030requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11031requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11032requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11033requires_config_enabled MBEDTLS_SSL_CLI_C
11034requires_config_enabled MBEDTLS_DEBUG_C
11035requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11036requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11037requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11038run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11039 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11040 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11041 0 \
11042 -s "Protocol is TLSv1.3" \
11043 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11044 -s "received signature algorithm: 0x403" \
11045 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11046 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11047 -c "Protocol is TLSv1.3" \
11048 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11049 -c "Certificate Verify: Signature algorithm ( 0403 )" \
11050 -c "NamedGroup: secp256r1 ( 17 )" \
11051 -c "Verifying peer X.509 certificate... ok" \
11052 -C "received HelloRetryRequest message"
11053
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11054requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11055requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11056requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11057requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11058requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11059requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11060requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11061requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11062requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11063requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11064run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11065 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11066 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11067 0 \
11068 -s "Protocol is TLSv1.3" \
11069 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11070 -s "received signature algorithm: 0x503" \
11071 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11072 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11073 -c "Protocol is TLSv1.3" \
11074 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11075 -c "Certificate Verify: Signature algorithm ( 0503 )" \
11076 -c "NamedGroup: secp256r1 ( 17 )" \
11077 -c "Verifying peer X.509 certificate... ok" \
11078 -C "received HelloRetryRequest message"
11079
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11080requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11081requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11082requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11083requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11084requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11085requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11086requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11087requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11088requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11089requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11090run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11091 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11092 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11093 0 \
11094 -s "Protocol is TLSv1.3" \
11095 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11096 -s "received signature algorithm: 0x603" \
11097 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11098 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11099 -c "Protocol is TLSv1.3" \
11100 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11101 -c "Certificate Verify: Signature algorithm ( 0603 )" \
11102 -c "NamedGroup: secp256r1 ( 17 )" \
11103 -c "Verifying peer X.509 certificate... ok" \
11104 -C "received HelloRetryRequest message"
11105
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11106requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11107requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11108requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11109requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11110requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11111requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11112requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11113requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11114requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11115requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11116requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11117requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11118run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11119 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11120 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11121 0 \
11122 -s "Protocol is TLSv1.3" \
11123 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11124 -s "received signature algorithm: 0x804" \
11125 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11126 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11127 -c "Protocol is TLSv1.3" \
11128 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11129 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11130 -c "NamedGroup: secp256r1 ( 17 )" \
11131 -c "Verifying peer X.509 certificate... ok" \
11132 -C "received HelloRetryRequest message"
11133
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11134requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11135requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11136requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11137requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11138requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11139requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11140requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11141requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11142requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11143requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11144run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11145 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11146 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11147 0 \
11148 -s "Protocol is TLSv1.3" \
11149 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11150 -s "received signature algorithm: 0x403" \
11151 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11152 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11153 -c "Protocol is TLSv1.3" \
11154 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11155 -c "Certificate Verify: Signature algorithm ( 0403 )" \
11156 -c "NamedGroup: secp384r1 ( 18 )" \
11157 -c "Verifying peer X.509 certificate... ok" \
11158 -C "received HelloRetryRequest message"
11159
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11160requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11161requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11162requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11163requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11164requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11165requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11166requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11167requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11168requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11169requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11170run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11171 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11172 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11173 0 \
11174 -s "Protocol is TLSv1.3" \
11175 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11176 -s "received signature algorithm: 0x503" \
11177 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11178 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11179 -c "Protocol is TLSv1.3" \
11180 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11181 -c "Certificate Verify: Signature algorithm ( 0503 )" \
11182 -c "NamedGroup: secp384r1 ( 18 )" \
11183 -c "Verifying peer X.509 certificate... ok" \
11184 -C "received HelloRetryRequest message"
11185
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11186requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11187requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11188requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11189requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11190requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11191requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11192requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11193requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11194requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11195requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11196run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11197 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11198 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11199 0 \
11200 -s "Protocol is TLSv1.3" \
11201 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11202 -s "received signature algorithm: 0x603" \
11203 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11204 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11205 -c "Protocol is TLSv1.3" \
11206 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11207 -c "Certificate Verify: Signature algorithm ( 0603 )" \
11208 -c "NamedGroup: secp384r1 ( 18 )" \
11209 -c "Verifying peer X.509 certificate... ok" \
11210 -C "received HelloRetryRequest message"
11211
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11212requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11213requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11214requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11215requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11216requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11217requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11218requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11219requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11220requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11221requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11222requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11223requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11224run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11225 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11226 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11227 0 \
11228 -s "Protocol is TLSv1.3" \
11229 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11230 -s "received signature algorithm: 0x804" \
11231 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11232 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11233 -c "Protocol is TLSv1.3" \
11234 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11235 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11236 -c "NamedGroup: secp384r1 ( 18 )" \
11237 -c "Verifying peer X.509 certificate... ok" \
11238 -C "received HelloRetryRequest message"
11239
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11240requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11241requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11242requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11243requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11244requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11245requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11246requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11247requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11248requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11249requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11250run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11251 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11252 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11253 0 \
11254 -s "Protocol is TLSv1.3" \
11255 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11256 -s "received signature algorithm: 0x403" \
11257 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11258 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11259 -c "Protocol is TLSv1.3" \
11260 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11261 -c "Certificate Verify: Signature algorithm ( 0403 )" \
11262 -c "NamedGroup: secp521r1 ( 19 )" \
11263 -c "Verifying peer X.509 certificate... ok" \
11264 -C "received HelloRetryRequest message"
11265
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11266requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11267requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11268requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11269requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11270requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11271requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11272requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11273requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11274requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11275requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11276run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11277 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11278 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11279 0 \
11280 -s "Protocol is TLSv1.3" \
11281 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11282 -s "received signature algorithm: 0x503" \
11283 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11284 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11285 -c "Protocol is TLSv1.3" \
11286 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11287 -c "Certificate Verify: Signature algorithm ( 0503 )" \
11288 -c "NamedGroup: secp521r1 ( 19 )" \
11289 -c "Verifying peer X.509 certificate... ok" \
11290 -C "received HelloRetryRequest message"
11291
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11292requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11293requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11294requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11295requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11296requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11297requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11298requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11299requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11300requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11301requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11302run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11303 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11304 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11305 0 \
11306 -s "Protocol is TLSv1.3" \
11307 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11308 -s "received signature algorithm: 0x603" \
11309 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11310 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11311 -c "Protocol is TLSv1.3" \
11312 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11313 -c "Certificate Verify: Signature algorithm ( 0603 )" \
11314 -c "NamedGroup: secp521r1 ( 19 )" \
11315 -c "Verifying peer X.509 certificate... ok" \
11316 -C "received HelloRetryRequest message"
11317
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11318requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11319requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11320requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11321requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11322requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11323requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11324requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11325requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11326requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11327requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11328requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11329requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11330run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11331 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11332 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11333 0 \
11334 -s "Protocol is TLSv1.3" \
11335 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11336 -s "received signature algorithm: 0x804" \
11337 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11338 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11339 -c "Protocol is TLSv1.3" \
11340 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11341 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11342 -c "NamedGroup: secp521r1 ( 19 )" \
11343 -c "Verifying peer X.509 certificate... ok" \
11344 -C "received HelloRetryRequest message"
11345
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11346requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11347requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11348requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11349requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11350requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11351requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11352requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11353requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11354requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11355requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11356run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11357 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11358 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11359 0 \
11360 -s "Protocol is TLSv1.3" \
11361 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11362 -s "received signature algorithm: 0x403" \
11363 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11364 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11365 -c "Protocol is TLSv1.3" \
11366 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11367 -c "Certificate Verify: Signature algorithm ( 0403 )" \
11368 -c "NamedGroup: x25519 ( 1d )" \
11369 -c "Verifying peer X.509 certificate... ok" \
11370 -C "received HelloRetryRequest message"
11371
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11372requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11373requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11374requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11375requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11376requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11377requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11378requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11379requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11380requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11381requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11382run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11383 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11384 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11385 0 \
11386 -s "Protocol is TLSv1.3" \
11387 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11388 -s "received signature algorithm: 0x503" \
11389 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11390 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11391 -c "Protocol is TLSv1.3" \
11392 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11393 -c "Certificate Verify: Signature algorithm ( 0503 )" \
11394 -c "NamedGroup: x25519 ( 1d )" \
11395 -c "Verifying peer X.509 certificate... ok" \
11396 -C "received HelloRetryRequest message"
11397
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11398requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11399requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11400requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11401requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11402requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11403requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11404requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11405requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11406requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11407requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11408run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11409 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11410 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11411 0 \
11412 -s "Protocol is TLSv1.3" \
11413 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11414 -s "received signature algorithm: 0x603" \
11415 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11416 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11417 -c "Protocol is TLSv1.3" \
11418 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11419 -c "Certificate Verify: Signature algorithm ( 0603 )" \
11420 -c "NamedGroup: x25519 ( 1d )" \
11421 -c "Verifying peer X.509 certificate... ok" \
11422 -C "received HelloRetryRequest message"
11423
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11424requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11425requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11426requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11427requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11428requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11429requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11430requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11431requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11432requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11433requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11434requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11435requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11436run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11437 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11438 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11439 0 \
11440 -s "Protocol is TLSv1.3" \
11441 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11442 -s "received signature algorithm: 0x804" \
11443 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11444 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11445 -c "Protocol is TLSv1.3" \
11446 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11447 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11448 -c "NamedGroup: x25519 ( 1d )" \
11449 -c "Verifying peer X.509 certificate... ok" \
11450 -C "received HelloRetryRequest message"
11451
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11452requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11453requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11454requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11455requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11456requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11457requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11458requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11459requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11460requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11461requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11462run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11463 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11464 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11465 0 \
11466 -s "Protocol is TLSv1.3" \
11467 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11468 -s "received signature algorithm: 0x403" \
11469 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11470 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11471 -c "Protocol is TLSv1.3" \
11472 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11473 -c "Certificate Verify: Signature algorithm ( 0403 )" \
11474 -c "NamedGroup: x448 ( 1e )" \
11475 -c "Verifying peer X.509 certificate... ok" \
11476 -C "received HelloRetryRequest message"
11477
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11478requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11479requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11480requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11481requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11482requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11483requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11484requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11485requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11486requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11487requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11488run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11489 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11490 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11491 0 \
11492 -s "Protocol is TLSv1.3" \
11493 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11494 -s "received signature algorithm: 0x503" \
11495 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11496 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11497 -c "Protocol is TLSv1.3" \
11498 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11499 -c "Certificate Verify: Signature algorithm ( 0503 )" \
11500 -c "NamedGroup: x448 ( 1e )" \
11501 -c "Verifying peer X.509 certificate... ok" \
11502 -C "received HelloRetryRequest message"
11503
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11504requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11505requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11506requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11507requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11508requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11509requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11510requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11511requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11512requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11513requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11514run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11515 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11516 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11517 0 \
11518 -s "Protocol is TLSv1.3" \
11519 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11520 -s "received signature algorithm: 0x603" \
11521 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11522 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11523 -c "Protocol is TLSv1.3" \
11524 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11525 -c "Certificate Verify: Signature algorithm ( 0603 )" \
11526 -c "NamedGroup: x448 ( 1e )" \
11527 -c "Verifying peer X.509 certificate... ok" \
11528 -C "received HelloRetryRequest message"
11529
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11530requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11531requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11532requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11533requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11534requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11535requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11536requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11537requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11538requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11539requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11540requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11541requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11542run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11543 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11544 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11545 0 \
11546 -s "Protocol is TLSv1.3" \
11547 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11548 -s "received signature algorithm: 0x804" \
11549 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11550 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11551 -c "Protocol is TLSv1.3" \
11552 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11553 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11554 -c "NamedGroup: x448 ( 1e )" \
11555 -c "Verifying peer X.509 certificate... ok" \
11556 -C "received HelloRetryRequest message"
11557
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11558requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11559requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11560requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11561requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11562requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11563requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11564requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11565requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11566requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11567requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11568requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11569requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11570run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11571 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11572 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11573 0 \
11574 -s "Protocol is TLSv1.3" \
11575 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11576 -s "received signature algorithm: 0x403" \
11577 -s "got named group: ffdhe2048(0100)" \
11578 -s "Certificate verification was skipped" \
11579 -c "Protocol is TLSv1.3" \
11580 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11581 -c "Certificate Verify: Signature algorithm ( 0403 )" \
11582 -c "NamedGroup: ffdhe2048 ( 100 )" \
11583 -c "Verifying peer X.509 certificate... ok" \
11584 -C "received HelloRetryRequest message"
11585
11586requires_config_enabled MBEDTLS_SSL_SRV_C
11587requires_config_enabled MBEDTLS_DEBUG_C
11588requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11589requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11590requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11591requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11592requires_config_enabled MBEDTLS_SSL_CLI_C
11593requires_config_enabled MBEDTLS_DEBUG_C
11594requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11595requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11596requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11597requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11598run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11599 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11600 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11601 0 \
11602 -s "Protocol is TLSv1.3" \
11603 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11604 -s "received signature algorithm: 0x503" \
11605 -s "got named group: ffdhe2048(0100)" \
11606 -s "Certificate verification was skipped" \
11607 -c "Protocol is TLSv1.3" \
11608 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11609 -c "Certificate Verify: Signature algorithm ( 0503 )" \
11610 -c "NamedGroup: ffdhe2048 ( 100 )" \
11611 -c "Verifying peer X.509 certificate... ok" \
11612 -C "received HelloRetryRequest message"
11613
11614requires_config_enabled MBEDTLS_SSL_SRV_C
11615requires_config_enabled MBEDTLS_DEBUG_C
11616requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11617requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11618requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11619requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11620requires_config_enabled MBEDTLS_SSL_CLI_C
11621requires_config_enabled MBEDTLS_DEBUG_C
11622requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11623requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11624requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11625requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11626run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11627 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11628 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11629 0 \
11630 -s "Protocol is TLSv1.3" \
11631 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11632 -s "received signature algorithm: 0x603" \
11633 -s "got named group: ffdhe2048(0100)" \
11634 -s "Certificate verification was skipped" \
11635 -c "Protocol is TLSv1.3" \
11636 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11637 -c "Certificate Verify: Signature algorithm ( 0603 )" \
11638 -c "NamedGroup: ffdhe2048 ( 100 )" \
11639 -c "Verifying peer X.509 certificate... ok" \
11640 -C "received HelloRetryRequest message"
11641
11642requires_config_enabled MBEDTLS_SSL_SRV_C
11643requires_config_enabled MBEDTLS_DEBUG_C
11644requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11645requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11646requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11647requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11648requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11649requires_config_enabled MBEDTLS_SSL_CLI_C
11650requires_config_enabled MBEDTLS_DEBUG_C
11651requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11652requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11653requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11654requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]11655requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11656run_test "TLS 1.3 m->m: AES_128_CCM_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11657 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11658 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11659 0 \
11660 -s "Protocol is TLSv1.3" \
11661 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-SHA256 ( id=4868 )" \
11662 -s "received signature algorithm: 0x804" \
11663 -s "got named group: ffdhe2048(0100)" \
11664 -s "Certificate verification was skipped" \
11665 -c "Protocol is TLSv1.3" \
11666 -c "server hello, chosen ciphersuite: ( 1304 ) - TLS1-3-AES-128-CCM-SHA256" \
11667 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11668 -c "NamedGroup: ffdhe2048 ( 100 )" \
11669 -c "Verifying peer X.509 certificate... ok" \
11670 -C "received HelloRetryRequest message"
11671
11672requires_config_enabled MBEDTLS_SSL_SRV_C
11673requires_config_enabled MBEDTLS_DEBUG_C
11674requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11675requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11676requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]11677requires_config_enabled MBEDTLS_SSL_CLI_C
11678requires_config_enabled MBEDTLS_DEBUG_C
11679requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
11680requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11681requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11682run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11683 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11684 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11685 0 \
11686 -s "Protocol is TLSv1.3" \
11687 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11688 -s "received signature algorithm: 0x403" \
11689 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11690 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11691 -c "Protocol is TLSv1.3" \
11692 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11693 -c "Certificate Verify: Signature algorithm ( 0403 )" \
11694 -c "NamedGroup: secp256r1 ( 17 )" \
11695 -c "Verifying peer X.509 certificate... ok" \
11696 -C "received HelloRetryRequest message"
11697
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11698requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11699requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11700requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11701requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11702requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11703requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11704requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11705requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11706requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11707requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11708run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11709 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11710 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11711 0 \
11712 -s "Protocol is TLSv1.3" \
11713 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11714 -s "received signature algorithm: 0x503" \
11715 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11716 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11717 -c "Protocol is TLSv1.3" \
11718 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11719 -c "Certificate Verify: Signature algorithm ( 0503 )" \
11720 -c "NamedGroup: secp256r1 ( 17 )" \
11721 -c "Verifying peer X.509 certificate... ok" \
11722 -C "received HelloRetryRequest message"
11723
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11724requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11725requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11726requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11727requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11728requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11729requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11730requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11731requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11732requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11733requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11734run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11735 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11736 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11737 0 \
11738 -s "Protocol is TLSv1.3" \
11739 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11740 -s "received signature algorithm: 0x603" \
11741 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11742 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11743 -c "Protocol is TLSv1.3" \
11744 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11745 -c "Certificate Verify: Signature algorithm ( 0603 )" \
11746 -c "NamedGroup: secp256r1 ( 17 )" \
11747 -c "Verifying peer X.509 certificate... ok" \
11748 -C "received HelloRetryRequest message"
11749
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11750requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11751requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11752requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11753requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11754requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11755requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11756requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11757requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11758requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11759requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11760requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11761requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11762run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp256r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11763 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11764 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11765 0 \
11766 -s "Protocol is TLSv1.3" \
11767 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11768 -s "received signature algorithm: 0x804" \
11769 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11770 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11771 -c "Protocol is TLSv1.3" \
11772 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11773 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11774 -c "NamedGroup: secp256r1 ( 17 )" \
11775 -c "Verifying peer X.509 certificate... ok" \
11776 -C "received HelloRetryRequest message"
11777
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11778requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11779requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11780requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11781requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11782requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11783requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11784requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11785requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11786requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11787requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11788run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11789 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11790 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11791 0 \
11792 -s "Protocol is TLSv1.3" \
11793 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11794 -s "received signature algorithm: 0x403" \
11795 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11796 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11797 -c "Protocol is TLSv1.3" \
11798 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11799 -c "Certificate Verify: Signature algorithm ( 0403 )" \
11800 -c "NamedGroup: secp384r1 ( 18 )" \
11801 -c "Verifying peer X.509 certificate... ok" \
11802 -C "received HelloRetryRequest message"
11803
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11804requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11805requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11806requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11807requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11808requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11809requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11810requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11811requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11812requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11813requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11814run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11815 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11816 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11817 0 \
11818 -s "Protocol is TLSv1.3" \
11819 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11820 -s "received signature algorithm: 0x503" \
11821 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11822 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11823 -c "Protocol is TLSv1.3" \
11824 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11825 -c "Certificate Verify: Signature algorithm ( 0503 )" \
11826 -c "NamedGroup: secp384r1 ( 18 )" \
11827 -c "Verifying peer X.509 certificate... ok" \
11828 -C "received HelloRetryRequest message"
11829
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11830requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11831requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11832requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11833requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11834requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11835requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11836requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11837requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11838requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11839requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11840run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11841 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11842 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11843 0 \
11844 -s "Protocol is TLSv1.3" \
11845 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11846 -s "received signature algorithm: 0x603" \
11847 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11848 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11849 -c "Protocol is TLSv1.3" \
11850 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11851 -c "Certificate Verify: Signature algorithm ( 0603 )" \
11852 -c "NamedGroup: secp384r1 ( 18 )" \
11853 -c "Verifying peer X.509 certificate... ok" \
11854 -C "received HelloRetryRequest message"
11855
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11856requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11857requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11858requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11859requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11860requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11861requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11862requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11863requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11864requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11865requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11866requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11867requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11868run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp384r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11869 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11870 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11871 0 \
11872 -s "Protocol is TLSv1.3" \
11873 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11874 -s "received signature algorithm: 0x804" \
11875 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11876 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11877 -c "Protocol is TLSv1.3" \
11878 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11879 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11880 -c "NamedGroup: secp384r1 ( 18 )" \
11881 -c "Verifying peer X.509 certificate... ok" \
11882 -C "received HelloRetryRequest message"
11883
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11884requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11885requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11886requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11887requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11888requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11889requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11890requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11891requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11892requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11893requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11894run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11895 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11896 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11897 0 \
11898 -s "Protocol is TLSv1.3" \
11899 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11900 -s "received signature algorithm: 0x403" \
11901 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11902 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11903 -c "Protocol is TLSv1.3" \
11904 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11905 -c "Certificate Verify: Signature algorithm ( 0403 )" \
11906 -c "NamedGroup: secp521r1 ( 19 )" \
11907 -c "Verifying peer X.509 certificate... ok" \
11908 -C "received HelloRetryRequest message"
11909
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11910requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11911requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11912requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11913requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11914requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11915requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11916requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11917requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11918requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11919requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11920run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11921 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11922 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11923 0 \
11924 -s "Protocol is TLSv1.3" \
11925 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11926 -s "received signature algorithm: 0x503" \
11927 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11928 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11929 -c "Protocol is TLSv1.3" \
11930 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11931 -c "Certificate Verify: Signature algorithm ( 0503 )" \
11932 -c "NamedGroup: secp521r1 ( 19 )" \
11933 -c "Verifying peer X.509 certificate... ok" \
11934 -C "received HelloRetryRequest message"
11935
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11936requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11937requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11938requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11939requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11940requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11941requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11942requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11943requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11944requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11945requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11946run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11947 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11948 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11949 0 \
11950 -s "Protocol is TLSv1.3" \
11951 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11952 -s "received signature algorithm: 0x603" \
11953 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11954 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11955 -c "Protocol is TLSv1.3" \
11956 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11957 -c "Certificate Verify: Signature algorithm ( 0603 )" \
11958 -c "NamedGroup: secp521r1 ( 19 )" \
11959 -c "Verifying peer X.509 certificate... ok" \
11960 -C "received HelloRetryRequest message"
11961
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11962requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11963requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11964requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11965requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11966requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11967requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11968requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11969requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11970requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11971requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
11972requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11973requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11974run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,secp521r1,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]11975 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
11976 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11977 0 \
11978 -s "Protocol is TLSv1.3" \
11979 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
11980 -s "received signature algorithm: 0x804" \
11981 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]11982 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11983 -c "Protocol is TLSv1.3" \
11984 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
11985 -c "Certificate Verify: Signature algorithm ( 0804 )" \
11986 -c "NamedGroup: secp521r1 ( 19 )" \
11987 -c "Verifying peer X.509 certificate... ok" \
11988 -C "received HelloRetryRequest message"
11989
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]11990requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11991requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11992requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11993requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11994requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11995requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]11996requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]11997requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]11998requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]11999requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12000run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12001 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12002 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12003 0 \
12004 -s "Protocol is TLSv1.3" \
12005 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12006 -s "received signature algorithm: 0x403" \
12007 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12008 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12009 -c "Protocol is TLSv1.3" \
12010 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12011 -c "Certificate Verify: Signature algorithm ( 0403 )" \
12012 -c "NamedGroup: x25519 ( 1d )" \
12013 -c "Verifying peer X.509 certificate... ok" \
12014 -C "received HelloRetryRequest message"
12015
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]12016requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12017requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12018requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12019requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12020requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12021requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12022requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12023requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12024requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12025requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12026run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12027 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12028 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12029 0 \
12030 -s "Protocol is TLSv1.3" \
12031 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12032 -s "received signature algorithm: 0x503" \
12033 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12034 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12035 -c "Protocol is TLSv1.3" \
12036 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12037 -c "Certificate Verify: Signature algorithm ( 0503 )" \
12038 -c "NamedGroup: x25519 ( 1d )" \
12039 -c "Verifying peer X.509 certificate... ok" \
12040 -C "received HelloRetryRequest message"
12041
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]12042requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12043requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12044requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12045requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12046requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12047requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12048requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12049requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12050requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12051requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12052run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12053 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12054 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12055 0 \
12056 -s "Protocol is TLSv1.3" \
12057 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12058 -s "received signature algorithm: 0x603" \
12059 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12060 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12061 -c "Protocol is TLSv1.3" \
12062 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12063 -c "Certificate Verify: Signature algorithm ( 0603 )" \
12064 -c "NamedGroup: x25519 ( 1d )" \
12065 -c "Verifying peer X.509 certificate... ok" \
12066 -C "received HelloRetryRequest message"
12067
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]12068requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12069requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12070requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12071requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12072requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12073requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12074requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12075requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12076requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12077requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12078requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12079requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12080run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x25519,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12081 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12082 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12083 0 \
12084 -s "Protocol is TLSv1.3" \
12085 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12086 -s "received signature algorithm: 0x804" \
12087 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12088 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12089 -c "Protocol is TLSv1.3" \
12090 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12091 -c "Certificate Verify: Signature algorithm ( 0804 )" \
12092 -c "NamedGroup: x25519 ( 1d )" \
12093 -c "Verifying peer X.509 certificate... ok" \
12094 -C "received HelloRetryRequest message"
12095
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]12096requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12097requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12098requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12099requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12100requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12101requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12102requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12103requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12104requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12105requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12106run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12107 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12108 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12109 0 \
12110 -s "Protocol is TLSv1.3" \
12111 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12112 -s "received signature algorithm: 0x403" \
12113 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12114 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12115 -c "Protocol is TLSv1.3" \
12116 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12117 -c "Certificate Verify: Signature algorithm ( 0403 )" \
12118 -c "NamedGroup: x448 ( 1e )" \
12119 -c "Verifying peer X.509 certificate... ok" \
12120 -C "received HelloRetryRequest message"
12121
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]12122requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12123requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12124requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12125requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12126requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12127requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12128requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12129requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12130requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12131requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12132run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12133 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12134 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12135 0 \
12136 -s "Protocol is TLSv1.3" \
12137 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12138 -s "received signature algorithm: 0x503" \
12139 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12140 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12141 -c "Protocol is TLSv1.3" \
12142 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12143 -c "Certificate Verify: Signature algorithm ( 0503 )" \
12144 -c "NamedGroup: x448 ( 1e )" \
12145 -c "Verifying peer X.509 certificate... ok" \
12146 -C "received HelloRetryRequest message"
12147
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]12148requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12149requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12150requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12151requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12152requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12153requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12154requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12155requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12156requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12157requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12158run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12159 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12160 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12161 0 \
12162 -s "Protocol is TLSv1.3" \
12163 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12164 -s "received signature algorithm: 0x603" \
12165 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12166 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12167 -c "Protocol is TLSv1.3" \
12168 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12169 -c "Certificate Verify: Signature algorithm ( 0603 )" \
12170 -c "NamedGroup: x448 ( 1e )" \
12171 -c "Verifying peer X.509 certificate... ok" \
12172 -C "received HelloRetryRequest message"
12173
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]12174requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12175requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12176requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12177requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12178requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12179requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12180requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12181requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12182requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12183requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12184requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12185requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12186run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,x448,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12187 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12188 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12189 0 \
12190 -s "Protocol is TLSv1.3" \
12191 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12192 -s "received signature algorithm: 0x804" \
12193 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12194 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]12195 -c "Protocol is TLSv1.3" \
12196 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12197 -c "Certificate Verify: Signature algorithm ( 0804 )" \
12198 -c "NamedGroup: x448 ( 1e )" \
12199 -c "Verifying peer X.509 certificate... ok" \
12200 -C "received HelloRetryRequest message"
12201
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12202requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]12203requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12204requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12205requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12206requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12207requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12208requires_config_enabled MBEDTLS_SSL_CLI_C
12209requires_config_enabled MBEDTLS_DEBUG_C
12210requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12211requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12212requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12213requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12214run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp256r1_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12215 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12216 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12217 0 \
12218 -s "Protocol is TLSv1.3" \
12219 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12220 -s "received signature algorithm: 0x403" \
12221 -s "got named group: ffdhe2048(0100)" \
12222 -s "Certificate verification was skipped" \
12223 -c "Protocol is TLSv1.3" \
12224 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12225 -c "Certificate Verify: Signature algorithm ( 0403 )" \
12226 -c "NamedGroup: ffdhe2048 ( 100 )" \
12227 -c "Verifying peer X.509 certificate... ok" \
12228 -C "received HelloRetryRequest message"
12229
12230requires_config_enabled MBEDTLS_SSL_SRV_C
12231requires_config_enabled MBEDTLS_DEBUG_C
12232requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12233requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12234requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12235requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12236requires_config_enabled MBEDTLS_SSL_CLI_C
12237requires_config_enabled MBEDTLS_DEBUG_C
12238requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12239requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12240requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12241requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12242run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp384r1_sha384" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12243 "$P_SRV crt_file=data_files/ecdsa_secp384r1.crt key_file=data_files/ecdsa_secp384r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12244 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp384r1_sha384 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12245 0 \
12246 -s "Protocol is TLSv1.3" \
12247 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12248 -s "received signature algorithm: 0x503" \
12249 -s "got named group: ffdhe2048(0100)" \
12250 -s "Certificate verification was skipped" \
12251 -c "Protocol is TLSv1.3" \
12252 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12253 -c "Certificate Verify: Signature algorithm ( 0503 )" \
12254 -c "NamedGroup: ffdhe2048 ( 100 )" \
12255 -c "Verifying peer X.509 certificate... ok" \
12256 -C "received HelloRetryRequest message"
12257
12258requires_config_enabled MBEDTLS_SSL_SRV_C
12259requires_config_enabled MBEDTLS_DEBUG_C
12260requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12261requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12262requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12263requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12264requires_config_enabled MBEDTLS_SSL_CLI_C
12265requires_config_enabled MBEDTLS_DEBUG_C
12266requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12267requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12268requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12269requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12270run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe2048,ecdsa_secp521r1_sha512" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12271 "$P_SRV crt_file=data_files/ecdsa_secp521r1.crt key_file=data_files/ecdsa_secp521r1.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12272 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=ecdsa_secp521r1_sha512 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12273 0 \
12274 -s "Protocol is TLSv1.3" \
12275 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12276 -s "received signature algorithm: 0x603" \
12277 -s "got named group: ffdhe2048(0100)" \
12278 -s "Certificate verification was skipped" \
12279 -c "Protocol is TLSv1.3" \
12280 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12281 -c "Certificate Verify: Signature algorithm ( 0603 )" \
12282 -c "NamedGroup: ffdhe2048 ( 100 )" \
12283 -c "Verifying peer X.509 certificate... ok" \
12284 -C "received HelloRetryRequest message"
12285
12286requires_config_enabled MBEDTLS_SSL_SRV_C
12287requires_config_enabled MBEDTLS_DEBUG_C
12288requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12289requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12290requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12291requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12292requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12293requires_config_enabled MBEDTLS_SSL_CLI_C
12294requires_config_enabled MBEDTLS_DEBUG_C
12295requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12296requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
12297requires_config_enabled MBEDTLS_X509_RSASSA_PSS_SUPPORT
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12298requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12299requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12300run_test "TLS 1.3 m->m: AES_128_CCM_8_SHA256,ffdhe2048,rsa_pss_rsae_sha256" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12301 "$P_SRV crt_file=data_files/server2-sha256.crt key_file=data_files/server2.key debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
12302 "$P_CLI ca_file=data_files/test-ca_cat12.crt debug_level=4 force_ciphersuite=TLS1-3-AES-128-CCM-8-SHA256 sig_algs=rsa_pss_rsae_sha256 groups=ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12303 0 \
12304 -s "Protocol is TLSv1.3" \
12305 -s "server hello, chosen ciphersuite: TLS1-3-AES-128-CCM-8-SHA256 ( id=4869 )" \
12306 -s "received signature algorithm: 0x804" \
12307 -s "got named group: ffdhe2048(0100)" \
12308 -s "Certificate verification was skipped" \
12309 -c "Protocol is TLSv1.3" \
12310 -c "server hello, chosen ciphersuite: ( 1305 ) - TLS1-3-AES-128-CCM-8-SHA256" \
12311 -c "Certificate Verify: Signature algorithm ( 0804 )" \
12312 -c "NamedGroup: ffdhe2048 ( 100 )" \
12313 -c "Verifying peer X.509 certificate... ok" \
12314 -C "received HelloRetryRequest message"
12315
12316requires_config_enabled MBEDTLS_SSL_SRV_C
12317requires_config_enabled MBEDTLS_DEBUG_C
12318requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12319requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12320requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12321requires_openssl_tls1_3
12322run_test "TLS 1.3 O->m: HRR secp256r1 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12323 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12324 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:P-384 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12325 0 \
12326 -s "Protocol is TLSv1.3" \
12327 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12328 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12329 -s "HRR selected_group: secp384r1"
12330
12331requires_config_enabled MBEDTLS_SSL_SRV_C
12332requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12333requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12334requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12335requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12336requires_openssl_tls1_3
12337run_test "TLS 1.3 O->m: HRR secp256r1 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12338 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12339 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:P-521 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12340 0 \
12341 -s "Protocol is TLSv1.3" \
12342 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12343 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12344 -s "HRR selected_group: secp521r1"
12345
12346requires_config_enabled MBEDTLS_SSL_SRV_C
12347requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12348requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12349requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12350requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12351requires_openssl_tls1_3
12352run_test "TLS 1.3 O->m: HRR secp256r1 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12353 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12354 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:X25519 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12355 0 \
12356 -s "Protocol is TLSv1.3" \
12357 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12358 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12359 -s "HRR selected_group: x25519"
12360
12361requires_config_enabled MBEDTLS_SSL_SRV_C
12362requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12363requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12364requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12365requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12366requires_openssl_tls1_3
12367run_test "TLS 1.3 O->m: HRR secp256r1 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12368 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12369 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:X448 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12370 0 \
12371 -s "Protocol is TLSv1.3" \
12372 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12373 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12374 -s "HRR selected_group: x448"
12375
12376requires_config_enabled MBEDTLS_SSL_SRV_C
12377requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12378requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12379requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12380requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12381requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12382requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12383run_test "TLS 1.3 O->m: HRR secp256r1 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12384 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12385 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-256:ffdhe2048 -msg -tls1_3" \
12386 0 \
12387 -s "Protocol is TLSv1.3" \
12388 -s "got named group: ffdhe2048(0100)" \
12389 -s "Certificate verification was skipped" \
12390 -s "HRR selected_group: ffdhe2048"
12391
12392requires_config_enabled MBEDTLS_SSL_SRV_C
12393requires_config_enabled MBEDTLS_DEBUG_C
12394requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12395requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12396requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12397requires_openssl_tls1_3
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12398run_test "TLS 1.3 O->m: HRR secp384r1 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12399 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12400 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:P-256 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12401 0 \
12402 -s "Protocol is TLSv1.3" \
12403 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12404 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12405 -s "HRR selected_group: secp256r1"
12406
12407requires_config_enabled MBEDTLS_SSL_SRV_C
12408requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12409requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12410requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12411requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12412requires_openssl_tls1_3
12413run_test "TLS 1.3 O->m: HRR secp384r1 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12414 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12415 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:P-521 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12416 0 \
12417 -s "Protocol is TLSv1.3" \
12418 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12419 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12420 -s "HRR selected_group: secp521r1"
12421
12422requires_config_enabled MBEDTLS_SSL_SRV_C
12423requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12424requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12425requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12426requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12427requires_openssl_tls1_3
12428run_test "TLS 1.3 O->m: HRR secp384r1 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12429 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12430 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:X25519 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12431 0 \
12432 -s "Protocol is TLSv1.3" \
12433 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12434 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12435 -s "HRR selected_group: x25519"
12436
12437requires_config_enabled MBEDTLS_SSL_SRV_C
12438requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12439requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12440requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12441requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12442requires_openssl_tls1_3
12443run_test "TLS 1.3 O->m: HRR secp384r1 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12444 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12445 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:X448 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12446 0 \
12447 -s "Protocol is TLSv1.3" \
12448 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12449 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12450 -s "HRR selected_group: x448"
12451
12452requires_config_enabled MBEDTLS_SSL_SRV_C
12453requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12454requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12455requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12456requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12457requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12458requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12459run_test "TLS 1.3 O->m: HRR secp384r1 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12460 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12461 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-384:ffdhe2048 -msg -tls1_3" \
12462 0 \
12463 -s "Protocol is TLSv1.3" \
12464 -s "got named group: ffdhe2048(0100)" \
12465 -s "Certificate verification was skipped" \
12466 -s "HRR selected_group: ffdhe2048"
12467
12468requires_config_enabled MBEDTLS_SSL_SRV_C
12469requires_config_enabled MBEDTLS_DEBUG_C
12470requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12471requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12472requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12473requires_openssl_tls1_3
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12474run_test "TLS 1.3 O->m: HRR secp521r1 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12475 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12476 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:P-256 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12477 0 \
12478 -s "Protocol is TLSv1.3" \
12479 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12480 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12481 -s "HRR selected_group: secp256r1"
12482
12483requires_config_enabled MBEDTLS_SSL_SRV_C
12484requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12485requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12486requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12487requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12488requires_openssl_tls1_3
12489run_test "TLS 1.3 O->m: HRR secp521r1 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12490 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12491 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:P-384 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12492 0 \
12493 -s "Protocol is TLSv1.3" \
12494 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12495 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12496 -s "HRR selected_group: secp384r1"
12497
12498requires_config_enabled MBEDTLS_SSL_SRV_C
12499requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12500requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12501requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12502requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12503requires_openssl_tls1_3
12504run_test "TLS 1.3 O->m: HRR secp521r1 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12505 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12506 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:X25519 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12507 0 \
12508 -s "Protocol is TLSv1.3" \
12509 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12510 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12511 -s "HRR selected_group: x25519"
12512
12513requires_config_enabled MBEDTLS_SSL_SRV_C
12514requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12515requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12516requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12517requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12518requires_openssl_tls1_3
12519run_test "TLS 1.3 O->m: HRR secp521r1 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12520 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12521 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:X448 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12522 0 \
12523 -s "Protocol is TLSv1.3" \
12524 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12525 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12526 -s "HRR selected_group: x448"
12527
12528requires_config_enabled MBEDTLS_SSL_SRV_C
12529requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12530requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12531requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12532requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12533requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12534requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12535run_test "TLS 1.3 O->m: HRR secp521r1 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12536 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12537 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups P-521:ffdhe2048 -msg -tls1_3" \
12538 0 \
12539 -s "Protocol is TLSv1.3" \
12540 -s "got named group: ffdhe2048(0100)" \
12541 -s "Certificate verification was skipped" \
12542 -s "HRR selected_group: ffdhe2048"
12543
12544requires_config_enabled MBEDTLS_SSL_SRV_C
12545requires_config_enabled MBEDTLS_DEBUG_C
12546requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12547requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12548requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12549requires_openssl_tls1_3
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12550run_test "TLS 1.3 O->m: HRR x25519 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12551 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12552 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:P-256 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12553 0 \
12554 -s "Protocol is TLSv1.3" \
12555 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12556 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12557 -s "HRR selected_group: secp256r1"
12558
12559requires_config_enabled MBEDTLS_SSL_SRV_C
12560requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12561requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12562requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12563requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12564requires_openssl_tls1_3
12565run_test "TLS 1.3 O->m: HRR x25519 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12566 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12567 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:P-384 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12568 0 \
12569 -s "Protocol is TLSv1.3" \
12570 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12571 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12572 -s "HRR selected_group: secp384r1"
12573
12574requires_config_enabled MBEDTLS_SSL_SRV_C
12575requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12576requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12577requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12578requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12579requires_openssl_tls1_3
12580run_test "TLS 1.3 O->m: HRR x25519 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12581 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12582 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:P-521 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12583 0 \
12584 -s "Protocol is TLSv1.3" \
12585 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12586 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12587 -s "HRR selected_group: secp521r1"
12588
12589requires_config_enabled MBEDTLS_SSL_SRV_C
12590requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12591requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12592requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12593requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12594requires_openssl_tls1_3
12595run_test "TLS 1.3 O->m: HRR x25519 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12596 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12597 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:X448 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12598 0 \
12599 -s "Protocol is TLSv1.3" \
12600 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12601 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12602 -s "HRR selected_group: x448"
12603
12604requires_config_enabled MBEDTLS_SSL_SRV_C
12605requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12606requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12607requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12608requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12609requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12610requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12611run_test "TLS 1.3 O->m: HRR x25519 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12612 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12613 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X25519:ffdhe2048 -msg -tls1_3" \
12614 0 \
12615 -s "Protocol is TLSv1.3" \
12616 -s "got named group: ffdhe2048(0100)" \
12617 -s "Certificate verification was skipped" \
12618 -s "HRR selected_group: ffdhe2048"
12619
12620requires_config_enabled MBEDTLS_SSL_SRV_C
12621requires_config_enabled MBEDTLS_DEBUG_C
12622requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12623requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12624requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12625requires_openssl_tls1_3
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12626run_test "TLS 1.3 O->m: HRR x448 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12627 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12628 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:P-256 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12629 0 \
12630 -s "Protocol is TLSv1.3" \
12631 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12632 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12633 -s "HRR selected_group: secp256r1"
12634
12635requires_config_enabled MBEDTLS_SSL_SRV_C
12636requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12637requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12638requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12639requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12640requires_openssl_tls1_3
12641run_test "TLS 1.3 O->m: HRR x448 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12642 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12643 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:P-384 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12644 0 \
12645 -s "Protocol is TLSv1.3" \
12646 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12647 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12648 -s "HRR selected_group: secp384r1"
12649
12650requires_config_enabled MBEDTLS_SSL_SRV_C
12651requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12652requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12653requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12654requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12655requires_openssl_tls1_3
12656run_test "TLS 1.3 O->m: HRR x448 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12657 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12658 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:P-521 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12659 0 \
12660 -s "Protocol is TLSv1.3" \
12661 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12662 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12663 -s "HRR selected_group: secp521r1"
12664
12665requires_config_enabled MBEDTLS_SSL_SRV_C
12666requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12667requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12668requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12669requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12670requires_openssl_tls1_3
12671run_test "TLS 1.3 O->m: HRR x448 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12672 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12673 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:X25519 -msg -tls1_3" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12674 0 \
12675 -s "Protocol is TLSv1.3" \
12676 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12677 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12678 -s "HRR selected_group: x25519"
12679
12680requires_config_enabled MBEDTLS_SSL_SRV_C
12681requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12682requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12683requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12684requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12685requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12686requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12687run_test "TLS 1.3 O->m: HRR x448 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12688 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12689 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups X448:ffdhe2048 -msg -tls1_3" \
12690 0 \
12691 -s "Protocol is TLSv1.3" \
12692 -s "got named group: ffdhe2048(0100)" \
12693 -s "Certificate verification was skipped" \
12694 -s "HRR selected_group: ffdhe2048"
12695
12696requires_config_enabled MBEDTLS_SSL_SRV_C
12697requires_config_enabled MBEDTLS_DEBUG_C
12698requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12699requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12700requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12701requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12702run_test "TLS 1.3 O->m: HRR ffdhe2048 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12703 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12704 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:P-256 -msg -tls1_3" \
12705 0 \
12706 -s "Protocol is TLSv1.3" \
12707 -s "got named group: secp256r1(0017)" \
12708 -s "Certificate verification was skipped" \
12709 -s "HRR selected_group: secp256r1"
12710
12711requires_config_enabled MBEDTLS_SSL_SRV_C
12712requires_config_enabled MBEDTLS_DEBUG_C
12713requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12714requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12715requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12716requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12717run_test "TLS 1.3 O->m: HRR ffdhe2048 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12718 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12719 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:P-384 -msg -tls1_3" \
12720 0 \
12721 -s "Protocol is TLSv1.3" \
12722 -s "got named group: secp384r1(0018)" \
12723 -s "Certificate verification was skipped" \
12724 -s "HRR selected_group: secp384r1"
12725
12726requires_config_enabled MBEDTLS_SSL_SRV_C
12727requires_config_enabled MBEDTLS_DEBUG_C
12728requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12729requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12730requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12731requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12732run_test "TLS 1.3 O->m: HRR ffdhe2048 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12733 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12734 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:P-521 -msg -tls1_3" \
12735 0 \
12736 -s "Protocol is TLSv1.3" \
12737 -s "got named group: secp521r1(0019)" \
12738 -s "Certificate verification was skipped" \
12739 -s "HRR selected_group: secp521r1"
12740
12741requires_config_enabled MBEDTLS_SSL_SRV_C
12742requires_config_enabled MBEDTLS_DEBUG_C
12743requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12744requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12745requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12746requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12747run_test "TLS 1.3 O->m: HRR ffdhe2048 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12748 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12749 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:X25519 -msg -tls1_3" \
12750 0 \
12751 -s "Protocol is TLSv1.3" \
12752 -s "got named group: x25519(001d)" \
12753 -s "Certificate verification was skipped" \
12754 -s "HRR selected_group: x25519"
12755
12756requires_config_enabled MBEDTLS_SSL_SRV_C
12757requires_config_enabled MBEDTLS_DEBUG_C
12758requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12759requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12760requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]12761requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12762run_test "TLS 1.3 O->m: HRR ffdhe2048 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12763 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12764 "$O_NEXT_CLI_NO_CERT -CAfile data_files/test-ca2.crt -groups ffdhe2048:X448 -msg -tls1_3" \
12765 0 \
12766 -s "Protocol is TLSv1.3" \
12767 -s "got named group: x448(001e)" \
12768 -s "Certificate verification was skipped" \
12769 -s "HRR selected_group: x448"
12770
12771requires_config_enabled MBEDTLS_SSL_SRV_C
12772requires_config_enabled MBEDTLS_DEBUG_C
12773requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12774requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12775requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12776requires_gnutls_tls1_3
12777requires_gnutls_next_no_ticket
12778requires_gnutls_next_disable_tls13_compat
12779run_test "TLS 1.3 G->m: HRR secp256r1 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12780 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12781 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12782 0 \
12783 -s "Protocol is TLSv1.3" \
12784 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12785 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12786 -s "HRR selected_group: secp384r1"
12787
12788requires_config_enabled MBEDTLS_SSL_SRV_C
12789requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12790requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12791requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12792requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12793requires_gnutls_tls1_3
12794requires_gnutls_next_no_ticket
12795requires_gnutls_next_disable_tls13_compat
12796run_test "TLS 1.3 G->m: HRR secp256r1 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12797 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12798 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12799 0 \
12800 -s "Protocol is TLSv1.3" \
12801 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12802 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12803 -s "HRR selected_group: secp521r1"
12804
12805requires_config_enabled MBEDTLS_SSL_SRV_C
12806requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12807requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12808requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12809requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12810requires_gnutls_tls1_3
12811requires_gnutls_next_no_ticket
12812requires_gnutls_next_disable_tls13_compat
12813run_test "TLS 1.3 G->m: HRR secp256r1 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12814 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12815 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12816 0 \
12817 -s "Protocol is TLSv1.3" \
12818 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12819 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12820 -s "HRR selected_group: x25519"
12821
12822requires_config_enabled MBEDTLS_SSL_SRV_C
12823requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12824requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12825requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12826requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12827requires_gnutls_tls1_3
12828requires_gnutls_next_no_ticket
12829requires_gnutls_next_disable_tls13_compat
12830run_test "TLS 1.3 G->m: HRR secp256r1 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12831 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12832 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12833 0 \
12834 -s "Protocol is TLSv1.3" \
12835 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12836 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12837 -s "HRR selected_group: x448"
12838
12839requires_config_enabled MBEDTLS_SSL_SRV_C
12840requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12841requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12842requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12843requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12844requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12845requires_gnutls_tls1_3
12846requires_gnutls_next_no_ticket
12847requires_gnutls_next_disable_tls13_compat
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12848run_test "TLS 1.3 G->m: HRR secp256r1 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12849 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12850 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
12851 0 \
12852 -s "Protocol is TLSv1.3" \
12853 -s "got named group: ffdhe2048(0100)" \
12854 -s "Certificate verification was skipped" \
12855 -s "HRR selected_group: ffdhe2048"
12856
12857requires_config_enabled MBEDTLS_SSL_SRV_C
12858requires_config_enabled MBEDTLS_DEBUG_C
12859requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12860requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12861requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12862requires_gnutls_tls1_3
12863requires_gnutls_next_no_ticket
12864requires_gnutls_next_disable_tls13_compat
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12865run_test "TLS 1.3 G->m: HRR secp384r1 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12866 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12867 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12868 0 \
12869 -s "Protocol is TLSv1.3" \
12870 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12871 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12872 -s "HRR selected_group: secp256r1"
12873
12874requires_config_enabled MBEDTLS_SSL_SRV_C
12875requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12876requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12877requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12878requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12879requires_gnutls_tls1_3
12880requires_gnutls_next_no_ticket
12881requires_gnutls_next_disable_tls13_compat
12882run_test "TLS 1.3 G->m: HRR secp384r1 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12883 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12884 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12885 0 \
12886 -s "Protocol is TLSv1.3" \
12887 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12888 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12889 -s "HRR selected_group: secp521r1"
12890
12891requires_config_enabled MBEDTLS_SSL_SRV_C
12892requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12893requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12894requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12895requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12896requires_gnutls_tls1_3
12897requires_gnutls_next_no_ticket
12898requires_gnutls_next_disable_tls13_compat
12899run_test "TLS 1.3 G->m: HRR secp384r1 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12900 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12901 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12902 0 \
12903 -s "Protocol is TLSv1.3" \
12904 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12905 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12906 -s "HRR selected_group: x25519"
12907
12908requires_config_enabled MBEDTLS_SSL_SRV_C
12909requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12910requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12911requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12912requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12913requires_gnutls_tls1_3
12914requires_gnutls_next_no_ticket
12915requires_gnutls_next_disable_tls13_compat
12916run_test "TLS 1.3 G->m: HRR secp384r1 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12917 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12918 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12919 0 \
12920 -s "Protocol is TLSv1.3" \
12921 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12922 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12923 -s "HRR selected_group: x448"
12924
12925requires_config_enabled MBEDTLS_SSL_SRV_C
12926requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12927requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12928requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12929requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]12930requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12931requires_gnutls_tls1_3
12932requires_gnutls_next_no_ticket
12933requires_gnutls_next_disable_tls13_compat
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12934run_test "TLS 1.3 G->m: HRR secp384r1 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12935 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12936 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
12937 0 \
12938 -s "Protocol is TLSv1.3" \
12939 -s "got named group: ffdhe2048(0100)" \
12940 -s "Certificate verification was skipped" \
12941 -s "HRR selected_group: ffdhe2048"
12942
12943requires_config_enabled MBEDTLS_SSL_SRV_C
12944requires_config_enabled MBEDTLS_DEBUG_C
12945requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
12946requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12947requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]12948requires_gnutls_tls1_3
12949requires_gnutls_next_no_ticket
12950requires_gnutls_next_disable_tls13_compat
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12951run_test "TLS 1.3 G->m: HRR secp521r1 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12952 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12953 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12954 0 \
12955 -s "Protocol is TLSv1.3" \
12956 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12957 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12958 -s "HRR selected_group: secp256r1"
12959
12960requires_config_enabled MBEDTLS_SSL_SRV_C
12961requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12962requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12963requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12964requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12965requires_gnutls_tls1_3
12966requires_gnutls_next_no_ticket
12967requires_gnutls_next_disable_tls13_compat
12968run_test "TLS 1.3 G->m: HRR secp521r1 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12969 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12970 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12971 0 \
12972 -s "Protocol is TLSv1.3" \
12973 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12974 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12975 -s "HRR selected_group: secp384r1"
12976
12977requires_config_enabled MBEDTLS_SSL_SRV_C
12978requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12979requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12980requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12981requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12982requires_gnutls_tls1_3
12983requires_gnutls_next_no_ticket
12984requires_gnutls_next_disable_tls13_compat
12985run_test "TLS 1.3 G->m: HRR secp521r1 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]12986 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]12987 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12988 0 \
12989 -s "Protocol is TLSv1.3" \
12990 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]12991 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12992 -s "HRR selected_group: x25519"
12993
12994requires_config_enabled MBEDTLS_SSL_SRV_C
12995requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]12996requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12997requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]12998requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]12999requires_gnutls_tls1_3
13000requires_gnutls_next_no_ticket
13001requires_gnutls_next_disable_tls13_compat
13002run_test "TLS 1.3 G->m: HRR secp521r1 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13003 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13004 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13005 0 \
13006 -s "Protocol is TLSv1.3" \
13007 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]13008 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13009 -s "HRR selected_group: x448"
13010
13011requires_config_enabled MBEDTLS_SSL_SRV_C
13012requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13013requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13014requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13015requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13016requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13017requires_gnutls_tls1_3
13018requires_gnutls_next_no_ticket
13019requires_gnutls_next_disable_tls13_compat
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13020run_test "TLS 1.3 G->m: HRR secp521r1 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13021 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13022 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
13023 0 \
13024 -s "Protocol is TLSv1.3" \
13025 -s "got named group: ffdhe2048(0100)" \
13026 -s "Certificate verification was skipped" \
13027 -s "HRR selected_group: ffdhe2048"
13028
13029requires_config_enabled MBEDTLS_SSL_SRV_C
13030requires_config_enabled MBEDTLS_DEBUG_C
13031requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13032requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13033requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13034requires_gnutls_tls1_3
13035requires_gnutls_next_no_ticket
13036requires_gnutls_next_disable_tls13_compat
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13037run_test "TLS 1.3 G->m: HRR x25519 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13038 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13039 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13040 0 \
13041 -s "Protocol is TLSv1.3" \
13042 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]13043 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13044 -s "HRR selected_group: secp256r1"
13045
13046requires_config_enabled MBEDTLS_SSL_SRV_C
13047requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13048requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13049requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13050requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13051requires_gnutls_tls1_3
13052requires_gnutls_next_no_ticket
13053requires_gnutls_next_disable_tls13_compat
13054run_test "TLS 1.3 G->m: HRR x25519 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13055 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13056 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13057 0 \
13058 -s "Protocol is TLSv1.3" \
13059 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]13060 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13061 -s "HRR selected_group: secp384r1"
13062
13063requires_config_enabled MBEDTLS_SSL_SRV_C
13064requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13065requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13066requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13067requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13068requires_gnutls_tls1_3
13069requires_gnutls_next_no_ticket
13070requires_gnutls_next_disable_tls13_compat
13071run_test "TLS 1.3 G->m: HRR x25519 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13072 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13073 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13074 0 \
13075 -s "Protocol is TLSv1.3" \
13076 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]13077 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13078 -s "HRR selected_group: secp521r1"
13079
13080requires_config_enabled MBEDTLS_SSL_SRV_C
13081requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13082requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13083requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13084requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13085requires_gnutls_tls1_3
13086requires_gnutls_next_no_ticket
13087requires_gnutls_next_disable_tls13_compat
13088run_test "TLS 1.3 G->m: HRR x25519 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13089 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13090 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13091 0 \
13092 -s "Protocol is TLSv1.3" \
13093 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]13094 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13095 -s "HRR selected_group: x448"
13096
13097requires_config_enabled MBEDTLS_SSL_SRV_C
13098requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13099requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13100requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13101requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13102requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13103requires_gnutls_tls1_3
13104requires_gnutls_next_no_ticket
13105requires_gnutls_next_disable_tls13_compat
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13106run_test "TLS 1.3 G->m: HRR x25519 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13107 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13108 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
13109 0 \
13110 -s "Protocol is TLSv1.3" \
13111 -s "got named group: ffdhe2048(0100)" \
13112 -s "Certificate verification was skipped" \
13113 -s "HRR selected_group: ffdhe2048"
13114
13115requires_config_enabled MBEDTLS_SSL_SRV_C
13116requires_config_enabled MBEDTLS_DEBUG_C
13117requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13118requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13119requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13120requires_gnutls_tls1_3
13121requires_gnutls_next_no_ticket
13122requires_gnutls_next_disable_tls13_compat
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13123run_test "TLS 1.3 G->m: HRR x448 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13124 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13125 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13126 0 \
13127 -s "Protocol is TLSv1.3" \
13128 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]13129 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13130 -s "HRR selected_group: secp256r1"
13131
13132requires_config_enabled MBEDTLS_SSL_SRV_C
13133requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13134requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13135requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13136requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13137requires_gnutls_tls1_3
13138requires_gnutls_next_no_ticket
13139requires_gnutls_next_disable_tls13_compat
13140run_test "TLS 1.3 G->m: HRR x448 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13141 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13142 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13143 0 \
13144 -s "Protocol is TLSv1.3" \
13145 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]13146 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13147 -s "HRR selected_group: secp384r1"
13148
13149requires_config_enabled MBEDTLS_SSL_SRV_C
13150requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13151requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13152requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13153requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13154requires_gnutls_tls1_3
13155requires_gnutls_next_no_ticket
13156requires_gnutls_next_disable_tls13_compat
13157run_test "TLS 1.3 G->m: HRR x448 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13158 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13159 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13160 0 \
13161 -s "Protocol is TLSv1.3" \
13162 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]13163 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13164 -s "HRR selected_group: secp521r1"
13165
13166requires_config_enabled MBEDTLS_SSL_SRV_C
13167requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13168requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13169requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13170requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13171requires_gnutls_tls1_3
13172requires_gnutls_next_no_ticket
13173requires_gnutls_next_disable_tls13_compat
13174run_test "TLS 1.3 G->m: HRR x448 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13175 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13176 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13177 0 \
13178 -s "Protocol is TLSv1.3" \
13179 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]13180 -s "Certificate verification was skipped" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13181 -s "HRR selected_group: x25519"
13182
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13183requires_config_enabled MBEDTLS_SSL_SRV_C
13184requires_config_enabled MBEDTLS_DEBUG_C
13185requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13186requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13187requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13188requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13189requires_gnutls_tls1_3
13190requires_gnutls_next_no_ticket
13191requires_gnutls_next_disable_tls13_compat
13192run_test "TLS 1.3 G->m: HRR x448 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13193 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13194 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
13195 0 \
13196 -s "Protocol is TLSv1.3" \
13197 -s "got named group: ffdhe2048(0100)" \
13198 -s "Certificate verification was skipped" \
13199 -s "HRR selected_group: ffdhe2048"
13200
13201requires_config_enabled MBEDTLS_SSL_SRV_C
13202requires_config_enabled MBEDTLS_DEBUG_C
13203requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13204requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13205requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13206requires_gnutls_tls1_3
13207requires_gnutls_next_no_ticket
13208requires_gnutls_next_disable_tls13_compat
13209run_test "TLS 1.3 G->m: HRR ffdhe2048 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13210 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13211 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
13212 0 \
13213 -s "Protocol is TLSv1.3" \
13214 -s "got named group: secp256r1(0017)" \
13215 -s "Certificate verification was skipped" \
13216 -s "HRR selected_group: secp256r1"
13217
13218requires_config_enabled MBEDTLS_SSL_SRV_C
13219requires_config_enabled MBEDTLS_DEBUG_C
13220requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13221requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13222requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13223requires_gnutls_tls1_3
13224requires_gnutls_next_no_ticket
13225requires_gnutls_next_disable_tls13_compat
13226run_test "TLS 1.3 G->m: HRR ffdhe2048 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13227 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13228 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
13229 0 \
13230 -s "Protocol is TLSv1.3" \
13231 -s "got named group: secp384r1(0018)" \
13232 -s "Certificate verification was skipped" \
13233 -s "HRR selected_group: secp384r1"
13234
13235requires_config_enabled MBEDTLS_SSL_SRV_C
13236requires_config_enabled MBEDTLS_DEBUG_C
13237requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13238requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13239requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13240requires_gnutls_tls1_3
13241requires_gnutls_next_no_ticket
13242requires_gnutls_next_disable_tls13_compat
13243run_test "TLS 1.3 G->m: HRR ffdhe2048 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13244 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13245 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
13246 0 \
13247 -s "Protocol is TLSv1.3" \
13248 -s "got named group: secp521r1(0019)" \
13249 -s "Certificate verification was skipped" \
13250 -s "HRR selected_group: secp521r1"
13251
13252requires_config_enabled MBEDTLS_SSL_SRV_C
13253requires_config_enabled MBEDTLS_DEBUG_C
13254requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13255requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13256requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13257requires_gnutls_tls1_3
13258requires_gnutls_next_no_ticket
13259requires_gnutls_next_disable_tls13_compat
13260run_test "TLS 1.3 G->m: HRR ffdhe2048 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13261 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13262 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
13263 0 \
13264 -s "Protocol is TLSv1.3" \
13265 -s "got named group: x25519(001d)" \
13266 -s "Certificate verification was skipped" \
13267 -s "HRR selected_group: x25519"
13268
13269requires_config_enabled MBEDTLS_SSL_SRV_C
13270requires_config_enabled MBEDTLS_DEBUG_C
13271requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13272requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13273requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13274requires_gnutls_tls1_3
13275requires_gnutls_next_no_ticket
13276requires_gnutls_next_disable_tls13_compat
13277run_test "TLS 1.3 G->m: HRR ffdhe2048 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13278 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13279 "$G_NEXT_CLI_NO_CERT --debug=4 --single-key-share --x509cafile data_files/test-ca2.crt --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
13280 0 \
13281 -s "Protocol is TLSv1.3" \
13282 -s "got named group: x448(001e)" \
13283 -s "Certificate verification was skipped" \
13284 -s "HRR selected_group: x448"
13285
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13286requires_openssl_tls1_3
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13287requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13288requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13289requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13290requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13291requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]13292run_test "TLS 1.3 m->O: HRR secp256r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13293 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13294 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,secp384r1" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]13295 0 \
13296 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13297 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]13298 -c "NamedGroup: secp256r1 ( 17 )" \
13299 -c "NamedGroup: secp384r1 ( 18 )" \
13300 -c "Verifying peer X.509 certificate... ok" \
13301 -c "received HelloRetryRequest message" \
13302 -c "selected_group ( 24 )"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13303
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13304requires_openssl_tls1_3
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13305requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13306requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13307requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13308requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13309requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]13310run_test "TLS 1.3 m->O: HRR secp256r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13311 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13312 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,secp521r1" \
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13313 0 \
13314 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13315 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]13316 -c "NamedGroup: secp256r1 ( 17 )" \
13317 -c "NamedGroup: secp521r1 ( 19 )" \
13318 -c "Verifying peer X.509 certificate... ok" \
13319 -c "received HelloRetryRequest message" \
13320 -c "selected_group ( 25 )"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13321
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13322requires_openssl_tls1_3
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13323requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13324requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13325requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13326requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13327requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]13328run_test "TLS 1.3 m->O: HRR secp256r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13329 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13330 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,x25519" \
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13331 0 \
13332 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13333 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]13334 -c "NamedGroup: secp256r1 ( 17 )" \
13335 -c "NamedGroup: x25519 ( 1d )" \
13336 -c "Verifying peer X.509 certificate... ok" \
13337 -c "received HelloRetryRequest message" \
13338 -c "selected_group ( 29 )"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13339
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13340requires_openssl_tls1_3
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13341requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13342requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13343requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13344requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13345requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]13346run_test "TLS 1.3 m->O: HRR secp256r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13347 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13348 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,x448" \
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13349 0 \
13350 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13351 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]13352 -c "NamedGroup: secp256r1 ( 17 )" \
13353 -c "NamedGroup: x448 ( 1e )" \
13354 -c "Verifying peer X.509 certificate... ok" \
13355 -c "received HelloRetryRequest message" \
13356 -c "selected_group ( 30 )"
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13357
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]13358requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13359requires_config_enabled MBEDTLS_SSL_CLI_C
13360requires_config_enabled MBEDTLS_DEBUG_C
13361requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13362requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13363requires_config_enabled PSA_WANT_ALG_ECDH
13364requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13365requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13366run_test "TLS 1.3 m->O: HRR secp256r1 -> ffdhe2048" \
13367 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13368 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13369 0 \
13370 -c "HTTP/1.0 200 ok" \
13371 -c "Protocol is TLSv1.3" \
13372 -c "NamedGroup: secp256r1 ( 17 )" \
13373 -c "NamedGroup: ffdhe2048 ( 100 )" \
13374 -c "Verifying peer X.509 certificate... ok" \
13375 -c "received HelloRetryRequest message" \
13376 -c "selected_group ( 256 )"
13377
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13378requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13379requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13380requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13381requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13382requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13383requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13384run_test "TLS 1.3 m->O: HRR secp384r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13385 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13386 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,secp256r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13387 0 \
13388 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13389 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13390 -c "NamedGroup: secp384r1 ( 18 )" \
13391 -c "NamedGroup: secp256r1 ( 17 )" \
13392 -c "Verifying peer X.509 certificate... ok" \
13393 -c "received HelloRetryRequest message" \
13394 -c "selected_group ( 23 )"
13395
13396requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13397requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13398requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13399requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13400requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13401requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13402run_test "TLS 1.3 m->O: HRR secp384r1 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13403 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13404 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,secp521r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13405 0 \
13406 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13407 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13408 -c "NamedGroup: secp384r1 ( 18 )" \
13409 -c "NamedGroup: secp521r1 ( 19 )" \
13410 -c "Verifying peer X.509 certificate... ok" \
13411 -c "received HelloRetryRequest message" \
13412 -c "selected_group ( 25 )"
13413
13414requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13415requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13416requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13417requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13418requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13419requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13420run_test "TLS 1.3 m->O: HRR secp384r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13421 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13422 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,x25519" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13423 0 \
13424 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13425 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13426 -c "NamedGroup: secp384r1 ( 18 )" \
13427 -c "NamedGroup: x25519 ( 1d )" \
13428 -c "Verifying peer X.509 certificate... ok" \
13429 -c "received HelloRetryRequest message" \
13430 -c "selected_group ( 29 )"
13431
13432requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13433requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13434requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13435requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13436requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13437requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13438run_test "TLS 1.3 m->O: HRR secp384r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13439 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13440 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,x448" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13441 0 \
13442 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13443 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13444 -c "NamedGroup: secp384r1 ( 18 )" \
13445 -c "NamedGroup: x448 ( 1e )" \
13446 -c "Verifying peer X.509 certificate... ok" \
13447 -c "received HelloRetryRequest message" \
13448 -c "selected_group ( 30 )"
13449
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]13450requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13451requires_config_enabled MBEDTLS_SSL_CLI_C
13452requires_config_enabled MBEDTLS_DEBUG_C
13453requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13454requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13455requires_config_enabled PSA_WANT_ALG_ECDH
13456requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13457requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13458run_test "TLS 1.3 m->O: HRR secp384r1 -> ffdhe2048" \
13459 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13460 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13461 0 \
13462 -c "HTTP/1.0 200 ok" \
13463 -c "Protocol is TLSv1.3" \
13464 -c "NamedGroup: secp384r1 ( 18 )" \
13465 -c "NamedGroup: ffdhe2048 ( 100 )" \
13466 -c "Verifying peer X.509 certificate... ok" \
13467 -c "received HelloRetryRequest message" \
13468 -c "selected_group ( 256 )"
13469
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13470requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13471requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13472requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13473requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13474requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13475requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13476run_test "TLS 1.3 m->O: HRR secp521r1 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13477 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13478 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,secp256r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13479 0 \
13480 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13481 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13482 -c "NamedGroup: secp521r1 ( 19 )" \
13483 -c "NamedGroup: secp256r1 ( 17 )" \
13484 -c "Verifying peer X.509 certificate... ok" \
13485 -c "received HelloRetryRequest message" \
13486 -c "selected_group ( 23 )"
13487
13488requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13489requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13490requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13491requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13492requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13493requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13494run_test "TLS 1.3 m->O: HRR secp521r1 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13495 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13496 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,secp384r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13497 0 \
13498 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13499 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13500 -c "NamedGroup: secp521r1 ( 19 )" \
13501 -c "NamedGroup: secp384r1 ( 18 )" \
13502 -c "Verifying peer X.509 certificate... ok" \
13503 -c "received HelloRetryRequest message" \
13504 -c "selected_group ( 24 )"
13505
13506requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13507requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13508requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13509requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13510requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13511requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13512run_test "TLS 1.3 m->O: HRR secp521r1 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13513 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13514 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,x25519" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13515 0 \
13516 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13517 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13518 -c "NamedGroup: secp521r1 ( 19 )" \
13519 -c "NamedGroup: x25519 ( 1d )" \
13520 -c "Verifying peer X.509 certificate... ok" \
13521 -c "received HelloRetryRequest message" \
13522 -c "selected_group ( 29 )"
13523
13524requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13525requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13526requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13527requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13528requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13529requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13530run_test "TLS 1.3 m->O: HRR secp521r1 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13531 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13532 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,x448" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13533 0 \
13534 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13535 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13536 -c "NamedGroup: secp521r1 ( 19 )" \
13537 -c "NamedGroup: x448 ( 1e )" \
13538 -c "Verifying peer X.509 certificate... ok" \
13539 -c "received HelloRetryRequest message" \
13540 -c "selected_group ( 30 )"
13541
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]13542requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13543requires_config_enabled MBEDTLS_SSL_CLI_C
13544requires_config_enabled MBEDTLS_DEBUG_C
13545requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13546requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13547requires_config_enabled PSA_WANT_ALG_ECDH
13548requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13549requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13550run_test "TLS 1.3 m->O: HRR secp521r1 -> ffdhe2048" \
13551 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13552 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13553 0 \
13554 -c "HTTP/1.0 200 ok" \
13555 -c "Protocol is TLSv1.3" \
13556 -c "NamedGroup: secp521r1 ( 19 )" \
13557 -c "NamedGroup: ffdhe2048 ( 100 )" \
13558 -c "Verifying peer X.509 certificate... ok" \
13559 -c "received HelloRetryRequest message" \
13560 -c "selected_group ( 256 )"
13561
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13562requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13563requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13564requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13565requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13566requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13567requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13568run_test "TLS 1.3 m->O: HRR x25519 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13569 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13570 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,secp256r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13571 0 \
13572 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13573 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13574 -c "NamedGroup: x25519 ( 1d )" \
13575 -c "NamedGroup: secp256r1 ( 17 )" \
13576 -c "Verifying peer X.509 certificate... ok" \
13577 -c "received HelloRetryRequest message" \
13578 -c "selected_group ( 23 )"
13579
13580requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13581requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13582requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13583requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13584requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13585requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13586run_test "TLS 1.3 m->O: HRR x25519 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13587 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13588 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,secp384r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13589 0 \
13590 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13591 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13592 -c "NamedGroup: x25519 ( 1d )" \
13593 -c "NamedGroup: secp384r1 ( 18 )" \
13594 -c "Verifying peer X.509 certificate... ok" \
13595 -c "received HelloRetryRequest message" \
13596 -c "selected_group ( 24 )"
13597
13598requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13599requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13600requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13601requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13602requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13603requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13604run_test "TLS 1.3 m->O: HRR x25519 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13605 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13606 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,secp521r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13607 0 \
13608 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13609 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13610 -c "NamedGroup: x25519 ( 1d )" \
13611 -c "NamedGroup: secp521r1 ( 19 )" \
13612 -c "Verifying peer X.509 certificate... ok" \
13613 -c "received HelloRetryRequest message" \
13614 -c "selected_group ( 25 )"
13615
13616requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13617requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13618requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13619requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13620requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13621requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13622run_test "TLS 1.3 m->O: HRR x25519 -> x448" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13623 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13624 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,x448" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13625 0 \
13626 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13627 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13628 -c "NamedGroup: x25519 ( 1d )" \
13629 -c "NamedGroup: x448 ( 1e )" \
13630 -c "Verifying peer X.509 certificate... ok" \
13631 -c "received HelloRetryRequest message" \
13632 -c "selected_group ( 30 )"
13633
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]13634requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13635requires_config_enabled MBEDTLS_SSL_CLI_C
13636requires_config_enabled MBEDTLS_DEBUG_C
13637requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13638requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13639requires_config_enabled PSA_WANT_ALG_ECDH
13640requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13641requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13642run_test "TLS 1.3 m->O: HRR x25519 -> ffdhe2048" \
13643 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13644 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13645 0 \
13646 -c "HTTP/1.0 200 ok" \
13647 -c "Protocol is TLSv1.3" \
13648 -c "NamedGroup: x25519 ( 1d )" \
13649 -c "NamedGroup: ffdhe2048 ( 100 )" \
13650 -c "Verifying peer X.509 certificate... ok" \
13651 -c "received HelloRetryRequest message" \
13652 -c "selected_group ( 256 )"
13653
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13654requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13655requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13656requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13657requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13658requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13659requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13660run_test "TLS 1.3 m->O: HRR x448 -> secp256r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13661 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13662 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,secp256r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13663 0 \
13664 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13665 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13666 -c "NamedGroup: x448 ( 1e )" \
13667 -c "NamedGroup: secp256r1 ( 17 )" \
13668 -c "Verifying peer X.509 certificate... ok" \
13669 -c "received HelloRetryRequest message" \
13670 -c "selected_group ( 23 )"
13671
13672requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13673requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13674requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13675requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13676requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13677requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13678run_test "TLS 1.3 m->O: HRR x448 -> secp384r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13679 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13680 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,secp384r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13681 0 \
13682 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13683 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13684 -c "NamedGroup: x448 ( 1e )" \
13685 -c "NamedGroup: secp384r1 ( 18 )" \
13686 -c "Verifying peer X.509 certificate... ok" \
13687 -c "received HelloRetryRequest message" \
13688 -c "selected_group ( 24 )"
13689
13690requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13691requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13692requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13693requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13694requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13695requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13696run_test "TLS 1.3 m->O: HRR x448 -> secp521r1" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13697 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13698 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,secp521r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13699 0 \
13700 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13701 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13702 -c "NamedGroup: x448 ( 1e )" \
13703 -c "NamedGroup: secp521r1 ( 19 )" \
13704 -c "Verifying peer X.509 certificate... ok" \
13705 -c "received HelloRetryRequest message" \
13706 -c "selected_group ( 25 )"
13707
13708requires_openssl_tls1_3
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13709requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13710requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13711requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13712requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13713requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13714run_test "TLS 1.3 m->O: HRR x448 -> x25519" \
Jerry Yub7c12a42022-06-12 20:53:02 +0800[diff] [blame]13715 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13716 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,x25519" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13717 0 \
13718 -c "HTTP/1.0 200 ok" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13719 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13720 -c "NamedGroup: x448 ( 1e )" \
13721 -c "NamedGroup: x25519 ( 1d )" \
13722 -c "Verifying peer X.509 certificate... ok" \
13723 -c "received HelloRetryRequest message" \
13724 -c "selected_group ( 29 )"
13725
Przemek Stekiel8bfe8972023-06-26 12:59:45 +0200[diff] [blame]13726requires_openssl_tls1_3_with_ffdh
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13727requires_config_enabled MBEDTLS_SSL_CLI_C
13728requires_config_enabled MBEDTLS_DEBUG_C
13729requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13730requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13731requires_config_enabled PSA_WANT_ALG_ECDH
13732requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13733requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13734run_test "TLS 1.3 m->O: HRR x448 -> ffdhe2048" \
13735 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups ffdhe2048 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13736 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13737 0 \
13738 -c "HTTP/1.0 200 ok" \
13739 -c "Protocol is TLSv1.3" \
13740 -c "NamedGroup: x448 ( 1e )" \
13741 -c "NamedGroup: ffdhe2048 ( 100 )" \
13742 -c "Verifying peer X.509 certificate... ok" \
13743 -c "received HelloRetryRequest message" \
13744 -c "selected_group ( 256 )"
13745
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13746requires_openssl_tls1_3
13747requires_config_enabled MBEDTLS_SSL_CLI_C
13748requires_config_enabled MBEDTLS_DEBUG_C
13749requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13750requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13751requires_config_enabled PSA_WANT_ALG_ECDH
13752requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13753requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13754run_test "TLS 1.3 m->O: HRR ffdhe2048 -> secp256r1" \
13755 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-256 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13756 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,secp256r1" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13757 0 \
13758 -c "HTTP/1.0 200 ok" \
13759 -c "Protocol is TLSv1.3" \
13760 -c "NamedGroup: ffdhe2048 ( 100 )" \
13761 -c "NamedGroup: secp256r1 ( 17 )" \
13762 -c "Verifying peer X.509 certificate... ok" \
13763 -c "received HelloRetryRequest message" \
13764 -c "selected_group ( 23 )"
13765
13766requires_openssl_tls1_3
13767requires_config_enabled MBEDTLS_SSL_CLI_C
13768requires_config_enabled MBEDTLS_DEBUG_C
13769requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13770requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13771requires_config_enabled PSA_WANT_ALG_ECDH
13772requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13773requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13774run_test "TLS 1.3 m->O: HRR ffdhe2048 -> secp384r1" \
13775 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-384 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13776 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,secp384r1" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13777 0 \
13778 -c "HTTP/1.0 200 ok" \
13779 -c "Protocol is TLSv1.3" \
13780 -c "NamedGroup: ffdhe2048 ( 100 )" \
13781 -c "NamedGroup: secp384r1 ( 18 )" \
13782 -c "Verifying peer X.509 certificate... ok" \
13783 -c "received HelloRetryRequest message" \
13784 -c "selected_group ( 24 )"
13785
13786requires_openssl_tls1_3
13787requires_config_enabled MBEDTLS_SSL_CLI_C
13788requires_config_enabled MBEDTLS_DEBUG_C
13789requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13790requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13791requires_config_enabled PSA_WANT_ALG_ECDH
13792requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13793requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13794run_test "TLS 1.3 m->O: HRR ffdhe2048 -> secp521r1" \
13795 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups P-521 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13796 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,secp521r1" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13797 0 \
13798 -c "HTTP/1.0 200 ok" \
13799 -c "Protocol is TLSv1.3" \
13800 -c "NamedGroup: ffdhe2048 ( 100 )" \
13801 -c "NamedGroup: secp521r1 ( 19 )" \
13802 -c "Verifying peer X.509 certificate... ok" \
13803 -c "received HelloRetryRequest message" \
13804 -c "selected_group ( 25 )"
13805
13806requires_openssl_tls1_3
13807requires_config_enabled MBEDTLS_SSL_CLI_C
13808requires_config_enabled MBEDTLS_DEBUG_C
13809requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13810requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13811requires_config_enabled PSA_WANT_ALG_ECDH
13812requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13813requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13814run_test "TLS 1.3 m->O: HRR ffdhe2048 -> x25519" \
13815 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X25519 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13816 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,x25519" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13817 0 \
13818 -c "HTTP/1.0 200 ok" \
13819 -c "Protocol is TLSv1.3" \
13820 -c "NamedGroup: ffdhe2048 ( 100 )" \
13821 -c "NamedGroup: x25519 ( 1d )" \
13822 -c "Verifying peer X.509 certificate... ok" \
13823 -c "received HelloRetryRequest message" \
13824 -c "selected_group ( 29 )"
13825
13826requires_openssl_tls1_3
13827requires_config_enabled MBEDTLS_SSL_CLI_C
13828requires_config_enabled MBEDTLS_DEBUG_C
13829requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13830requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13831requires_config_enabled PSA_WANT_ALG_ECDH
13832requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13833requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13834run_test "TLS 1.3 m->O: HRR ffdhe2048 -> x448" \
13835 "$O_NEXT_SRV_NO_CERT -cert data_files/ecdsa_secp256r1.crt -key data_files/ecdsa_secp256r1.key -groups X448 -msg -tls1_3 -num_tickets 0 -no_resume_ephemeral -no_cache" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13836 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,x448" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13837 0 \
13838 -c "HTTP/1.0 200 ok" \
13839 -c "Protocol is TLSv1.3" \
13840 -c "NamedGroup: ffdhe2048 ( 100 )" \
13841 -c "NamedGroup: x448 ( 1e )" \
13842 -c "Verifying peer X.509 certificate... ok" \
13843 -c "received HelloRetryRequest message" \
13844 -c "selected_group ( 30 )"
13845
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13846requires_gnutls_tls1_3
13847requires_gnutls_next_no_ticket
13848requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13849requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13850requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13851requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13852requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13853requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13854run_test "TLS 1.3 m->G: HRR secp256r1 -> secp384r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]13855 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13856 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,secp384r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13857 0 \
13858 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13859 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13860 -c "NamedGroup: secp256r1 ( 17 )" \
13861 -c "NamedGroup: secp384r1 ( 18 )" \
13862 -c "Verifying peer X.509 certificate... ok" \
13863 -c "received HelloRetryRequest message" \
13864 -c "selected_group ( 24 )"
13865
13866requires_gnutls_tls1_3
13867requires_gnutls_next_no_ticket
13868requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13869requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13870requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13871requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13872requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13873requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13874run_test "TLS 1.3 m->G: HRR secp256r1 -> secp521r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]13875 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13876 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,secp521r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13877 0 \
13878 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13879 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13880 -c "NamedGroup: secp256r1 ( 17 )" \
13881 -c "NamedGroup: secp521r1 ( 19 )" \
13882 -c "Verifying peer X.509 certificate... ok" \
13883 -c "received HelloRetryRequest message" \
13884 -c "selected_group ( 25 )"
13885
13886requires_gnutls_tls1_3
13887requires_gnutls_next_no_ticket
13888requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13889requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13890requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13891requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13892requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13893requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13894run_test "TLS 1.3 m->G: HRR secp256r1 -> x25519" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]13895 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13896 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,x25519" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13897 0 \
13898 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13899 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13900 -c "NamedGroup: secp256r1 ( 17 )" \
13901 -c "NamedGroup: x25519 ( 1d )" \
13902 -c "Verifying peer X.509 certificate... ok" \
13903 -c "received HelloRetryRequest message" \
13904 -c "selected_group ( 29 )"
13905
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13906requires_gnutls_tls1_3
13907requires_gnutls_next_no_ticket
13908requires_gnutls_next_disable_tls13_compat
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13909requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13910requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13911requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13912requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13913requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian8031ba72022-03-22 12:53:45 +0000[diff] [blame]13914run_test "TLS 1.3 m->G: HRR secp256r1 -> x448" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]13915 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13916 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,x448" \
XiaokangQian83f81882022-03-17 06:26:36 +0000[diff] [blame]13917 0 \
13918 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13919 -c "Protocol is TLSv1.3" \
XiaokangQiana1931442022-03-25 11:58:22 +0000[diff] [blame]13920 -c "NamedGroup: secp256r1 ( 17 )" \
13921 -c "NamedGroup: x448 ( 1e )" \
13922 -c "Verifying peer X.509 certificate... ok" \
13923 -c "received HelloRetryRequest message" \
13924 -c "selected_group ( 30 )"
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13925
13926requires_gnutls_tls1_3
13927requires_gnutls_next_no_ticket
13928requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13929requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13930requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13931requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13932requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13933requires_config_enabled PSA_WANT_ALG_ECDH
13934requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]13935requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13936run_test "TLS 1.3 m->G: HRR secp256r1 -> ffdhe2048" \
13937 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13938 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]13939 0 \
13940 -c "HTTP/1.0 200 OK" \
13941 -c "Protocol is TLSv1.3" \
13942 -c "NamedGroup: secp256r1 ( 17 )" \
13943 -c "NamedGroup: ffdhe2048 ( 100 )" \
13944 -c "Verifying peer X.509 certificate... ok" \
13945 -c "received HelloRetryRequest message" \
13946 -c "selected_group ( 256 )"
13947
13948requires_gnutls_tls1_3
13949requires_gnutls_next_no_ticket
13950requires_gnutls_next_disable_tls13_compat
13951requires_config_enabled MBEDTLS_SSL_CLI_C
13952requires_config_enabled MBEDTLS_DEBUG_C
13953requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
13954requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13955requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13956run_test "TLS 1.3 m->G: HRR secp384r1 -> secp256r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]13957 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13958 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,secp256r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13959 0 \
13960 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13961 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13962 -c "NamedGroup: secp384r1 ( 18 )" \
13963 -c "NamedGroup: secp256r1 ( 17 )" \
13964 -c "Verifying peer X.509 certificate... ok" \
13965 -c "received HelloRetryRequest message" \
13966 -c "selected_group ( 23 )"
13967
13968requires_gnutls_tls1_3
13969requires_gnutls_next_no_ticket
13970requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13971requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13972requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13973requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13974requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13975requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13976run_test "TLS 1.3 m->G: HRR secp384r1 -> secp521r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]13977 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13978 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,secp521r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13979 0 \
13980 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]13981 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13982 -c "NamedGroup: secp384r1 ( 18 )" \
13983 -c "NamedGroup: secp521r1 ( 19 )" \
13984 -c "Verifying peer X.509 certificate... ok" \
13985 -c "received HelloRetryRequest message" \
13986 -c "selected_group ( 25 )"
13987
13988requires_gnutls_tls1_3
13989requires_gnutls_next_no_ticket
13990requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13991requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]13992requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]13993requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13994requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]13995requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13996run_test "TLS 1.3 m->G: HRR secp384r1 -> x25519" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]13997 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]13998 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,x25519" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]13999 0 \
14000 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14001 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14002 -c "NamedGroup: secp384r1 ( 18 )" \
14003 -c "NamedGroup: x25519 ( 1d )" \
14004 -c "Verifying peer X.509 certificate... ok" \
14005 -c "received HelloRetryRequest message" \
14006 -c "selected_group ( 29 )"
14007
14008requires_gnutls_tls1_3
14009requires_gnutls_next_no_ticket
14010requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14011requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14012requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14013requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14014requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14015requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14016run_test "TLS 1.3 m->G: HRR secp384r1 -> x448" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14017 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14018 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,x448" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14019 0 \
14020 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14021 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14022 -c "NamedGroup: secp384r1 ( 18 )" \
14023 -c "NamedGroup: x448 ( 1e )" \
14024 -c "Verifying peer X.509 certificate... ok" \
14025 -c "received HelloRetryRequest message" \
14026 -c "selected_group ( 30 )"
14027
14028requires_gnutls_tls1_3
14029requires_gnutls_next_no_ticket
14030requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14031requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14032requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14033requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14034requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14035requires_config_enabled PSA_WANT_ALG_ECDH
14036requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14037requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14038run_test "TLS 1.3 m->G: HRR secp384r1 -> ffdhe2048" \
14039 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14040 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14041 0 \
14042 -c "HTTP/1.0 200 OK" \
14043 -c "Protocol is TLSv1.3" \
14044 -c "NamedGroup: secp384r1 ( 18 )" \
14045 -c "NamedGroup: ffdhe2048 ( 100 )" \
14046 -c "Verifying peer X.509 certificate... ok" \
14047 -c "received HelloRetryRequest message" \
14048 -c "selected_group ( 256 )"
14049
14050requires_gnutls_tls1_3
14051requires_gnutls_next_no_ticket
14052requires_gnutls_next_disable_tls13_compat
14053requires_config_enabled MBEDTLS_SSL_CLI_C
14054requires_config_enabled MBEDTLS_DEBUG_C
14055requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14056requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14057requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14058run_test "TLS 1.3 m->G: HRR secp521r1 -> secp256r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14059 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14060 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,secp256r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14061 0 \
14062 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14063 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14064 -c "NamedGroup: secp521r1 ( 19 )" \
14065 -c "NamedGroup: secp256r1 ( 17 )" \
14066 -c "Verifying peer X.509 certificate... ok" \
14067 -c "received HelloRetryRequest message" \
14068 -c "selected_group ( 23 )"
14069
14070requires_gnutls_tls1_3
14071requires_gnutls_next_no_ticket
14072requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14073requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14074requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14075requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14076requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14077requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14078run_test "TLS 1.3 m->G: HRR secp521r1 -> secp384r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14079 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14080 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,secp384r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14081 0 \
14082 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14083 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14084 -c "NamedGroup: secp521r1 ( 19 )" \
14085 -c "NamedGroup: secp384r1 ( 18 )" \
14086 -c "Verifying peer X.509 certificate... ok" \
14087 -c "received HelloRetryRequest message" \
14088 -c "selected_group ( 24 )"
14089
14090requires_gnutls_tls1_3
14091requires_gnutls_next_no_ticket
14092requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14093requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14094requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14095requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14096requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14097requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14098run_test "TLS 1.3 m->G: HRR secp521r1 -> x25519" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14099 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14100 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,x25519" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14101 0 \
14102 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14103 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14104 -c "NamedGroup: secp521r1 ( 19 )" \
14105 -c "NamedGroup: x25519 ( 1d )" \
14106 -c "Verifying peer X.509 certificate... ok" \
14107 -c "received HelloRetryRequest message" \
14108 -c "selected_group ( 29 )"
14109
14110requires_gnutls_tls1_3
14111requires_gnutls_next_no_ticket
14112requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14113requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14114requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14115requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14116requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14117requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14118run_test "TLS 1.3 m->G: HRR secp521r1 -> x448" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14119 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14120 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,x448" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14121 0 \
14122 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14123 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14124 -c "NamedGroup: secp521r1 ( 19 )" \
14125 -c "NamedGroup: x448 ( 1e )" \
14126 -c "Verifying peer X.509 certificate... ok" \
14127 -c "received HelloRetryRequest message" \
14128 -c "selected_group ( 30 )"
14129
14130requires_gnutls_tls1_3
14131requires_gnutls_next_no_ticket
14132requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14133requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14134requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14135requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14136requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14137requires_config_enabled PSA_WANT_ALG_ECDH
14138requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14139requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14140run_test "TLS 1.3 m->G: HRR secp521r1 -> ffdhe2048" \
14141 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14142 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14143 0 \
14144 -c "HTTP/1.0 200 OK" \
14145 -c "Protocol is TLSv1.3" \
14146 -c "NamedGroup: secp521r1 ( 19 )" \
14147 -c "NamedGroup: ffdhe2048 ( 100 )" \
14148 -c "Verifying peer X.509 certificate... ok" \
14149 -c "received HelloRetryRequest message" \
14150 -c "selected_group ( 256 )"
14151
14152requires_gnutls_tls1_3
14153requires_gnutls_next_no_ticket
14154requires_gnutls_next_disable_tls13_compat
14155requires_config_enabled MBEDTLS_SSL_CLI_C
14156requires_config_enabled MBEDTLS_DEBUG_C
14157requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14158requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14159requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14160run_test "TLS 1.3 m->G: HRR x25519 -> secp256r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14161 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14162 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,secp256r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14163 0 \
14164 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14165 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14166 -c "NamedGroup: x25519 ( 1d )" \
14167 -c "NamedGroup: secp256r1 ( 17 )" \
14168 -c "Verifying peer X.509 certificate... ok" \
14169 -c "received HelloRetryRequest message" \
14170 -c "selected_group ( 23 )"
14171
14172requires_gnutls_tls1_3
14173requires_gnutls_next_no_ticket
14174requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14175requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14176requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14177requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14178requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14179requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14180run_test "TLS 1.3 m->G: HRR x25519 -> secp384r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14181 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14182 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,secp384r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14183 0 \
14184 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14185 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14186 -c "NamedGroup: x25519 ( 1d )" \
14187 -c "NamedGroup: secp384r1 ( 18 )" \
14188 -c "Verifying peer X.509 certificate... ok" \
14189 -c "received HelloRetryRequest message" \
14190 -c "selected_group ( 24 )"
14191
14192requires_gnutls_tls1_3
14193requires_gnutls_next_no_ticket
14194requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14195requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14196requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14197requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14198requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14199requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14200run_test "TLS 1.3 m->G: HRR x25519 -> secp521r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14201 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14202 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,secp521r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14203 0 \
14204 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14205 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14206 -c "NamedGroup: x25519 ( 1d )" \
14207 -c "NamedGroup: secp521r1 ( 19 )" \
14208 -c "Verifying peer X.509 certificate... ok" \
14209 -c "received HelloRetryRequest message" \
14210 -c "selected_group ( 25 )"
14211
14212requires_gnutls_tls1_3
14213requires_gnutls_next_no_ticket
14214requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14215requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14216requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14217requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14218requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14219requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14220run_test "TLS 1.3 m->G: HRR x25519 -> x448" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14221 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14222 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,x448" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14223 0 \
14224 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14225 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14226 -c "NamedGroup: x25519 ( 1d )" \
14227 -c "NamedGroup: x448 ( 1e )" \
14228 -c "Verifying peer X.509 certificate... ok" \
14229 -c "received HelloRetryRequest message" \
14230 -c "selected_group ( 30 )"
14231
14232requires_gnutls_tls1_3
14233requires_gnutls_next_no_ticket
14234requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14235requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14236requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14237requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14238requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14239requires_config_enabled PSA_WANT_ALG_ECDH
14240requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14241requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14242run_test "TLS 1.3 m->G: HRR x25519 -> ffdhe2048" \
14243 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14244 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14245 0 \
14246 -c "HTTP/1.0 200 OK" \
14247 -c "Protocol is TLSv1.3" \
14248 -c "NamedGroup: x25519 ( 1d )" \
14249 -c "NamedGroup: ffdhe2048 ( 100 )" \
14250 -c "Verifying peer X.509 certificate... ok" \
14251 -c "received HelloRetryRequest message" \
14252 -c "selected_group ( 256 )"
14253
14254requires_gnutls_tls1_3
14255requires_gnutls_next_no_ticket
14256requires_gnutls_next_disable_tls13_compat
14257requires_config_enabled MBEDTLS_SSL_CLI_C
14258requires_config_enabled MBEDTLS_DEBUG_C
14259requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14260requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14261requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14262run_test "TLS 1.3 m->G: HRR x448 -> secp256r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14263 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14264 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,secp256r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14265 0 \
14266 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14267 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14268 -c "NamedGroup: x448 ( 1e )" \
14269 -c "NamedGroup: secp256r1 ( 17 )" \
14270 -c "Verifying peer X.509 certificate... ok" \
14271 -c "received HelloRetryRequest message" \
14272 -c "selected_group ( 23 )"
14273
14274requires_gnutls_tls1_3
14275requires_gnutls_next_no_ticket
14276requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14277requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14278requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14279requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14280requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14281requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14282run_test "TLS 1.3 m->G: HRR x448 -> secp384r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14283 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14284 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,secp384r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14285 0 \
14286 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14287 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14288 -c "NamedGroup: x448 ( 1e )" \
14289 -c "NamedGroup: secp384r1 ( 18 )" \
14290 -c "Verifying peer X.509 certificate... ok" \
14291 -c "received HelloRetryRequest message" \
14292 -c "selected_group ( 24 )"
14293
14294requires_gnutls_tls1_3
14295requires_gnutls_next_no_ticket
14296requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14297requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14298requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14299requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14300requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14301requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14302run_test "TLS 1.3 m->G: HRR x448 -> secp521r1" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14303 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14304 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,secp521r1" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14305 0 \
14306 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14307 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14308 -c "NamedGroup: x448 ( 1e )" \
14309 -c "NamedGroup: secp521r1 ( 19 )" \
14310 -c "Verifying peer X.509 certificate... ok" \
14311 -c "received HelloRetryRequest message" \
14312 -c "selected_group ( 25 )"
14313
14314requires_gnutls_tls1_3
14315requires_gnutls_next_no_ticket
14316requires_gnutls_next_disable_tls13_compat
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14317requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14318requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14319requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14320requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14321requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14322run_test "TLS 1.3 m->G: HRR x448 -> x25519" \
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14323 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14324 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,x25519" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14325 0 \
14326 -c "HTTP/1.0 200 OK" \
Ronald Crondf5f8682022-04-05 16:01:03 +0200[diff] [blame]14327 -c "Protocol is TLSv1.3" \
XiaokangQian2e17fb82022-03-28 03:30:05 +0000[diff] [blame]14328 -c "NamedGroup: x448 ( 1e )" \
14329 -c "NamedGroup: x25519 ( 1d )" \
14330 -c "Verifying peer X.509 certificate... ok" \
14331 -c "received HelloRetryRequest message" \
14332 -c "selected_group ( 29 )"
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14333
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14334requires_gnutls_tls1_3
14335requires_gnutls_next_no_ticket
14336requires_gnutls_next_disable_tls13_compat
14337requires_config_enabled MBEDTLS_SSL_CLI_C
14338requires_config_enabled MBEDTLS_DEBUG_C
14339requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14340requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14341requires_config_enabled PSA_WANT_ALG_ECDH
14342requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14343requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14344run_test "TLS 1.3 m->G: HRR x448 -> ffdhe2048" \
14345 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-FFDHE2048:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14346 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14347 0 \
14348 -c "HTTP/1.0 200 OK" \
14349 -c "Protocol is TLSv1.3" \
14350 -c "NamedGroup: x448 ( 1e )" \
14351 -c "NamedGroup: ffdhe2048 ( 100 )" \
14352 -c "Verifying peer X.509 certificate... ok" \
14353 -c "received HelloRetryRequest message" \
14354 -c "selected_group ( 256 )"
14355
14356requires_gnutls_tls1_3
14357requires_gnutls_next_no_ticket
14358requires_gnutls_next_disable_tls13_compat
14359requires_config_enabled MBEDTLS_SSL_CLI_C
14360requires_config_enabled MBEDTLS_DEBUG_C
14361requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14362requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14363requires_config_enabled PSA_WANT_ALG_ECDH
14364requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14365requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14366run_test "TLS 1.3 m->G: HRR ffdhe2048 -> secp256r1" \
14367 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP256R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14368 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,secp256r1" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14369 0 \
14370 -c "HTTP/1.0 200 OK" \
14371 -c "Protocol is TLSv1.3" \
14372 -c "NamedGroup: ffdhe2048 ( 100 )" \
14373 -c "NamedGroup: secp256r1 ( 17 )" \
14374 -c "Verifying peer X.509 certificate... ok" \
14375 -c "received HelloRetryRequest message" \
14376 -c "selected_group ( 23 )"
14377
14378requires_gnutls_tls1_3
14379requires_gnutls_next_no_ticket
14380requires_gnutls_next_disable_tls13_compat
14381requires_config_enabled MBEDTLS_SSL_CLI_C
14382requires_config_enabled MBEDTLS_DEBUG_C
14383requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14384requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14385requires_config_enabled PSA_WANT_ALG_ECDH
14386requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14387requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14388run_test "TLS 1.3 m->G: HRR ffdhe2048 -> secp384r1" \
14389 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP384R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14390 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,secp384r1" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14391 0 \
14392 -c "HTTP/1.0 200 OK" \
14393 -c "Protocol is TLSv1.3" \
14394 -c "NamedGroup: ffdhe2048 ( 100 )" \
14395 -c "NamedGroup: secp384r1 ( 18 )" \
14396 -c "Verifying peer X.509 certificate... ok" \
14397 -c "received HelloRetryRequest message" \
14398 -c "selected_group ( 24 )"
14399
14400requires_gnutls_tls1_3
14401requires_gnutls_next_no_ticket
14402requires_gnutls_next_disable_tls13_compat
14403requires_config_enabled MBEDTLS_SSL_CLI_C
14404requires_config_enabled MBEDTLS_DEBUG_C
14405requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14406requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14407requires_config_enabled PSA_WANT_ALG_ECDH
14408requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14409requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14410run_test "TLS 1.3 m->G: HRR ffdhe2048 -> secp521r1" \
14411 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-SECP521R1:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14412 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,secp521r1" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14413 0 \
14414 -c "HTTP/1.0 200 OK" \
14415 -c "Protocol is TLSv1.3" \
14416 -c "NamedGroup: ffdhe2048 ( 100 )" \
14417 -c "NamedGroup: secp521r1 ( 19 )" \
14418 -c "Verifying peer X.509 certificate... ok" \
14419 -c "received HelloRetryRequest message" \
14420 -c "selected_group ( 25 )"
14421
14422requires_gnutls_tls1_3
14423requires_gnutls_next_no_ticket
14424requires_gnutls_next_disable_tls13_compat
14425requires_config_enabled MBEDTLS_SSL_CLI_C
14426requires_config_enabled MBEDTLS_DEBUG_C
14427requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14428requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14429requires_config_enabled PSA_WANT_ALG_ECDH
14430requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14431requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14432run_test "TLS 1.3 m->G: HRR ffdhe2048 -> x25519" \
14433 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X25519:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14434 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,x25519" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14435 0 \
14436 -c "HTTP/1.0 200 OK" \
14437 -c "Protocol is TLSv1.3" \
14438 -c "NamedGroup: ffdhe2048 ( 100 )" \
14439 -c "NamedGroup: x25519 ( 1d )" \
14440 -c "Verifying peer X.509 certificate... ok" \
14441 -c "received HelloRetryRequest message" \
14442 -c "selected_group ( 29 )"
14443
14444requires_gnutls_tls1_3
14445requires_gnutls_next_no_ticket
14446requires_gnutls_next_disable_tls13_compat
14447requires_config_enabled MBEDTLS_SSL_CLI_C
14448requires_config_enabled MBEDTLS_DEBUG_C
14449requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14450requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14451requires_config_enabled PSA_WANT_ALG_ECDH
14452requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14453requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14454run_test "TLS 1.3 m->G: HRR ffdhe2048 -> x448" \
14455 "$G_NEXT_SRV_NO_CERT --http --disable-client-cert --debug=4 --x509certfile data_files/ecdsa_secp256r1.crt --x509keyfile data_files/ecdsa_secp256r1.key --priority=NONE:+CIPHER-ALL:+MAC-ALL:+SIGN-ALL:+GROUP-X448:+VERS-TLS1.3:%NO_TICKETS" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14456 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,x448" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14457 0 \
14458 -c "HTTP/1.0 200 OK" \
14459 -c "Protocol is TLSv1.3" \
14460 -c "NamedGroup: ffdhe2048 ( 100 )" \
14461 -c "NamedGroup: x448 ( 1e )" \
14462 -c "Verifying peer X.509 certificate... ok" \
14463 -c "received HelloRetryRequest message" \
14464 -c "selected_group ( 30 )"
14465
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14466requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14467requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14468requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14469requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14470requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14471requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14472requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14473requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14474requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14475requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14476run_test "TLS 1.3 m->m: HRR secp256r1 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14477 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14478 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14479 0 \
14480 -s "Protocol is TLSv1.3" \
14481 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14482 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14483 -c "Protocol is TLSv1.3" \
14484 -c "NamedGroup: secp256r1 ( 17 )" \
14485 -c "NamedGroup: secp384r1 ( 18 )" \
14486 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14487 -s "HRR selected_group: secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14488 -c "received HelloRetryRequest message" \
14489 -c "selected_group ( 24 )"
14490
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14491requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14492requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14493requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14494requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14495requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14496requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14497requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14498requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14499requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14500requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14501run_test "TLS 1.3 m->m: HRR secp256r1 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14502 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14503 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14504 0 \
14505 -s "Protocol is TLSv1.3" \
14506 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14507 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14508 -c "Protocol is TLSv1.3" \
14509 -c "NamedGroup: secp256r1 ( 17 )" \
14510 -c "NamedGroup: secp521r1 ( 19 )" \
14511 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14512 -s "HRR selected_group: secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14513 -c "received HelloRetryRequest message" \
14514 -c "selected_group ( 25 )"
14515
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14516requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14517requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14518requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14519requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14520requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14521requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14522requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14523requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14524requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14525requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14526run_test "TLS 1.3 m->m: HRR secp256r1 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14527 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14528 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14529 0 \
14530 -s "Protocol is TLSv1.3" \
14531 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14532 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14533 -c "Protocol is TLSv1.3" \
14534 -c "NamedGroup: secp256r1 ( 17 )" \
14535 -c "NamedGroup: x25519 ( 1d )" \
14536 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14537 -s "HRR selected_group: x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14538 -c "received HelloRetryRequest message" \
14539 -c "selected_group ( 29 )"
14540
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14541requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14542requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14543requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14544requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14545requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14546requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14547requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14548requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14549requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14550requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14551run_test "TLS 1.3 m->m: HRR secp256r1 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14552 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14553 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14554 0 \
14555 -s "Protocol is TLSv1.3" \
14556 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14557 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14558 -c "Protocol is TLSv1.3" \
14559 -c "NamedGroup: secp256r1 ( 17 )" \
14560 -c "NamedGroup: x448 ( 1e )" \
14561 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14562 -s "HRR selected_group: x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14563 -c "received HelloRetryRequest message" \
14564 -c "selected_group ( 30 )"
14565
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14566requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14567requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14568requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14569requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14570requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14571requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14572requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14573requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14574requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14575requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14576requires_config_enabled PSA_WANT_ALG_ECDH
14577requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14578requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14579run_test "TLS 1.3 m->m: HRR secp256r1 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14580 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14581 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14582 0 \
14583 -s "Protocol is TLSv1.3" \
14584 -s "got named group: ffdhe2048(0100)" \
14585 -s "Certificate verification was skipped" \
14586 -c "Protocol is TLSv1.3" \
14587 -c "NamedGroup: secp256r1 ( 17 )" \
14588 -c "NamedGroup: ffdhe2048 ( 100 )" \
14589 -c "Verifying peer X.509 certificate... ok" \
14590 -s "HRR selected_group: ffdhe2048" \
14591 -c "received HelloRetryRequest message" \
14592 -c "selected_group ( 256 )"
14593
14594requires_config_enabled MBEDTLS_SSL_SRV_C
14595requires_config_enabled MBEDTLS_DEBUG_C
14596requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14597requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14598requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14599requires_config_enabled MBEDTLS_SSL_CLI_C
14600requires_config_enabled MBEDTLS_DEBUG_C
14601requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14602requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14603requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14604run_test "TLS 1.3 m->m: HRR secp384r1 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14605 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14606 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14607 0 \
14608 -s "Protocol is TLSv1.3" \
14609 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14610 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14611 -c "Protocol is TLSv1.3" \
14612 -c "NamedGroup: secp384r1 ( 18 )" \
14613 -c "NamedGroup: secp256r1 ( 17 )" \
14614 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14615 -s "HRR selected_group: secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14616 -c "received HelloRetryRequest message" \
14617 -c "selected_group ( 23 )"
14618
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14619requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14620requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14621requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14622requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14623requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14624requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14625requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14626requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14627requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14628requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14629run_test "TLS 1.3 m->m: HRR secp384r1 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14630 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14631 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14632 0 \
14633 -s "Protocol is TLSv1.3" \
14634 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14635 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14636 -c "Protocol is TLSv1.3" \
14637 -c "NamedGroup: secp384r1 ( 18 )" \
14638 -c "NamedGroup: secp521r1 ( 19 )" \
14639 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14640 -s "HRR selected_group: secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14641 -c "received HelloRetryRequest message" \
14642 -c "selected_group ( 25 )"
14643
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14644requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14645requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14646requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14647requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14648requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14649requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14650requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14651requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14652requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14653requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14654run_test "TLS 1.3 m->m: HRR secp384r1 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14655 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14656 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14657 0 \
14658 -s "Protocol is TLSv1.3" \
14659 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14660 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14661 -c "Protocol is TLSv1.3" \
14662 -c "NamedGroup: secp384r1 ( 18 )" \
14663 -c "NamedGroup: x25519 ( 1d )" \
14664 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14665 -s "HRR selected_group: x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14666 -c "received HelloRetryRequest message" \
14667 -c "selected_group ( 29 )"
14668
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14669requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14670requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14671requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14672requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14673requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14674requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14675requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14676requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14677requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14678requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14679run_test "TLS 1.3 m->m: HRR secp384r1 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14680 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14681 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14682 0 \
14683 -s "Protocol is TLSv1.3" \
14684 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14685 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14686 -c "Protocol is TLSv1.3" \
14687 -c "NamedGroup: secp384r1 ( 18 )" \
14688 -c "NamedGroup: x448 ( 1e )" \
14689 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14690 -s "HRR selected_group: x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14691 -c "received HelloRetryRequest message" \
14692 -c "selected_group ( 30 )"
14693
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14694requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14695requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14696requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14697requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14698requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14699requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14700requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14701requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14702requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14703requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14704requires_config_enabled PSA_WANT_ALG_ECDH
14705requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14706requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14707run_test "TLS 1.3 m->m: HRR secp384r1 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14708 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14709 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14710 0 \
14711 -s "Protocol is TLSv1.3" \
14712 -s "got named group: ffdhe2048(0100)" \
14713 -s "Certificate verification was skipped" \
14714 -c "Protocol is TLSv1.3" \
14715 -c "NamedGroup: secp384r1 ( 18 )" \
14716 -c "NamedGroup: ffdhe2048 ( 100 )" \
14717 -c "Verifying peer X.509 certificate... ok" \
14718 -s "HRR selected_group: ffdhe2048" \
14719 -c "received HelloRetryRequest message" \
14720 -c "selected_group ( 256 )"
14721
14722requires_config_enabled MBEDTLS_SSL_SRV_C
14723requires_config_enabled MBEDTLS_DEBUG_C
14724requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14725requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14726requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14727requires_config_enabled MBEDTLS_SSL_CLI_C
14728requires_config_enabled MBEDTLS_DEBUG_C
14729requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14730requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14731requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14732run_test "TLS 1.3 m->m: HRR secp521r1 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14733 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14734 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14735 0 \
14736 -s "Protocol is TLSv1.3" \
14737 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14738 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14739 -c "Protocol is TLSv1.3" \
14740 -c "NamedGroup: secp521r1 ( 19 )" \
14741 -c "NamedGroup: secp256r1 ( 17 )" \
14742 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14743 -s "HRR selected_group: secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14744 -c "received HelloRetryRequest message" \
14745 -c "selected_group ( 23 )"
14746
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14747requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14748requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14749requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14750requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14751requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14752requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14753requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14754requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14755requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14756requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14757run_test "TLS 1.3 m->m: HRR secp521r1 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14758 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14759 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14760 0 \
14761 -s "Protocol is TLSv1.3" \
14762 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14763 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14764 -c "Protocol is TLSv1.3" \
14765 -c "NamedGroup: secp521r1 ( 19 )" \
14766 -c "NamedGroup: secp384r1 ( 18 )" \
14767 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14768 -s "HRR selected_group: secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14769 -c "received HelloRetryRequest message" \
14770 -c "selected_group ( 24 )"
14771
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14772requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14773requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14774requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14775requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14776requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14777requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14778requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14779requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14780requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14781requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14782run_test "TLS 1.3 m->m: HRR secp521r1 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14783 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14784 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14785 0 \
14786 -s "Protocol is TLSv1.3" \
14787 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14788 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14789 -c "Protocol is TLSv1.3" \
14790 -c "NamedGroup: secp521r1 ( 19 )" \
14791 -c "NamedGroup: x25519 ( 1d )" \
14792 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14793 -s "HRR selected_group: x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14794 -c "received HelloRetryRequest message" \
14795 -c "selected_group ( 29 )"
14796
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14797requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14798requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14799requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14800requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14801requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14802requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14803requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14804requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14805requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14806requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14807run_test "TLS 1.3 m->m: HRR secp521r1 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14808 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14809 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14810 0 \
14811 -s "Protocol is TLSv1.3" \
14812 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14813 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14814 -c "Protocol is TLSv1.3" \
14815 -c "NamedGroup: secp521r1 ( 19 )" \
14816 -c "NamedGroup: x448 ( 1e )" \
14817 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14818 -s "HRR selected_group: x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14819 -c "received HelloRetryRequest message" \
14820 -c "selected_group ( 30 )"
14821
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14822requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14823requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14824requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14825requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14826requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14827requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14828requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14829requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14830requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14831requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14832requires_config_enabled PSA_WANT_ALG_ECDH
14833requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14834requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14835run_test "TLS 1.3 m->m: HRR secp521r1 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14836 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14837 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14838 0 \
14839 -s "Protocol is TLSv1.3" \
14840 -s "got named group: ffdhe2048(0100)" \
14841 -s "Certificate verification was skipped" \
14842 -c "Protocol is TLSv1.3" \
14843 -c "NamedGroup: secp521r1 ( 19 )" \
14844 -c "NamedGroup: ffdhe2048 ( 100 )" \
14845 -c "Verifying peer X.509 certificate... ok" \
14846 -s "HRR selected_group: ffdhe2048" \
14847 -c "received HelloRetryRequest message" \
14848 -c "selected_group ( 256 )"
14849
14850requires_config_enabled MBEDTLS_SSL_SRV_C
14851requires_config_enabled MBEDTLS_DEBUG_C
14852requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14853requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14854requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14855requires_config_enabled MBEDTLS_SSL_CLI_C
14856requires_config_enabled MBEDTLS_DEBUG_C
14857requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14858requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14859requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14860run_test "TLS 1.3 m->m: HRR x25519 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14861 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14862 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14863 0 \
14864 -s "Protocol is TLSv1.3" \
14865 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14866 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14867 -c "Protocol is TLSv1.3" \
14868 -c "NamedGroup: x25519 ( 1d )" \
14869 -c "NamedGroup: secp256r1 ( 17 )" \
14870 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14871 -s "HRR selected_group: secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14872 -c "received HelloRetryRequest message" \
14873 -c "selected_group ( 23 )"
14874
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14875requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14876requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14877requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14878requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14879requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14880requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14881requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14882requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14883requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14884requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14885run_test "TLS 1.3 m->m: HRR x25519 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14886 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14887 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14888 0 \
14889 -s "Protocol is TLSv1.3" \
14890 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14891 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14892 -c "Protocol is TLSv1.3" \
14893 -c "NamedGroup: x25519 ( 1d )" \
14894 -c "NamedGroup: secp384r1 ( 18 )" \
14895 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14896 -s "HRR selected_group: secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14897 -c "received HelloRetryRequest message" \
14898 -c "selected_group ( 24 )"
14899
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14900requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14901requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14902requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14903requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14904requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14905requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14906requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14907requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14908requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14909requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14910run_test "TLS 1.3 m->m: HRR x25519 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14911 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14912 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14913 0 \
14914 -s "Protocol is TLSv1.3" \
14915 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14916 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14917 -c "Protocol is TLSv1.3" \
14918 -c "NamedGroup: x25519 ( 1d )" \
14919 -c "NamedGroup: secp521r1 ( 19 )" \
14920 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14921 -s "HRR selected_group: secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14922 -c "received HelloRetryRequest message" \
14923 -c "selected_group ( 25 )"
14924
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14925requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14926requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14927requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14928requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14929requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14930requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14931requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14932requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14933requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14934requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14935run_test "TLS 1.3 m->m: HRR x25519 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14936 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14937 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14938 0 \
14939 -s "Protocol is TLSv1.3" \
14940 -s "got named group: x448(001e)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14941 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14942 -c "Protocol is TLSv1.3" \
14943 -c "NamedGroup: x25519 ( 1d )" \
14944 -c "NamedGroup: x448 ( 1e )" \
14945 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14946 -s "HRR selected_group: x448" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14947 -c "received HelloRetryRequest message" \
14948 -c "selected_group ( 30 )"
14949
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]14950requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14951requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14952requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14953requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14954requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14955requires_config_enabled PSA_WANT_DH_RFC7919_2048
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14956requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14957requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]14958requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14959requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14960requires_config_enabled PSA_WANT_ALG_ECDH
14961requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]14962requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14963run_test "TLS 1.3 m->m: HRR x25519 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14964 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14965 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14966 0 \
14967 -s "Protocol is TLSv1.3" \
14968 -s "got named group: ffdhe2048(0100)" \
14969 -s "Certificate verification was skipped" \
14970 -c "Protocol is TLSv1.3" \
14971 -c "NamedGroup: x25519 ( 1d )" \
14972 -c "NamedGroup: ffdhe2048 ( 100 )" \
14973 -c "Verifying peer X.509 certificate... ok" \
14974 -s "HRR selected_group: ffdhe2048" \
14975 -c "received HelloRetryRequest message" \
14976 -c "selected_group ( 256 )"
14977
14978requires_config_enabled MBEDTLS_SSL_SRV_C
14979requires_config_enabled MBEDTLS_DEBUG_C
14980requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14981requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14982requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]14983requires_config_enabled MBEDTLS_SSL_CLI_C
14984requires_config_enabled MBEDTLS_DEBUG_C
14985requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
14986requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]14987requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14988run_test "TLS 1.3 m->m: HRR x448 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]14989 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
14990 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14991 0 \
14992 -s "Protocol is TLSv1.3" \
14993 -s "got named group: secp256r1(0017)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]14994 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]14995 -c "Protocol is TLSv1.3" \
14996 -c "NamedGroup: x448 ( 1e )" \
14997 -c "NamedGroup: secp256r1 ( 17 )" \
14998 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]14999 -s "HRR selected_group: secp256r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15000 -c "received HelloRetryRequest message" \
15001 -c "selected_group ( 23 )"
15002
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]15003requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]15004requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]15005requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15006requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15007requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15008requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]15009requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]15010requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15011requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15012requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15013run_test "TLS 1.3 m->m: HRR x448 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]15014 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
15015 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15016 0 \
15017 -s "Protocol is TLSv1.3" \
15018 -s "got named group: secp384r1(0018)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]15019 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15020 -c "Protocol is TLSv1.3" \
15021 -c "NamedGroup: x448 ( 1e )" \
15022 -c "NamedGroup: secp384r1 ( 18 )" \
15023 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]15024 -s "HRR selected_group: secp384r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15025 -c "received HelloRetryRequest message" \
15026 -c "selected_group ( 24 )"
15027
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]15028requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]15029requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]15030requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15031requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15032requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15033requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]15034requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]15035requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15036requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15037requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15038run_test "TLS 1.3 m->m: HRR x448 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]15039 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
15040 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15041 0 \
15042 -s "Protocol is TLSv1.3" \
15043 -s "got named group: secp521r1(0019)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]15044 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15045 -c "Protocol is TLSv1.3" \
15046 -c "NamedGroup: x448 ( 1e )" \
15047 -c "NamedGroup: secp521r1 ( 19 )" \
15048 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]15049 -s "HRR selected_group: secp521r1" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15050 -c "received HelloRetryRequest message" \
15051 -c "selected_group ( 25 )"
15052
XiaokangQianfb1a3fe2022-06-09 06:37:33 +0000[diff] [blame]15053requires_config_enabled MBEDTLS_SSL_SRV_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]15054requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]15055requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15056requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15057requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15058requires_config_enabled MBEDTLS_SSL_CLI_C
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]15059requires_config_enabled MBEDTLS_DEBUG_C
Ronald Cron928cbd32022-10-04 16:14:26 +0200[diff] [blame]15060requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15061requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15062requires_config_enabled PSA_WANT_ALG_ECDH
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15063run_test "TLS 1.3 m->m: HRR x448 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]15064 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
15065 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15066 0 \
15067 -s "Protocol is TLSv1.3" \
15068 -s "got named group: x25519(001d)" \
Ronald Croneac00ad2022-09-13 10:16:31 +0200[diff] [blame]15069 -s "Certificate verification was skipped" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15070 -c "Protocol is TLSv1.3" \
15071 -c "NamedGroup: x448 ( 1e )" \
15072 -c "NamedGroup: x25519 ( 1d )" \
15073 -c "Verifying peer X.509 certificate... ok" \
XiaokangQian9b938b72022-06-10 03:10:59 +0000[diff] [blame]15074 -s "HRR selected_group: x25519" \
XiaokangQianb1847a22022-06-08 07:49:31 +0000[diff] [blame]15075 -c "received HelloRetryRequest message" \
15076 -c "selected_group ( 29 )"
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15077
15078requires_config_enabled MBEDTLS_SSL_SRV_C
15079requires_config_enabled MBEDTLS_DEBUG_C
15080requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15081requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15082requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]15083requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15084requires_config_enabled MBEDTLS_SSL_CLI_C
15085requires_config_enabled MBEDTLS_DEBUG_C
15086requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15087requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15088requires_config_enabled PSA_WANT_ALG_ECDH
15089requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]15090requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15091run_test "TLS 1.3 m->m: HRR x448 -> ffdhe2048" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]15092 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
15093 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448,ffdhe2048" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15094 0 \
15095 -s "Protocol is TLSv1.3" \
15096 -s "got named group: ffdhe2048(0100)" \
15097 -s "Certificate verification was skipped" \
15098 -c "Protocol is TLSv1.3" \
15099 -c "NamedGroup: x448 ( 1e )" \
15100 -c "NamedGroup: ffdhe2048 ( 100 )" \
15101 -c "Verifying peer X.509 certificate... ok" \
15102 -s "HRR selected_group: ffdhe2048" \
15103 -c "received HelloRetryRequest message" \
15104 -c "selected_group ( 256 )"
15105
15106requires_config_enabled MBEDTLS_SSL_SRV_C
15107requires_config_enabled MBEDTLS_DEBUG_C
15108requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15109requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15110requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15111requires_config_enabled MBEDTLS_SSL_CLI_C
15112requires_config_enabled MBEDTLS_DEBUG_C
15113requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15114requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15115requires_config_enabled PSA_WANT_ALG_ECDH
15116requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]15117requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15118run_test "TLS 1.3 m->m: HRR ffdhe2048 -> secp256r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]15119 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp256r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
15120 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,secp256r1" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15121 0 \
15122 -s "Protocol is TLSv1.3" \
15123 -s "got named group: secp256r1(0017)" \
15124 -s "Certificate verification was skipped" \
15125 -c "Protocol is TLSv1.3" \
15126 -c "NamedGroup: ffdhe2048 ( 100 )" \
15127 -c "NamedGroup: secp256r1 ( 17 )" \
15128 -c "Verifying peer X.509 certificate... ok" \
15129 -s "HRR selected_group: secp256r1" \
15130 -c "received HelloRetryRequest message" \
15131 -c "selected_group ( 23 )"
15132
15133requires_config_enabled MBEDTLS_SSL_SRV_C
15134requires_config_enabled MBEDTLS_DEBUG_C
15135requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15136requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15137requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15138requires_config_enabled MBEDTLS_SSL_CLI_C
15139requires_config_enabled MBEDTLS_DEBUG_C
15140requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15141requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15142requires_config_enabled PSA_WANT_ALG_ECDH
15143requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]15144requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15145run_test "TLS 1.3 m->m: HRR ffdhe2048 -> secp384r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]15146 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp384r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
15147 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,secp384r1" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15148 0 \
15149 -s "Protocol is TLSv1.3" \
15150 -s "got named group: secp384r1(0018)" \
15151 -s "Certificate verification was skipped" \
15152 -c "Protocol is TLSv1.3" \
15153 -c "NamedGroup: ffdhe2048 ( 100 )" \
15154 -c "NamedGroup: secp384r1 ( 18 )" \
15155 -c "Verifying peer X.509 certificate... ok" \
15156 -s "HRR selected_group: secp384r1" \
15157 -c "received HelloRetryRequest message" \
15158 -c "selected_group ( 24 )"
15159
15160requires_config_enabled MBEDTLS_SSL_SRV_C
15161requires_config_enabled MBEDTLS_DEBUG_C
15162requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15163requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15164requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15165requires_config_enabled MBEDTLS_SSL_CLI_C
15166requires_config_enabled MBEDTLS_DEBUG_C
15167requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15168requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15169requires_config_enabled PSA_WANT_ALG_ECDH
15170requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]15171requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15172run_test "TLS 1.3 m->m: HRR ffdhe2048 -> secp521r1" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]15173 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=secp521r1 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
15174 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,secp521r1" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15175 0 \
15176 -s "Protocol is TLSv1.3" \
15177 -s "got named group: secp521r1(0019)" \
15178 -s "Certificate verification was skipped" \
15179 -c "Protocol is TLSv1.3" \
15180 -c "NamedGroup: ffdhe2048 ( 100 )" \
15181 -c "NamedGroup: secp521r1 ( 19 )" \
15182 -c "Verifying peer X.509 certificate... ok" \
15183 -s "HRR selected_group: secp521r1" \
15184 -c "received HelloRetryRequest message" \
15185 -c "selected_group ( 25 )"
15186
15187requires_config_enabled MBEDTLS_SSL_SRV_C
15188requires_config_enabled MBEDTLS_DEBUG_C
15189requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15190requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15191requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15192requires_config_enabled MBEDTLS_SSL_CLI_C
15193requires_config_enabled MBEDTLS_DEBUG_C
15194requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15195requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15196requires_config_enabled PSA_WANT_ALG_ECDH
15197requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]15198requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15199run_test "TLS 1.3 m->m: HRR ffdhe2048 -> x25519" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]15200 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x25519 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
15201 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,x25519" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15202 0 \
15203 -s "Protocol is TLSv1.3" \
15204 -s "got named group: x25519(001d)" \
15205 -s "Certificate verification was skipped" \
15206 -c "Protocol is TLSv1.3" \
15207 -c "NamedGroup: ffdhe2048 ( 100 )" \
15208 -c "NamedGroup: x25519 ( 1d )" \
15209 -c "Verifying peer X.509 certificate... ok" \
15210 -s "HRR selected_group: x25519" \
15211 -c "received HelloRetryRequest message" \
15212 -c "selected_group ( 29 )"
15213
15214requires_config_enabled MBEDTLS_SSL_SRV_C
15215requires_config_enabled MBEDTLS_DEBUG_C
15216requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15217requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15218requires_config_enabled PSA_WANT_ALG_ECDH
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15219requires_config_enabled MBEDTLS_SSL_CLI_C
15220requires_config_enabled MBEDTLS_DEBUG_C
15221requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
15222requires_config_enabled MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Przemek Stekielc31a7982023-06-27 10:53:33 +0200[diff] [blame]15223requires_config_enabled PSA_WANT_ALG_ECDH
15224requires_config_enabled PSA_WANT_ALG_FFDH
Valerio Setti18371ee2024-01-18 09:49:39 +0100[diff] [blame^]15225requires_config_enabled PSA_WANT_DH_RFC7919_2048
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15226run_test "TLS 1.3 m->m: HRR ffdhe2048 -> x448" \
Przemek Stekiel45255e42023-06-29 13:56:36 +0200[diff] [blame]15227 "$P_SRV crt_file=data_files/ecdsa_secp256r1.crt key_file=data_files/ecdsa_secp256r1.key debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=x448 tls13_kex_modes=ephemeral cookies=0 tickets=0" \
15228 "$P_CLI ca_file=data_files/test-ca2.crt debug_level=4 sig_algs=ecdsa_secp256r1_sha256 groups=ffdhe2048,x448" \
Przemek Stekiel422ab1f2023-06-14 11:04:28 +0200[diff] [blame]15229 0 \
15230 -s "Protocol is TLSv1.3" \
15231 -s "got named group: x448(001e)" \
15232 -s "Certificate verification was skipped" \
15233 -c "Protocol is TLSv1.3" \
15234 -c "NamedGroup: ffdhe2048 ( 100 )" \
15235 -c "NamedGroup: x448 ( 1e )" \
15236 -c "Verifying peer X.509 certificate... ok" \
15237 -s "HRR selected_group: x448" \
15238 -c "received HelloRetryRequest message" \
15239 -c "selected_group ( 30 )"