blob: 0d7dba260b85b8a0e9fc7d86146d6b381e6af007 [file] [log] [blame]
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001#!/bin/sh
2
Simon Butcher58eddef2016-05-19 23:43:11 +01003# ssl-opt.sh
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01004#
Simon Butcher58eddef2016-05-19 23:43:11 +01005# This file is part of mbed TLS (https://tls.mbed.org)
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01006#
Simon Butcher58eddef2016-05-19 23:43:11 +01007# Copyright (c) 2016, ARM Limited, All Rights Reserved
8#
9# Purpose
10#
11# Executes tests to prove various TLS/SSL options and extensions.
12#
13# The goal is not to cover every ciphersuite/version, but instead to cover
14# specific options (max fragment length, truncated hmac, etc) or procedures
15# (session resumption from cache or ticket, renego, etc).
16#
17# The tests assume a build with default options, with exceptions expressed
18# with a dependency. The tests focus on functionality and do not consider
19# performance.
20#
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010021
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010022set -u
23
Jaeden Amero6e70eb22019-07-03 13:51:04 +010024# Limit the size of each log to 10 GiB, in case of failures with this script
25# where it may output seemingly unlimited length error logs.
26ulimit -f 20971520
27
Angus Grattonc4dd0732018-04-11 16:28:39 +100028if cd $( dirname $0 ); then :; else
29 echo "cd $( dirname $0 ) failed" >&2
30 exit 1
31fi
32
Antonin Décimo36e89b52019-01-23 15:24:37 +010033# default values, can be overridden by the environment
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +010034: ${P_SRV:=../programs/ssl/ssl_server2}
35: ${P_CLI:=../programs/ssl/ssl_client2}
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +020036: ${P_PXY:=../programs/test/udp_proxy}
Manuel Pégourié-Gonnard74faf3c2014-03-13 18:47:44 +010037: ${OPENSSL_CMD:=openssl} # OPENSSL would conflict with the build system
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020038: ${GNUTLS_CLI:=gnutls-cli}
39: ${GNUTLS_SERV:=gnutls-serv}
Gilles Peskined50177f2017-05-16 17:53:03 +020040: ${PERL:=perl}
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +010041
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +020042O_SRV="$OPENSSL_CMD s_server -www -cert data_files/server5.crt -key data_files/server5.key"
Manuel Pégourié-Gonnard74faf3c2014-03-13 18:47:44 +010043O_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_CMD s_client"
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +020044G_SRV="$GNUTLS_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +010045G_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_CLI --x509cafile data_files/test-ca_cat12.crt"
Gilles Peskined50177f2017-05-16 17:53:03 +020046TCP_CLIENT="$PERL scripts/tcp_client.pl"
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +010047
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020048# alternative versions of OpenSSL and GnuTLS (no default path)
49
50if [ -n "${OPENSSL_LEGACY:-}" ]; then
51 O_LEGACY_SRV="$OPENSSL_LEGACY s_server -www -cert data_files/server5.crt -key data_files/server5.key"
52 O_LEGACY_CLI="echo 'GET / HTTP/1.0' | $OPENSSL_LEGACY s_client"
53else
54 O_LEGACY_SRV=false
55 O_LEGACY_CLI=false
56fi
57
Hanno Becker58e9dc32018-08-17 15:53:21 +010058if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020059 G_NEXT_SRV="$GNUTLS_NEXT_SERV --x509certfile data_files/server5.crt --x509keyfile data_files/server5.key"
60else
61 G_NEXT_SRV=false
62fi
63
Hanno Becker58e9dc32018-08-17 15:53:21 +010064if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +020065 G_NEXT_CLI="echo 'GET / HTTP/1.0' | $GNUTLS_NEXT_CLI --x509cafile data_files/test-ca_cat12.crt"
66else
67 G_NEXT_CLI=false
68fi
69
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010070TESTS=0
71FAILS=0
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +020072SKIPS=0
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +010073
Manuel Pégourié-Gonnard7f809972015-03-09 17:05:11 +000074CONFIG_H='../include/mbedtls/config.h'
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +020075
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +010076MEMCHECK=0
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +010077FILTER='.*'
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +020078EXCLUDE='^$'
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +010079
Paul Bakkere20310a2016-05-10 11:18:17 +010080SHOW_TEST_NUMBER=0
Paul Bakkerb7584a52016-05-10 10:50:43 +010081RUN_TEST_NUMBER=''
82
Paul Bakkeracaac852016-05-10 11:47:13 +010083PRESERVE_LOGS=0
84
Gilles Peskinef93c7d32017-04-14 17:55:28 +020085# Pick a "unique" server port in the range 10000-19999, and a proxy
86# port which is this plus 10000. Each port number may be independently
87# overridden by a command line option.
88SRV_PORT=$(($$ % 10000 + 10000))
89PXY_PORT=$((SRV_PORT + 10000))
90
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +010091print_usage() {
92 echo "Usage: $0 [options]"
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +010093 printf " -h|--help\tPrint this help.\n"
94 printf " -m|--memcheck\tCheck memory leaks and errors.\n"
Gilles Peskinef93c7d32017-04-14 17:55:28 +020095 printf " -f|--filter\tOnly matching tests are executed (BRE; default: '$FILTER')\n"
96 printf " -e|--exclude\tMatching tests are excluded (BRE; default: '$EXCLUDE')\n"
Paul Bakkerb7584a52016-05-10 10:50:43 +010097 printf " -n|--number\tExecute only numbered test (comma-separated, e.g. '245,256')\n"
Paul Bakkere20310a2016-05-10 11:18:17 +010098 printf " -s|--show-numbers\tShow test numbers in front of test names\n"
Paul Bakkeracaac852016-05-10 11:47:13 +010099 printf " -p|--preserve-logs\tPreserve logs of successful tests as well\n"
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200100 printf " --port\tTCP/UDP port (default: randomish 1xxxx)\n"
101 printf " --proxy-port\tTCP/UDP proxy port (default: randomish 2xxxx)\n"
Andres AGf04f54d2016-10-10 15:46:20 +0100102 printf " --seed\tInteger seed value to use for this test run\n"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100103}
104
105get_options() {
106 while [ $# -gt 0 ]; do
107 case "$1" in
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100108 -f|--filter)
109 shift; FILTER=$1
110 ;;
111 -e|--exclude)
112 shift; EXCLUDE=$1
113 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100114 -m|--memcheck)
115 MEMCHECK=1
116 ;;
Paul Bakkerb7584a52016-05-10 10:50:43 +0100117 -n|--number)
118 shift; RUN_TEST_NUMBER=$1
119 ;;
Paul Bakkere20310a2016-05-10 11:18:17 +0100120 -s|--show-numbers)
121 SHOW_TEST_NUMBER=1
122 ;;
Paul Bakkeracaac852016-05-10 11:47:13 +0100123 -p|--preserve-logs)
124 PRESERVE_LOGS=1
125 ;;
Gilles Peskinef93c7d32017-04-14 17:55:28 +0200126 --port)
127 shift; SRV_PORT=$1
128 ;;
129 --proxy-port)
130 shift; PXY_PORT=$1
131 ;;
Andres AGf04f54d2016-10-10 15:46:20 +0100132 --seed)
133 shift; SEED="$1"
134 ;;
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100135 -h|--help)
136 print_usage
137 exit 0
138 ;;
139 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200140 echo "Unknown argument: '$1'"
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100141 print_usage
142 exit 1
143 ;;
144 esac
145 shift
146 done
147}
148
Hanno Becker3b8b40c2018-08-28 10:25:41 +0100149# Skip next test; use this macro to skip tests which are legitimate
150# in theory and expected to be re-introduced at some point, but
151# aren't expected to succeed at the moment due to problems outside
152# our control (such as bugs in other TLS implementations).
153skip_next_test() {
154 SKIP_NEXT="YES"
155}
156
Manuel Pégourié-Gonnard988209f2015-03-24 10:43:55 +0100157# skip next test if the flag is not enabled in config.h
158requires_config_enabled() {
159 if grep "^#define $1" $CONFIG_H > /dev/null; then :; else
160 SKIP_NEXT="YES"
161 fi
162}
163
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +0200164# skip next test if the flag is enabled in config.h
165requires_config_disabled() {
166 if grep "^#define $1" $CONFIG_H > /dev/null; then
167 SKIP_NEXT="YES"
168 fi
169}
170
Hanno Becker7c48dd12018-08-28 16:09:22 +0100171get_config_value_or_default() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100172 # This function uses the query_config command line option to query the
173 # required Mbed TLS compile time configuration from the ssl_server2
174 # program. The command will always return a success value if the
175 # configuration is defined and the value will be printed to stdout.
176 #
177 # Note that if the configuration is not defined or is defined to nothing,
178 # the output of this function will be an empty string.
179 ${P_SRV} "query_config=${1}"
Hanno Becker7c48dd12018-08-28 16:09:22 +0100180}
181
182requires_config_value_at_least() {
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100183 VAL="$( get_config_value_or_default "$1" )"
184 if [ -z "$VAL" ]; then
185 # Should never happen
186 echo "Mbed TLS configuration $1 is not defined"
187 exit 1
188 elif [ "$VAL" -lt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100189 SKIP_NEXT="YES"
190 fi
191}
192
193requires_config_value_at_most() {
Hanno Becker7c48dd12018-08-28 16:09:22 +0100194 VAL=$( get_config_value_or_default "$1" )
Andres Amaya Garcia3169dc02018-10-16 21:29:07 +0100195 if [ -z "$VAL" ]; then
196 # Should never happen
197 echo "Mbed TLS configuration $1 is not defined"
198 exit 1
199 elif [ "$VAL" -gt "$2" ]; then
Hanno Becker5cd017f2018-08-24 14:40:12 +0100200 SKIP_NEXT="YES"
201 fi
202}
203
Hanno Becker9d76d562018-11-16 17:27:29 +0000204requires_ciphersuite_enabled() {
Hanno Beckera0dc9cf2018-11-20 11:31:17 +0000205 if [ -z "$($P_CLI --help | grep $1)" ]; then
Hanno Becker9d76d562018-11-16 17:27:29 +0000206 SKIP_NEXT="YES"
207 fi
208}
209
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +0200210# skip next test if OpenSSL doesn't support FALLBACK_SCSV
211requires_openssl_with_fallback_scsv() {
212 if [ -z "${OPENSSL_HAS_FBSCSV:-}" ]; then
213 if $OPENSSL_CMD s_client -help 2>&1 | grep fallback_scsv >/dev/null
214 then
215 OPENSSL_HAS_FBSCSV="YES"
216 else
217 OPENSSL_HAS_FBSCSV="NO"
218 fi
219 fi
220 if [ "$OPENSSL_HAS_FBSCSV" = "NO" ]; then
221 SKIP_NEXT="YES"
222 fi
223}
224
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200225# skip next test if GnuTLS isn't available
226requires_gnutls() {
227 if [ -z "${GNUTLS_AVAILABLE:-}" ]; then
Manuel Pégourié-Gonnard03db6b02015-06-26 15:45:30 +0200228 if ( which "$GNUTLS_CLI" && which "$GNUTLS_SERV" ) >/dev/null 2>&1; then
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +0200229 GNUTLS_AVAILABLE="YES"
230 else
231 GNUTLS_AVAILABLE="NO"
232 fi
233 fi
234 if [ "$GNUTLS_AVAILABLE" = "NO" ]; then
235 SKIP_NEXT="YES"
236 fi
237}
238
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200239# skip next test if GnuTLS-next isn't available
240requires_gnutls_next() {
241 if [ -z "${GNUTLS_NEXT_AVAILABLE:-}" ]; then
242 if ( which "${GNUTLS_NEXT_CLI:-}" && which "${GNUTLS_NEXT_SERV:-}" ) >/dev/null 2>&1; then
243 GNUTLS_NEXT_AVAILABLE="YES"
244 else
245 GNUTLS_NEXT_AVAILABLE="NO"
246 fi
247 fi
248 if [ "$GNUTLS_NEXT_AVAILABLE" = "NO" ]; then
249 SKIP_NEXT="YES"
250 fi
251}
252
253# skip next test if OpenSSL-legacy isn't available
254requires_openssl_legacy() {
255 if [ -z "${OPENSSL_LEGACY_AVAILABLE:-}" ]; then
256 if which "${OPENSSL_LEGACY:-}" >/dev/null 2>&1; then
257 OPENSSL_LEGACY_AVAILABLE="YES"
258 else
259 OPENSSL_LEGACY_AVAILABLE="NO"
260 fi
261 fi
262 if [ "$OPENSSL_LEGACY_AVAILABLE" = "NO" ]; then
263 SKIP_NEXT="YES"
264 fi
265}
266
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200267# skip next test if IPv6 isn't available on this host
268requires_ipv6() {
269 if [ -z "${HAS_IPV6:-}" ]; then
270 $P_SRV server_addr='::1' > $SRV_OUT 2>&1 &
271 SRV_PID=$!
272 sleep 1
273 kill $SRV_PID >/dev/null 2>&1
274 if grep "NET - Binding of the socket failed" $SRV_OUT >/dev/null; then
275 HAS_IPV6="NO"
276 else
277 HAS_IPV6="YES"
278 fi
279 rm -r $SRV_OUT
280 fi
281
282 if [ "$HAS_IPV6" = "NO" ]; then
283 SKIP_NEXT="YES"
284 fi
285}
286
Andrzej Kurekb4593462018-10-11 08:43:30 -0400287# skip next test if it's i686 or uname is not available
288requires_not_i686() {
289 if [ -z "${IS_I686:-}" ]; then
290 IS_I686="YES"
291 if which "uname" >/dev/null 2>&1; then
292 if [ -z "$(uname -a | grep i686)" ]; then
293 IS_I686="NO"
294 fi
295 fi
296 fi
297 if [ "$IS_I686" = "YES" ]; then
298 SKIP_NEXT="YES"
299 fi
300}
301
Angus Grattonc4dd0732018-04-11 16:28:39 +1000302# Calculate the input & output maximum content lengths set in the config
303MAX_CONTENT_LEN=$( ../scripts/config.pl get MBEDTLS_SSL_MAX_CONTENT_LEN || echo "16384")
304MAX_IN_LEN=$( ../scripts/config.pl get MBEDTLS_SSL_IN_CONTENT_LEN || echo "$MAX_CONTENT_LEN")
305MAX_OUT_LEN=$( ../scripts/config.pl get MBEDTLS_SSL_OUT_CONTENT_LEN || echo "$MAX_CONTENT_LEN")
306
307if [ "$MAX_IN_LEN" -lt "$MAX_CONTENT_LEN" ]; then
308 MAX_CONTENT_LEN="$MAX_IN_LEN"
309fi
310if [ "$MAX_OUT_LEN" -lt "$MAX_CONTENT_LEN" ]; then
311 MAX_CONTENT_LEN="$MAX_OUT_LEN"
312fi
313
314# skip the next test if the SSL output buffer is less than 16KB
315requires_full_size_output_buffer() {
316 if [ "$MAX_OUT_LEN" -ne 16384 ]; then
317 SKIP_NEXT="YES"
318 fi
319}
320
Manuel Pégourié-Gonnard76fe9e42014-09-24 15:17:31 +0200321# skip the next test if valgrind is in use
322not_with_valgrind() {
323 if [ "$MEMCHECK" -gt 0 ]; then
324 SKIP_NEXT="YES"
325 fi
326}
327
Paul Bakker362689d2016-05-13 10:33:25 +0100328# skip the next test if valgrind is NOT in use
329only_with_valgrind() {
330 if [ "$MEMCHECK" -eq 0 ]; then
331 SKIP_NEXT="YES"
332 fi
333}
334
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200335# multiply the client timeout delay by the given factor for the next test
Janos Follath74537a62016-09-02 13:45:28 +0100336client_needs_more_time() {
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200337 CLI_DELAY_FACTOR=$1
338}
339
Janos Follath74537a62016-09-02 13:45:28 +0100340# wait for the given seconds after the client finished in the next test
341server_needs_more_time() {
342 SRV_DELAY_SECONDS=$1
343}
344
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100345# print_name <name>
346print_name() {
Paul Bakkere20310a2016-05-10 11:18:17 +0100347 TESTS=$(( $TESTS + 1 ))
348 LINE=""
349
350 if [ "$SHOW_TEST_NUMBER" -gt 0 ]; then
351 LINE="$TESTS "
352 fi
353
354 LINE="$LINE$1"
355 printf "$LINE "
356 LEN=$(( 72 - `echo "$LINE" | wc -c` ))
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +0100357 for i in `seq 1 $LEN`; do printf '.'; done
358 printf ' '
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100359
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100360}
361
362# fail <message>
363fail() {
364 echo "FAIL"
Manuel Pégourié-Gonnard3eec6042014-02-27 15:37:24 +0100365 echo " ! $1"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100366
Manuel Pégourié-Gonnardc2b00922014-08-31 16:46:04 +0200367 mv $SRV_OUT o-srv-${TESTS}.log
368 mv $CLI_OUT o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200369 if [ -n "$PXY_CMD" ]; then
370 mv $PXY_OUT o-pxy-${TESTS}.log
371 fi
372 echo " ! outputs saved to o-XXX-${TESTS}.log"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +0100373
Azim Khan19d13732018-03-29 11:04:20 +0100374 if [ "X${USER:-}" = Xbuildbot -o "X${LOGNAME:-}" = Xbuildbot -o "${LOG_FAILURE_ON_STDOUT:-0}" != 0 ]; then
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200375 echo " ! server output:"
376 cat o-srv-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200377 echo " ! ========================================================"
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200378 echo " ! client output:"
379 cat o-cli-${TESTS}.log
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200380 if [ -n "$PXY_CMD" ]; then
381 echo " ! ========================================================"
382 echo " ! proxy output:"
383 cat o-pxy-${TESTS}.log
384 fi
385 echo ""
Manuel Pégourié-Gonnard7fa67722014-08-31 17:42:53 +0200386 fi
387
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +0200388 FAILS=$(( $FAILS + 1 ))
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100389}
390
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100391# is_polar <cmd_line>
392is_polar() {
393 echo "$1" | grep 'ssl_server2\|ssl_client2' > /dev/null
394}
395
Manuel Pégourié-Gonnardfa60f122014-09-26 16:07:29 +0200396# openssl s_server doesn't have -www with DTLS
397check_osrv_dtls() {
398 if echo "$SRV_CMD" | grep 's_server.*-dtls' >/dev/null; then
399 NEEDS_INPUT=1
400 SRV_CMD="$( echo $SRV_CMD | sed s/-www// )"
401 else
402 NEEDS_INPUT=0
403 fi
404}
405
406# provide input to commands that need it
407provide_input() {
408 if [ $NEEDS_INPUT -eq 0 ]; then
409 return
410 fi
411
412 while true; do
413 echo "HTTP/1.0 200 OK"
414 sleep 1
415 done
416}
417
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100418# has_mem_err <log_file_name>
419has_mem_err() {
420 if ( grep -F 'All heap blocks were freed -- no leaks are possible' "$1" &&
421 grep -F 'ERROR SUMMARY: 0 errors from 0 contexts' "$1" ) > /dev/null
422 then
423 return 1 # false: does not have errors
424 else
425 return 0 # true: has errors
426 fi
427}
428
Gilles Peskine418b5362017-12-14 18:58:42 +0100429# Wait for process $2 to be listening on port $1
430if type lsof >/dev/null 2>/dev/null; then
431 wait_server_start() {
432 START_TIME=$(date +%s)
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200433 if [ "$DTLS" -eq 1 ]; then
Gilles Peskine418b5362017-12-14 18:58:42 +0100434 proto=UDP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200435 else
Gilles Peskine418b5362017-12-14 18:58:42 +0100436 proto=TCP
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200437 fi
Gilles Peskine418b5362017-12-14 18:58:42 +0100438 # Make a tight loop, server normally takes less than 1s to start.
439 while ! lsof -a -n -b -i "$proto:$1" -p "$2" >/dev/null 2>/dev/null; do
440 if [ $(( $(date +%s) - $START_TIME )) -gt $DOG_DELAY ]; then
441 echo "SERVERSTART TIMEOUT"
442 echo "SERVERSTART TIMEOUT" >> $SRV_OUT
443 break
444 fi
445 # Linux and *BSD support decimal arguments to sleep. On other
446 # OSes this may be a tight loop.
447 sleep 0.1 2>/dev/null || true
448 done
449 }
450else
Gilles Peskinea9312652018-06-29 15:48:13 +0200451 echo "Warning: lsof not available, wait_server_start = sleep"
Gilles Peskine418b5362017-12-14 18:58:42 +0100452 wait_server_start() {
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200453 sleep "$START_DELAY"
Gilles Peskine418b5362017-12-14 18:58:42 +0100454 }
455fi
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200456
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100457# Given the client or server debug output, parse the unix timestamp that is
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +0100458# included in the first 4 bytes of the random bytes and check that it's within
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100459# acceptable bounds
460check_server_hello_time() {
461 # Extract the time from the debug (lvl 3) output of the client
Andres Amaya Garcia67d8da52017-09-15 15:49:24 +0100462 SERVER_HELLO_TIME="$(sed -n 's/.*server hello, current time: //p' < "$1")"
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100463 # Get the Unix timestamp for now
464 CUR_TIME=$(date +'%s')
465 THRESHOLD_IN_SECS=300
466
467 # Check if the ServerHello time was printed
468 if [ -z "$SERVER_HELLO_TIME" ]; then
469 return 1
470 fi
471
472 # Check the time in ServerHello is within acceptable bounds
473 if [ $SERVER_HELLO_TIME -lt $(( $CUR_TIME - $THRESHOLD_IN_SECS )) ]; then
474 # The time in ServerHello is at least 5 minutes before now
475 return 1
476 elif [ $SERVER_HELLO_TIME -gt $(( $CUR_TIME + $THRESHOLD_IN_SECS )) ]; then
Andres Amaya Garcia3b1bdff2017-09-14 12:41:29 +0100477 # The time in ServerHello is at least 5 minutes later than now
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +0100478 return 1
479 else
480 return 0
481 fi
482}
483
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200484# wait for client to terminate and set CLI_EXIT
485# must be called right after starting the client
486wait_client_done() {
487 CLI_PID=$!
488
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200489 CLI_DELAY=$(( $DOG_DELAY * $CLI_DELAY_FACTOR ))
490 CLI_DELAY_FACTOR=1
491
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200492 ( sleep $CLI_DELAY; echo "===CLIENT_TIMEOUT===" >> $CLI_OUT; kill $CLI_PID ) &
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200493 DOG_PID=$!
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200494
495 wait $CLI_PID
496 CLI_EXIT=$?
497
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200498 kill $DOG_PID >/dev/null 2>&1
499 wait $DOG_PID
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200500
501 echo "EXIT: $CLI_EXIT" >> $CLI_OUT
Janos Follath74537a62016-09-02 13:45:28 +0100502
503 sleep $SRV_DELAY_SECONDS
504 SRV_DELAY_SECONDS=0
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200505}
506
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200507# check if the given command uses dtls and sets global variable DTLS
508detect_dtls() {
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200509 if echo "$1" | grep 'dtls=1\|-dtls1\|-u' >/dev/null; then
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200510 DTLS=1
511 else
512 DTLS=0
513 fi
514}
515
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200516# Usage: run_test name [-p proxy_cmd] srv_cmd cli_cmd cli_exit [option [...]]
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100517# Options: -s pattern pattern that must be present in server output
518# -c pattern pattern that must be present in client output
Simon Butcher8e004102016-10-14 00:48:33 +0100519# -u pattern lines after pattern must be unique in client output
Andres Amaya Garcia93993de2017-09-06 15:38:07 +0100520# -f call shell function on client output
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100521# -S pattern pattern that must be absent in server output
522# -C pattern pattern that must be absent in client output
Simon Butcher8e004102016-10-14 00:48:33 +0100523# -U pattern lines after pattern must be unique in server output
Andres Amaya Garcia93993de2017-09-06 15:38:07 +0100524# -F call shell function on server output
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100525run_test() {
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100526 NAME="$1"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200527 shift 1
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100528
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100529 if echo "$NAME" | grep "$FILTER" | grep -v "$EXCLUDE" >/dev/null; then :
530 else
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +0200531 SKIP_NEXT="NO"
Manuel Pégourié-Gonnard417d46c2014-03-13 19:17:53 +0100532 return
533 fi
534
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100535 print_name "$NAME"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100536
Paul Bakkerb7584a52016-05-10 10:50:43 +0100537 # Do we only run numbered tests?
538 if [ "X$RUN_TEST_NUMBER" = "X" ]; then :
539 elif echo ",$RUN_TEST_NUMBER," | grep ",$TESTS," >/dev/null; then :
540 else
541 SKIP_NEXT="YES"
542 fi
543
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200544 # does this test use a proxy?
545 if [ "X$1" = "X-p" ]; then
546 PXY_CMD="$2"
547 shift 2
548 else
549 PXY_CMD=""
550 fi
551
552 # get commands and client output
553 SRV_CMD="$1"
554 CLI_CMD="$2"
555 CLI_EXPECT="$3"
556 shift 3
557
Hanno Becker91e72c32019-05-10 14:38:42 +0100558 # Check if test uses files
559 TEST_USES_FILES=$(echo "$SRV_CMD $CLI_CMD" | grep "\.\(key\|crt\|pem\)" )
560 if [ ! -z "$TEST_USES_FILES" ]; then
561 requires_config_enabled MBEDTLS_FS_IO
562 fi
563
Hanno Becker9d76d562018-11-16 17:27:29 +0000564 # Check if server forces ciphersuite
565 FORCE_CIPHERSUITE=$(echo "$SRV_CMD" | sed -n 's/^.*force_ciphersuite=\([a-zA-Z0-9\-]*\).*$/\1/p')
566 if [ ! -z "$FORCE_CIPHERSUITE" ]; then
567 requires_ciphersuite_enabled $FORCE_CIPHERSUITE
568 fi
569
570 # Check if client forces ciphersuite
571 FORCE_CIPHERSUITE=$(echo "$CLI_CMD" | sed -n 's/^.*force_ciphersuite=\([a-zA-Z0-9\-]*\).*$/\1/p')
572 if [ ! -z "$FORCE_CIPHERSUITE" ]; then
573 requires_ciphersuite_enabled $FORCE_CIPHERSUITE
574 fi
575
576 # should we skip?
577 if [ "X$SKIP_NEXT" = "XYES" ]; then
578 SKIP_NEXT="NO"
579 echo "SKIP"
580 SKIPS=$(( $SKIPS + 1 ))
581 return
582 fi
583
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200584 # fix client port
585 if [ -n "$PXY_CMD" ]; then
586 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$PXY_PORT/g )
587 else
588 CLI_CMD=$( echo "$CLI_CMD" | sed s/+SRV_PORT/$SRV_PORT/g )
589 fi
590
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200591 # update DTLS variable
592 detect_dtls "$SRV_CMD"
593
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100594 # prepend valgrind to our commands if active
595 if [ "$MEMCHECK" -gt 0 ]; then
596 if is_polar "$SRV_CMD"; then
597 SRV_CMD="valgrind --leak-check=full $SRV_CMD"
598 fi
599 if is_polar "$CLI_CMD"; then
600 CLI_CMD="valgrind --leak-check=full $CLI_CMD"
601 fi
602 fi
603
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200604 TIMES_LEFT=2
605 while [ $TIMES_LEFT -gt 0 ]; do
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200606 TIMES_LEFT=$(( $TIMES_LEFT - 1 ))
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200607
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200608 # run the commands
609 if [ -n "$PXY_CMD" ]; then
610 echo "$PXY_CMD" > $PXY_OUT
611 $PXY_CMD >> $PXY_OUT 2>&1 &
612 PXY_PID=$!
613 # assume proxy starts faster than server
614 fi
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200615
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200616 check_osrv_dtls
617 echo "$SRV_CMD" > $SRV_OUT
618 provide_input | $SRV_CMD >> $SRV_OUT 2>&1 &
619 SRV_PID=$!
Gilles Peskine418b5362017-12-14 18:58:42 +0100620 wait_server_start "$SRV_PORT" "$SRV_PID"
Manuel Pégourié-Gonnardc0f6a692014-08-30 22:41:47 +0200621
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200622 echo "$CLI_CMD" > $CLI_OUT
623 eval "$CLI_CMD" >> $CLI_OUT 2>&1 &
624 wait_client_done
Manuel Pégourié-Gonnarde01af4c2014-03-25 14:16:44 +0100625
Hanno Beckercadb5bb2017-05-26 13:56:10 +0100626 sleep 0.05
627
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200628 # terminate the server (and the proxy)
629 kill $SRV_PID
630 wait $SRV_PID
Hanno Beckerd82d8462017-05-29 21:37:46 +0100631
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200632 if [ -n "$PXY_CMD" ]; then
633 kill $PXY_PID >/dev/null 2>&1
634 wait $PXY_PID
635 fi
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100636
Manuel Pégourié-Gonnardab5f7b42015-08-04 21:01:37 +0200637 # retry only on timeouts
638 if grep '===CLIENT_TIMEOUT===' $CLI_OUT >/dev/null; then
639 printf "RETRY "
640 else
641 TIMES_LEFT=0
642 fi
Manuel Pégourié-Gonnarda365add2015-08-04 20:57:59 +0200643 done
644
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100645 # check if the client and server went at least to the handshake stage
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200646 # (useful to avoid tests with only negative assertions and non-zero
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100647 # expected client exit to incorrectly succeed in case of catastrophic
648 # failure)
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100649 if is_polar "$SRV_CMD"; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200650 if grep "Performing the SSL/TLS handshake" $SRV_OUT >/dev/null; then :;
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100651 else
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100652 fail "server or client failed to reach handshake stage"
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100653 return
654 fi
655 fi
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100656 if is_polar "$CLI_CMD"; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200657 if grep "Performing the SSL/TLS handshake" $CLI_OUT >/dev/null; then :;
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100658 else
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +0100659 fail "server or client failed to reach handshake stage"
Manuel Pégourié-Gonnard677884d2014-02-25 16:42:31 +0100660 return
661 fi
662 fi
663
Manuel Pégourié-Gonnardf8bdbb52014-02-21 09:20:14 +0100664 # check server exit code
665 if [ $? != 0 ]; then
666 fail "server fail"
667 return
668 fi
669
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100670 # check client exit code
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +0100671 if [ \( "$CLI_EXPECT" = 0 -a "$CLI_EXIT" != 0 \) -o \
672 \( "$CLI_EXPECT" != 0 -a "$CLI_EXIT" = 0 \) ]
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +0100673 then
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200674 fail "bad client exit code (expected $CLI_EXPECT, got $CLI_EXIT)"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100675 return
676 fi
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100677
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100678 # check other assertions
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200679 # lines beginning with == are added by valgrind, ignore them
Paul Bakker1f650922016-05-13 10:16:46 +0100680 # lines with 'Serious error when reading debug info', are valgrind issues as well
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100681 while [ $# -gt 0 ]
682 do
683 case $1 in
684 "-s")
Paul Bakker1f650922016-05-13 10:16:46 +0100685 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +0100686 fail "pattern '$2' MUST be present in the Server output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100687 return
688 fi
689 ;;
690
691 "-c")
Paul Bakker1f650922016-05-13 10:16:46 +0100692 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then :; else
Simon Butcher8e004102016-10-14 00:48:33 +0100693 fail "pattern '$2' MUST be present in the Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100694 return
695 fi
696 ;;
697
698 "-S")
Paul Bakker1f650922016-05-13 10:16:46 +0100699 if grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Simon Butcher8e004102016-10-14 00:48:33 +0100700 fail "pattern '$2' MUST NOT be present in the Server output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100701 return
702 fi
703 ;;
704
705 "-C")
Paul Bakker1f650922016-05-13 10:16:46 +0100706 if grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep "$2" >/dev/null; then
Simon Butcher8e004102016-10-14 00:48:33 +0100707 fail "pattern '$2' MUST NOT be present in the Client output"
708 return
709 fi
710 ;;
711
712 # The filtering in the following two options (-u and -U) do the following
713 # - ignore valgrind output
Antonin Décimo36e89b52019-01-23 15:24:37 +0100714 # - filter out everything but lines right after the pattern occurrences
Simon Butcher8e004102016-10-14 00:48:33 +0100715 # - keep one of each non-unique line
716 # - count how many lines remain
717 # A line with '--' will remain in the result from previous outputs, so the number of lines in the result will be 1
718 # if there were no duplicates.
719 "-U")
720 if [ $(grep -v '^==' $SRV_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
721 fail "lines following pattern '$2' must be unique in Server output"
722 return
723 fi
724 ;;
725
726 "-u")
727 if [ $(grep -v '^==' $CLI_OUT | grep -v 'Serious error when reading debug info' | grep -A1 "$2" | grep -v "$2" | sort | uniq -d | wc -l) -gt 1 ]; then
728 fail "lines following pattern '$2' must be unique in Client output"
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100729 return
730 fi
731 ;;
Andres Amaya Garcia93993de2017-09-06 15:38:07 +0100732 "-F")
733 if ! $2 "$SRV_OUT"; then
734 fail "function call to '$2' failed on Server output"
735 return
736 fi
737 ;;
738 "-f")
739 if ! $2 "$CLI_OUT"; then
740 fail "function call to '$2' failed on Client output"
741 return
742 fi
743 ;;
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100744
745 *)
Paul Bakker1ebc0c52014-05-22 15:47:58 +0200746 echo "Unknown test: $1" >&2
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100747 exit 1
748 esac
749 shift 2
750 done
751
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100752 # check valgrind's results
753 if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200754 if is_polar "$SRV_CMD" && has_mem_err $SRV_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100755 fail "Server has memory errors"
756 return
757 fi
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200758 if is_polar "$CLI_CMD" && has_mem_err $CLI_OUT; then
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +0100759 fail "Client has memory errors"
760 return
761 fi
762 fi
763
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100764 # if we're here, everything is ok
765 echo "PASS"
Paul Bakkeracaac852016-05-10 11:47:13 +0100766 if [ "$PRESERVE_LOGS" -gt 0 ]; then
767 mv $SRV_OUT o-srv-${TESTS}.log
768 mv $CLI_OUT o-cli-${TESTS}.log
Hanno Becker7be2e5b2018-08-20 12:21:35 +0100769 if [ -n "$PXY_CMD" ]; then
770 mv $PXY_OUT o-pxy-${TESTS}.log
771 fi
Paul Bakkeracaac852016-05-10 11:47:13 +0100772 fi
773
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200774 rm -f $SRV_OUT $CLI_OUT $PXY_OUT
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +0100775}
776
Hanno Becker9b5853c2018-11-16 17:28:40 +0000777run_test_psa() {
778 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
Hanno Beckere9420c22018-11-20 11:37:34 +0000779 run_test "PSA-supported ciphersuite: $1" \
Hanno Becker4c8c7aa2019-04-10 09:25:41 +0100780 "$P_SRV debug_level=3 force_version=tls1_2" \
781 "$P_CLI debug_level=3 force_version=tls1_2 force_ciphersuite=$1" \
Hanno Becker9b5853c2018-11-16 17:28:40 +0000782 0 \
783 -c "Successfully setup PSA-based decryption cipher context" \
784 -c "Successfully setup PSA-based encryption cipher context" \
Andrzej Kurek683d77e2019-01-30 03:50:42 -0500785 -c "PSA calc verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -0500786 -c "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +0000787 -s "Successfully setup PSA-based decryption cipher context" \
788 -s "Successfully setup PSA-based encryption cipher context" \
Andrzej Kurek683d77e2019-01-30 03:50:42 -0500789 -s "PSA calc verify" \
Andrzej Kurek92dd4d02019-01-30 04:10:19 -0500790 -s "calc PSA finished" \
Hanno Becker9b5853c2018-11-16 17:28:40 +0000791 -C "Failed to setup PSA-based cipher context"\
792 -S "Failed to setup PSA-based cipher context"\
793 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +0000794 -c "Perform PSA-based ECDH computation."\
Andrzej Kureke85414e2019-01-15 05:23:59 -0500795 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Hanno Becker9b5853c2018-11-16 17:28:40 +0000796 -S "error" \
797 -C "error"
798}
799
Hanno Becker354e2482019-01-08 11:40:25 +0000800run_test_psa_force_curve() {
801 requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
802 run_test "PSA - ECDH with $1" \
803 "$P_SRV debug_level=4 force_version=tls1_2" \
804 "$P_CLI debug_level=4 force_version=tls1_2 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256 curves=$1" \
805 0 \
Hanno Becker28f78442019-02-18 16:47:50 +0000806 -c "Successfully setup PSA-based decryption cipher context" \
807 -c "Successfully setup PSA-based encryption cipher context" \
808 -c "PSA calc verify" \
809 -c "calc PSA finished" \
810 -s "Successfully setup PSA-based decryption cipher context" \
811 -s "Successfully setup PSA-based encryption cipher context" \
812 -s "PSA calc verify" \
813 -s "calc PSA finished" \
814 -C "Failed to setup PSA-based cipher context"\
815 -S "Failed to setup PSA-based cipher context"\
Hanno Becker354e2482019-01-08 11:40:25 +0000816 -s "Protocol is TLSv1.2" \
Hanno Becker28f78442019-02-18 16:47:50 +0000817 -c "Perform PSA-based ECDH computation."\
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +0100818 -c "Perform PSA-based computation of digest of ServerKeyExchange" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200819 -S "error" \
Manuel Pégourié-Gonnarda6189f02014-09-20 13:15:43 +0200820 -C "error"
821}
822
823cleanup() {
Manuel Pégourié-Gonnarda9062e92014-02-25 16:21:22 +0100824 rm -f $CLI_OUT $SRV_OUT $PXY_OUT $SESSION
825 test -n "${SRV_PID:-}" && kill $SRV_PID >/dev/null 2>&1
826 test -n "${PXY_PID:-}" && kill $PXY_PID >/dev/null 2>&1
Manuel Pégourié-Gonnard9dea8bd2014-02-26 18:21:02 +0100827 test -n "${CLI_PID:-}" && kill $CLI_PID >/dev/null 2>&1
828 test -n "${DOG_PID:-}" && kill $DOG_PID >/dev/null 2>&1
829 exit 1
830}
Manuel Pégourié-Gonnard913030c2014-03-28 10:12:38 +0100831
832#
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +0100833# MAIN
Hanno Becker4ac73e72017-10-23 15:27:37 +0100834#
835
836get_options "$@"
Hanno Becker17c04932017-10-10 14:44:53 +0100837
838# sanity checks, avoid an avalanche of errors
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +0100839P_SRV_BIN="${P_SRV%%[ ]*}"
840P_CLI_BIN="${P_CLI%%[ ]*}"
Hanno Becker17c04932017-10-10 14:44:53 +0100841P_PXY_BIN="${P_PXY%%[ ]*}"
842if [ ! -x "$P_SRV_BIN" ]; then
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +0100843 echo "Command '$P_SRV_BIN' is not an executable file"
844 exit 1
Hanno Becker17c04932017-10-10 14:44:53 +0100845fi
846if [ ! -x "$P_CLI_BIN" ]; then
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200847 echo "Command '$P_CLI_BIN' is not an executable file"
848 exit 1
Simon Butcher3c0d7b82016-05-23 11:13:17 +0100849fi
850if [ ! -x "$P_PXY_BIN" ]; then
851 echo "Command '$P_PXY_BIN' is not an executable file"
852 exit 1
853fi
854if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnard74faf3c2014-03-13 18:47:44 +0100855 if which valgrind >/dev/null 2>&1; then :; else
856 echo "Memcheck not possible. Valgrind not found"
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +0100857 exit 1
858 fi
859fi
Manuel Pégourié-Gonnard32f8f4d2014-05-29 11:31:20 +0200860if which $OPENSSL_CMD >/dev/null 2>&1; then :; else
861 echo "Command '$OPENSSL_CMD' not found"
862 exit 1
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +0100863fi
864
865# used by watchdog
866MAIN_PID="$$"
867
868# We use somewhat arbitrary delays for tests:
869# - how long do we wait for the server to start (when lsof not available)?
870# - how long do we allow for the client to finish?
871# (not to check performance, just to avoid waiting indefinitely)
872# Things are slower with valgrind, so give extra time here.
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200873#
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +0100874# Note: without lsof, there is a trade-off between the running time of this
875# script and the risk of spurious errors because we didn't wait long enough.
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200876# The watchdog delay on the other hand doesn't affect normal running time of
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +0100877# the script, only the case where a client or server gets stuck.
878if [ "$MEMCHECK" -gt 0 ]; then
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200879 START_DELAY=6
Manuel Pégourié-Gonnard0d225da2018-01-22 10:22:09 +0100880 DOG_DELAY=60
881else
882 START_DELAY=2
883 DOG_DELAY=20
884fi
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +0200885
Janos Follath74537a62016-09-02 13:45:28 +0100886# some particular tests need more time:
Manuel Pégourié-Gonnard0c1ec472014-06-20 18:41:11 +0200887# - for the client, we multiply the usual watchdog limit by a factor
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +0200888# - for the server, we sleep for a number of seconds after the client exits
Manuel Pégourié-Gonnard0af1ba32015-01-21 11:44:33 +0000889# see client_need_more_time() and server_needs_more_time()
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200890CLI_DELAY_FACTOR=1
891SRV_DELAY_SECONDS=0
Andres AGf04f54d2016-10-10 15:46:20 +0100892
Manuel Pégourié-Gonnard61957672015-06-18 17:54:58 +0200893# fix commands to use this port, force IPv4 while at it
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200894# +SRV_PORT will be replaced by either $SRV_PORT or $PXY_PORT later
895P_SRV="$P_SRV server_addr=127.0.0.1 server_port=$SRV_PORT"
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +0200896P_CLI="$P_CLI server_addr=127.0.0.1 server_port=+SRV_PORT"
Manuel Pégourié-Gonnard8066b812014-05-28 22:59:30 +0200897P_PXY="$P_PXY server_addr=127.0.0.1 server_port=$SRV_PORT listen_addr=127.0.0.1 listen_port=$PXY_PORT ${SEED:+"seed=$SEED"}"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200898O_SRV="$O_SRV -accept $SRV_PORT -dhparam data_files/dhparams.pem"
899O_CLI="$O_CLI -connect localhost:+SRV_PORT"
900G_SRV="$G_SRV -p $SRV_PORT"
901G_CLI="$G_CLI -p +SRV_PORT"
902
Hanno Becker58e9dc32018-08-17 15:53:21 +0100903if [ -n "${OPENSSL_LEGACY:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200904 O_LEGACY_SRV="$O_LEGACY_SRV -accept $SRV_PORT -dhparam data_files/dhparams.pem"
905 O_LEGACY_CLI="$O_LEGACY_CLI -connect localhost:+SRV_PORT"
906fi
Hanno Becker58e9dc32018-08-17 15:53:21 +0100907
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +0200908if [ -n "${GNUTLS_NEXT_SERV:-}" ]; then
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +0200909 G_NEXT_SRV="$G_NEXT_SRV -p $SRV_PORT"
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +0100910fi
Gilles Peskine62469d92017-05-10 10:13:59 +0200911
912if [ -n "${GNUTLS_NEXT_CLI:-}" ]; then
913 G_NEXT_CLI="$G_NEXT_CLI -p +SRV_PORT"
914fi
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200915
916# Allow SHA-1, because many of our test certificates use it
917P_SRV="$P_SRV allow_sha1=1"
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +0200918P_CLI="$P_CLI allow_sha1=1"
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +0200919
920# Also pick a unique name for intermediate files
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +0200921SRV_OUT="srv_out.$$"
922CLI_OUT="cli_out.$$"
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +0100923PXY_OUT="pxy_out.$$"
924SESSION="session.$$"
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200925
926SKIP_NEXT="NO"
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200927
928trap cleanup INT TERM HUP
929
930# Basic test
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200931
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200932# Checks that:
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200933# - things work with all ciphersuites active (used with config-full in all.sh)
934# - the expected (highest security) parameters are selected
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200935# ("signature_algorithm ext: 6" means SHA-512 (highest common hash))
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +0200936run_test "Default" \
Manuel Pégourié-Gonnard480905d2014-08-21 19:38:32 +0200937 "$P_SRV debug_level=3" \
938 "$P_CLI" \
939 0 \
940 -s "Protocol is TLSv1.2" \
Manuel Pégourié-Gonnarde73b2632014-07-12 04:00:00 +0200941 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256" \
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +0000942 -s "client hello v3, signature_algorithm ext: 6" \
943 -s "ECDHE curve: secp521r1" \
944 -S "error" \
945 -C "error"
946
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +0200947run_test "Default, DTLS" \
Manuel Pégourié-Gonnard3bb08012015-01-22 13:34:21 +0000948 "$P_SRV dtls=1" \
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100949 "$P_CLI dtls=1" \
950 0 \
951 -s "Protocol is DTLSv1.2" \
952 -s "Ciphersuite is TLS-ECDHE-RSA-WITH-CHACHA20-POLY1305-SHA256"
953
Hanno Becker746aaf32019-03-28 15:25:23 +0000954requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
955run_test "CA callback on client" \
956 "$P_SRV debug_level=3" \
957 "$P_CLI ca_callback=1 debug_level=3 " \
958 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +0100959 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +0000960 -S "error" \
961 -C "error"
962
963requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
964requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
965requires_config_enabled MBEDTLS_ECDSA_C
966requires_config_enabled MBEDTLS_SHA256_C
967run_test "CA callback on server" \
968 "$P_SRV auth_mode=required" \
969 "$P_CLI ca_callback=1 debug_level=3 crt_file=data_files/server5.crt \
970 key_file=data_files/server5.key" \
971 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +0100972 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +0000973 -s "Verifying peer X.509 certificate... ok" \
974 -S "error" \
975 -C "error"
976
Manuel Pégourié-Gonnardcfdf8f42018-11-08 09:52:25 +0100977# Test using an opaque private key for client authentication
978requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
979requires_config_enabled MBEDTLS_X509_CRT_PARSE_C
980requires_config_enabled MBEDTLS_ECDSA_C
981requires_config_enabled MBEDTLS_SHA256_C
982run_test "Opaque key for client authentication" \
983 "$P_SRV auth_mode=required" \
984 "$P_CLI key_opaque=1 crt_file=data_files/server5.crt \
985 key_file=data_files/server5.key" \
986 0 \
987 -c "key type: Opaque" \
988 -s "Verifying peer X.509 certificate... ok" \
989 -S "error" \
990 -C "error"
991
Hanno Becker9b5853c2018-11-16 17:28:40 +0000992# Test ciphersuites which we expect to be fully supported by PSA Crypto
993# and check that we don't fall back to Mbed TLS' internal crypto primitives.
994run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM
995run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8
996run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM
997run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CCM-8
998run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
999run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384
1000run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA
1001run_test_psa TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256
1002run_test_psa TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA384
1003
Hanno Becker354e2482019-01-08 11:40:25 +00001004requires_config_enabled MBEDTLS_ECP_DP_SECP521R1_ENABLED
1005run_test_psa_force_curve "secp521r1"
1006requires_config_enabled MBEDTLS_ECP_DP_BP512R1_ENABLED
1007run_test_psa_force_curve "brainpoolP512r1"
1008requires_config_enabled MBEDTLS_ECP_DP_SECP384R1_ENABLED
1009run_test_psa_force_curve "secp384r1"
1010requires_config_enabled MBEDTLS_ECP_DP_BP384R1_ENABLED
1011run_test_psa_force_curve "brainpoolP384r1"
1012requires_config_enabled MBEDTLS_ECP_DP_SECP256R1_ENABLED
1013run_test_psa_force_curve "secp256r1"
1014requires_config_enabled MBEDTLS_ECP_DP_SECP256K1_ENABLED
1015run_test_psa_force_curve "secp256k1"
1016requires_config_enabled MBEDTLS_ECP_DP_BP256R1_ENABLED
1017run_test_psa_force_curve "brainpoolP256r1"
1018requires_config_enabled MBEDTLS_ECP_DP_SECP224R1_ENABLED
1019run_test_psa_force_curve "secp224r1"
1020requires_config_enabled MBEDTLS_ECP_DP_SECP224K1_ENABLED
1021run_test_psa_force_curve "secp224k1"
1022requires_config_enabled MBEDTLS_ECP_DP_SECP192R1_ENABLED
1023run_test_psa_force_curve "secp192r1"
1024requires_config_enabled MBEDTLS_ECP_DP_SECP192K1_ENABLED
1025run_test_psa_force_curve "secp192k1"
1026
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001027# Test current time in ServerHello
1028requires_config_enabled MBEDTLS_HAVE_TIME
Manuel Pégourié-Gonnardce66d5e2018-06-14 11:11:15 +02001029run_test "ServerHello contains gmt_unix_time" \
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001030 "$P_SRV debug_level=3" \
1031 "$P_CLI debug_level=3" \
1032 0 \
Andres Amaya Garciab84c40b2017-09-06 15:44:01 +01001033 -f "check_server_hello_time" \
1034 -F "check_server_hello_time"
1035
Simon Butcher8e004102016-10-14 00:48:33 +01001036# Test for uniqueness of IVs in AEAD ciphersuites
1037run_test "Unique IV in GCM" \
1038 "$P_SRV exchanges=20 debug_level=4" \
1039 "$P_CLI exchanges=20 debug_level=4 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
1040 0 \
1041 -u "IV used" \
1042 -U "IV used"
1043
Janos Follathee11be62019-04-04 12:03:30 +01001044# Tests for certificate verification callback
1045run_test "Configuration-specific CRT verification callback" \
1046 "$P_SRV debug_level=3" \
1047 "$P_CLI context_crt_cb=0 debug_level=3" \
1048 0 \
Janos Follathee11be62019-04-04 12:03:30 +01001049 -S "error" \
1050 -c "Verify requested for " \
1051 -c "Use configuration-specific verification callback" \
1052 -C "Use context-specific verification callback" \
1053 -C "error"
1054
Hanno Beckerefb440a2019-04-03 13:04:33 +01001055run_test "Context-specific CRT verification callback" \
1056 "$P_SRV debug_level=3" \
1057 "$P_CLI context_crt_cb=1 debug_level=3" \
1058 0 \
Hanno Beckerefb440a2019-04-03 13:04:33 +01001059 -S "error" \
Janos Follathee11be62019-04-04 12:03:30 +01001060 -c "Verify requested for " \
1061 -c "Use context-specific verification callback" \
1062 -C "Use configuration-specific verification callback" \
Hanno Beckerefb440a2019-04-03 13:04:33 +01001063 -C "error"
1064
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001065# Tests for rc4 option
1066
Simon Butchera410af52016-05-19 22:12:18 +01001067requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001068run_test "RC4: server disabled, client enabled" \
1069 "$P_SRV" \
1070 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1071 1 \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001072 -s "SSL - The server has no ciphersuites in common"
1073
Simon Butchera410af52016-05-19 22:12:18 +01001074requires_config_enabled MBEDTLS_REMOVE_ARC4_CIPHERSUITES
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001075run_test "RC4: server half, client enabled" \
1076 "$P_SRV arc4=1" \
1077 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1078 1 \
1079 -s "SSL - The server has no ciphersuites in common"
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001080
1081run_test "RC4: server enabled, client disabled" \
1082 "$P_SRV force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1083 "$P_CLI" \
1084 1 \
1085 -s "SSL - The server has no ciphersuites in common"
1086
1087run_test "RC4: both enabled" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001088 "$P_SRV force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001089 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
1090 0 \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01001091 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01001092 -S "SSL - The server has no ciphersuites in common"
1093
Hanno Beckerd26bb202018-08-17 09:54:10 +01001094# Test empty CA list in CertificateRequest in TLS 1.1 and earlier
1095
1096requires_gnutls
1097requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
1098run_test "CertificateRequest with empty CA list, TLS 1.1 (GnuTLS server)" \
1099 "$G_SRV"\
1100 "$P_CLI force_version=tls1_1" \
1101 0
1102
1103requires_gnutls
1104requires_config_enabled MBEDTLS_SSL_PROTO_TLS1
1105run_test "CertificateRequest with empty CA list, TLS 1.0 (GnuTLS server)" \
1106 "$G_SRV"\
1107 "$P_CLI force_version=tls1" \
1108 0
1109
Gilles Peskinebc70a182017-05-09 15:59:24 +02001110# Tests for SHA-1 support
1111
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02001112requires_config_disabled MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
Gilles Peskinebc70a182017-05-09 15:59:24 +02001113run_test "SHA-1 forbidden by default in server certificate" \
1114 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1115 "$P_CLI debug_level=2 allow_sha1=0" \
1116 1 \
1117 -c "The certificate is signed with an unacceptable hash"
1118
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02001119requires_config_enabled MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
1120run_test "SHA-1 forbidden by default in server certificate" \
1121 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1122 "$P_CLI debug_level=2 allow_sha1=0" \
1123 0
1124
Gilles Peskinebc70a182017-05-09 15:59:24 +02001125run_test "SHA-1 explicitly allowed in server certificate" \
1126 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt" \
1127 "$P_CLI allow_sha1=1" \
1128 0
1129
1130run_test "SHA-256 allowed by default in server certificate" \
1131 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2-sha256.crt" \
1132 "$P_CLI allow_sha1=0" \
1133 0
1134
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02001135requires_config_disabled MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
Gilles Peskinebc70a182017-05-09 15:59:24 +02001136run_test "SHA-1 forbidden by default in client certificate" \
1137 "$P_SRV auth_mode=required allow_sha1=0" \
1138 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1139 1 \
1140 -s "The certificate is signed with an unacceptable hash"
1141
Manuel Pégourié-Gonnardaf63c212017-06-08 17:51:08 +02001142requires_config_enabled MBEDTLS_TLS_DEFAULT_ALLOW_SHA1_IN_CERTIFICATES
1143run_test "SHA-1 forbidden by default in client certificate" \
1144 "$P_SRV auth_mode=required allow_sha1=0" \
1145 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1146 0
1147
Gilles Peskinebc70a182017-05-09 15:59:24 +02001148run_test "SHA-1 explicitly allowed in client certificate" \
1149 "$P_SRV auth_mode=required allow_sha1=1" \
1150 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha1.crt" \
1151 0
1152
1153run_test "SHA-256 allowed by default in client certificate" \
1154 "$P_SRV auth_mode=required allow_sha1=0" \
1155 "$P_CLI key_file=data_files/cli-rsa.key crt_file=data_files/cli-rsa-sha256.crt" \
1156 0
1157
Hanno Becker7ae8a762018-08-14 15:43:35 +01001158# Tests for datagram packing
1159run_test "DTLS: multiple records in same datagram, client and server" \
1160 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
1161 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
1162 0 \
1163 -c "next record in same datagram" \
1164 -s "next record in same datagram"
1165
1166run_test "DTLS: multiple records in same datagram, client only" \
1167 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
1168 "$P_CLI dtls=1 dgram_packing=1 debug_level=2" \
1169 0 \
1170 -s "next record in same datagram" \
1171 -C "next record in same datagram"
1172
1173run_test "DTLS: multiple records in same datagram, server only" \
1174 "$P_SRV dtls=1 dgram_packing=1 debug_level=2" \
1175 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
1176 0 \
1177 -S "next record in same datagram" \
1178 -c "next record in same datagram"
1179
1180run_test "DTLS: multiple records in same datagram, neither client nor server" \
1181 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
1182 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
1183 0 \
1184 -S "next record in same datagram" \
1185 -C "next record in same datagram"
1186
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001187# Tests for Truncated HMAC extension
1188
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001189run_test "Truncated HMAC: client default, server default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001190 "$P_SRV debug_level=4" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001191 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001192 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001193 -s "dumping 'expected mac' (20 bytes)" \
1194 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01001195
Hanno Becker32c55012017-11-10 08:42:54 +00001196requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001197run_test "Truncated HMAC: client disabled, server default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02001198 "$P_SRV debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001199 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001200 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001201 -s "dumping 'expected mac' (20 bytes)" \
1202 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001203
Hanno Becker32c55012017-11-10 08:42:54 +00001204requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001205run_test "Truncated HMAC: client enabled, server default" \
1206 "$P_SRV debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001207 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001208 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001209 -s "dumping 'expected mac' (20 bytes)" \
1210 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001211
Hanno Becker32c55012017-11-10 08:42:54 +00001212requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001213run_test "Truncated HMAC: client enabled, server disabled" \
1214 "$P_SRV debug_level=4 trunc_hmac=0" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001215 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001216 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001217 -s "dumping 'expected mac' (20 bytes)" \
1218 -S "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001219
Hanno Becker32c55012017-11-10 08:42:54 +00001220requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Hanno Becker34d0c3f2017-11-17 15:46:24 +00001221run_test "Truncated HMAC: client disabled, server enabled" \
1222 "$P_SRV debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001223 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker34d0c3f2017-11-17 15:46:24 +00001224 0 \
1225 -s "dumping 'expected mac' (20 bytes)" \
1226 -S "dumping 'expected mac' (10 bytes)"
1227
1228requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001229run_test "Truncated HMAC: client enabled, server enabled" \
1230 "$P_SRV debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001231 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnarde117a8f2015-01-09 12:39:35 +01001232 0 \
Hanno Becker992b6872017-11-09 18:57:39 +00001233 -S "dumping 'expected mac' (20 bytes)" \
1234 -s "dumping 'expected mac' (10 bytes)"
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01001235
Hanno Becker4c4f4102017-11-10 09:16:05 +00001236run_test "Truncated HMAC, DTLS: client default, server default" \
1237 "$P_SRV dtls=1 debug_level=4" \
1238 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
1239 0 \
1240 -s "dumping 'expected mac' (20 bytes)" \
1241 -S "dumping 'expected mac' (10 bytes)"
1242
1243requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1244run_test "Truncated HMAC, DTLS: client disabled, server default" \
1245 "$P_SRV dtls=1 debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001246 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00001247 0 \
1248 -s "dumping 'expected mac' (20 bytes)" \
1249 -S "dumping 'expected mac' (10 bytes)"
1250
1251requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1252run_test "Truncated HMAC, DTLS: client enabled, server default" \
1253 "$P_SRV dtls=1 debug_level=4" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001254 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00001255 0 \
1256 -s "dumping 'expected mac' (20 bytes)" \
1257 -S "dumping 'expected mac' (10 bytes)"
1258
1259requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1260run_test "Truncated HMAC, DTLS: client enabled, server disabled" \
1261 "$P_SRV dtls=1 debug_level=4 trunc_hmac=0" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001262 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00001263 0 \
1264 -s "dumping 'expected mac' (20 bytes)" \
1265 -S "dumping 'expected mac' (10 bytes)"
1266
1267requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1268run_test "Truncated HMAC, DTLS: client disabled, server enabled" \
1269 "$P_SRV dtls=1 debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001270 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=0" \
Hanno Becker4c4f4102017-11-10 09:16:05 +00001271 0 \
1272 -s "dumping 'expected mac' (20 bytes)" \
1273 -S "dumping 'expected mac' (10 bytes)"
1274
1275requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
1276run_test "Truncated HMAC, DTLS: client enabled, server enabled" \
1277 "$P_SRV dtls=1 debug_level=4 trunc_hmac=1" \
Hanno Becker909f9a32017-11-21 17:10:12 +00001278 "$P_CLI dtls=1 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardeaadc502014-02-20 11:01:30 +01001279 0 \
1280 -S "dumping 'expected mac' (20 bytes)" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01001281 -s "dumping 'expected mac' (10 bytes)"
1282
Jarno Lamsa2937d812019-06-04 11:33:23 +03001283# Tests for Context serialization
1284
1285requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02001286run_test "Context serialization, client serializes" \
1287 "$P_SRV dtls=1 serialize=0 exchanges=2" \
1288 "$P_CLI dtls=1 serialize=1 exchanges=2" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03001289 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03001290 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03001291 -S "Deserializing connection..."
1292
1293requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01001294requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
1295run_test "Context serialization, client serializes, with CID" \
1296 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
1297 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
1298 0 \
1299 -c "Deserializing connection..." \
1300 -S "Deserializing connection..."
1301
1302requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02001303run_test "Context serialization, server serializes" \
1304 "$P_SRV dtls=1 serialize=1 exchanges=2" \
1305 "$P_CLI dtls=1 serialize=0 exchanges=2" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03001306 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03001307 -C "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03001308 -s "Deserializing connection..."
1309
1310requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01001311requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
1312run_test "Context serialization, server serializes, with CID" \
1313 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
1314 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
1315 0 \
1316 -C "Deserializing connection..." \
1317 -s "Deserializing connection..."
1318
1319requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02001320run_test "Context serialization, both serialize" \
1321 "$P_SRV dtls=1 serialize=1 exchanges=2" \
1322 "$P_CLI dtls=1 serialize=1 exchanges=2" \
Jarno Lamsa2937d812019-06-04 11:33:23 +03001323 0 \
Jarno Lamsacbee1b32019-06-04 15:18:19 +03001324 -c "Deserializing connection..." \
Jarno Lamsa2937d812019-06-04 11:33:23 +03001325 -s "Deserializing connection..."
1326
Jarno Lamsac2376f02019-06-06 10:44:14 +03001327requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01001328requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
1329run_test "Context serialization, both serialize, with CID" \
1330 "$P_SRV dtls=1 serialize=1 exchanges=2 cid=1 cid_val=dead" \
1331 "$P_CLI dtls=1 serialize=1 exchanges=2 cid=1 cid_val=beef" \
1332 0 \
1333 -c "Deserializing connection..." \
1334 -s "Deserializing connection..."
1335
1336requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02001337run_test "Context serialization, re-init, client serializes" \
1338 "$P_SRV dtls=1 serialize=0 exchanges=2" \
1339 "$P_CLI dtls=1 serialize=2 exchanges=2" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03001340 0 \
1341 -c "Deserializing connection..." \
1342 -S "Deserializing connection..."
1343
Jarno Lamsac2376f02019-06-06 10:44:14 +03001344requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01001345requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
1346run_test "Context serialization, re-init, client serializes, with CID" \
1347 "$P_SRV dtls=1 serialize=0 exchanges=2 cid=1 cid_val=dead" \
1348 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
1349 0 \
1350 -c "Deserializing connection..." \
1351 -S "Deserializing connection..."
1352
1353requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02001354run_test "Context serialization, re-init, server serializes" \
1355 "$P_SRV dtls=1 serialize=2 exchanges=2" \
1356 "$P_CLI dtls=1 serialize=0 exchanges=2" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03001357 0 \
1358 -C "Deserializing connection..." \
1359 -s "Deserializing connection..."
1360
Jarno Lamsac2376f02019-06-06 10:44:14 +03001361requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Hanno Becker1b18fd32019-08-30 11:18:59 +01001362requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
1363run_test "Context serialization, re-init, server serializes, with CID" \
1364 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
1365 "$P_CLI dtls=1 serialize=0 exchanges=2 cid=1 cid_val=beef" \
1366 0 \
1367 -C "Deserializing connection..." \
1368 -s "Deserializing connection..."
1369
1370requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
Manuel Pégourié-Gonnard862b3192019-07-23 14:13:43 +02001371run_test "Context serialization, re-init, both serialize" \
1372 "$P_SRV dtls=1 serialize=2 exchanges=2" \
1373 "$P_CLI dtls=1 serialize=2 exchanges=2" \
Jarno Lamsac2376f02019-06-06 10:44:14 +03001374 0 \
1375 -c "Deserializing connection..." \
1376 -s "Deserializing connection..."
1377
Hanno Becker1b18fd32019-08-30 11:18:59 +01001378requires_config_enabled MBEDTLS_SSL_CONTEXT_SERIALIZATION
1379requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
1380run_test "Context serialization, re-init, both serialize, with CID" \
1381 "$P_SRV dtls=1 serialize=2 exchanges=2 cid=1 cid_val=dead" \
1382 "$P_CLI dtls=1 serialize=2 exchanges=2 cid=1 cid_val=beef" \
1383 0 \
1384 -c "Deserializing connection..." \
1385 -s "Deserializing connection..."
1386
Hanno Becker7cf463e2019-04-09 18:08:47 +01001387# Tests for DTLS Connection ID extension
1388
Hanno Becker7cf463e2019-04-09 18:08:47 +01001389# So far, the CID API isn't implemented, so we can't
1390# grep for output witnessing its use. This needs to be
1391# changed once the CID extension is implemented.
1392
Hanno Beckera0e20d02019-05-15 14:03:01 +01001393requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001394run_test "Connection ID: Cli enabled, Srv disabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001395 "$P_SRV debug_level=3 dtls=1 cid=0" \
1396 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1397 0 \
1398 -s "Disable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001399 -s "found CID extension" \
1400 -s "Client sent CID extension, but CID disabled" \
Hanno Becker6b78c832019-04-25 17:01:43 +01001401 -c "Enable use of CID extension." \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001402 -c "client hello, adding CID extension" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001403 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001404 -C "found CID extension" \
1405 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01001406 -C "Copy CIDs into SSL transform" \
1407 -c "Use of Connection ID was rejected by the server"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001408
Hanno Beckera0e20d02019-05-15 14:03:01 +01001409requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001410run_test "Connection ID: Cli disabled, Srv enabled" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001411 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1412 "$P_CLI debug_level=3 dtls=1 cid=0" \
1413 0 \
1414 -c "Disable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001415 -C "client hello, adding CID extension" \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001416 -S "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001417 -s "Enable use of CID extension." \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001418 -S "server hello, adding CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001419 -C "found CID extension" \
1420 -S "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01001421 -C "Copy CIDs into SSL transform" \
Hanno Beckerb3e9dd52019-05-08 13:19:53 +01001422 -s "Use of Connection ID was not offered by client"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001423
Hanno Beckera0e20d02019-05-15 14:03:01 +01001424requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001425run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001426 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
1427 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef" \
1428 0 \
1429 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001430 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001431 -c "client hello, adding CID extension" \
1432 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001433 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001434 -s "server hello, adding CID extension" \
1435 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001436 -c "Use of CID extension negotiated" \
1437 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01001438 -c "Copy CIDs into SSL transform" \
1439 -c "Peer CID (length 2 Bytes): de ad" \
1440 -s "Peer CID (length 2 Bytes): be ef" \
1441 -s "Use of Connection ID has been negotiated" \
1442 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001443
Hanno Beckera0e20d02019-05-15 14:03:01 +01001444requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001445run_test "Connection ID, 3D: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001446 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01001447 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead" \
1448 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef" \
1449 0 \
1450 -c "Enable use of CID extension." \
1451 -s "Enable use of CID extension." \
1452 -c "client hello, adding CID extension" \
1453 -s "found CID extension" \
1454 -s "Use of CID extension negotiated" \
1455 -s "server hello, adding CID extension" \
1456 -c "found CID extension" \
1457 -c "Use of CID extension negotiated" \
1458 -s "Copy CIDs into SSL transform" \
1459 -c "Copy CIDs into SSL transform" \
1460 -c "Peer CID (length 2 Bytes): de ad" \
1461 -s "Peer CID (length 2 Bytes): be ef" \
1462 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001463 -c "Use of Connection ID has been negotiated" \
1464 -c "ignoring unexpected CID" \
1465 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01001466
Hanno Beckera0e20d02019-05-15 14:03:01 +01001467requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001468run_test "Connection ID, MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
1469 -p "$P_PXY mtu=800" \
1470 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
1471 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
1472 0 \
1473 -c "Enable use of CID extension." \
1474 -s "Enable use of CID extension." \
1475 -c "client hello, adding CID extension" \
1476 -s "found CID extension" \
1477 -s "Use of CID extension negotiated" \
1478 -s "server hello, adding CID extension" \
1479 -c "found CID extension" \
1480 -c "Use of CID extension negotiated" \
1481 -s "Copy CIDs into SSL transform" \
1482 -c "Copy CIDs into SSL transform" \
1483 -c "Peer CID (length 2 Bytes): de ad" \
1484 -s "Peer CID (length 2 Bytes): be ef" \
1485 -s "Use of Connection ID has been negotiated" \
1486 -c "Use of Connection ID has been negotiated"
1487
Hanno Beckera0e20d02019-05-15 14:03:01 +01001488requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001489run_test "Connection ID, 3D+MTU: Cli+Srv enabled, Cli+Srv CID nonempty" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001490 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01001491 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead" \
1492 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef" \
1493 0 \
1494 -c "Enable use of CID extension." \
1495 -s "Enable use of CID extension." \
1496 -c "client hello, adding CID extension" \
1497 -s "found CID extension" \
1498 -s "Use of CID extension negotiated" \
1499 -s "server hello, adding CID extension" \
1500 -c "found CID extension" \
1501 -c "Use of CID extension negotiated" \
1502 -s "Copy CIDs into SSL transform" \
1503 -c "Copy CIDs into SSL transform" \
1504 -c "Peer CID (length 2 Bytes): de ad" \
1505 -s "Peer CID (length 2 Bytes): be ef" \
1506 -s "Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001507 -c "Use of Connection ID has been negotiated" \
1508 -c "ignoring unexpected CID" \
1509 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01001510
Hanno Beckera0e20d02019-05-15 14:03:01 +01001511requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001512run_test "Connection ID: Cli+Srv enabled, Cli CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001513 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1514 "$P_CLI debug_level=3 dtls=1 cid=1" \
1515 0 \
1516 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001517 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001518 -c "client hello, adding CID extension" \
1519 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001520 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001521 -s "server hello, adding CID extension" \
1522 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001523 -c "Use of CID extension negotiated" \
1524 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01001525 -c "Copy CIDs into SSL transform" \
1526 -c "Peer CID (length 4 Bytes): de ad be ef" \
1527 -s "Peer CID (length 0 Bytes):" \
1528 -s "Use of Connection ID has been negotiated" \
1529 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001530
Hanno Beckera0e20d02019-05-15 14:03:01 +01001531requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001532run_test "Connection ID: Cli+Srv enabled, Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001533 "$P_SRV debug_level=3 dtls=1 cid=1" \
1534 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1535 0 \
1536 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001537 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001538 -c "client hello, adding CID extension" \
1539 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001540 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001541 -s "server hello, adding CID extension" \
1542 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001543 -c "Use of CID extension negotiated" \
1544 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01001545 -c "Copy CIDs into SSL transform" \
1546 -s "Peer CID (length 4 Bytes): de ad be ef" \
1547 -c "Peer CID (length 0 Bytes):" \
1548 -s "Use of Connection ID has been negotiated" \
1549 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001550
Hanno Beckera0e20d02019-05-15 14:03:01 +01001551requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001552run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001553 "$P_SRV debug_level=3 dtls=1 cid=1" \
1554 "$P_CLI debug_level=3 dtls=1 cid=1" \
1555 0 \
1556 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001557 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001558 -c "client hello, adding CID extension" \
1559 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001560 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001561 -s "server hello, adding CID extension" \
1562 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001563 -c "Use of CID extension negotiated" \
1564 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01001565 -c "Copy CIDs into SSL transform" \
1566 -S "Use of Connection ID has been negotiated" \
1567 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001568
Hanno Beckera0e20d02019-05-15 14:03:01 +01001569requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001570run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001571 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
1572 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
1573 0 \
1574 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001575 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001576 -c "client hello, adding CID extension" \
1577 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001578 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001579 -s "server hello, adding CID extension" \
1580 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001581 -c "Use of CID extension negotiated" \
1582 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01001583 -c "Copy CIDs into SSL transform" \
1584 -c "Peer CID (length 2 Bytes): de ad" \
1585 -s "Peer CID (length 2 Bytes): be ef" \
1586 -s "Use of Connection ID has been negotiated" \
1587 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001588
Hanno Beckera0e20d02019-05-15 14:03:01 +01001589requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001590run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001591 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1592 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
1593 0 \
1594 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001595 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001596 -c "client hello, adding CID extension" \
1597 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001598 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001599 -s "server hello, adding CID extension" \
1600 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001601 -c "Use of CID extension negotiated" \
1602 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01001603 -c "Copy CIDs into SSL transform" \
1604 -c "Peer CID (length 4 Bytes): de ad be ef" \
1605 -s "Peer CID (length 0 Bytes):" \
1606 -s "Use of Connection ID has been negotiated" \
1607 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001608
Hanno Beckera0e20d02019-05-15 14:03:01 +01001609requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001610run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001611 "$P_SRV debug_level=3 dtls=1 cid=1" \
1612 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
1613 0 \
1614 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001615 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001616 -c "client hello, adding CID extension" \
1617 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001618 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001619 -s "server hello, adding CID extension" \
1620 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001621 -c "Use of CID extension negotiated" \
1622 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01001623 -c "Copy CIDs into SSL transform" \
1624 -s "Peer CID (length 4 Bytes): de ad be ef" \
1625 -c "Peer CID (length 0 Bytes):" \
1626 -s "Use of Connection ID has been negotiated" \
1627 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001628
Hanno Beckera0e20d02019-05-15 14:03:01 +01001629requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001630run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CCM-8" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001631 "$P_SRV debug_level=3 dtls=1 cid=1" \
1632 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8" \
1633 0 \
1634 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001635 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001636 -c "client hello, adding CID extension" \
1637 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001638 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001639 -s "server hello, adding CID extension" \
1640 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001641 -c "Use of CID extension negotiated" \
1642 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01001643 -c "Copy CIDs into SSL transform" \
1644 -S "Use of Connection ID has been negotiated" \
1645 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001646
Hanno Beckera0e20d02019-05-15 14:03:01 +01001647requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001648run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID nonempty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001649 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead" \
1650 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
1651 0 \
1652 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001653 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001654 -c "client hello, adding CID extension" \
1655 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001656 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001657 -s "server hello, adding CID extension" \
1658 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001659 -c "Use of CID extension negotiated" \
1660 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01001661 -c "Copy CIDs into SSL transform" \
1662 -c "Peer CID (length 2 Bytes): de ad" \
1663 -s "Peer CID (length 2 Bytes): be ef" \
1664 -s "Use of Connection ID has been negotiated" \
1665 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001666
Hanno Beckera0e20d02019-05-15 14:03:01 +01001667requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001668run_test "Connection ID: Cli+Srv enabled, Cli CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001669 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=deadbeef" \
1670 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
1671 0 \
1672 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001673 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001674 -c "client hello, adding CID extension" \
1675 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001676 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001677 -s "server hello, adding CID extension" \
1678 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001679 -c "Use of CID extension negotiated" \
1680 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01001681 -c "Copy CIDs into SSL transform" \
1682 -c "Peer CID (length 4 Bytes): de ad be ef" \
1683 -s "Peer CID (length 0 Bytes):" \
1684 -s "Use of Connection ID has been negotiated" \
1685 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001686
Hanno Beckera0e20d02019-05-15 14:03:01 +01001687requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001688run_test "Connection ID: Cli+Srv enabled, Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001689 "$P_SRV debug_level=3 dtls=1 cid=1" \
1690 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=deadbeef force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
1691 0 \
1692 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001693 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001694 -c "client hello, adding CID extension" \
1695 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001696 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001697 -s "server hello, adding CID extension" \
1698 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001699 -c "Use of CID extension negotiated" \
1700 -s "Copy CIDs into SSL transform" \
Hanno Becker2749a672019-05-03 17:04:23 +01001701 -c "Copy CIDs into SSL transform" \
1702 -s "Peer CID (length 4 Bytes): de ad be ef" \
1703 -c "Peer CID (length 0 Bytes):" \
1704 -s "Use of Connection ID has been negotiated" \
1705 -c "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001706
Hanno Beckera0e20d02019-05-15 14:03:01 +01001707requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001708run_test "Connection ID: Cli+Srv enabled, Cli+Srv CID empty, AES-128-CBC" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001709 "$P_SRV debug_level=3 dtls=1 cid=1" \
1710 "$P_CLI debug_level=3 dtls=1 cid=1 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
1711 0 \
1712 -c "Enable use of CID extension." \
Hanno Becker6b78c832019-04-25 17:01:43 +01001713 -s "Enable use of CID extension." \
Hanno Becker7dee2c62019-04-26 14:17:56 +01001714 -c "client hello, adding CID extension" \
1715 -s "found CID extension" \
Hanno Becker4bc9e9d2019-04-26 16:00:29 +01001716 -s "Use of CID extension negotiated" \
Hanno Beckera6a4c762019-04-26 16:13:31 +01001717 -s "server hello, adding CID extension" \
1718 -c "found CID extension" \
Hanno Becker9ecb6c62019-04-26 16:23:52 +01001719 -c "Use of CID extension negotiated" \
1720 -s "Copy CIDs into SSL transform" \
Hanno Beckerfcffdcc2019-04-26 17:19:46 +01001721 -c "Copy CIDs into SSL transform" \
1722 -S "Use of Connection ID has been negotiated" \
1723 -C "Use of Connection ID has been negotiated"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001724
Hanno Beckera0e20d02019-05-15 14:03:01 +01001725requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker9bae30d2019-04-23 11:52:44 +01001726requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01001727run_test "Connection ID: Cli+Srv enabled, renegotiate without change of CID" \
Hanno Beckerf157a972019-04-25 16:05:45 +01001728 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
1729 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
1730 0 \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001731 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1732 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1733 -s "(initial handshake) Use of Connection ID has been negotiated" \
1734 -c "(initial handshake) Use of Connection ID has been negotiated" \
1735 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1736 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1737 -s "(after renegotiation) Use of Connection ID has been negotiated" \
1738 -c "(after renegotiation) Use of Connection ID has been negotiated"
1739
Hanno Beckera0e20d02019-05-15 14:03:01 +01001740requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001741requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01001742run_test "Connection ID: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001743 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
1744 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
1745 0 \
1746 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1747 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1748 -s "(initial handshake) Use of Connection ID has been negotiated" \
1749 -c "(initial handshake) Use of Connection ID has been negotiated" \
1750 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1751 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1752 -s "(after renegotiation) Use of Connection ID has been negotiated" \
1753 -c "(after renegotiation) Use of Connection ID has been negotiated"
1754
Hanno Beckera0e20d02019-05-15 14:03:01 +01001755requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001756requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01001757run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate with different CID" \
1758 "$P_SRV debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=dead cid_val_renego=beef renegotiation=1" \
1759 "$P_CLI debug_level=3 dtls=1 cid=1 dgram_packing=0 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
1760 0 \
1761 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1762 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1763 -s "(initial handshake) Use of Connection ID has been negotiated" \
1764 -c "(initial handshake) Use of Connection ID has been negotiated" \
1765 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1766 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1767 -s "(after renegotiation) Use of Connection ID has been negotiated" \
1768 -c "(after renegotiation) Use of Connection ID has been negotiated"
1769
Hanno Beckera0e20d02019-05-15 14:03:01 +01001770requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01001771requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01001772run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate with different CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001773 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01001774 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_val_renego=beef renegotiation=1" \
1775 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_val_renego=dead renegotiation=1 renegotiate=1" \
1776 0 \
1777 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1778 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1779 -s "(initial handshake) Use of Connection ID has been negotiated" \
1780 -c "(initial handshake) Use of Connection ID has been negotiated" \
1781 -c "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1782 -s "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1783 -s "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001784 -c "(after renegotiation) Use of Connection ID has been negotiated" \
1785 -c "ignoring unexpected CID" \
1786 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01001787
Hanno Beckera0e20d02019-05-15 14:03:01 +01001788requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001789requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
1790run_test "Connection ID: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001791 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
1792 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
1793 0 \
1794 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1795 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1796 -s "(initial handshake) Use of Connection ID has been negotiated" \
1797 -c "(initial handshake) Use of Connection ID has been negotiated" \
1798 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1799 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1800 -C "(after renegotiation) Use of Connection ID has been negotiated" \
1801 -S "(after renegotiation) Use of Connection ID has been negotiated"
1802
Hanno Beckera0e20d02019-05-15 14:03:01 +01001803requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001804requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01001805run_test "Connection ID, no packing: Cli+Srv enabled, renegotiate without CID" \
1806 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
1807 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
1808 0 \
1809 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1810 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1811 -s "(initial handshake) Use of Connection ID has been negotiated" \
1812 -c "(initial handshake) Use of Connection ID has been negotiated" \
1813 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1814 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1815 -C "(after renegotiation) Use of Connection ID has been negotiated" \
1816 -S "(after renegotiation) Use of Connection ID has been negotiated"
1817
Hanno Beckera0e20d02019-05-15 14:03:01 +01001818requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01001819requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01001820run_test "Connection ID, 3D+MTU: Cli+Srv enabled, renegotiate without CID" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001821 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01001822 "$P_SRV debug_level=3 mtu=800 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
1823 "$P_CLI debug_level=3 mtu=800 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
1824 0 \
1825 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1826 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1827 -s "(initial handshake) Use of Connection ID has been negotiated" \
1828 -c "(initial handshake) Use of Connection ID has been negotiated" \
1829 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1830 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1831 -C "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001832 -S "(after renegotiation) Use of Connection ID has been negotiated" \
1833 -c "ignoring unexpected CID" \
1834 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01001835
Hanno Beckera0e20d02019-05-15 14:03:01 +01001836requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001837requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
1838run_test "Connection ID: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001839 "$P_SRV debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
1840 "$P_CLI debug_level=3 dtls=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
1841 0 \
1842 -S "(initial handshake) Use of Connection ID has been negotiated" \
1843 -C "(initial handshake) Use of Connection ID has been negotiated" \
1844 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1845 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1846 -c "(after renegotiation) Use of Connection ID has been negotiated" \
1847 -s "(after renegotiation) Use of Connection ID has been negotiated"
1848
Hanno Beckera0e20d02019-05-15 14:03:01 +01001849requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001850requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Beckerc2045b02019-05-08 16:20:46 +01001851run_test "Connection ID, no packing: Cli+Srv enabled, CID on renegotiation" \
1852 "$P_SRV debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
1853 "$P_CLI debug_level=3 dtls=1 dgram_packing=0 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
1854 0 \
1855 -S "(initial handshake) Use of Connection ID has been negotiated" \
1856 -C "(initial handshake) Use of Connection ID has been negotiated" \
1857 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1858 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1859 -c "(after renegotiation) Use of Connection ID has been negotiated" \
1860 -s "(after renegotiation) Use of Connection ID has been negotiated"
1861
Hanno Beckera0e20d02019-05-15 14:03:01 +01001862requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerc2045b02019-05-08 16:20:46 +01001863requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01001864run_test "Connection ID, 3D+MTU: Cli+Srv enabled, CID on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001865 -p "$P_PXY mtu=800 drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01001866 "$P_SRV debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=dead renegotiation=1" \
1867 "$P_CLI debug_level=3 mtu=800 dtls=1 dgram_packing=1 cid=0 cid_renego=1 cid_val_renego=beef renegotiation=1 renegotiate=1" \
1868 0 \
1869 -S "(initial handshake) Use of Connection ID has been negotiated" \
1870 -C "(initial handshake) Use of Connection ID has been negotiated" \
1871 -c "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1872 -s "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1873 -c "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001874 -s "(after renegotiation) Use of Connection ID has been negotiated" \
1875 -c "ignoring unexpected CID" \
1876 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01001877
Hanno Beckera0e20d02019-05-15 14:03:01 +01001878requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001879requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
1880run_test "Connection ID: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001881 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
1882 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
1883 0 \
1884 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1885 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1886 -s "(initial handshake) Use of Connection ID has been negotiated" \
1887 -c "(initial handshake) Use of Connection ID has been negotiated" \
1888 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1889 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1890 -C "(after renegotiation) Use of Connection ID has been negotiated" \
1891 -S "(after renegotiation) Use of Connection ID has been negotiated" \
1892 -s "(after renegotiation) Use of Connection ID was not offered by client"
1893
Hanno Beckera0e20d02019-05-15 14:03:01 +01001894requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001895requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Hanno Becker78c91372019-05-08 13:31:15 +01001896run_test "Connection ID, 3D: Cli+Srv enabled, Cli disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001897 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Becker78c91372019-05-08 13:31:15 +01001898 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead renegotiation=1" \
1899 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef cid_renego=0 renegotiation=1 renegotiate=1" \
1900 0 \
1901 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1902 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1903 -s "(initial handshake) Use of Connection ID has been negotiated" \
1904 -c "(initial handshake) Use of Connection ID has been negotiated" \
1905 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1906 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1907 -C "(after renegotiation) Use of Connection ID has been negotiated" \
1908 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001909 -s "(after renegotiation) Use of Connection ID was not offered by client" \
1910 -c "ignoring unexpected CID" \
1911 -s "ignoring unexpected CID"
Hanno Becker78c91372019-05-08 13:31:15 +01001912
Hanno Beckera0e20d02019-05-15 14:03:01 +01001913requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001914requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
1915run_test "Connection ID: Cli+Srv enabled, Srv disables on renegotiation" \
1916 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
1917 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
1918 0 \
1919 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1920 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1921 -s "(initial handshake) Use of Connection ID has been negotiated" \
1922 -c "(initial handshake) Use of Connection ID has been negotiated" \
1923 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1924 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1925 -C "(after renegotiation) Use of Connection ID has been negotiated" \
1926 -S "(after renegotiation) Use of Connection ID has been negotiated" \
1927 -c "(after renegotiation) Use of Connection ID was rejected by the server"
1928
Hanno Beckera0e20d02019-05-15 14:03:01 +01001929requires_config_enabled MBEDTLS_SSL_DTLS_CONNECTION_ID
Hanno Becker78c91372019-05-08 13:31:15 +01001930requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
1931run_test "Connection ID, 3D: Cli+Srv enabled, Srv disables on renegotiation" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001932 -p "$P_PXY drop=5 delay=5 duplicate=5 bad_cid=1" \
Hanno Beckerb42ec0d2019-05-03 17:30:59 +01001933 "$P_SRV debug_level=3 dtls=1 cid=1 cid_val=dead cid_renego=0 renegotiation=1" \
1934 "$P_CLI debug_level=3 dtls=1 cid=1 cid_val=beef renegotiation=1 renegotiate=1" \
1935 0 \
1936 -c "(initial handshake) Peer CID (length 2 Bytes): de ad" \
1937 -s "(initial handshake) Peer CID (length 2 Bytes): be ef" \
1938 -s "(initial handshake) Use of Connection ID has been negotiated" \
1939 -c "(initial handshake) Use of Connection ID has been negotiated" \
1940 -C "(after renegotiation) Peer CID (length 2 Bytes): de ad" \
1941 -S "(after renegotiation) Peer CID (length 2 Bytes): be ef" \
1942 -C "(after renegotiation) Use of Connection ID has been negotiated" \
1943 -S "(after renegotiation) Use of Connection ID has been negotiated" \
Hanno Beckerd0ac5fa2019-05-24 10:11:23 +01001944 -c "(after renegotiation) Use of Connection ID was rejected by the server" \
1945 -c "ignoring unexpected CID" \
1946 -s "ignoring unexpected CID"
Hanno Becker7cf463e2019-04-09 18:08:47 +01001947
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001948# Tests for Encrypt-then-MAC extension
1949
1950run_test "Encrypt then MAC: default" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01001951 "$P_SRV debug_level=3 \
1952 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001953 "$P_CLI debug_level=3" \
1954 0 \
1955 -c "client hello, adding encrypt_then_mac extension" \
1956 -s "found encrypt then mac extension" \
1957 -s "server hello, adding encrypt then mac extension" \
1958 -c "found encrypt_then_mac extension" \
1959 -c "using encrypt then mac" \
1960 -s "using encrypt then mac"
1961
1962run_test "Encrypt then MAC: client enabled, server disabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01001963 "$P_SRV debug_level=3 etm=0 \
1964 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001965 "$P_CLI debug_level=3 etm=1" \
1966 0 \
1967 -c "client hello, adding encrypt_then_mac extension" \
1968 -s "found encrypt then mac extension" \
1969 -S "server hello, adding encrypt then mac extension" \
1970 -C "found encrypt_then_mac extension" \
1971 -C "using encrypt then mac" \
1972 -S "using encrypt then mac"
1973
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01001974run_test "Encrypt then MAC: client enabled, aead cipher" \
1975 "$P_SRV debug_level=3 etm=1 \
1976 force_ciphersuite=TLS-RSA-WITH-AES-128-GCM-SHA256" \
1977 "$P_CLI debug_level=3 etm=1" \
1978 0 \
1979 -c "client hello, adding encrypt_then_mac extension" \
1980 -s "found encrypt then mac extension" \
1981 -S "server hello, adding encrypt then mac extension" \
1982 -C "found encrypt_then_mac extension" \
1983 -C "using encrypt then mac" \
1984 -S "using encrypt then mac"
1985
1986run_test "Encrypt then MAC: client enabled, stream cipher" \
1987 "$P_SRV debug_level=3 etm=1 \
1988 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01001989 "$P_CLI debug_level=3 etm=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard78e745f2014-11-04 15:44:06 +01001990 0 \
1991 -c "client hello, adding encrypt_then_mac extension" \
1992 -s "found encrypt then mac extension" \
1993 -S "server hello, adding encrypt then mac extension" \
1994 -C "found encrypt_then_mac extension" \
1995 -C "using encrypt then mac" \
1996 -S "using encrypt then mac"
1997
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01001998run_test "Encrypt then MAC: client disabled, server enabled" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01001999 "$P_SRV debug_level=3 etm=1 \
2000 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002001 "$P_CLI debug_level=3 etm=0" \
2002 0 \
2003 -C "client hello, adding encrypt_then_mac extension" \
2004 -S "found encrypt then mac extension" \
2005 -S "server hello, adding encrypt then mac extension" \
2006 -C "found encrypt_then_mac extension" \
2007 -C "using encrypt then mac" \
2008 -S "using encrypt then mac"
2009
Janos Follathe2681a42016-03-07 15:57:05 +00002010requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002011run_test "Encrypt then MAC: client SSLv3, server enabled" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002012 "$P_SRV debug_level=3 min_version=ssl3 \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002013 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002014 "$P_CLI debug_level=3 force_version=ssl3" \
2015 0 \
2016 -C "client hello, adding encrypt_then_mac extension" \
2017 -S "found encrypt then mac extension" \
2018 -S "server hello, adding encrypt then mac extension" \
2019 -C "found encrypt_then_mac extension" \
2020 -C "using encrypt then mac" \
2021 -S "using encrypt then mac"
2022
Janos Follathe2681a42016-03-07 15:57:05 +00002023requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002024run_test "Encrypt then MAC: client enabled, server SSLv3" \
Manuel Pégourié-Gonnard0098e7d2014-10-28 13:08:59 +01002025 "$P_SRV debug_level=3 force_version=ssl3 \
2026 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002027 "$P_CLI debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002028 0 \
2029 -c "client hello, adding encrypt_then_mac extension" \
Janos Follath00efff72016-05-06 13:48:23 +01002030 -S "found encrypt then mac extension" \
Manuel Pégourié-Gonnard699cafa2014-10-27 13:57:03 +01002031 -S "server hello, adding encrypt then mac extension" \
2032 -C "found encrypt_then_mac extension" \
2033 -C "using encrypt then mac" \
2034 -S "using encrypt then mac"
2035
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002036# Tests for Extended Master Secret extension
2037
2038run_test "Extended Master Secret: default" \
2039 "$P_SRV debug_level=3" \
2040 "$P_CLI debug_level=3" \
2041 0 \
2042 -c "client hello, adding extended_master_secret extension" \
2043 -s "found extended master secret extension" \
2044 -s "server hello, adding extended master secret extension" \
2045 -c "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02002046 -c "session hash for extended master secret" \
2047 -s "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002048
2049run_test "Extended Master Secret: client enabled, server disabled" \
2050 "$P_SRV debug_level=3 extended_ms=0" \
2051 "$P_CLI debug_level=3 extended_ms=1" \
2052 0 \
2053 -c "client hello, adding extended_master_secret extension" \
2054 -s "found extended master secret extension" \
2055 -S "server hello, adding extended master secret extension" \
2056 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02002057 -C "session hash for extended master secret" \
2058 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002059
2060run_test "Extended Master Secret: client disabled, server enabled" \
2061 "$P_SRV debug_level=3 extended_ms=1" \
2062 "$P_CLI debug_level=3 extended_ms=0" \
2063 0 \
2064 -C "client hello, adding extended_master_secret extension" \
2065 -S "found extended master secret extension" \
2066 -S "server hello, adding extended master secret extension" \
2067 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02002068 -C "session hash for extended master secret" \
2069 -S "session hash for extended master secret"
Manuel Pégourié-Gonnard367381f2014-10-20 18:40:56 +02002070
Janos Follathe2681a42016-03-07 15:57:05 +00002071requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02002072run_test "Extended Master Secret: client SSLv3, server enabled" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002073 "$P_SRV debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02002074 "$P_CLI debug_level=3 force_version=ssl3" \
2075 0 \
2076 -C "client hello, adding extended_master_secret extension" \
2077 -S "found extended master secret extension" \
2078 -S "server hello, adding extended master secret extension" \
2079 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02002080 -C "session hash for extended master secret" \
2081 -S "session hash for extended master secret"
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02002082
Janos Follathe2681a42016-03-07 15:57:05 +00002083requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02002084run_test "Extended Master Secret: client enabled, server SSLv3" \
2085 "$P_SRV debug_level=3 force_version=ssl3" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002086 "$P_CLI debug_level=3 min_version=ssl3" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02002087 0 \
2088 -c "client hello, adding extended_master_secret extension" \
Janos Follath00efff72016-05-06 13:48:23 +01002089 -S "found extended master secret extension" \
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02002090 -S "server hello, adding extended master secret extension" \
2091 -C "found extended_master_secret extension" \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02002092 -C "session hash for extended master secret" \
2093 -S "session hash for extended master secret"
Manuel Pégourié-Gonnardb575b542014-10-24 15:12:31 +02002094
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02002095# Tests for FALLBACK_SCSV
2096
2097run_test "Fallback SCSV: default" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02002098 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02002099 "$P_CLI debug_level=3 force_version=tls1_1" \
2100 0 \
2101 -C "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02002102 -S "received FALLBACK_SCSV" \
2103 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02002104 -C "is a fatal alert message (msg 86)"
2105
2106run_test "Fallback SCSV: explicitly disabled" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02002107 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02002108 "$P_CLI debug_level=3 force_version=tls1_1 fallback=0" \
2109 0 \
2110 -C "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02002111 -S "received FALLBACK_SCSV" \
2112 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02002113 -C "is a fatal alert message (msg 86)"
2114
2115run_test "Fallback SCSV: enabled" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02002116 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02002117 "$P_CLI debug_level=3 force_version=tls1_1 fallback=1" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02002118 1 \
2119 -c "adding FALLBACK_SCSV" \
2120 -s "received FALLBACK_SCSV" \
2121 -s "inapropriate fallback" \
2122 -c "is a fatal alert message (msg 86)"
2123
2124run_test "Fallback SCSV: enabled, max version" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02002125 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02002126 "$P_CLI debug_level=3 fallback=1" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02002127 0 \
2128 -c "adding FALLBACK_SCSV" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02002129 -s "received FALLBACK_SCSV" \
2130 -S "inapropriate fallback" \
Manuel Pégourié-Gonnard1cbd39d2014-10-20 13:34:59 +02002131 -C "is a fatal alert message (msg 86)"
2132
2133requires_openssl_with_fallback_scsv
2134run_test "Fallback SCSV: default, openssl server" \
2135 "$O_SRV" \
2136 "$P_CLI debug_level=3 force_version=tls1_1 fallback=0" \
2137 0 \
2138 -C "adding FALLBACK_SCSV" \
2139 -C "is a fatal alert message (msg 86)"
2140
2141requires_openssl_with_fallback_scsv
2142run_test "Fallback SCSV: enabled, openssl server" \
2143 "$O_SRV" \
2144 "$P_CLI debug_level=3 force_version=tls1_1 fallback=1" \
2145 1 \
2146 -c "adding FALLBACK_SCSV" \
2147 -c "is a fatal alert message (msg 86)"
2148
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02002149requires_openssl_with_fallback_scsv
2150run_test "Fallback SCSV: disabled, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02002151 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02002152 "$O_CLI -tls1_1" \
2153 0 \
2154 -S "received FALLBACK_SCSV" \
2155 -S "inapropriate fallback"
2156
2157requires_openssl_with_fallback_scsv
2158run_test "Fallback SCSV: enabled, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02002159 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02002160 "$O_CLI -tls1_1 -fallback_scsv" \
2161 1 \
2162 -s "received FALLBACK_SCSV" \
2163 -s "inapropriate fallback"
2164
2165requires_openssl_with_fallback_scsv
2166run_test "Fallback SCSV: enabled, max version, openssl client" \
Manuel Pégourié-Gonnard4268ae02015-08-04 12:44:10 +02002167 "$P_SRV debug_level=2" \
Manuel Pégourié-Gonnard01b26992014-10-20 14:05:28 +02002168 "$O_CLI -fallback_scsv" \
2169 0 \
2170 -s "received FALLBACK_SCSV" \
2171 -S "inapropriate fallback"
2172
Andres Amaya Garcia4c761fa2018-07-10 20:08:04 +01002173# Test sending and receiving empty application data records
2174
2175run_test "Encrypt then MAC: empty application data record" \
2176 "$P_SRV auth_mode=none debug_level=4 etm=1" \
2177 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA" \
2178 0 \
2179 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
2180 -s "dumping 'input payload after decrypt' (0 bytes)" \
2181 -c "0 bytes written in 1 fragments"
2182
2183run_test "Default, no Encrypt then MAC: empty application data record" \
2184 "$P_SRV auth_mode=none debug_level=4 etm=0" \
2185 "$P_CLI auth_mode=none etm=0 request_size=0" \
2186 0 \
2187 -s "dumping 'input payload after decrypt' (0 bytes)" \
2188 -c "0 bytes written in 1 fragments"
2189
2190run_test "Encrypt then MAC, DTLS: empty application data record" \
2191 "$P_SRV auth_mode=none debug_level=4 etm=1 dtls=1" \
2192 "$P_CLI auth_mode=none etm=1 request_size=0 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA dtls=1" \
2193 0 \
2194 -S "0000: 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f 0f" \
2195 -s "dumping 'input payload after decrypt' (0 bytes)" \
2196 -c "0 bytes written in 1 fragments"
2197
2198run_test "Default, no Encrypt then MAC, DTLS: empty application data record" \
2199 "$P_SRV auth_mode=none debug_level=4 etm=0 dtls=1" \
2200 "$P_CLI auth_mode=none etm=0 request_size=0 dtls=1" \
2201 0 \
2202 -s "dumping 'input payload after decrypt' (0 bytes)" \
2203 -c "0 bytes written in 1 fragments"
2204
Gilles Peskined50177f2017-05-16 17:53:03 +02002205## ClientHello generated with
2206## "openssl s_client -CAfile tests/data_files/test-ca.crt -tls1_1 -connect localhost:4433 -cipher ..."
2207## then manually twiddling the ciphersuite list.
2208## The ClientHello content is spelled out below as a hex string as
2209## "prefix ciphersuite1 ciphersuite2 ciphersuite3 ciphersuite4 suffix".
2210## The expected response is an inappropriate_fallback alert.
2211requires_openssl_with_fallback_scsv
2212run_test "Fallback SCSV: beginning of list" \
2213 "$P_SRV debug_level=2" \
2214 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 5600 0031 0032 0033 0100000900230000000f000101' '15030200020256'" \
2215 0 \
2216 -s "received FALLBACK_SCSV" \
2217 -s "inapropriate fallback"
2218
2219requires_openssl_with_fallback_scsv
2220run_test "Fallback SCSV: end of list" \
2221 "$P_SRV debug_level=2" \
2222 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 0031 0032 0033 5600 0100000900230000000f000101' '15030200020256'" \
2223 0 \
2224 -s "received FALLBACK_SCSV" \
2225 -s "inapropriate fallback"
2226
2227## Here the expected response is a valid ServerHello prefix, up to the random.
2228requires_openssl_with_fallback_scsv
2229run_test "Fallback SCSV: not in list" \
2230 "$P_SRV debug_level=2" \
2231 "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 0056 0031 0032 0033 0100000900230000000f000101' '16030200300200002c0302'" \
2232 0 \
2233 -S "received FALLBACK_SCSV" \
2234 -S "inapropriate fallback"
2235
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01002236# Tests for CBC 1/n-1 record splitting
2237
2238run_test "CBC Record splitting: TLS 1.2, no splitting" \
2239 "$P_SRV" \
2240 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
2241 request_size=123 force_version=tls1_2" \
2242 0 \
2243 -s "Read from client: 123 bytes read" \
2244 -S "Read from client: 1 bytes read" \
2245 -S "122 bytes read"
2246
2247run_test "CBC Record splitting: TLS 1.1, no splitting" \
2248 "$P_SRV" \
2249 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
2250 request_size=123 force_version=tls1_1" \
2251 0 \
2252 -s "Read from client: 123 bytes read" \
2253 -S "Read from client: 1 bytes read" \
2254 -S "122 bytes read"
2255
2256run_test "CBC Record splitting: TLS 1.0, splitting" \
2257 "$P_SRV" \
2258 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
2259 request_size=123 force_version=tls1" \
2260 0 \
2261 -S "Read from client: 123 bytes read" \
2262 -s "Read from client: 1 bytes read" \
2263 -s "122 bytes read"
2264
Janos Follathe2681a42016-03-07 15:57:05 +00002265requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01002266run_test "CBC Record splitting: SSLv3, splitting" \
Manuel Pégourié-Gonnard51d81662015-01-14 17:20:46 +01002267 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01002268 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
2269 request_size=123 force_version=ssl3" \
2270 0 \
2271 -S "Read from client: 123 bytes read" \
2272 -s "Read from client: 1 bytes read" \
2273 -s "122 bytes read"
2274
2275run_test "CBC Record splitting: TLS 1.0 RC4, no splitting" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01002276 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard3ff78232015-01-08 11:15:09 +01002277 "$P_CLI force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
2278 request_size=123 force_version=tls1" \
2279 0 \
2280 -s "Read from client: 123 bytes read" \
2281 -S "Read from client: 1 bytes read" \
2282 -S "122 bytes read"
2283
2284run_test "CBC Record splitting: TLS 1.0, splitting disabled" \
2285 "$P_SRV" \
2286 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
2287 request_size=123 force_version=tls1 recsplit=0" \
2288 0 \
2289 -s "Read from client: 123 bytes read" \
2290 -S "Read from client: 1 bytes read" \
2291 -S "122 bytes read"
2292
Manuel Pégourié-Gonnarda852cf42015-01-13 20:56:15 +01002293run_test "CBC Record splitting: TLS 1.0, splitting, nbio" \
2294 "$P_SRV nbio=2" \
2295 "$P_CLI nbio=2 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA \
2296 request_size=123 force_version=tls1" \
2297 0 \
2298 -S "Read from client: 123 bytes read" \
2299 -s "Read from client: 1 bytes read" \
2300 -s "122 bytes read"
2301
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002302# Tests for Session Tickets
2303
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002304run_test "Session resume using tickets: basic" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002305 "$P_SRV debug_level=3 tickets=1" \
2306 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002307 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002308 -c "client hello, adding session ticket extension" \
2309 -s "found session ticket extension" \
2310 -s "server hello, adding session ticket extension" \
2311 -c "found session_ticket extension" \
2312 -c "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002313 -S "session successfully restored from cache" \
2314 -s "session successfully restored from ticket" \
2315 -s "a session has been resumed" \
2316 -c "a session has been resumed"
2317
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002318run_test "Session resume using tickets: cache disabled" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002319 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
2320 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002321 0 \
2322 -c "client hello, adding session ticket extension" \
2323 -s "found session ticket extension" \
2324 -s "server hello, adding session ticket extension" \
2325 -c "found session_ticket extension" \
2326 -c "parse new session ticket" \
2327 -S "session successfully restored from cache" \
2328 -s "session successfully restored from ticket" \
2329 -s "a session has been resumed" \
2330 -c "a session has been resumed"
2331
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002332run_test "Session resume using tickets: timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002333 "$P_SRV debug_level=3 tickets=1 cache_max=0 ticket_timeout=1" \
2334 "$P_CLI debug_level=3 tickets=1 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnarddbe1ee12014-02-21 09:18:13 +01002335 0 \
2336 -c "client hello, adding session ticket extension" \
2337 -s "found session ticket extension" \
2338 -s "server hello, adding session ticket extension" \
2339 -c "found session_ticket extension" \
2340 -c "parse new session ticket" \
2341 -S "session successfully restored from cache" \
2342 -S "session successfully restored from ticket" \
2343 -S "a session has been resumed" \
2344 -C "a session has been resumed"
2345
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002346run_test "Session resume using tickets: session copy" \
2347 "$P_SRV debug_level=3 tickets=1 cache_max=0" \
2348 "$P_CLI debug_level=3 tickets=1 reconnect=1 reco_mode=0" \
2349 0 \
2350 -c "client hello, adding session ticket extension" \
2351 -s "found session ticket extension" \
2352 -s "server hello, adding session ticket extension" \
2353 -c "found session_ticket extension" \
2354 -c "parse new session ticket" \
2355 -S "session successfully restored from cache" \
2356 -s "session successfully restored from ticket" \
2357 -s "a session has been resumed" \
2358 -c "a session has been resumed"
2359
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002360run_test "Session resume using tickets: openssl server" \
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01002361 "$O_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002362 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01002363 0 \
2364 -c "client hello, adding session ticket extension" \
2365 -c "found session_ticket extension" \
2366 -c "parse new session ticket" \
2367 -c "a session has been resumed"
2368
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002369run_test "Session resume using tickets: openssl client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002370 "$P_SRV debug_level=3 tickets=1" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02002371 "( $O_CLI -sess_out $SESSION; \
2372 $O_CLI -sess_in $SESSION; \
2373 rm -f $SESSION )" \
Manuel Pégourié-Gonnardfccd3252014-02-25 17:14:15 +01002374 0 \
2375 -s "found session ticket extension" \
2376 -s "server hello, adding session ticket extension" \
2377 -S "session successfully restored from cache" \
2378 -s "session successfully restored from ticket" \
2379 -s "a session has been resumed"
2380
Hanno Becker1d739932018-08-21 13:55:22 +01002381# Tests for Session Tickets with DTLS
2382
2383run_test "Session resume using tickets, DTLS: basic" \
2384 "$P_SRV debug_level=3 dtls=1 tickets=1" \
2385 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1" \
2386 0 \
2387 -c "client hello, adding session ticket extension" \
2388 -s "found session ticket extension" \
2389 -s "server hello, adding session ticket extension" \
2390 -c "found session_ticket extension" \
2391 -c "parse new session ticket" \
2392 -S "session successfully restored from cache" \
2393 -s "session successfully restored from ticket" \
2394 -s "a session has been resumed" \
2395 -c "a session has been resumed"
2396
2397run_test "Session resume using tickets, DTLS: cache disabled" \
2398 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
2399 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1" \
2400 0 \
2401 -c "client hello, adding session ticket extension" \
2402 -s "found session ticket extension" \
2403 -s "server hello, adding session ticket extension" \
2404 -c "found session_ticket extension" \
2405 -c "parse new session ticket" \
2406 -S "session successfully restored from cache" \
2407 -s "session successfully restored from ticket" \
2408 -s "a session has been resumed" \
2409 -c "a session has been resumed"
2410
2411run_test "Session resume using tickets, DTLS: timeout" \
2412 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0 ticket_timeout=1" \
2413 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 reco_delay=2" \
2414 0 \
2415 -c "client hello, adding session ticket extension" \
2416 -s "found session ticket extension" \
2417 -s "server hello, adding session ticket extension" \
2418 -c "found session_ticket extension" \
2419 -c "parse new session ticket" \
2420 -S "session successfully restored from cache" \
2421 -S "session successfully restored from ticket" \
2422 -S "a session has been resumed" \
2423 -C "a session has been resumed"
2424
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002425run_test "Session resume using tickets, DTLS: session copy" \
2426 "$P_SRV debug_level=3 dtls=1 tickets=1 cache_max=0" \
2427 "$P_CLI debug_level=3 dtls=1 tickets=1 reconnect=1 reco_mode=0" \
2428 0 \
2429 -c "client hello, adding session ticket extension" \
2430 -s "found session ticket extension" \
2431 -s "server hello, adding session ticket extension" \
2432 -c "found session_ticket extension" \
2433 -c "parse new session ticket" \
2434 -S "session successfully restored from cache" \
2435 -s "session successfully restored from ticket" \
2436 -s "a session has been resumed" \
2437 -c "a session has been resumed"
2438
Hanno Becker1d739932018-08-21 13:55:22 +01002439run_test "Session resume using tickets, DTLS: openssl server" \
2440 "$O_SRV -dtls1" \
2441 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1" \
2442 0 \
2443 -c "client hello, adding session ticket extension" \
2444 -c "found session_ticket extension" \
2445 -c "parse new session ticket" \
2446 -c "a session has been resumed"
2447
2448run_test "Session resume using tickets, DTLS: openssl client" \
2449 "$P_SRV dtls=1 debug_level=3 tickets=1" \
2450 "( $O_CLI -dtls1 -sess_out $SESSION; \
2451 $O_CLI -dtls1 -sess_in $SESSION; \
2452 rm -f $SESSION )" \
2453 0 \
2454 -s "found session ticket extension" \
2455 -s "server hello, adding session ticket extension" \
2456 -S "session successfully restored from cache" \
2457 -s "session successfully restored from ticket" \
2458 -s "a session has been resumed"
2459
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002460# Tests for Session Resume based on session-ID and cache
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002461
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002462run_test "Session resume using cache: tickets enabled on client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002463 "$P_SRV debug_level=3 tickets=0" \
2464 "$P_CLI debug_level=3 tickets=1 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002465 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002466 -c "client hello, adding session ticket extension" \
2467 -s "found session ticket extension" \
2468 -S "server hello, adding session ticket extension" \
2469 -C "found session_ticket extension" \
2470 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002471 -s "session successfully restored from cache" \
2472 -S "session successfully restored from ticket" \
2473 -s "a session has been resumed" \
2474 -c "a session has been resumed"
2475
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002476run_test "Session resume using cache: tickets enabled on server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002477 "$P_SRV debug_level=3 tickets=1" \
2478 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002479 0 \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002480 -C "client hello, adding session ticket extension" \
2481 -S "found session ticket extension" \
2482 -S "server hello, adding session ticket extension" \
2483 -C "found session_ticket extension" \
2484 -C "parse new session ticket" \
Manuel Pégourié-Gonnardf7c52012014-02-20 11:43:46 +01002485 -s "session successfully restored from cache" \
2486 -S "session successfully restored from ticket" \
2487 -s "a session has been resumed" \
2488 -c "a session has been resumed"
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002489
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002490run_test "Session resume using cache: cache_max=0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002491 "$P_SRV debug_level=3 tickets=0 cache_max=0" \
2492 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002493 0 \
2494 -S "session successfully restored from cache" \
2495 -S "session successfully restored from ticket" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002496 -S "a session has been resumed" \
2497 -C "a session has been resumed"
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002498
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002499run_test "Session resume using cache: cache_max=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002500 "$P_SRV debug_level=3 tickets=0 cache_max=1" \
2501 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002502 0 \
2503 -s "session successfully restored from cache" \
2504 -S "session successfully restored from ticket" \
2505 -s "a session has been resumed" \
2506 -c "a session has been resumed"
2507
Manuel Pégourié-Gonnard6df31962015-05-04 10:55:47 +02002508run_test "Session resume using cache: timeout > delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002509 "$P_SRV debug_level=3 tickets=0" \
2510 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=0" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002511 0 \
2512 -s "session successfully restored from cache" \
2513 -S "session successfully restored from ticket" \
2514 -s "a session has been resumed" \
2515 -c "a session has been resumed"
2516
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002517run_test "Session resume using cache: timeout < delay" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002518 "$P_SRV debug_level=3 tickets=0 cache_timeout=1" \
2519 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnardc55a5b72014-02-20 22:50:56 +01002520 0 \
2521 -S "session successfully restored from cache" \
2522 -S "session successfully restored from ticket" \
2523 -S "a session has been resumed" \
2524 -C "a session has been resumed"
2525
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002526run_test "Session resume using cache: no timeout" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002527 "$P_SRV debug_level=3 tickets=0 cache_timeout=0" \
2528 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
Manuel Pégourié-Gonnard4c883452014-02-20 21:32:41 +01002529 0 \
2530 -s "session successfully restored from cache" \
2531 -S "session successfully restored from ticket" \
2532 -s "a session has been resumed" \
2533 -c "a session has been resumed"
2534
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002535run_test "Session resume using cache: session copy" \
2536 "$P_SRV debug_level=3 tickets=0" \
2537 "$P_CLI debug_level=3 tickets=0 reconnect=1 reco_mode=0" \
2538 0 \
2539 -s "session successfully restored from cache" \
2540 -S "session successfully restored from ticket" \
2541 -s "a session has been resumed" \
2542 -c "a session has been resumed"
2543
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002544run_test "Session resume using cache: openssl client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002545 "$P_SRV debug_level=3 tickets=0" \
Manuel Pégourié-Gonnardbc3b16c2014-05-28 23:06:50 +02002546 "( $O_CLI -sess_out $SESSION; \
2547 $O_CLI -sess_in $SESSION; \
2548 rm -f $SESSION )" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01002549 0 \
2550 -s "found session ticket extension" \
2551 -S "server hello, adding session ticket extension" \
2552 -s "session successfully restored from cache" \
2553 -S "session successfully restored from ticket" \
2554 -s "a session has been resumed"
2555
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002556run_test "Session resume using cache: openssl server" \
Manuel Pégourié-Gonnardf7a26902014-02-27 12:25:54 +01002557 "$O_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002558 "$P_CLI debug_level=3 tickets=0 reconnect=1" \
Manuel Pégourié-Gonnarddb735f62014-02-25 17:57:59 +01002559 0 \
2560 -C "found session_ticket extension" \
2561 -C "parse new session ticket" \
2562 -c "a session has been resumed"
2563
Hanno Becker1d739932018-08-21 13:55:22 +01002564# Tests for Session Resume based on session-ID and cache, DTLS
2565
2566run_test "Session resume using cache, DTLS: tickets enabled on client" \
2567 "$P_SRV dtls=1 debug_level=3 tickets=0" \
2568 "$P_CLI dtls=1 debug_level=3 tickets=1 reconnect=1" \
2569 0 \
2570 -c "client hello, adding session ticket extension" \
2571 -s "found session ticket extension" \
2572 -S "server hello, adding session ticket extension" \
2573 -C "found session_ticket extension" \
2574 -C "parse new session ticket" \
2575 -s "session successfully restored from cache" \
2576 -S "session successfully restored from ticket" \
2577 -s "a session has been resumed" \
2578 -c "a session has been resumed"
2579
2580run_test "Session resume using cache, DTLS: tickets enabled on server" \
2581 "$P_SRV dtls=1 debug_level=3 tickets=1" \
2582 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
2583 0 \
2584 -C "client hello, adding session ticket extension" \
2585 -S "found session ticket extension" \
2586 -S "server hello, adding session ticket extension" \
2587 -C "found session_ticket extension" \
2588 -C "parse new session ticket" \
2589 -s "session successfully restored from cache" \
2590 -S "session successfully restored from ticket" \
2591 -s "a session has been resumed" \
2592 -c "a session has been resumed"
2593
2594run_test "Session resume using cache, DTLS: cache_max=0" \
2595 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=0" \
2596 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
2597 0 \
2598 -S "session successfully restored from cache" \
2599 -S "session successfully restored from ticket" \
2600 -S "a session has been resumed" \
2601 -C "a session has been resumed"
2602
2603run_test "Session resume using cache, DTLS: cache_max=1" \
2604 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_max=1" \
2605 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
2606 0 \
2607 -s "session successfully restored from cache" \
2608 -S "session successfully restored from ticket" \
2609 -s "a session has been resumed" \
2610 -c "a session has been resumed"
2611
2612run_test "Session resume using cache, DTLS: timeout > delay" \
2613 "$P_SRV dtls=1 debug_level=3 tickets=0" \
2614 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 reco_delay=0" \
2615 0 \
2616 -s "session successfully restored from cache" \
2617 -S "session successfully restored from ticket" \
2618 -s "a session has been resumed" \
2619 -c "a session has been resumed"
2620
2621run_test "Session resume using cache, DTLS: timeout < delay" \
2622 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=1" \
2623 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
2624 0 \
2625 -S "session successfully restored from cache" \
2626 -S "session successfully restored from ticket" \
2627 -S "a session has been resumed" \
2628 -C "a session has been resumed"
2629
2630run_test "Session resume using cache, DTLS: no timeout" \
2631 "$P_SRV dtls=1 debug_level=3 tickets=0 cache_timeout=0" \
2632 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 reco_delay=2" \
2633 0 \
2634 -s "session successfully restored from cache" \
2635 -S "session successfully restored from ticket" \
2636 -s "a session has been resumed" \
2637 -c "a session has been resumed"
2638
Manuel Pégourié-Gonnarda7c37652019-05-20 12:46:26 +02002639run_test "Session resume using cache, DTLS: session copy" \
2640 "$P_SRV dtls=1 debug_level=3 tickets=0" \
2641 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1 reco_mode=0" \
2642 0 \
2643 -s "session successfully restored from cache" \
2644 -S "session successfully restored from ticket" \
2645 -s "a session has been resumed" \
2646 -c "a session has been resumed"
2647
Hanno Becker1d739932018-08-21 13:55:22 +01002648run_test "Session resume using cache, DTLS: openssl client" \
2649 "$P_SRV dtls=1 debug_level=3 tickets=0" \
2650 "( $O_CLI -dtls1 -sess_out $SESSION; \
2651 $O_CLI -dtls1 -sess_in $SESSION; \
2652 rm -f $SESSION )" \
2653 0 \
2654 -s "found session ticket extension" \
2655 -S "server hello, adding session ticket extension" \
2656 -s "session successfully restored from cache" \
2657 -S "session successfully restored from ticket" \
2658 -s "a session has been resumed"
2659
2660run_test "Session resume using cache, DTLS: openssl server" \
2661 "$O_SRV -dtls1" \
2662 "$P_CLI dtls=1 debug_level=3 tickets=0 reconnect=1" \
2663 0 \
2664 -C "found session_ticket extension" \
2665 -C "parse new session ticket" \
2666 -c "a session has been resumed"
2667
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002668# Tests for Max Fragment Length extension
2669
Angus Grattonc4dd0732018-04-11 16:28:39 +10002670if [ "$MAX_CONTENT_LEN" -lt "4096" ]; then
2671 printf "${CONFIG_H} defines MBEDTLS_SSL_MAX_CONTENT_LEN to be less than 4096. Fragment length tests will fail.\n"
Hanno Becker6428f8d2017-09-22 16:58:50 +01002672 exit 1
2673fi
2674
Angus Grattonc4dd0732018-04-11 16:28:39 +10002675if [ $MAX_CONTENT_LEN -ne 16384 ]; then
2676 printf "Using non-default maximum content length $MAX_CONTENT_LEN\n"
2677fi
2678
Hanno Becker4aed27e2017-09-18 15:00:34 +01002679requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Hanno Beckerc5266962017-09-18 15:01:50 +01002680run_test "Max fragment length: enabled, default" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002681 "$P_SRV debug_level=3" \
2682 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002683 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002684 -c "Maximum fragment length is $MAX_CONTENT_LEN" \
2685 -s "Maximum fragment length is $MAX_CONTENT_LEN" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002686 -C "client hello, adding max_fragment_length extension" \
2687 -S "found max fragment length extension" \
2688 -S "server hello, max_fragment_length extension" \
2689 -C "found max_fragment_length extension"
2690
Hanno Becker4aed27e2017-09-18 15:00:34 +01002691requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Hanno Beckerc5266962017-09-18 15:01:50 +01002692run_test "Max fragment length: enabled, default, larger message" \
2693 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002694 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002695 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002696 -c "Maximum fragment length is $MAX_CONTENT_LEN" \
2697 -s "Maximum fragment length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002698 -C "client hello, adding max_fragment_length extension" \
2699 -S "found max fragment length extension" \
2700 -S "server hello, max_fragment_length extension" \
2701 -C "found max_fragment_length extension" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002702 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
2703 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01002704 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01002705
2706requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2707run_test "Max fragment length, DTLS: enabled, default, larger message" \
2708 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002709 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002710 1 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002711 -c "Maximum fragment length is $MAX_CONTENT_LEN" \
2712 -s "Maximum fragment length is $MAX_CONTENT_LEN" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002713 -C "client hello, adding max_fragment_length extension" \
2714 -S "found max fragment length extension" \
2715 -S "server hello, max_fragment_length extension" \
2716 -C "found max_fragment_length extension" \
2717 -c "fragment larger than.*maximum "
2718
Angus Grattonc4dd0732018-04-11 16:28:39 +10002719# Run some tests with MBEDTLS_SSL_MAX_FRAGMENT_LENGTH disabled
2720# (session fragment length will be 16384 regardless of mbedtls
2721# content length configuration.)
2722
Hanno Beckerc5266962017-09-18 15:01:50 +01002723requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2724run_test "Max fragment length: disabled, larger message" \
2725 "$P_SRV debug_level=3" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002726 "$P_CLI debug_level=3 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002727 0 \
2728 -C "Maximum fragment length is 16384" \
2729 -S "Maximum fragment length is 16384" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002730 -c "$(( $MAX_CONTENT_LEN + 1)) bytes written in 2 fragments" \
2731 -s "$MAX_CONTENT_LEN bytes read" \
Hanno Becker9cfabe32017-10-18 14:42:01 +01002732 -s "1 bytes read"
Hanno Beckerc5266962017-09-18 15:01:50 +01002733
2734requires_config_disabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
2735run_test "Max fragment length DTLS: disabled, larger message" \
2736 "$P_SRV debug_level=3 dtls=1" \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002737 "$P_CLI debug_level=3 dtls=1 request_size=$(( $MAX_CONTENT_LEN + 1))" \
Hanno Beckerc5266962017-09-18 15:01:50 +01002738 1 \
2739 -C "Maximum fragment length is 16384" \
2740 -S "Maximum fragment length is 16384" \
2741 -c "fragment larger than.*maximum "
2742
2743requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002744run_test "Max fragment length: used by client" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002745 "$P_SRV debug_level=3" \
2746 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002747 0 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002748 -c "Maximum fragment length is 4096" \
2749 -s "Maximum fragment length is 4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002750 -c "client hello, adding max_fragment_length extension" \
2751 -s "found max fragment length extension" \
2752 -s "server hello, max_fragment_length extension" \
2753 -c "found max_fragment_length extension"
2754
Hanno Becker4aed27e2017-09-18 15:00:34 +01002755requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002756run_test "Max fragment length: used by server" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002757 "$P_SRV debug_level=3 max_frag_len=4096" \
2758 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002759 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10002760 -c "Maximum fragment length is $MAX_CONTENT_LEN" \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002761 -s "Maximum fragment length is 4096" \
Manuel Pégourié-Gonnardde143782014-02-20 14:50:42 +01002762 -C "client hello, adding max_fragment_length extension" \
2763 -S "found max fragment length extension" \
2764 -S "server hello, max_fragment_length extension" \
2765 -C "found max_fragment_length extension"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002766
Hanno Becker4aed27e2017-09-18 15:00:34 +01002767requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002768requires_gnutls
2769run_test "Max fragment length: gnutls server" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02002770 "$G_SRV" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002771 "$P_CLI debug_level=3 max_frag_len=4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02002772 0 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002773 -c "Maximum fragment length is 4096" \
Manuel Pégourié-Gonnardbaa7f072014-08-20 20:15:53 +02002774 -c "client hello, adding max_fragment_length extension" \
2775 -c "found max_fragment_length extension"
2776
Hanno Becker4aed27e2017-09-18 15:00:34 +01002777requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002778run_test "Max fragment length: client, message just fits" \
2779 "$P_SRV debug_level=3" \
2780 "$P_CLI debug_level=3 max_frag_len=2048 request_size=2048" \
2781 0 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002782 -c "Maximum fragment length is 2048" \
2783 -s "Maximum fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002784 -c "client hello, adding max_fragment_length extension" \
2785 -s "found max fragment length extension" \
2786 -s "server hello, max_fragment_length extension" \
2787 -c "found max_fragment_length extension" \
2788 -c "2048 bytes written in 1 fragments" \
2789 -s "2048 bytes read"
2790
Hanno Becker4aed27e2017-09-18 15:00:34 +01002791requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002792run_test "Max fragment length: client, larger message" \
2793 "$P_SRV debug_level=3" \
2794 "$P_CLI debug_level=3 max_frag_len=2048 request_size=2345" \
2795 0 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002796 -c "Maximum fragment length is 2048" \
2797 -s "Maximum fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002798 -c "client hello, adding max_fragment_length extension" \
2799 -s "found max fragment length extension" \
2800 -s "server hello, max_fragment_length extension" \
2801 -c "found max_fragment_length extension" \
2802 -c "2345 bytes written in 2 fragments" \
2803 -s "2048 bytes read" \
2804 -s "297 bytes read"
2805
Hanno Becker4aed27e2017-09-18 15:00:34 +01002806requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnard23eb74d2015-01-21 14:37:13 +00002807run_test "Max fragment length: DTLS client, larger message" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002808 "$P_SRV debug_level=3 dtls=1" \
2809 "$P_CLI debug_level=3 dtls=1 max_frag_len=2048 request_size=2345" \
2810 1 \
Manuel Pégourié-Gonnarda2cda6b2015-08-31 18:30:52 +02002811 -c "Maximum fragment length is 2048" \
2812 -s "Maximum fragment length is 2048" \
Manuel Pégourié-Gonnard37e08e12014-10-13 17:55:52 +02002813 -c "client hello, adding max_fragment_length extension" \
2814 -s "found max fragment length extension" \
2815 -s "server hello, max_fragment_length extension" \
2816 -c "found max_fragment_length extension" \
2817 -c "fragment larger than.*maximum"
2818
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002819# Tests for renegotiation
2820
Hanno Becker6a243642017-10-12 15:18:45 +01002821# Renegotiation SCSV always added, regardless of SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002822run_test "Renegotiation: none, for reference" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002823 "$P_SRV debug_level=3 exchanges=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002824 "$P_CLI debug_level=3 exchanges=2" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002825 0 \
2826 -C "client hello, adding renegotiation extension" \
2827 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2828 -S "found renegotiation extension" \
2829 -s "server hello, secure renegotiation extension" \
2830 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002831 -C "=> renegotiate" \
2832 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002833 -S "write hello request"
2834
Hanno Becker6a243642017-10-12 15:18:45 +01002835requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002836run_test "Renegotiation: client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002837 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002838 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002839 0 \
2840 -c "client hello, adding renegotiation extension" \
2841 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2842 -s "found renegotiation extension" \
2843 -s "server hello, secure renegotiation extension" \
2844 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002845 -c "=> renegotiate" \
2846 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002847 -S "write hello request"
2848
Hanno Becker6a243642017-10-12 15:18:45 +01002849requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002850run_test "Renegotiation: server-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002851 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002852 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002853 0 \
2854 -c "client hello, adding renegotiation extension" \
2855 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2856 -s "found renegotiation extension" \
2857 -s "server hello, secure renegotiation extension" \
2858 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002859 -c "=> renegotiate" \
2860 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002861 -s "write hello request"
2862
Janos Follathb0f148c2017-10-05 12:29:42 +01002863# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
2864# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
2865# algorithm stronger than SHA-1 is enabled in config.h
Hanno Becker6a243642017-10-12 15:18:45 +01002866requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01002867run_test "Renegotiation: Signature Algorithms parsing, client-initiated" \
2868 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional" \
2869 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
2870 0 \
2871 -c "client hello, adding renegotiation extension" \
2872 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2873 -s "found renegotiation extension" \
2874 -s "server hello, secure renegotiation extension" \
2875 -c "found renegotiation extension" \
2876 -c "=> renegotiate" \
2877 -s "=> renegotiate" \
2878 -S "write hello request" \
2879 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
2880
2881# Checks that no Signature Algorithm with SHA-1 gets negotiated. Negotiating SHA-1 would mean that
2882# the server did not parse the Signature Algorithm extension. This test is valid only if an MD
2883# algorithm stronger than SHA-1 is enabled in config.h
Hanno Becker6a243642017-10-12 15:18:45 +01002884requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Janos Follathb0f148c2017-10-05 12:29:42 +01002885run_test "Renegotiation: Signature Algorithms parsing, server-initiated" \
2886 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
2887 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
2888 0 \
2889 -c "client hello, adding renegotiation extension" \
2890 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2891 -s "found renegotiation extension" \
2892 -s "server hello, secure renegotiation extension" \
2893 -c "found renegotiation extension" \
2894 -c "=> renegotiate" \
2895 -s "=> renegotiate" \
2896 -s "write hello request" \
2897 -S "client hello v3, signature_algorithm ext: 2" # Is SHA-1 negotiated?
2898
Hanno Becker6a243642017-10-12 15:18:45 +01002899requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002900run_test "Renegotiation: double" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002901 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 auth_mode=optional renegotiate=1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002902 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002903 0 \
2904 -c "client hello, adding renegotiation extension" \
2905 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2906 -s "found renegotiation extension" \
2907 -s "server hello, secure renegotiation extension" \
2908 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002909 -c "=> renegotiate" \
2910 -s "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002911 -s "write hello request"
2912
Hanno Becker6a243642017-10-12 15:18:45 +01002913requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002914run_test "Renegotiation: client-initiated, server-rejected" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002915 "$P_SRV debug_level=3 exchanges=2 renegotiation=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002916 "$P_CLI debug_level=3 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002917 1 \
2918 -c "client hello, adding renegotiation extension" \
2919 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2920 -S "found renegotiation extension" \
2921 -s "server hello, secure renegotiation extension" \
2922 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002923 -c "=> renegotiate" \
2924 -S "=> renegotiate" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002925 -S "write hello request" \
Manuel Pégourié-Gonnard65919622014-08-19 12:50:30 +02002926 -c "SSL - Unexpected message at ServerHello in renegotiation" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002927 -c "failed"
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002928
Hanno Becker6a243642017-10-12 15:18:45 +01002929requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002930run_test "Renegotiation: server-initiated, client-rejected, default" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002931 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002932 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002933 0 \
2934 -C "client hello, adding renegotiation extension" \
2935 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2936 -S "found renegotiation extension" \
2937 -s "server hello, secure renegotiation extension" \
2938 -c "found renegotiation extension" \
Manuel Pégourié-Gonnardc73339f2014-02-26 16:35:27 +01002939 -C "=> renegotiate" \
2940 -S "=> renegotiate" \
Manuel Pégourié-Gonnard780d6712014-02-20 17:19:59 +01002941 -s "write hello request" \
Manuel Pégourié-Gonnarda9964db2014-07-03 19:29:16 +02002942 -S "SSL - An unexpected message was received from our peer" \
2943 -S "failed"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01002944
Hanno Becker6a243642017-10-12 15:18:45 +01002945requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002946run_test "Renegotiation: server-initiated, client-rejected, not enforced" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002947 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002948 renego_delay=-1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002949 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002950 0 \
2951 -C "client hello, adding renegotiation extension" \
2952 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2953 -S "found renegotiation extension" \
2954 -s "server hello, secure renegotiation extension" \
2955 -c "found renegotiation extension" \
2956 -C "=> renegotiate" \
2957 -S "=> renegotiate" \
2958 -s "write hello request" \
2959 -S "SSL - An unexpected message was received from our peer" \
2960 -S "failed"
2961
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002962# delay 2 for 1 alert record + 1 application data record
Hanno Becker6a243642017-10-12 15:18:45 +01002963requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002964run_test "Renegotiation: server-initiated, client-rejected, delay 2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002965 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002966 renego_delay=2 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002967 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002968 0 \
2969 -C "client hello, adding renegotiation extension" \
2970 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2971 -S "found renegotiation extension" \
2972 -s "server hello, secure renegotiation extension" \
2973 -c "found renegotiation extension" \
2974 -C "=> renegotiate" \
2975 -S "=> renegotiate" \
2976 -s "write hello request" \
2977 -S "SSL - An unexpected message was received from our peer" \
2978 -S "failed"
2979
Hanno Becker6a243642017-10-12 15:18:45 +01002980requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002981run_test "Renegotiation: server-initiated, client-rejected, delay 0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002982 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002983 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002984 "$P_CLI debug_level=3 exchanges=2 renegotiation=0" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002985 0 \
2986 -C "client hello, adding renegotiation extension" \
2987 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
2988 -S "found renegotiation extension" \
2989 -s "server hello, secure renegotiation extension" \
2990 -c "found renegotiation extension" \
2991 -C "=> renegotiate" \
2992 -S "=> renegotiate" \
2993 -s "write hello request" \
Manuel Pégourié-Gonnarda8c0a0d2014-08-15 12:07:38 +02002994 -s "SSL - An unexpected message was received from our peer"
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02002995
Hanno Becker6a243642017-10-12 15:18:45 +01002996requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02002997run_test "Renegotiation: server-initiated, client-accepted, delay 0" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02002998 "$P_SRV debug_level=3 exchanges=2 renegotiation=1 renegotiate=1 \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01002999 renego_delay=0 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003000 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardfae355e2014-07-04 14:32:27 +02003001 0 \
3002 -c "client hello, adding renegotiation extension" \
3003 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3004 -s "found renegotiation extension" \
3005 -s "server hello, secure renegotiation extension" \
3006 -c "found renegotiation extension" \
3007 -c "=> renegotiate" \
3008 -s "=> renegotiate" \
3009 -s "write hello request" \
3010 -S "SSL - An unexpected message was received from our peer" \
3011 -S "failed"
3012
Hanno Becker6a243642017-10-12 15:18:45 +01003013requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003014run_test "Renegotiation: periodic, just below period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01003015 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003016 "$P_CLI debug_level=3 exchanges=2 renegotiation=1" \
3017 0 \
3018 -C "client hello, adding renegotiation extension" \
3019 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3020 -S "found renegotiation extension" \
3021 -s "server hello, secure renegotiation extension" \
3022 -c "found renegotiation extension" \
3023 -S "record counter limit reached: renegotiate" \
3024 -C "=> renegotiate" \
3025 -S "=> renegotiate" \
3026 -S "write hello request" \
3027 -S "SSL - An unexpected message was received from our peer" \
3028 -S "failed"
3029
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01003030# one extra exchange to be able to complete renego
Hanno Becker6a243642017-10-12 15:18:45 +01003031requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003032run_test "Renegotiation: periodic, just above period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01003033 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01003034 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003035 0 \
3036 -c "client hello, adding renegotiation extension" \
3037 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3038 -s "found renegotiation extension" \
3039 -s "server hello, secure renegotiation extension" \
3040 -c "found renegotiation extension" \
3041 -s "record counter limit reached: renegotiate" \
3042 -c "=> renegotiate" \
3043 -s "=> renegotiate" \
3044 -s "write hello request" \
3045 -S "SSL - An unexpected message was received from our peer" \
3046 -S "failed"
3047
Hanno Becker6a243642017-10-12 15:18:45 +01003048requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003049run_test "Renegotiation: periodic, two times period" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01003050 "$P_SRV debug_level=3 exchanges=9 renegotiation=1 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard9835bc02015-01-14 14:41:58 +01003051 "$P_CLI debug_level=3 exchanges=7 renegotiation=1" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003052 0 \
3053 -c "client hello, adding renegotiation extension" \
3054 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3055 -s "found renegotiation extension" \
3056 -s "server hello, secure renegotiation extension" \
3057 -c "found renegotiation extension" \
3058 -s "record counter limit reached: renegotiate" \
3059 -c "=> renegotiate" \
3060 -s "=> renegotiate" \
3061 -s "write hello request" \
3062 -S "SSL - An unexpected message was received from our peer" \
3063 -S "failed"
3064
Hanno Becker6a243642017-10-12 15:18:45 +01003065requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003066run_test "Renegotiation: periodic, above period, disabled" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01003067 "$P_SRV debug_level=3 exchanges=9 renegotiation=0 renego_period=3 auth_mode=optional" \
Manuel Pégourié-Gonnard590f4162014-11-05 14:23:03 +01003068 "$P_CLI debug_level=3 exchanges=4 renegotiation=1" \
3069 0 \
3070 -C "client hello, adding renegotiation extension" \
3071 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3072 -S "found renegotiation extension" \
3073 -s "server hello, secure renegotiation extension" \
3074 -c "found renegotiation extension" \
3075 -S "record counter limit reached: renegotiate" \
3076 -C "=> renegotiate" \
3077 -S "=> renegotiate" \
3078 -S "write hello request" \
3079 -S "SSL - An unexpected message was received from our peer" \
3080 -S "failed"
3081
Hanno Becker6a243642017-10-12 15:18:45 +01003082requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003083run_test "Renegotiation: nbio, client-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01003084 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003085 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02003086 0 \
3087 -c "client hello, adding renegotiation extension" \
3088 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3089 -s "found renegotiation extension" \
3090 -s "server hello, secure renegotiation extension" \
3091 -c "found renegotiation extension" \
3092 -c "=> renegotiate" \
3093 -s "=> renegotiate" \
3094 -S "write hello request"
3095
Hanno Becker6a243642017-10-12 15:18:45 +01003096requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003097run_test "Renegotiation: nbio, server-initiated" \
Manuel Pégourié-Gonnardfa44f202015-03-27 17:52:25 +01003098 "$P_SRV debug_level=3 nbio=2 exchanges=2 renegotiation=1 renegotiate=1 auth_mode=optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003099 "$P_CLI debug_level=3 nbio=2 exchanges=2 renegotiation=1" \
Manuel Pégourié-Gonnardf07f4212014-08-15 19:04:47 +02003100 0 \
3101 -c "client hello, adding renegotiation extension" \
3102 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3103 -s "found renegotiation extension" \
3104 -s "server hello, secure renegotiation extension" \
3105 -c "found renegotiation extension" \
3106 -c "=> renegotiate" \
3107 -s "=> renegotiate" \
3108 -s "write hello request"
3109
Hanno Becker6a243642017-10-12 15:18:45 +01003110requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003111run_test "Renegotiation: openssl server, client-initiated" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02003112 "$O_SRV -www" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003113 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02003114 0 \
3115 -c "client hello, adding renegotiation extension" \
3116 -c "found renegotiation extension" \
3117 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003118 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02003119 -C "error" \
3120 -c "HTTP/1.0 200 [Oo][Kk]"
3121
Paul Bakker539d9722015-02-08 16:18:35 +01003122requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01003123requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003124run_test "Renegotiation: gnutls server strict, client-initiated" \
3125 "$G_SRV --priority=NORMAL:%SAFE_RENEGOTIATION" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003126 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02003127 0 \
3128 -c "client hello, adding renegotiation extension" \
3129 -c "found renegotiation extension" \
3130 -c "=> renegotiate" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003131 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard51362962014-08-30 21:22:47 +02003132 -C "error" \
3133 -c "HTTP/1.0 200 [Oo][Kk]"
3134
Paul Bakker539d9722015-02-08 16:18:35 +01003135requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01003136requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003137run_test "Renegotiation: gnutls server unsafe, client-initiated default" \
3138 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
3139 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1" \
3140 1 \
3141 -c "client hello, adding renegotiation extension" \
3142 -C "found renegotiation extension" \
3143 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003144 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003145 -c "error" \
3146 -C "HTTP/1.0 200 [Oo][Kk]"
3147
Paul Bakker539d9722015-02-08 16:18:35 +01003148requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01003149requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003150run_test "Renegotiation: gnutls server unsafe, client-inititated no legacy" \
3151 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
3152 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
3153 allow_legacy=0" \
3154 1 \
3155 -c "client hello, adding renegotiation extension" \
3156 -C "found renegotiation extension" \
3157 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003158 -c "mbedtls_ssl_handshake() returned" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003159 -c "error" \
3160 -C "HTTP/1.0 200 [Oo][Kk]"
3161
Paul Bakker539d9722015-02-08 16:18:35 +01003162requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01003163requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003164run_test "Renegotiation: gnutls server unsafe, client-inititated legacy" \
3165 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
3166 "$P_CLI debug_level=3 exchanges=1 renegotiation=1 renegotiate=1 \
3167 allow_legacy=1" \
3168 0 \
3169 -c "client hello, adding renegotiation extension" \
3170 -C "found renegotiation extension" \
3171 -c "=> renegotiate" \
3172 -C "ssl_hanshake() returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003173 -C "error" \
3174 -c "HTTP/1.0 200 [Oo][Kk]"
3175
Hanno Becker6a243642017-10-12 15:18:45 +01003176requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard30d16eb2014-08-19 17:43:50 +02003177run_test "Renegotiation: DTLS, client-initiated" \
3178 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1" \
3179 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
3180 0 \
3181 -c "client hello, adding renegotiation extension" \
3182 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3183 -s "found renegotiation extension" \
3184 -s "server hello, secure renegotiation extension" \
3185 -c "found renegotiation extension" \
3186 -c "=> renegotiate" \
3187 -s "=> renegotiate" \
3188 -S "write hello request"
3189
Hanno Becker6a243642017-10-12 15:18:45 +01003190requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02003191run_test "Renegotiation: DTLS, server-initiated" \
3192 "$P_SRV debug_level=3 dtls=1 exchanges=2 renegotiation=1 renegotiate=1" \
Manuel Pégourié-Gonnarddf9a0a82014-10-02 14:17:18 +02003193 "$P_CLI debug_level=3 dtls=1 exchanges=2 renegotiation=1 \
3194 read_timeout=1000 max_resend=2" \
Manuel Pégourié-Gonnardc392b242014-08-19 17:53:11 +02003195 0 \
3196 -c "client hello, adding renegotiation extension" \
3197 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3198 -s "found renegotiation extension" \
3199 -s "server hello, secure renegotiation extension" \
3200 -c "found renegotiation extension" \
3201 -c "=> renegotiate" \
3202 -s "=> renegotiate" \
3203 -s "write hello request"
3204
Hanno Becker6a243642017-10-12 15:18:45 +01003205requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Andres AG692ad842017-01-19 16:30:57 +00003206run_test "Renegotiation: DTLS, renego_period overflow" \
3207 "$P_SRV debug_level=3 dtls=1 exchanges=4 renegotiation=1 renego_period=18446462598732840962 auth_mode=optional" \
3208 "$P_CLI debug_level=3 dtls=1 exchanges=4 renegotiation=1" \
3209 0 \
3210 -c "client hello, adding renegotiation extension" \
3211 -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
3212 -s "found renegotiation extension" \
3213 -s "server hello, secure renegotiation extension" \
3214 -s "record counter limit reached: renegotiate" \
3215 -c "=> renegotiate" \
3216 -s "=> renegotiate" \
Hanno Becker6a243642017-10-12 15:18:45 +01003217 -s "write hello request"
Andres AG692ad842017-01-19 16:30:57 +00003218
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +00003219requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01003220requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02003221run_test "Renegotiation: DTLS, gnutls server, client-initiated" \
3222 "$G_SRV -u --mtu 4096" \
3223 "$P_CLI debug_level=3 dtls=1 exchanges=1 renegotiation=1 renegotiate=1" \
3224 0 \
3225 -c "client hello, adding renegotiation extension" \
3226 -c "found renegotiation extension" \
3227 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003228 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardf1499f62014-08-31 17:13:13 +02003229 -C "error" \
3230 -s "Extra-header:"
3231
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003232# Test for the "secure renegotation" extension only (no actual renegotiation)
3233
Paul Bakker539d9722015-02-08 16:18:35 +01003234requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003235run_test "Renego ext: gnutls server strict, client default" \
3236 "$G_SRV --priority=NORMAL:%SAFE_RENEGOTIATION" \
3237 "$P_CLI debug_level=3" \
3238 0 \
3239 -c "found renegotiation extension" \
3240 -C "error" \
3241 -c "HTTP/1.0 200 [Oo][Kk]"
3242
Paul Bakker539d9722015-02-08 16:18:35 +01003243requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003244run_test "Renego ext: gnutls server unsafe, client default" \
3245 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
3246 "$P_CLI debug_level=3" \
3247 0 \
3248 -C "found renegotiation extension" \
3249 -C "error" \
3250 -c "HTTP/1.0 200 [Oo][Kk]"
3251
Paul Bakker539d9722015-02-08 16:18:35 +01003252requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003253run_test "Renego ext: gnutls server unsafe, client break legacy" \
3254 "$G_SRV --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION" \
3255 "$P_CLI debug_level=3 allow_legacy=-1" \
3256 1 \
3257 -C "found renegotiation extension" \
3258 -c "error" \
3259 -C "HTTP/1.0 200 [Oo][Kk]"
3260
Paul Bakker539d9722015-02-08 16:18:35 +01003261requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003262run_test "Renego ext: gnutls client strict, server default" \
3263 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003264 "$G_CLI --priority=NORMAL:%SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003265 0 \
3266 -s "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
3267 -s "server hello, secure renegotiation extension"
3268
Paul Bakker539d9722015-02-08 16:18:35 +01003269requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003270run_test "Renego ext: gnutls client unsafe, server default" \
3271 "$P_SRV debug_level=3" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003272 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003273 0 \
3274 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
3275 -S "server hello, secure renegotiation extension"
3276
Paul Bakker539d9722015-02-08 16:18:35 +01003277requires_gnutls
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003278run_test "Renego ext: gnutls client unsafe, server break legacy" \
3279 "$P_SRV debug_level=3 allow_legacy=-1" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003280 "$G_CLI --priority=NORMAL:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard85d915b2014-11-03 20:10:36 +01003281 1 \
3282 -S "received TLS_EMPTY_RENEGOTIATION_INFO\|found renegotiation extension" \
3283 -S "server hello, secure renegotiation extension"
3284
Janos Follath0b242342016-02-17 10:11:21 +00003285# Tests for silently dropping trailing extra bytes in .der certificates
3286
3287requires_gnutls
3288run_test "DER format: no trailing bytes" \
3289 "$P_SRV crt_file=data_files/server5-der0.crt \
3290 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003291 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00003292 0 \
3293 -c "Handshake was completed" \
3294
3295requires_gnutls
3296run_test "DER format: with a trailing zero byte" \
3297 "$P_SRV crt_file=data_files/server5-der1a.crt \
3298 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003299 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00003300 0 \
3301 -c "Handshake was completed" \
3302
3303requires_gnutls
3304run_test "DER format: with a trailing random byte" \
3305 "$P_SRV crt_file=data_files/server5-der1b.crt \
3306 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003307 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00003308 0 \
3309 -c "Handshake was completed" \
3310
3311requires_gnutls
3312run_test "DER format: with 2 trailing random bytes" \
3313 "$P_SRV crt_file=data_files/server5-der2.crt \
3314 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003315 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00003316 0 \
3317 -c "Handshake was completed" \
3318
3319requires_gnutls
3320run_test "DER format: with 4 trailing random bytes" \
3321 "$P_SRV crt_file=data_files/server5-der4.crt \
3322 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003323 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00003324 0 \
3325 -c "Handshake was completed" \
3326
3327requires_gnutls
3328run_test "DER format: with 8 trailing random bytes" \
3329 "$P_SRV crt_file=data_files/server5-der8.crt \
3330 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003331 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00003332 0 \
3333 -c "Handshake was completed" \
3334
3335requires_gnutls
3336run_test "DER format: with 9 trailing random bytes" \
3337 "$P_SRV crt_file=data_files/server5-der9.crt \
3338 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02003339 "$G_CLI localhost" \
Janos Follath0b242342016-02-17 10:11:21 +00003340 0 \
3341 -c "Handshake was completed" \
3342
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03003343# Tests for auth_mode, there are duplicated tests using ca callback for authentication
3344# When updating these tests, modify the matching authentication tests accordingly
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003345
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003346run_test "Authentication: server badcert, client required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003347 "$P_SRV crt_file=data_files/server5-badsign.crt \
3348 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003349 "$P_CLI debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003350 1 \
3351 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003352 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003353 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003354 -c "X509 - Certificate verification failed"
3355
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003356run_test "Authentication: server badcert, client optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003357 "$P_SRV crt_file=data_files/server5-badsign.crt \
3358 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003359 "$P_CLI debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003360 0 \
3361 -c "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003362 -c "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003363 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003364 -C "X509 - Certificate verification failed"
3365
Hanno Beckere6706e62017-05-15 16:05:15 +01003366run_test "Authentication: server goodcert, client optional, no trusted CA" \
3367 "$P_SRV" \
3368 "$P_CLI debug_level=3 auth_mode=optional ca_file=none ca_path=none" \
3369 0 \
3370 -c "x509_verify_cert() returned" \
3371 -c "! The certificate is not correctly signed by the trusted CA" \
3372 -c "! Certificate verification flags"\
3373 -C "! mbedtls_ssl_handshake returned" \
3374 -C "X509 - Certificate verification failed" \
3375 -C "SSL - No CA Chain is set, but required to operate"
3376
3377run_test "Authentication: server goodcert, client required, no trusted CA" \
3378 "$P_SRV" \
3379 "$P_CLI debug_level=3 auth_mode=required ca_file=none ca_path=none" \
3380 1 \
3381 -c "x509_verify_cert() returned" \
3382 -c "! The certificate is not correctly signed by the trusted CA" \
3383 -c "! Certificate verification flags"\
3384 -c "! mbedtls_ssl_handshake returned" \
3385 -c "SSL - No CA Chain is set, but required to operate"
3386
3387# The purpose of the next two tests is to test the client's behaviour when receiving a server
3388# certificate with an unsupported elliptic curve. This should usually not happen because
3389# the client informs the server about the supported curves - it does, though, in the
3390# corner case of a static ECDH suite, because the server doesn't check the curve on that
3391# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
3392# different means to have the server ignoring the client's supported curve list.
3393
3394requires_config_enabled MBEDTLS_ECP_C
3395run_test "Authentication: server ECDH p256v1, client required, p256v1 unsupported" \
3396 "$P_SRV debug_level=1 key_file=data_files/server5.key \
3397 crt_file=data_files/server5.ku-ka.crt" \
3398 "$P_CLI debug_level=3 auth_mode=required curves=secp521r1" \
3399 1 \
3400 -c "bad certificate (EC key curve)"\
3401 -c "! Certificate verification flags"\
3402 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
3403
3404requires_config_enabled MBEDTLS_ECP_C
3405run_test "Authentication: server ECDH p256v1, client optional, p256v1 unsupported" \
3406 "$P_SRV debug_level=1 key_file=data_files/server5.key \
3407 crt_file=data_files/server5.ku-ka.crt" \
3408 "$P_CLI debug_level=3 auth_mode=optional curves=secp521r1" \
3409 1 \
3410 -c "bad certificate (EC key curve)"\
3411 -c "! Certificate verification flags"\
3412 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
3413
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003414run_test "Authentication: server badcert, client none" \
Manuel Pégourié-Gonnardc1da6642014-02-25 14:18:30 +01003415 "$P_SRV crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003416 key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003417 "$P_CLI debug_level=1 auth_mode=none" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003418 0 \
3419 -C "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003420 -C "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003421 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003422 -C "X509 - Certificate verification failed"
3423
Simon Butcher99000142016-10-13 17:21:01 +01003424run_test "Authentication: client SHA256, server required" \
3425 "$P_SRV auth_mode=required" \
3426 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
3427 key_file=data_files/server6.key \
3428 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
3429 0 \
3430 -c "Supported Signature Algorithm found: 4," \
3431 -c "Supported Signature Algorithm found: 5,"
3432
3433run_test "Authentication: client SHA384, server required" \
3434 "$P_SRV auth_mode=required" \
3435 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
3436 key_file=data_files/server6.key \
3437 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
3438 0 \
3439 -c "Supported Signature Algorithm found: 4," \
3440 -c "Supported Signature Algorithm found: 5,"
3441
Gilles Peskinefd8332e2017-05-03 16:25:07 +02003442requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
3443run_test "Authentication: client has no cert, server required (SSLv3)" \
3444 "$P_SRV debug_level=3 min_version=ssl3 auth_mode=required" \
3445 "$P_CLI debug_level=3 force_version=ssl3 crt_file=none \
3446 key_file=data_files/server5.key" \
3447 1 \
3448 -S "skip write certificate request" \
3449 -C "skip parse certificate request" \
3450 -c "got a certificate request" \
3451 -c "got no certificate to send" \
3452 -S "x509_verify_cert() returned" \
3453 -s "client has no certificate" \
3454 -s "! mbedtls_ssl_handshake returned" \
3455 -c "! mbedtls_ssl_handshake returned" \
3456 -s "No client certification received from the client, but required by the authentication mode"
3457
3458run_test "Authentication: client has no cert, server required (TLS)" \
3459 "$P_SRV debug_level=3 auth_mode=required" \
3460 "$P_CLI debug_level=3 crt_file=none \
3461 key_file=data_files/server5.key" \
3462 1 \
3463 -S "skip write certificate request" \
3464 -C "skip parse certificate request" \
3465 -c "got a certificate request" \
3466 -c "= write certificate$" \
3467 -C "skip write certificate$" \
3468 -S "x509_verify_cert() returned" \
3469 -s "client has no certificate" \
3470 -s "! mbedtls_ssl_handshake returned" \
3471 -c "! mbedtls_ssl_handshake returned" \
3472 -s "No client certification received from the client, but required by the authentication mode"
3473
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003474run_test "Authentication: client badcert, server required" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003475 "$P_SRV debug_level=3 auth_mode=required" \
3476 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003477 key_file=data_files/server5.key" \
3478 1 \
3479 -S "skip write certificate request" \
3480 -C "skip parse certificate request" \
3481 -c "got a certificate request" \
3482 -C "skip write certificate" \
3483 -C "skip write certificate verify" \
3484 -S "skip parse certificate verify" \
3485 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003486 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003487 -s "! mbedtls_ssl_handshake returned" \
Gilles Peskine1cc8e342017-05-03 16:28:34 +02003488 -s "send alert level=2 message=48" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003489 -c "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003490 -s "X509 - Certificate verification failed"
Gilles Peskine1cc8e342017-05-03 16:28:34 +02003491# We don't check that the client receives the alert because it might
3492# detect that its write end of the connection is closed and abort
3493# before reading the alert message.
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003494
Janos Follath89baba22017-04-10 14:34:35 +01003495run_test "Authentication: client cert not trusted, server required" \
3496 "$P_SRV debug_level=3 auth_mode=required" \
3497 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
3498 key_file=data_files/server5.key" \
3499 1 \
3500 -S "skip write certificate request" \
3501 -C "skip parse certificate request" \
3502 -c "got a certificate request" \
3503 -C "skip write certificate" \
3504 -C "skip write certificate verify" \
3505 -S "skip parse certificate verify" \
3506 -s "x509_verify_cert() returned" \
3507 -s "! The certificate is not correctly signed by the trusted CA" \
3508 -s "! mbedtls_ssl_handshake returned" \
3509 -c "! mbedtls_ssl_handshake returned" \
3510 -s "X509 - Certificate verification failed"
3511
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003512run_test "Authentication: client badcert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003513 "$P_SRV debug_level=3 auth_mode=optional" \
3514 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003515 key_file=data_files/server5.key" \
3516 0 \
3517 -S "skip write certificate request" \
3518 -C "skip parse certificate request" \
3519 -c "got a certificate request" \
3520 -C "skip write certificate" \
3521 -C "skip write certificate verify" \
3522 -S "skip parse certificate verify" \
3523 -s "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003524 -s "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003525 -S "! mbedtls_ssl_handshake returned" \
3526 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003527 -S "X509 - Certificate verification failed"
3528
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003529run_test "Authentication: client badcert, server none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003530 "$P_SRV debug_level=3 auth_mode=none" \
3531 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003532 key_file=data_files/server5.key" \
3533 0 \
3534 -s "skip write certificate request" \
3535 -C "skip parse certificate request" \
3536 -c "got no certificate request" \
3537 -c "skip write certificate" \
3538 -c "skip write certificate verify" \
3539 -s "skip parse certificate verify" \
3540 -S "x509_verify_cert() returned" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003541 -S "! The certificate is not correctly signed by the trusted CA" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003542 -S "! mbedtls_ssl_handshake returned" \
3543 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01003544 -S "X509 - Certificate verification failed"
3545
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003546run_test "Authentication: client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003547 "$P_SRV debug_level=3 auth_mode=optional" \
3548 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003549 0 \
3550 -S "skip write certificate request" \
3551 -C "skip parse certificate request" \
3552 -c "got a certificate request" \
3553 -C "skip write certificate$" \
3554 -C "got no certificate to send" \
3555 -S "SSLv3 client has no certificate" \
3556 -c "skip write certificate verify" \
3557 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003558 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003559 -S "! mbedtls_ssl_handshake returned" \
3560 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003561 -S "X509 - Certificate verification failed"
3562
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003563run_test "Authentication: openssl client no cert, server optional" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003564 "$P_SRV debug_level=3 auth_mode=optional" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003565 "$O_CLI" \
3566 0 \
3567 -S "skip write certificate request" \
3568 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003569 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003570 -S "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003571 -S "X509 - Certificate verification failed"
3572
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003573run_test "Authentication: client no cert, openssl server optional" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003574 "$O_SRV -verify 10" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003575 "$P_CLI debug_level=3 crt_file=none key_file=none" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003576 0 \
3577 -C "skip parse certificate request" \
3578 -c "got a certificate request" \
3579 -C "skip write certificate$" \
3580 -c "skip write certificate verify" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003581 -C "! mbedtls_ssl_handshake returned"
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003582
Gilles Peskinefd8332e2017-05-03 16:25:07 +02003583run_test "Authentication: client no cert, openssl server required" \
3584 "$O_SRV -Verify 10" \
3585 "$P_CLI debug_level=3 crt_file=none key_file=none" \
3586 1 \
3587 -C "skip parse certificate request" \
3588 -c "got a certificate request" \
3589 -C "skip write certificate$" \
3590 -c "skip write certificate verify" \
3591 -c "! mbedtls_ssl_handshake returned"
3592
Janos Follathe2681a42016-03-07 15:57:05 +00003593requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003594run_test "Authentication: client no cert, ssl3" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02003595 "$P_SRV debug_level=3 auth_mode=optional force_version=ssl3" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01003596 "$P_CLI debug_level=3 crt_file=none key_file=none min_version=ssl3" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003597 0 \
3598 -S "skip write certificate request" \
3599 -C "skip parse certificate request" \
3600 -c "got a certificate request" \
3601 -C "skip write certificate$" \
3602 -c "skip write certificate verify" \
3603 -c "got no certificate to send" \
3604 -s "SSLv3 client has no certificate" \
3605 -s "skip parse certificate verify" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01003606 -s "! Certificate was missing" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02003607 -S "! mbedtls_ssl_handshake returned" \
3608 -C "! mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnardde515cc2014-02-27 14:58:26 +01003609 -S "X509 - Certificate verification failed"
3610
Manuel Pégourié-Gonnard9107b5f2017-07-06 12:16:25 +02003611# The "max_int chain" tests assume that MAX_INTERMEDIATE_CA is set to its
3612# default value (8)
Hanno Beckera6bca9f2017-07-26 13:35:11 +01003613
Simon Butcherbcfa6f42017-07-28 15:59:35 +01003614MAX_IM_CA='8'
Simon Butcher06b78632017-07-28 01:00:17 +01003615MAX_IM_CA_CONFIG=$( ../scripts/config.pl get MBEDTLS_X509_MAX_INTERMEDIATE_CA)
Hanno Beckera6bca9f2017-07-26 13:35:11 +01003616
Simon Butcherbcfa6f42017-07-28 15:59:35 +01003617if [ -n "$MAX_IM_CA_CONFIG" ] && [ "$MAX_IM_CA_CONFIG" -ne "$MAX_IM_CA" ]; then
Simon Butcher06b78632017-07-28 01:00:17 +01003618 printf "The ${CONFIG_H} file contains a value for the configuration of\n"
Simon Butcherbcfa6f42017-07-28 15:59:35 +01003619 printf "MBEDTLS_X509_MAX_INTERMEDIATE_CA that is different from the script’s\n"
Simon Butcher06b78632017-07-28 01:00:17 +01003620 printf "test value of ${MAX_IM_CA}. \n"
3621 printf "\n"
Simon Butcherbcfa6f42017-07-28 15:59:35 +01003622 printf "The tests assume this value and if it changes, the tests in this\n"
3623 printf "script should also be adjusted.\n"
Simon Butcher06b78632017-07-28 01:00:17 +01003624 printf "\n"
Simon Butcher06b78632017-07-28 01:00:17 +01003625
3626 exit 1
Hanno Beckera6bca9f2017-07-26 13:35:11 +01003627fi
3628
Angus Grattonc4dd0732018-04-11 16:28:39 +10003629requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003630run_test "Authentication: server max_int chain, client default" \
3631 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
3632 key_file=data_files/dir-maxpath/09.key" \
3633 "$P_CLI server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
3634 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003635 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003636
Angus Grattonc4dd0732018-04-11 16:28:39 +10003637requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003638run_test "Authentication: server max_int+1 chain, client default" \
3639 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3640 key_file=data_files/dir-maxpath/10.key" \
3641 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
3642 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003643 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003644
Angus Grattonc4dd0732018-04-11 16:28:39 +10003645requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003646run_test "Authentication: server max_int+1 chain, client optional" \
3647 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3648 key_file=data_files/dir-maxpath/10.key" \
3649 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
3650 auth_mode=optional" \
3651 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003652 -c "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003653
Angus Grattonc4dd0732018-04-11 16:28:39 +10003654requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003655run_test "Authentication: server max_int+1 chain, client none" \
3656 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3657 key_file=data_files/dir-maxpath/10.key" \
3658 "$P_CLI server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
3659 auth_mode=none" \
3660 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003661 -C "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003662
Angus Grattonc4dd0732018-04-11 16:28:39 +10003663requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003664run_test "Authentication: client max_int+1 chain, server default" \
3665 "$P_SRV ca_file=data_files/dir-maxpath/00.crt" \
3666 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3667 key_file=data_files/dir-maxpath/10.key" \
3668 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003669 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003670
Angus Grattonc4dd0732018-04-11 16:28:39 +10003671requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003672run_test "Authentication: client max_int+1 chain, server optional" \
3673 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
3674 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3675 key_file=data_files/dir-maxpath/10.key" \
3676 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003677 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003678
Angus Grattonc4dd0732018-04-11 16:28:39 +10003679requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003680run_test "Authentication: client max_int+1 chain, server required" \
3681 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
3682 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3683 key_file=data_files/dir-maxpath/10.key" \
3684 1 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003685 -s "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003686
Angus Grattonc4dd0732018-04-11 16:28:39 +10003687requires_full_size_output_buffer
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003688run_test "Authentication: client max_int chain, server required" \
3689 "$P_SRV ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
3690 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
3691 key_file=data_files/dir-maxpath/09.key" \
3692 0 \
Antonin Décimo36e89b52019-01-23 15:24:37 +01003693 -S "X509 - A fatal error occurred"
Manuel Pégourié-Gonnard81bb6b62017-06-26 10:45:33 +02003694
Janos Follath89baba22017-04-10 14:34:35 +01003695# Tests for CA list in CertificateRequest messages
3696
3697run_test "Authentication: send CA list in CertificateRequest (default)" \
3698 "$P_SRV debug_level=3 auth_mode=required" \
3699 "$P_CLI crt_file=data_files/server6.crt \
3700 key_file=data_files/server6.key" \
3701 0 \
3702 -s "requested DN"
3703
3704run_test "Authentication: do not send CA list in CertificateRequest" \
3705 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
3706 "$P_CLI crt_file=data_files/server6.crt \
3707 key_file=data_files/server6.key" \
3708 0 \
3709 -S "requested DN"
3710
3711run_test "Authentication: send CA list in CertificateRequest, client self signed" \
3712 "$P_SRV debug_level=3 auth_mode=required cert_req_ca_list=0" \
3713 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
3714 key_file=data_files/server5.key" \
3715 1 \
3716 -S "requested DN" \
3717 -s "x509_verify_cert() returned" \
3718 -s "! The certificate is not correctly signed by the trusted CA" \
3719 -s "! mbedtls_ssl_handshake returned" \
3720 -c "! mbedtls_ssl_handshake returned" \
3721 -s "X509 - Certificate verification failed"
3722
Jarno Lamsaf7a7f9e2019-04-01 15:11:54 +03003723# Tests for auth_mode, using CA callback, these are duplicated from the authentication tests
3724# When updating these tests, modify the matching authentication tests accordingly
Hanno Becker746aaf32019-03-28 15:25:23 +00003725
3726requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3727run_test "Authentication, CA callback: server badcert, client required" \
3728 "$P_SRV crt_file=data_files/server5-badsign.crt \
3729 key_file=data_files/server5.key" \
3730 "$P_CLI ca_callback=1 debug_level=3 auth_mode=required" \
3731 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003732 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003733 -c "x509_verify_cert() returned" \
3734 -c "! The certificate is not correctly signed by the trusted CA" \
3735 -c "! mbedtls_ssl_handshake returned" \
3736 -c "X509 - Certificate verification failed"
3737
3738requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3739run_test "Authentication, CA callback: server badcert, client optional" \
3740 "$P_SRV crt_file=data_files/server5-badsign.crt \
3741 key_file=data_files/server5.key" \
3742 "$P_CLI ca_callback=1 debug_level=3 auth_mode=optional" \
3743 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003744 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003745 -c "x509_verify_cert() returned" \
3746 -c "! The certificate is not correctly signed by the trusted CA" \
3747 -C "! mbedtls_ssl_handshake returned" \
3748 -C "X509 - Certificate verification failed"
3749
3750# The purpose of the next two tests is to test the client's behaviour when receiving a server
3751# certificate with an unsupported elliptic curve. This should usually not happen because
3752# the client informs the server about the supported curves - it does, though, in the
3753# corner case of a static ECDH suite, because the server doesn't check the curve on that
3754# occasion (to be fixed). If that bug's fixed, the test needs to be altered to use a
3755# different means to have the server ignoring the client's supported curve list.
3756
3757requires_config_enabled MBEDTLS_ECP_C
3758requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3759run_test "Authentication, CA callback: server ECDH p256v1, client required, p256v1 unsupported" \
3760 "$P_SRV debug_level=1 key_file=data_files/server5.key \
3761 crt_file=data_files/server5.ku-ka.crt" \
3762 "$P_CLI ca_callback=1 debug_level=3 auth_mode=required curves=secp521r1" \
3763 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003764 -c "use CA callback for X.509 CRT verification" \
3765 -c "bad certificate (EC key curve)" \
3766 -c "! Certificate verification flags" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003767 -C "bad server certificate (ECDH curve)" # Expect failure at earlier verification stage
3768
3769requires_config_enabled MBEDTLS_ECP_C
3770requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3771run_test "Authentication, CA callback: server ECDH p256v1, client optional, p256v1 unsupported" \
3772 "$P_SRV debug_level=1 key_file=data_files/server5.key \
3773 crt_file=data_files/server5.ku-ka.crt" \
3774 "$P_CLI ca_callback=1 debug_level=3 auth_mode=optional curves=secp521r1" \
3775 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003776 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003777 -c "bad certificate (EC key curve)"\
3778 -c "! Certificate verification flags"\
3779 -c "bad server certificate (ECDH curve)" # Expect failure only at ECDH params check
3780
3781requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3782run_test "Authentication, CA callback: client SHA256, server required" \
3783 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
3784 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
3785 key_file=data_files/server6.key \
3786 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384" \
3787 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003788 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003789 -c "Supported Signature Algorithm found: 4," \
3790 -c "Supported Signature Algorithm found: 5,"
3791
3792requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3793run_test "Authentication, CA callback: client SHA384, server required" \
3794 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
3795 "$P_CLI debug_level=3 crt_file=data_files/server6.crt \
3796 key_file=data_files/server6.key \
3797 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256" \
3798 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003799 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003800 -c "Supported Signature Algorithm found: 4," \
3801 -c "Supported Signature Algorithm found: 5,"
3802
3803requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3804run_test "Authentication, CA callback: client badcert, server required" \
3805 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
3806 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
3807 key_file=data_files/server5.key" \
3808 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003809 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003810 -S "skip write certificate request" \
3811 -C "skip parse certificate request" \
3812 -c "got a certificate request" \
3813 -C "skip write certificate" \
3814 -C "skip write certificate verify" \
3815 -S "skip parse certificate verify" \
3816 -s "x509_verify_cert() returned" \
3817 -s "! The certificate is not correctly signed by the trusted CA" \
3818 -s "! mbedtls_ssl_handshake returned" \
3819 -s "send alert level=2 message=48" \
3820 -c "! mbedtls_ssl_handshake returned" \
3821 -s "X509 - Certificate verification failed"
3822# We don't check that the client receives the alert because it might
3823# detect that its write end of the connection is closed and abort
3824# before reading the alert message.
3825
3826requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3827run_test "Authentication, CA callback: client cert not trusted, server required" \
3828 "$P_SRV ca_callback=1 debug_level=3 auth_mode=required" \
3829 "$P_CLI debug_level=3 crt_file=data_files/server5-selfsigned.crt \
3830 key_file=data_files/server5.key" \
3831 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003832 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003833 -S "skip write certificate request" \
3834 -C "skip parse certificate request" \
3835 -c "got a certificate request" \
3836 -C "skip write certificate" \
3837 -C "skip write certificate verify" \
3838 -S "skip parse certificate verify" \
3839 -s "x509_verify_cert() returned" \
3840 -s "! The certificate is not correctly signed by the trusted CA" \
3841 -s "! mbedtls_ssl_handshake returned" \
3842 -c "! mbedtls_ssl_handshake returned" \
3843 -s "X509 - Certificate verification failed"
3844
3845requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3846run_test "Authentication, CA callback: client badcert, server optional" \
3847 "$P_SRV ca_callback=1 debug_level=3 auth_mode=optional" \
3848 "$P_CLI debug_level=3 crt_file=data_files/server5-badsign.crt \
3849 key_file=data_files/server5.key" \
3850 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003851 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003852 -S "skip write certificate request" \
3853 -C "skip parse certificate request" \
3854 -c "got a certificate request" \
3855 -C "skip write certificate" \
3856 -C "skip write certificate verify" \
3857 -S "skip parse certificate verify" \
3858 -s "x509_verify_cert() returned" \
3859 -s "! The certificate is not correctly signed by the trusted CA" \
3860 -S "! mbedtls_ssl_handshake returned" \
3861 -C "! mbedtls_ssl_handshake returned" \
3862 -S "X509 - Certificate verification failed"
3863
3864requires_full_size_output_buffer
3865requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3866run_test "Authentication, CA callback: server max_int chain, client default" \
3867 "$P_SRV crt_file=data_files/dir-maxpath/c09.pem \
3868 key_file=data_files/dir-maxpath/09.key" \
3869 "$P_CLI ca_callback=1 debug_level=3 server_name=CA09 ca_file=data_files/dir-maxpath/00.crt" \
3870 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003871 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003872 -C "X509 - A fatal error occurred"
3873
3874requires_full_size_output_buffer
3875requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3876run_test "Authentication, CA callback: server max_int+1 chain, client default" \
3877 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3878 key_file=data_files/dir-maxpath/10.key" \
3879 "$P_CLI debug_level=3 ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt" \
3880 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003881 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003882 -c "X509 - A fatal error occurred"
3883
3884requires_full_size_output_buffer
3885requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3886run_test "Authentication, CA callback: server max_int+1 chain, client optional" \
3887 "$P_SRV crt_file=data_files/dir-maxpath/c10.pem \
3888 key_file=data_files/dir-maxpath/10.key" \
3889 "$P_CLI ca_callback=1 server_name=CA10 ca_file=data_files/dir-maxpath/00.crt \
3890 debug_level=3 auth_mode=optional" \
3891 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003892 -c "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003893 -c "X509 - A fatal error occurred"
3894
3895requires_full_size_output_buffer
3896requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3897run_test "Authentication, CA callback: client max_int+1 chain, server optional" \
3898 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=optional" \
3899 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3900 key_file=data_files/dir-maxpath/10.key" \
3901 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003902 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003903 -s "X509 - A fatal error occurred"
3904
3905requires_full_size_output_buffer
3906requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3907run_test "Authentication, CA callback: client max_int+1 chain, server required" \
3908 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
3909 "$P_CLI crt_file=data_files/dir-maxpath/c10.pem \
3910 key_file=data_files/dir-maxpath/10.key" \
3911 1 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003912 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003913 -s "X509 - A fatal error occurred"
3914
3915requires_full_size_output_buffer
3916requires_config_enabled MBEDTLS_X509_TRUSTED_CERTIFICATE_CALLBACK
3917run_test "Authentication, CA callback: client max_int chain, server required" \
3918 "$P_SRV ca_callback=1 debug_level=3 ca_file=data_files/dir-maxpath/00.crt auth_mode=required" \
3919 "$P_CLI crt_file=data_files/dir-maxpath/c09.pem \
3920 key_file=data_files/dir-maxpath/09.key" \
3921 0 \
Janos Follathd7ecbd62019-04-05 14:52:17 +01003922 -s "use CA callback for X.509 CRT verification" \
Hanno Becker746aaf32019-03-28 15:25:23 +00003923 -S "X509 - A fatal error occurred"
3924
Manuel Pégourié-Gonnarddf331a52015-01-08 16:43:07 +01003925# Tests for certificate selection based on SHA verson
3926
3927run_test "Certificate hash: client TLS 1.2 -> SHA-2" \
3928 "$P_SRV crt_file=data_files/server5.crt \
3929 key_file=data_files/server5.key \
3930 crt_file2=data_files/server5-sha1.crt \
3931 key_file2=data_files/server5.key" \
3932 "$P_CLI force_version=tls1_2" \
3933 0 \
3934 -c "signed using.*ECDSA with SHA256" \
3935 -C "signed using.*ECDSA with SHA1"
3936
3937run_test "Certificate hash: client TLS 1.1 -> SHA-1" \
3938 "$P_SRV crt_file=data_files/server5.crt \
3939 key_file=data_files/server5.key \
3940 crt_file2=data_files/server5-sha1.crt \
3941 key_file2=data_files/server5.key" \
3942 "$P_CLI force_version=tls1_1" \
3943 0 \
3944 -C "signed using.*ECDSA with SHA256" \
3945 -c "signed using.*ECDSA with SHA1"
3946
3947run_test "Certificate hash: client TLS 1.0 -> SHA-1" \
3948 "$P_SRV crt_file=data_files/server5.crt \
3949 key_file=data_files/server5.key \
3950 crt_file2=data_files/server5-sha1.crt \
3951 key_file2=data_files/server5.key" \
3952 "$P_CLI force_version=tls1" \
3953 0 \
3954 -C "signed using.*ECDSA with SHA256" \
3955 -c "signed using.*ECDSA with SHA1"
3956
3957run_test "Certificate hash: client TLS 1.1, no SHA-1 -> SHA-2 (order 1)" \
3958 "$P_SRV crt_file=data_files/server5.crt \
3959 key_file=data_files/server5.key \
3960 crt_file2=data_files/server6.crt \
3961 key_file2=data_files/server6.key" \
3962 "$P_CLI force_version=tls1_1" \
3963 0 \
3964 -c "serial number.*09" \
3965 -c "signed using.*ECDSA with SHA256" \
3966 -C "signed using.*ECDSA with SHA1"
3967
3968run_test "Certificate hash: client TLS 1.1, no SHA-1 -> SHA-2 (order 2)" \
3969 "$P_SRV crt_file=data_files/server6.crt \
3970 key_file=data_files/server6.key \
3971 crt_file2=data_files/server5.crt \
3972 key_file2=data_files/server5.key" \
3973 "$P_CLI force_version=tls1_1" \
3974 0 \
3975 -c "serial number.*0A" \
3976 -c "signed using.*ECDSA with SHA256" \
3977 -C "signed using.*ECDSA with SHA1"
3978
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003979# tests for SNI
3980
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003981run_test "SNI: no SNI callback" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003982 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003983 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003984 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003985 0 \
3986 -S "parse ServerName extension" \
3987 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
3988 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003989
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02003990run_test "SNI: matching cert 1" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003991 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003992 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02003993 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02003994 "$P_CLI server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02003995 0 \
3996 -s "parse ServerName extension" \
3997 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
3998 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01003999
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004000run_test "SNI: matching cert 2" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02004001 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01004002 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02004003 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02004004 "$P_CLI server_name=polarssl.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02004005 0 \
4006 -s "parse ServerName extension" \
4007 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
4008 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01004009
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004010run_test "SNI: no matching cert" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02004011 "$P_SRV debug_level=3 \
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01004012 crt_file=data_files/server5.crt key_file=data_files/server5.key \
Manuel Pégourié-Gonnard4d6f1782015-06-19 14:40:39 +02004013 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02004014 "$P_CLI server_name=nonesuch.example" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02004015 1 \
4016 -s "parse ServerName extension" \
4017 -s "ssl_sni_wrapper() returned" \
4018 -s "mbedtls_ssl_handshake returned" \
4019 -c "mbedtls_ssl_handshake returned" \
4020 -c "SSL - A fatal alert message was received from our peer"
Manuel Pégourié-Gonnard96ea2f22014-02-25 12:26:29 +01004021
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02004022run_test "SNI: client auth no override: optional" \
4023 "$P_SRV debug_level=3 auth_mode=optional \
4024 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4025 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
4026 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02004027 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02004028 -S "skip write certificate request" \
4029 -C "skip parse certificate request" \
4030 -c "got a certificate request" \
4031 -C "skip write certificate" \
4032 -C "skip write certificate verify" \
4033 -S "skip parse certificate verify"
4034
4035run_test "SNI: client auth override: none -> optional" \
4036 "$P_SRV debug_level=3 auth_mode=none \
4037 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4038 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
4039 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02004040 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02004041 -S "skip write certificate request" \
4042 -C "skip parse certificate request" \
4043 -c "got a certificate request" \
4044 -C "skip write certificate" \
4045 -C "skip write certificate verify" \
4046 -S "skip parse certificate verify"
4047
4048run_test "SNI: client auth override: optional -> none" \
4049 "$P_SRV debug_level=3 auth_mode=optional \
4050 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4051 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
4052 "$P_CLI debug_level=3 server_name=localhost" \
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02004053 0 \
Manuel Pégourié-Gonnardc948a792015-06-22 16:04:20 +02004054 -s "skip write certificate request" \
4055 -C "skip parse certificate request" \
4056 -c "got no certificate request" \
4057 -c "skip write certificate" \
4058 -c "skip write certificate verify" \
4059 -s "skip parse certificate verify"
4060
Manuel Pégourié-Gonnard6ea831d2015-06-22 16:50:52 +02004061run_test "SNI: CA no override" \
4062 "$P_SRV debug_level=3 auth_mode=optional \
4063 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4064 ca_file=data_files/test-ca.crt \
4065 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
4066 "$P_CLI debug_level=3 server_name=localhost \
4067 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
4068 1 \
4069 -S "skip write certificate request" \
4070 -C "skip parse certificate request" \
4071 -c "got a certificate request" \
4072 -C "skip write certificate" \
4073 -C "skip write certificate verify" \
4074 -S "skip parse certificate verify" \
4075 -s "x509_verify_cert() returned" \
4076 -s "! The certificate is not correctly signed by the trusted CA" \
4077 -S "The certificate has been revoked (is on a CRL)"
4078
4079run_test "SNI: CA override" \
4080 "$P_SRV debug_level=3 auth_mode=optional \
4081 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4082 ca_file=data_files/test-ca.crt \
4083 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
4084 "$P_CLI debug_level=3 server_name=localhost \
4085 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
4086 0 \
4087 -S "skip write certificate request" \
4088 -C "skip parse certificate request" \
4089 -c "got a certificate request" \
4090 -C "skip write certificate" \
4091 -C "skip write certificate verify" \
4092 -S "skip parse certificate verify" \
4093 -S "x509_verify_cert() returned" \
4094 -S "! The certificate is not correctly signed by the trusted CA" \
4095 -S "The certificate has been revoked (is on a CRL)"
4096
4097run_test "SNI: CA override with CRL" \
4098 "$P_SRV debug_level=3 auth_mode=optional \
4099 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4100 ca_file=data_files/test-ca.crt \
4101 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
4102 "$P_CLI debug_level=3 server_name=localhost \
4103 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
4104 1 \
4105 -S "skip write certificate request" \
4106 -C "skip parse certificate request" \
4107 -c "got a certificate request" \
4108 -C "skip write certificate" \
4109 -C "skip write certificate verify" \
4110 -S "skip parse certificate verify" \
4111 -s "x509_verify_cert() returned" \
4112 -S "! The certificate is not correctly signed by the trusted CA" \
4113 -s "The certificate has been revoked (is on a CRL)"
4114
Andres AG1a834452016-12-07 10:01:30 +00004115# Tests for SNI and DTLS
4116
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01004117run_test "SNI: DTLS, no SNI callback" \
4118 "$P_SRV debug_level=3 dtls=1 \
4119 crt_file=data_files/server5.crt key_file=data_files/server5.key" \
4120 "$P_CLI server_name=localhost dtls=1" \
4121 0 \
4122 -S "parse ServerName extension" \
4123 -c "issuer name *: C=NL, O=PolarSSL, CN=Polarssl Test EC CA" \
4124 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
4125
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01004126run_test "SNI: DTLS, matching cert 1" \
Andres AG1a834452016-12-07 10:01:30 +00004127 "$P_SRV debug_level=3 dtls=1 \
4128 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4129 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
4130 "$P_CLI server_name=localhost dtls=1" \
4131 0 \
4132 -s "parse ServerName extension" \
4133 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
4134 -c "subject name *: C=NL, O=PolarSSL, CN=localhost"
4135
Andres Amaya Garcia54306c12018-05-01 20:27:37 +01004136run_test "SNI: DTLS, matching cert 2" \
4137 "$P_SRV debug_level=3 dtls=1 \
4138 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4139 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
4140 "$P_CLI server_name=polarssl.example dtls=1" \
4141 0 \
4142 -s "parse ServerName extension" \
4143 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
4144 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
4145
4146run_test "SNI: DTLS, no matching cert" \
4147 "$P_SRV debug_level=3 dtls=1 \
4148 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4149 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
4150 "$P_CLI server_name=nonesuch.example dtls=1" \
4151 1 \
4152 -s "parse ServerName extension" \
4153 -s "ssl_sni_wrapper() returned" \
4154 -s "mbedtls_ssl_handshake returned" \
4155 -c "mbedtls_ssl_handshake returned" \
4156 -c "SSL - A fatal alert message was received from our peer"
4157
4158run_test "SNI: DTLS, client auth no override: optional" \
4159 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
4160 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4161 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-" \
4162 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
4163 0 \
4164 -S "skip write certificate request" \
4165 -C "skip parse certificate request" \
4166 -c "got a certificate request" \
4167 -C "skip write certificate" \
4168 -C "skip write certificate verify" \
4169 -S "skip parse certificate verify"
4170
4171run_test "SNI: DTLS, client auth override: none -> optional" \
4172 "$P_SRV debug_level=3 auth_mode=none dtls=1 \
4173 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4174 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,optional" \
4175 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
4176 0 \
4177 -S "skip write certificate request" \
4178 -C "skip parse certificate request" \
4179 -c "got a certificate request" \
4180 -C "skip write certificate" \
4181 -C "skip write certificate verify" \
4182 -S "skip parse certificate verify"
4183
4184run_test "SNI: DTLS, client auth override: optional -> none" \
4185 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
4186 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4187 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,none" \
4188 "$P_CLI debug_level=3 server_name=localhost dtls=1" \
4189 0 \
4190 -s "skip write certificate request" \
4191 -C "skip parse certificate request" \
4192 -c "got no certificate request" \
4193 -c "skip write certificate" \
4194 -c "skip write certificate verify" \
4195 -s "skip parse certificate verify"
4196
4197run_test "SNI: DTLS, CA no override" \
4198 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
4199 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4200 ca_file=data_files/test-ca.crt \
4201 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,required" \
4202 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
4203 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
4204 1 \
4205 -S "skip write certificate request" \
4206 -C "skip parse certificate request" \
4207 -c "got a certificate request" \
4208 -C "skip write certificate" \
4209 -C "skip write certificate verify" \
4210 -S "skip parse certificate verify" \
4211 -s "x509_verify_cert() returned" \
4212 -s "! The certificate is not correctly signed by the trusted CA" \
4213 -S "The certificate has been revoked (is on a CRL)"
4214
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01004215run_test "SNI: DTLS, CA override" \
Andres AG1a834452016-12-07 10:01:30 +00004216 "$P_SRV debug_level=3 auth_mode=optional dtls=1 \
4217 crt_file=data_files/server5.crt key_file=data_files/server5.key \
4218 ca_file=data_files/test-ca.crt \
4219 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,-,required" \
4220 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
4221 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
4222 0 \
4223 -S "skip write certificate request" \
4224 -C "skip parse certificate request" \
4225 -c "got a certificate request" \
4226 -C "skip write certificate" \
4227 -C "skip write certificate verify" \
4228 -S "skip parse certificate verify" \
4229 -S "x509_verify_cert() returned" \
4230 -S "! The certificate is not correctly signed by the trusted CA" \
4231 -S "The certificate has been revoked (is on a CRL)"
4232
Andres Amaya Garciaf77d3d32018-05-01 20:26:47 +01004233run_test "SNI: DTLS, CA override with CRL" \
Andres AG1a834452016-12-07 10:01:30 +00004234 "$P_SRV debug_level=3 auth_mode=optional \
4235 crt_file=data_files/server5.crt key_file=data_files/server5.key dtls=1 \
4236 ca_file=data_files/test-ca.crt \
4237 sni=localhost,data_files/server2.crt,data_files/server2.key,data_files/test-ca2.crt,data_files/crl-ec-sha256.pem,required" \
4238 "$P_CLI debug_level=3 server_name=localhost dtls=1 \
4239 crt_file=data_files/server6.crt key_file=data_files/server6.key" \
4240 1 \
4241 -S "skip write certificate request" \
4242 -C "skip parse certificate request" \
4243 -c "got a certificate request" \
4244 -C "skip write certificate" \
4245 -C "skip write certificate verify" \
4246 -S "skip parse certificate verify" \
4247 -s "x509_verify_cert() returned" \
4248 -S "! The certificate is not correctly signed by the trusted CA" \
4249 -s "The certificate has been revoked (is on a CRL)"
4250
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004251# Tests for non-blocking I/O: exercise a variety of handshake flows
4252
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004253run_test "Non-blocking I/O: basic handshake" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004254 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
4255 "$P_CLI nbio=2 tickets=0" \
4256 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004257 -S "mbedtls_ssl_handshake returned" \
4258 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004259 -c "Read from server: .* bytes read"
4260
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004261run_test "Non-blocking I/O: client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004262 "$P_SRV nbio=2 tickets=0 auth_mode=required" \
4263 "$P_CLI nbio=2 tickets=0" \
4264 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004265 -S "mbedtls_ssl_handshake returned" \
4266 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004267 -c "Read from server: .* bytes read"
4268
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004269run_test "Non-blocking I/O: ticket" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004270 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
4271 "$P_CLI nbio=2 tickets=1" \
4272 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004273 -S "mbedtls_ssl_handshake returned" \
4274 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004275 -c "Read from server: .* bytes read"
4276
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004277run_test "Non-blocking I/O: ticket + client auth" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004278 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
4279 "$P_CLI nbio=2 tickets=1" \
4280 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004281 -S "mbedtls_ssl_handshake returned" \
4282 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004283 -c "Read from server: .* bytes read"
4284
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004285run_test "Non-blocking I/O: ticket + client auth + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004286 "$P_SRV nbio=2 tickets=1 auth_mode=required" \
4287 "$P_CLI nbio=2 tickets=1 reconnect=1" \
4288 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004289 -S "mbedtls_ssl_handshake returned" \
4290 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004291 -c "Read from server: .* bytes read"
4292
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004293run_test "Non-blocking I/O: ticket + resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004294 "$P_SRV nbio=2 tickets=1 auth_mode=none" \
4295 "$P_CLI nbio=2 tickets=1 reconnect=1" \
4296 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004297 -S "mbedtls_ssl_handshake returned" \
4298 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004299 -c "Read from server: .* bytes read"
4300
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004301run_test "Non-blocking I/O: session-id resume" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004302 "$P_SRV nbio=2 tickets=0 auth_mode=none" \
4303 "$P_CLI nbio=2 tickets=0 reconnect=1" \
4304 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004305 -S "mbedtls_ssl_handshake returned" \
4306 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0b6609b2014-02-26 14:45:12 +01004307 -c "Read from server: .* bytes read"
4308
Hanno Becker00076712017-11-15 16:39:08 +00004309# Tests for event-driven I/O: exercise a variety of handshake flows
4310
4311run_test "Event-driven I/O: basic handshake" \
4312 "$P_SRV event=1 tickets=0 auth_mode=none" \
4313 "$P_CLI event=1 tickets=0" \
4314 0 \
4315 -S "mbedtls_ssl_handshake returned" \
4316 -C "mbedtls_ssl_handshake returned" \
4317 -c "Read from server: .* bytes read"
4318
4319run_test "Event-driven I/O: client auth" \
4320 "$P_SRV event=1 tickets=0 auth_mode=required" \
4321 "$P_CLI event=1 tickets=0" \
4322 0 \
4323 -S "mbedtls_ssl_handshake returned" \
4324 -C "mbedtls_ssl_handshake returned" \
4325 -c "Read from server: .* bytes read"
4326
4327run_test "Event-driven I/O: ticket" \
4328 "$P_SRV event=1 tickets=1 auth_mode=none" \
4329 "$P_CLI event=1 tickets=1" \
4330 0 \
4331 -S "mbedtls_ssl_handshake returned" \
4332 -C "mbedtls_ssl_handshake returned" \
4333 -c "Read from server: .* bytes read"
4334
4335run_test "Event-driven I/O: ticket + client auth" \
4336 "$P_SRV event=1 tickets=1 auth_mode=required" \
4337 "$P_CLI event=1 tickets=1" \
4338 0 \
4339 -S "mbedtls_ssl_handshake returned" \
4340 -C "mbedtls_ssl_handshake returned" \
4341 -c "Read from server: .* bytes read"
4342
4343run_test "Event-driven I/O: ticket + client auth + resume" \
4344 "$P_SRV event=1 tickets=1 auth_mode=required" \
4345 "$P_CLI event=1 tickets=1 reconnect=1" \
4346 0 \
4347 -S "mbedtls_ssl_handshake returned" \
4348 -C "mbedtls_ssl_handshake returned" \
4349 -c "Read from server: .* bytes read"
4350
4351run_test "Event-driven I/O: ticket + resume" \
4352 "$P_SRV event=1 tickets=1 auth_mode=none" \
4353 "$P_CLI event=1 tickets=1 reconnect=1" \
4354 0 \
4355 -S "mbedtls_ssl_handshake returned" \
4356 -C "mbedtls_ssl_handshake returned" \
4357 -c "Read from server: .* bytes read"
4358
4359run_test "Event-driven I/O: session-id resume" \
4360 "$P_SRV event=1 tickets=0 auth_mode=none" \
4361 "$P_CLI event=1 tickets=0 reconnect=1" \
4362 0 \
4363 -S "mbedtls_ssl_handshake returned" \
4364 -C "mbedtls_ssl_handshake returned" \
4365 -c "Read from server: .* bytes read"
4366
Hanno Becker6a33f592018-03-13 11:38:46 +00004367run_test "Event-driven I/O, DTLS: basic handshake" \
4368 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
4369 "$P_CLI dtls=1 event=1 tickets=0" \
4370 0 \
4371 -c "Read from server: .* bytes read"
4372
4373run_test "Event-driven I/O, DTLS: client auth" \
4374 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
4375 "$P_CLI dtls=1 event=1 tickets=0" \
4376 0 \
4377 -c "Read from server: .* bytes read"
4378
4379run_test "Event-driven I/O, DTLS: ticket" \
4380 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
4381 "$P_CLI dtls=1 event=1 tickets=1" \
4382 0 \
4383 -c "Read from server: .* bytes read"
4384
4385run_test "Event-driven I/O, DTLS: ticket + client auth" \
4386 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
4387 "$P_CLI dtls=1 event=1 tickets=1" \
4388 0 \
4389 -c "Read from server: .* bytes read"
4390
4391run_test "Event-driven I/O, DTLS: ticket + client auth + resume" \
4392 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=required" \
4393 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1" \
4394 0 \
4395 -c "Read from server: .* bytes read"
4396
4397run_test "Event-driven I/O, DTLS: ticket + resume" \
4398 "$P_SRV dtls=1 event=1 tickets=1 auth_mode=none" \
4399 "$P_CLI dtls=1 event=1 tickets=1 reconnect=1" \
4400 0 \
4401 -c "Read from server: .* bytes read"
4402
4403run_test "Event-driven I/O, DTLS: session-id resume" \
4404 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=none" \
4405 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1" \
4406 0 \
4407 -c "Read from server: .* bytes read"
Hanno Beckerbc6c1102018-03-13 11:39:40 +00004408
4409# This test demonstrates the need for the mbedtls_ssl_check_pending function.
4410# During session resumption, the client will send its ApplicationData record
4411# within the same datagram as the Finished messages. In this situation, the
4412# server MUST NOT idle on the underlying transport after handshake completion,
4413# because the ApplicationData request has already been queued internally.
4414run_test "Event-driven I/O, DTLS: session-id resume, UDP packing" \
Hanno Becker8d832182018-03-15 10:14:19 +00004415 -p "$P_PXY pack=50" \
Hanno Beckerbc6c1102018-03-13 11:39:40 +00004416 "$P_SRV dtls=1 event=1 tickets=0 auth_mode=required" \
4417 "$P_CLI dtls=1 event=1 tickets=0 reconnect=1" \
4418 0 \
4419 -c "Read from server: .* bytes read"
4420
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004421# Tests for version negotiation
4422
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004423run_test "Version check: all -> 1.2" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004424 "$P_SRV" \
4425 "$P_CLI" \
4426 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004427 -S "mbedtls_ssl_handshake returned" \
4428 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004429 -s "Protocol is TLSv1.2" \
4430 -c "Protocol is TLSv1.2"
4431
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004432run_test "Version check: cli max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004433 "$P_SRV" \
4434 "$P_CLI max_version=tls1_1" \
4435 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004436 -S "mbedtls_ssl_handshake returned" \
4437 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004438 -s "Protocol is TLSv1.1" \
4439 -c "Protocol is TLSv1.1"
4440
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004441run_test "Version check: srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004442 "$P_SRV max_version=tls1_1" \
4443 "$P_CLI" \
4444 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004445 -S "mbedtls_ssl_handshake returned" \
4446 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004447 -s "Protocol is TLSv1.1" \
4448 -c "Protocol is TLSv1.1"
4449
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004450run_test "Version check: cli+srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004451 "$P_SRV max_version=tls1_1" \
4452 "$P_CLI max_version=tls1_1" \
4453 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004454 -S "mbedtls_ssl_handshake returned" \
4455 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004456 -s "Protocol is TLSv1.1" \
4457 -c "Protocol is TLSv1.1"
4458
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004459run_test "Version check: cli max 1.1, srv min 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004460 "$P_SRV min_version=tls1_1" \
4461 "$P_CLI max_version=tls1_1" \
4462 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004463 -S "mbedtls_ssl_handshake returned" \
4464 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004465 -s "Protocol is TLSv1.1" \
4466 -c "Protocol is TLSv1.1"
4467
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004468run_test "Version check: cli min 1.1, srv max 1.1 -> 1.1" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004469 "$P_SRV max_version=tls1_1" \
4470 "$P_CLI min_version=tls1_1" \
4471 0 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004472 -S "mbedtls_ssl_handshake returned" \
4473 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004474 -s "Protocol is TLSv1.1" \
4475 -c "Protocol is TLSv1.1"
4476
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004477run_test "Version check: cli min 1.2, srv max 1.1 -> fail" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004478 "$P_SRV max_version=tls1_1" \
4479 "$P_CLI min_version=tls1_2" \
4480 1 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004481 -s "mbedtls_ssl_handshake returned" \
4482 -c "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004483 -c "SSL - Handshake protocol not within min/max boundaries"
4484
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004485run_test "Version check: srv min 1.2, cli max 1.1 -> fail" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004486 "$P_SRV min_version=tls1_2" \
4487 "$P_CLI max_version=tls1_1" \
4488 1 \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02004489 -s "mbedtls_ssl_handshake returned" \
4490 -c "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnarda3d808e2014-02-26 16:33:03 +01004491 -s "SSL - Handshake protocol not within min/max boundaries"
4492
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004493# Tests for ALPN extension
4494
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004495run_test "ALPN: none" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004496 "$P_SRV debug_level=3" \
4497 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004498 0 \
4499 -C "client hello, adding alpn extension" \
4500 -S "found alpn extension" \
4501 -C "got an alert message, type: \\[2:120]" \
4502 -S "server hello, adding alpn extension" \
4503 -C "found alpn extension " \
4504 -C "Application Layer Protocol is" \
4505 -S "Application Layer Protocol is"
4506
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004507run_test "ALPN: client only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004508 "$P_SRV debug_level=3" \
4509 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004510 0 \
4511 -c "client hello, adding alpn extension" \
4512 -s "found alpn extension" \
4513 -C "got an alert message, type: \\[2:120]" \
4514 -S "server hello, adding alpn extension" \
4515 -C "found alpn extension " \
4516 -c "Application Layer Protocol is (none)" \
4517 -S "Application Layer Protocol is"
4518
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004519run_test "ALPN: server only" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004520 "$P_SRV debug_level=3 alpn=abc,1234" \
4521 "$P_CLI debug_level=3" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004522 0 \
4523 -C "client hello, adding alpn extension" \
4524 -S "found alpn extension" \
4525 -C "got an alert message, type: \\[2:120]" \
4526 -S "server hello, adding alpn extension" \
4527 -C "found alpn extension " \
4528 -C "Application Layer Protocol is" \
4529 -s "Application Layer Protocol is (none)"
4530
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004531run_test "ALPN: both, common cli1-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004532 "$P_SRV debug_level=3 alpn=abc,1234" \
4533 "$P_CLI debug_level=3 alpn=abc,1234" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004534 0 \
4535 -c "client hello, adding alpn extension" \
4536 -s "found alpn extension" \
4537 -C "got an alert message, type: \\[2:120]" \
4538 -s "server hello, adding alpn extension" \
4539 -c "found alpn extension" \
4540 -c "Application Layer Protocol is abc" \
4541 -s "Application Layer Protocol is abc"
4542
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004543run_test "ALPN: both, common cli2-srv1" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004544 "$P_SRV debug_level=3 alpn=abc,1234" \
4545 "$P_CLI debug_level=3 alpn=1234,abc" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004546 0 \
4547 -c "client hello, adding alpn extension" \
4548 -s "found alpn extension" \
4549 -C "got an alert message, type: \\[2:120]" \
4550 -s "server hello, adding alpn extension" \
4551 -c "found alpn extension" \
4552 -c "Application Layer Protocol is abc" \
4553 -s "Application Layer Protocol is abc"
4554
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004555run_test "ALPN: both, common cli1-srv2" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004556 "$P_SRV debug_level=3 alpn=abc,1234" \
4557 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004558 0 \
4559 -c "client hello, adding alpn extension" \
4560 -s "found alpn extension" \
4561 -C "got an alert message, type: \\[2:120]" \
4562 -s "server hello, adding alpn extension" \
4563 -c "found alpn extension" \
4564 -c "Application Layer Protocol is 1234" \
4565 -s "Application Layer Protocol is 1234"
4566
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004567run_test "ALPN: both, no common" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004568 "$P_SRV debug_level=3 alpn=abc,123" \
4569 "$P_CLI debug_level=3 alpn=1234,abcde" \
Manuel Pégourié-Gonnardf6521de2014-04-07 12:42:04 +02004570 1 \
4571 -c "client hello, adding alpn extension" \
4572 -s "found alpn extension" \
4573 -c "got an alert message, type: \\[2:120]" \
4574 -S "server hello, adding alpn extension" \
4575 -C "found alpn extension" \
4576 -C "Application Layer Protocol is 1234" \
4577 -S "Application Layer Protocol is 1234"
4578
Manuel Pégourié-Gonnard83d8c732014-04-07 13:24:21 +02004579
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004580# Tests for keyUsage in leaf certificates, part 1:
4581# server-side certificate/suite selection
4582
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004583run_test "keyUsage srv: RSA, digitalSignature -> (EC)DHE-RSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004584 "$P_SRV key_file=data_files/server2.key \
4585 crt_file=data_files/server2.ku-ds.crt" \
4586 "$P_CLI" \
4587 0 \
Manuel Pégourié-Gonnard17cde5f2014-05-22 14:42:39 +02004588 -c "Ciphersuite is TLS-[EC]*DHE-RSA-WITH-"
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004589
4590
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004591run_test "keyUsage srv: RSA, keyEncipherment -> RSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004592 "$P_SRV key_file=data_files/server2.key \
4593 crt_file=data_files/server2.ku-ke.crt" \
4594 "$P_CLI" \
4595 0 \
4596 -c "Ciphersuite is TLS-RSA-WITH-"
4597
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004598run_test "keyUsage srv: RSA, keyAgreement -> fail" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02004599 "$P_SRV key_file=data_files/server2.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004600 crt_file=data_files/server2.ku-ka.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02004601 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004602 1 \
4603 -C "Ciphersuite is "
4604
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004605run_test "keyUsage srv: ECDSA, digitalSignature -> ECDHE-ECDSA" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004606 "$P_SRV key_file=data_files/server5.key \
4607 crt_file=data_files/server5.ku-ds.crt" \
4608 "$P_CLI" \
4609 0 \
4610 -c "Ciphersuite is TLS-ECDHE-ECDSA-WITH-"
4611
4612
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004613run_test "keyUsage srv: ECDSA, keyAgreement -> ECDH-" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004614 "$P_SRV key_file=data_files/server5.key \
4615 crt_file=data_files/server5.ku-ka.crt" \
4616 "$P_CLI" \
4617 0 \
4618 -c "Ciphersuite is TLS-ECDH-"
4619
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004620run_test "keyUsage srv: ECDSA, keyEncipherment -> fail" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02004621 "$P_SRV key_file=data_files/server5.key \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004622 crt_file=data_files/server5.ku-ke.crt" \
Manuel Pégourié-Gonnardf2629b92014-08-30 14:20:14 +02004623 "$P_CLI" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004624 1 \
4625 -C "Ciphersuite is "
4626
4627# Tests for keyUsage in leaf certificates, part 2:
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004628# client-side checking of server cert
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004629
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004630run_test "keyUsage cli: DigitalSignature+KeyEncipherment, RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004631 "$O_SRV -key data_files/server2.key \
4632 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004633 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004634 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
4635 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004636 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004637 -C "Processing of the Certificate handshake message failed" \
4638 -c "Ciphersuite is TLS-"
4639
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004640run_test "keyUsage cli: DigitalSignature+KeyEncipherment, DHE-RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004641 "$O_SRV -key data_files/server2.key \
4642 -cert data_files/server2.ku-ds_ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004643 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004644 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
4645 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004646 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004647 -C "Processing of the Certificate handshake message failed" \
4648 -c "Ciphersuite is TLS-"
4649
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004650run_test "keyUsage cli: KeyEncipherment, RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004651 "$O_SRV -key data_files/server2.key \
4652 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004653 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004654 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
4655 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004656 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004657 -C "Processing of the Certificate handshake message failed" \
4658 -c "Ciphersuite is TLS-"
4659
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004660run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004661 "$O_SRV -key data_files/server2.key \
4662 -cert data_files/server2.ku-ke.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004663 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004664 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
4665 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004666 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004667 -c "Processing of the Certificate handshake message failed" \
4668 -C "Ciphersuite is TLS-"
4669
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01004670run_test "keyUsage cli: KeyEncipherment, DHE-RSA: fail, soft" \
4671 "$O_SRV -key data_files/server2.key \
4672 -cert data_files/server2.ku-ke.crt" \
4673 "$P_CLI debug_level=1 auth_mode=optional \
4674 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
4675 0 \
4676 -c "bad certificate (usage extensions)" \
4677 -C "Processing of the Certificate handshake message failed" \
4678 -c "Ciphersuite is TLS-" \
4679 -c "! Usage does not match the keyUsage extension"
4680
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004681run_test "keyUsage cli: DigitalSignature, DHE-RSA: OK" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004682 "$O_SRV -key data_files/server2.key \
4683 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004684 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004685 force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA" \
4686 0 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004687 -C "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004688 -C "Processing of the Certificate handshake message failed" \
4689 -c "Ciphersuite is TLS-"
4690
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004691run_test "keyUsage cli: DigitalSignature, RSA: fail" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004692 "$O_SRV -key data_files/server2.key \
4693 -cert data_files/server2.ku-ds.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004694 "$P_CLI debug_level=1 \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004695 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
4696 1 \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004697 -c "bad certificate (usage extensions)" \
Manuel Pégourié-Gonnard7f2a07d2014-04-09 09:50:57 +02004698 -c "Processing of the Certificate handshake message failed" \
4699 -C "Ciphersuite is TLS-"
4700
Manuel Pégourié-Gonnarde6efa6f2015-04-20 11:01:48 +01004701run_test "keyUsage cli: DigitalSignature, RSA: fail, soft" \
4702 "$O_SRV -key data_files/server2.key \
4703 -cert data_files/server2.ku-ds.crt" \
4704 "$P_CLI debug_level=1 auth_mode=optional \
4705 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
4706 0 \
4707 -c "bad certificate (usage extensions)" \
4708 -C "Processing of the Certificate handshake message failed" \
4709 -c "Ciphersuite is TLS-" \
4710 -c "! Usage does not match the keyUsage extension"
4711
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004712# Tests for keyUsage in leaf certificates, part 3:
4713# server-side checking of client cert
4714
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004715run_test "keyUsage cli-auth: RSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004716 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004717 "$O_CLI -key data_files/server2.key \
4718 -cert data_files/server2.ku-ds.crt" \
4719 0 \
4720 -S "bad certificate (usage extensions)" \
4721 -S "Processing of the Certificate handshake message failed"
4722
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004723run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004724 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004725 "$O_CLI -key data_files/server2.key \
4726 -cert data_files/server2.ku-ke.crt" \
4727 0 \
4728 -s "bad certificate (usage extensions)" \
4729 -S "Processing of the Certificate handshake message failed"
4730
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004731run_test "keyUsage cli-auth: RSA, KeyEncipherment: fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004732 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004733 "$O_CLI -key data_files/server2.key \
4734 -cert data_files/server2.ku-ke.crt" \
4735 1 \
4736 -s "bad certificate (usage extensions)" \
4737 -s "Processing of the Certificate handshake message failed"
4738
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004739run_test "keyUsage cli-auth: ECDSA, DigitalSignature: OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004740 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004741 "$O_CLI -key data_files/server5.key \
4742 -cert data_files/server5.ku-ds.crt" \
4743 0 \
4744 -S "bad certificate (usage extensions)" \
4745 -S "Processing of the Certificate handshake message failed"
4746
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004747run_test "keyUsage cli-auth: ECDSA, KeyAgreement: fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004748 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnarda9db85d2014-04-09 14:53:05 +02004749 "$O_CLI -key data_files/server5.key \
4750 -cert data_files/server5.ku-ka.crt" \
4751 0 \
4752 -s "bad certificate (usage extensions)" \
4753 -S "Processing of the Certificate handshake message failed"
4754
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004755# Tests for extendedKeyUsage, part 1: server-side certificate/suite selection
4756
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004757run_test "extKeyUsage srv: serverAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004758 "$P_SRV key_file=data_files/server5.key \
4759 crt_file=data_files/server5.eku-srv.crt" \
4760 "$P_CLI" \
4761 0
4762
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004763run_test "extKeyUsage srv: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004764 "$P_SRV key_file=data_files/server5.key \
4765 crt_file=data_files/server5.eku-srv.crt" \
4766 "$P_CLI" \
4767 0
4768
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004769run_test "extKeyUsage srv: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004770 "$P_SRV key_file=data_files/server5.key \
4771 crt_file=data_files/server5.eku-cs_any.crt" \
4772 "$P_CLI" \
4773 0
4774
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004775run_test "extKeyUsage srv: codeSign -> fail" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02004776 "$P_SRV key_file=data_files/server5.key \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004777 crt_file=data_files/server5.eku-cli.crt" \
Manuel Pégourié-Gonnard7eb58cb2015-07-07 11:54:14 +02004778 "$P_CLI" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004779 1
4780
4781# Tests for extendedKeyUsage, part 2: client-side checking of server cert
4782
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004783run_test "extKeyUsage cli: serverAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004784 "$O_SRV -key data_files/server5.key \
4785 -cert data_files/server5.eku-srv.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004786 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004787 0 \
4788 -C "bad certificate (usage extensions)" \
4789 -C "Processing of the Certificate handshake message failed" \
4790 -c "Ciphersuite is TLS-"
4791
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004792run_test "extKeyUsage cli: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004793 "$O_SRV -key data_files/server5.key \
4794 -cert data_files/server5.eku-srv_cli.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004795 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004796 0 \
4797 -C "bad certificate (usage extensions)" \
4798 -C "Processing of the Certificate handshake message failed" \
4799 -c "Ciphersuite is TLS-"
4800
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004801run_test "extKeyUsage cli: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004802 "$O_SRV -key data_files/server5.key \
4803 -cert data_files/server5.eku-cs_any.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004804 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004805 0 \
4806 -C "bad certificate (usage extensions)" \
4807 -C "Processing of the Certificate handshake message failed" \
4808 -c "Ciphersuite is TLS-"
4809
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004810run_test "extKeyUsage cli: codeSign -> fail" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004811 "$O_SRV -key data_files/server5.key \
4812 -cert data_files/server5.eku-cs.crt" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004813 "$P_CLI debug_level=1" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004814 1 \
4815 -c "bad certificate (usage extensions)" \
4816 -c "Processing of the Certificate handshake message failed" \
4817 -C "Ciphersuite is TLS-"
4818
4819# Tests for extendedKeyUsage, part 3: server-side checking of client cert
4820
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004821run_test "extKeyUsage cli-auth: clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004822 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004823 "$O_CLI -key data_files/server5.key \
4824 -cert data_files/server5.eku-cli.crt" \
4825 0 \
4826 -S "bad certificate (usage extensions)" \
4827 -S "Processing of the Certificate handshake message failed"
4828
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004829run_test "extKeyUsage cli-auth: serverAuth,clientAuth -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004830 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004831 "$O_CLI -key data_files/server5.key \
4832 -cert data_files/server5.eku-srv_cli.crt" \
4833 0 \
4834 -S "bad certificate (usage extensions)" \
4835 -S "Processing of the Certificate handshake message failed"
4836
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004837run_test "extKeyUsage cli-auth: codeSign,anyEKU -> OK" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004838 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004839 "$O_CLI -key data_files/server5.key \
4840 -cert data_files/server5.eku-cs_any.crt" \
4841 0 \
4842 -S "bad certificate (usage extensions)" \
4843 -S "Processing of the Certificate handshake message failed"
4844
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004845run_test "extKeyUsage cli-auth: codeSign -> fail (soft)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004846 "$P_SRV debug_level=1 auth_mode=optional" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004847 "$O_CLI -key data_files/server5.key \
4848 -cert data_files/server5.eku-cs.crt" \
4849 0 \
4850 -s "bad certificate (usage extensions)" \
4851 -S "Processing of the Certificate handshake message failed"
4852
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004853run_test "extKeyUsage cli-auth: codeSign -> fail (hard)" \
Manuel Pégourié-Gonnard644e8f32014-08-30 21:59:31 +02004854 "$P_SRV debug_level=1 auth_mode=required" \
Manuel Pégourié-Gonnard0408fd12014-04-11 11:06:22 +02004855 "$O_CLI -key data_files/server5.key \
4856 -cert data_files/server5.eku-cs.crt" \
4857 1 \
4858 -s "bad certificate (usage extensions)" \
4859 -s "Processing of the Certificate handshake message failed"
4860
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02004861# Tests for DHM parameters loading
4862
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004863run_test "DHM parameters: reference" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02004864 "$P_SRV" \
4865 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4866 debug_level=3" \
4867 0 \
4868 -c "value of 'DHM: P ' (2048 bits)" \
Hanno Becker13be9902017-09-27 17:17:30 +01004869 -c "value of 'DHM: G ' (2 bits)"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02004870
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004871run_test "DHM parameters: other parameters" \
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02004872 "$P_SRV dhm_file=data_files/dhparams.pem" \
4873 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4874 debug_level=3" \
4875 0 \
4876 -c "value of 'DHM: P ' (1024 bits)" \
4877 -c "value of 'DHM: G ' (2 bits)"
4878
Manuel Pégourié-Gonnard7a010aa2015-06-12 11:19:10 +02004879# Tests for DHM client-side size checking
4880
4881run_test "DHM size: server default, client default, OK" \
4882 "$P_SRV" \
4883 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4884 debug_level=1" \
4885 0 \
4886 -C "DHM prime too short:"
4887
4888run_test "DHM size: server default, client 2048, OK" \
4889 "$P_SRV" \
4890 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4891 debug_level=1 dhmlen=2048" \
4892 0 \
4893 -C "DHM prime too short:"
4894
4895run_test "DHM size: server 1024, client default, OK" \
4896 "$P_SRV dhm_file=data_files/dhparams.pem" \
4897 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4898 debug_level=1" \
4899 0 \
4900 -C "DHM prime too short:"
4901
4902run_test "DHM size: server 1000, client default, rejected" \
4903 "$P_SRV dhm_file=data_files/dh.1000.pem" \
4904 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4905 debug_level=1" \
4906 1 \
4907 -c "DHM prime too short:"
4908
4909run_test "DHM size: server default, client 2049, rejected" \
4910 "$P_SRV" \
4911 "$P_CLI force_ciphersuite=TLS-DHE-RSA-WITH-AES-128-CBC-SHA \
4912 debug_level=1 dhmlen=2049" \
4913 1 \
4914 -c "DHM prime too short:"
4915
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004916# Tests for PSK callback
4917
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02004918run_test "PSK callback: psk, no callback" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02004919 "$P_SRV psk=abc123 psk_identity=foo" \
4920 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4921 psk_identity=foo psk=abc123" \
4922 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01004923 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02004924 -S "SSL - Unknown identity received" \
4925 -S "SSL - Verification of the message MAC failed"
4926
Hanno Beckerf7027512018-10-23 15:27:39 +01004927requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4928run_test "PSK callback: opaque psk on client, no callback" \
4929 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
4930 "$P_CLI extended_ms=0 debug_level=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004931 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01004932 0 \
4933 -c "skip PMS generation for opaque PSK"\
4934 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02004935 -C "session hash for extended master secret"\
4936 -S "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01004937 -S "SSL - None of the common ciphersuites is usable" \
4938 -S "SSL - Unknown identity received" \
4939 -S "SSL - Verification of the message MAC failed"
4940
4941requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4942run_test "PSK callback: opaque psk on client, no callback, SHA-384" \
4943 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo" \
4944 "$P_CLI extended_ms=0 debug_level=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004945 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01004946 0 \
4947 -c "skip PMS generation for opaque PSK"\
4948 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02004949 -C "session hash for extended master secret"\
4950 -S "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01004951 -S "SSL - None of the common ciphersuites is usable" \
4952 -S "SSL - Unknown identity received" \
4953 -S "SSL - Verification of the message MAC failed"
4954
4955requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4956run_test "PSK callback: opaque psk on client, no callback, EMS" \
4957 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
4958 "$P_CLI extended_ms=1 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004959 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01004960 0 \
4961 -c "skip PMS generation for opaque PSK"\
4962 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02004963 -c "session hash for extended master secret"\
4964 -s "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01004965 -S "SSL - None of the common ciphersuites is usable" \
4966 -S "SSL - Unknown identity received" \
4967 -S "SSL - Verification of the message MAC failed"
4968
4969requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4970run_test "PSK callback: opaque psk on client, no callback, SHA-384, EMS" \
4971 "$P_SRV extended_ms=1 debug_level=3 psk=abc123 psk_identity=foo" \
4972 "$P_CLI extended_ms=1 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004973 psk_identity=foo psk=abc123 psk_opaque=1" \
Hanno Beckerf7027512018-10-23 15:27:39 +01004974 0 \
4975 -c "skip PMS generation for opaque PSK"\
4976 -S "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02004977 -c "session hash for extended master secret"\
4978 -s "session hash for extended master secret"\
Hanno Beckerf7027512018-10-23 15:27:39 +01004979 -S "SSL - None of the common ciphersuites is usable" \
4980 -S "SSL - Unknown identity received" \
4981 -S "SSL - Verification of the message MAC failed"
4982
Hanno Becker28c79dc2018-10-26 13:15:08 +01004983requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4984run_test "PSK callback: raw psk on client, static opaque on server, no callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004985 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01004986 "$P_CLI extended_ms=0 debug_level=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
4987 psk_identity=foo psk=abc123" \
4988 0 \
4989 -C "skip PMS generation for opaque PSK"\
4990 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02004991 -C "session hash for extended master secret"\
4992 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01004993 -S "SSL - None of the common ciphersuites is usable" \
4994 -S "SSL - Unknown identity received" \
4995 -S "SSL - Verification of the message MAC failed"
4996
4997requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
4998run_test "PSK callback: raw psk on client, static opaque on server, no callback, SHA-384" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00004999 "$P_SRV extended_ms=0 debug_level=1 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005000 "$P_CLI extended_ms=0 debug_level=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
5001 psk_identity=foo psk=abc123" \
5002 0 \
5003 -C "skip PMS generation for opaque PSK"\
5004 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005005 -C "session hash for extended master secret"\
5006 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005007 -S "SSL - None of the common ciphersuites is usable" \
5008 -S "SSL - Unknown identity received" \
5009 -S "SSL - Verification of the message MAC failed"
5010
5011requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5012run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005013 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls1_2 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005014 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
5015 "$P_CLI debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5016 psk_identity=foo psk=abc123 extended_ms=1" \
5017 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005018 -c "session hash for extended master secret"\
5019 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005020 -C "skip PMS generation for opaque PSK"\
5021 -s "skip PMS generation for opaque PSK"\
5022 -S "SSL - None of the common ciphersuites is usable" \
5023 -S "SSL - Unknown identity received" \
5024 -S "SSL - Verification of the message MAC failed"
5025
5026requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5027run_test "PSK callback: raw psk on client, static opaque on server, no callback, EMS, SHA384" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005028 "$P_SRV debug_level=3 psk=abc123 psk_identity=foo psk_opaque=1 min_version=tls1_2 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005029 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
5030 "$P_CLI debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
5031 psk_identity=foo psk=abc123 extended_ms=1" \
5032 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005033 -c "session hash for extended master secret"\
5034 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005035 -C "skip PMS generation for opaque PSK"\
5036 -s "skip PMS generation for opaque PSK"\
5037 -S "SSL - None of the common ciphersuites is usable" \
5038 -S "SSL - Unknown identity received" \
5039 -S "SSL - Verification of the message MAC failed"
5040
5041requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5042run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005043 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005044 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5045 psk_identity=def psk=beef" \
5046 0 \
5047 -C "skip PMS generation for opaque PSK"\
5048 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005049 -C "session hash for extended master secret"\
5050 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005051 -S "SSL - None of the common ciphersuites is usable" \
5052 -S "SSL - Unknown identity received" \
5053 -S "SSL - Verification of the message MAC failed"
5054
5055requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5056run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, SHA-384" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005057 "$P_SRV extended_ms=0 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005058 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
5059 psk_identity=def psk=beef" \
5060 0 \
5061 -C "skip PMS generation for opaque PSK"\
5062 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005063 -C "session hash for extended master secret"\
5064 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005065 -S "SSL - None of the common ciphersuites is usable" \
5066 -S "SSL - Unknown identity received" \
5067 -S "SSL - Verification of the message MAC failed"
5068
5069requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5070run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005071 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005072 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA extended_ms=1" \
5073 "$P_CLI debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5074 psk_identity=abc psk=dead extended_ms=1" \
5075 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005076 -c "session hash for extended master secret"\
5077 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005078 -C "skip PMS generation for opaque PSK"\
5079 -s "skip PMS generation for opaque PSK"\
5080 -S "SSL - None of the common ciphersuites is usable" \
5081 -S "SSL - Unknown identity received" \
5082 -S "SSL - Verification of the message MAC failed"
5083
5084requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5085run_test "PSK callback: raw psk on client, no static PSK on server, opaque PSK from callback, EMS, SHA384" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005086 "$P_SRV debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005087 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 extended_ms=1" \
5088 "$P_CLI debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-256-CBC-SHA384 \
5089 psk_identity=abc psk=dead extended_ms=1" \
5090 0 \
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005091 -c "session hash for extended master secret"\
5092 -s "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005093 -C "skip PMS generation for opaque PSK"\
5094 -s "skip PMS generation for opaque PSK"\
5095 -S "SSL - None of the common ciphersuites is usable" \
5096 -S "SSL - Unknown identity received" \
5097 -S "SSL - Verification of the message MAC failed"
5098
5099requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5100run_test "PSK callback: raw psk on client, mismatching static raw PSK on server, opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005101 "$P_SRV extended_ms=0 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005102 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5103 psk_identity=def psk=beef" \
5104 0 \
5105 -C "skip PMS generation for opaque PSK"\
5106 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005107 -C "session hash for extended master secret"\
5108 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005109 -S "SSL - None of the common ciphersuites is usable" \
5110 -S "SSL - Unknown identity received" \
5111 -S "SSL - Verification of the message MAC failed"
5112
5113requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5114run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005115 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef psk_list_opaque=1 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005116 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5117 psk_identity=def psk=beef" \
5118 0 \
5119 -C "skip PMS generation for opaque PSK"\
5120 -s "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005121 -C "session hash for extended master secret"\
5122 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005123 -S "SSL - None of the common ciphersuites is usable" \
5124 -S "SSL - Unknown identity received" \
5125 -S "SSL - Verification of the message MAC failed"
5126
5127requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5128run_test "PSK callback: raw psk on client, mismatching static opaque PSK on server, raw PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005129 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=foo psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005130 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5131 psk_identity=def psk=beef" \
5132 0 \
5133 -C "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005134 -C "session hash for extended master secret"\
5135 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005136 -S "SSL - None of the common ciphersuites is usable" \
5137 -S "SSL - Unknown identity received" \
5138 -S "SSL - Verification of the message MAC failed"
5139
5140requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5141run_test "PSK callback: raw psk on client, id-matching but wrong raw PSK on server, opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005142 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=abc123 debug_level=3 psk_list=abc,dead,def,beef min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005143 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5144 psk_identity=def psk=beef" \
5145 0 \
5146 -C "skip PMS generation for opaque PSK"\
Manuel Pégourié-Gonnard8faa70e2019-05-20 12:09:50 +02005147 -C "session hash for extended master secret"\
5148 -S "session hash for extended master secret"\
Hanno Becker28c79dc2018-10-26 13:15:08 +01005149 -S "SSL - None of the common ciphersuites is usable" \
5150 -S "SSL - Unknown identity received" \
5151 -S "SSL - Verification of the message MAC failed"
5152
5153requires_config_enabled MBEDTLS_USE_PSA_CRYPTO
5154run_test "PSK callback: raw psk on client, matching opaque PSK on server, wrong opaque PSK from callback" \
Hanno Becker1d911cd2018-11-15 13:06:09 +00005155 "$P_SRV extended_ms=0 psk_opaque=1 psk_identity=def psk=beef debug_level=3 psk_list=abc,dead,def,abc123 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA" \
Hanno Becker28c79dc2018-10-26 13:15:08 +01005156 "$P_CLI extended_ms=0 debug_level=3 min_version=tls1_2 force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5157 psk_identity=def psk=beef" \
5158 1 \
5159 -s "SSL - Verification of the message MAC failed"
5160
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005161run_test "PSK callback: no psk, no callback" \
Manuel Pégourié-Gonnard10c3c9f2014-06-10 15:28:52 +02005162 "$P_SRV" \
5163 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5164 psk_identity=foo psk=abc123" \
5165 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01005166 -s "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005167 -S "SSL - Unknown identity received" \
5168 -S "SSL - Verification of the message MAC failed"
5169
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005170run_test "PSK callback: callback overrides other settings" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005171 "$P_SRV psk=abc123 psk_identity=foo psk_list=abc,dead,def,beef" \
5172 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5173 psk_identity=foo psk=abc123" \
5174 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01005175 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005176 -s "SSL - Unknown identity received" \
5177 -S "SSL - Verification of the message MAC failed"
5178
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005179run_test "PSK callback: first id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005180 "$P_SRV psk_list=abc,dead,def,beef" \
5181 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5182 psk_identity=abc psk=dead" \
5183 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01005184 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005185 -S "SSL - Unknown identity received" \
5186 -S "SSL - Verification of the message MAC failed"
5187
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005188run_test "PSK callback: second id matches" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005189 "$P_SRV psk_list=abc,dead,def,beef" \
5190 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5191 psk_identity=def psk=beef" \
5192 0 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01005193 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005194 -S "SSL - Unknown identity received" \
5195 -S "SSL - Verification of the message MAC failed"
5196
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005197run_test "PSK callback: no match" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005198 "$P_SRV psk_list=abc,dead,def,beef" \
5199 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5200 psk_identity=ghi psk=beef" \
5201 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01005202 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005203 -s "SSL - Unknown identity received" \
5204 -S "SSL - Verification of the message MAC failed"
5205
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005206run_test "PSK callback: wrong key" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005207 "$P_SRV psk_list=abc,dead,def,beef" \
5208 "$P_CLI force_ciphersuite=TLS-PSK-WITH-AES-128-CBC-SHA \
5209 psk_identity=abc psk=beef" \
5210 1 \
Manuel Pégourié-Gonnardf01768c2015-01-08 17:06:16 +01005211 -S "SSL - None of the common ciphersuites is usable" \
Manuel Pégourié-Gonnarda6781c92014-06-10 15:00:46 +02005212 -S "SSL - Unknown identity received" \
5213 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnard0cc7e312014-06-09 11:36:47 +02005214
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02005215# Tests for EC J-PAKE
5216
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02005217requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02005218run_test "ECJPAKE: client not configured" \
5219 "$P_SRV debug_level=3" \
5220 "$P_CLI debug_level=3" \
5221 0 \
5222 -C "add ciphersuite: c0ff" \
5223 -C "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02005224 -S "found ecjpake kkpp extension" \
5225 -S "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02005226 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02005227 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02005228 -C "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02005229 -S "None of the common ciphersuites is usable"
5230
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02005231requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02005232run_test "ECJPAKE: server not configured" \
5233 "$P_SRV debug_level=3" \
5234 "$P_CLI debug_level=3 ecjpake_pw=bla \
5235 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
5236 1 \
5237 -c "add ciphersuite: c0ff" \
5238 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02005239 -s "found ecjpake kkpp extension" \
5240 -s "skip ecjpake kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02005241 -s "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02005242 -S "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02005243 -C "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnarde511b4e2015-09-16 14:11:09 +02005244 -s "None of the common ciphersuites is usable"
5245
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02005246requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02005247run_test "ECJPAKE: working, TLS" \
5248 "$P_SRV debug_level=3 ecjpake_pw=bla" \
5249 "$P_CLI debug_level=3 ecjpake_pw=bla \
5250 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
Manuel Pégourié-Gonnard0f1660a2015-09-16 22:41:06 +02005251 0 \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02005252 -c "add ciphersuite: c0ff" \
5253 -c "adding ecjpake_kkpp extension" \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02005254 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02005255 -s "found ecjpake kkpp extension" \
5256 -S "skip ecjpake kkpp extension" \
5257 -S "ciphersuite mismatch: ecjpake not configured" \
Manuel Pégourié-Gonnard55c7f992015-09-16 15:35:27 +02005258 -s "server hello, ecjpake kkpp extension" \
Manuel Pégourié-Gonnard0a1324a2015-09-16 16:01:00 +02005259 -c "found ecjpake_kkpp extension" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02005260 -S "None of the common ciphersuites is usable" \
5261 -S "SSL - Verification of the message MAC failed"
5262
Janos Follath74537a62016-09-02 13:45:28 +01005263server_needs_more_time 1
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02005264requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02005265run_test "ECJPAKE: password mismatch, TLS" \
5266 "$P_SRV debug_level=3 ecjpake_pw=bla" \
5267 "$P_CLI debug_level=3 ecjpake_pw=bad \
5268 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
5269 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02005270 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02005271 -s "SSL - Verification of the message MAC failed"
5272
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02005273requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02005274run_test "ECJPAKE: working, DTLS" \
5275 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
5276 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
5277 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
5278 0 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02005279 -c "re-using cached ecjpake parameters" \
5280 -S "SSL - Verification of the message MAC failed"
5281
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02005282requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02005283run_test "ECJPAKE: working, DTLS, no cookie" \
5284 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla cookies=0" \
5285 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bla \
5286 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
5287 0 \
5288 -C "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02005289 -S "SSL - Verification of the message MAC failed"
5290
Janos Follath74537a62016-09-02 13:45:28 +01005291server_needs_more_time 1
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02005292requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02005293run_test "ECJPAKE: password mismatch, DTLS" \
5294 "$P_SRV debug_level=3 dtls=1 ecjpake_pw=bla" \
5295 "$P_CLI debug_level=3 dtls=1 ecjpake_pw=bad \
5296 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
5297 1 \
Manuel Pégourié-Gonnardd0d8cb32015-09-17 14:16:30 +02005298 -c "re-using cached ecjpake parameters" \
Manuel Pégourié-Gonnard921f2d02015-09-16 22:52:18 +02005299 -s "SSL - Verification of the message MAC failed"
Manuel Pégourié-Gonnardbf57be62015-09-16 15:04:01 +02005300
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02005301# for tests with configs/config-thread.h
Manuel Pégourié-Gonnard12ca6f52015-10-20 15:24:51 +02005302requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECJPAKE
Manuel Pégourié-Gonnardca700b22015-10-20 14:47:00 +02005303run_test "ECJPAKE: working, DTLS, nolog" \
5304 "$P_SRV dtls=1 ecjpake_pw=bla" \
5305 "$P_CLI dtls=1 ecjpake_pw=bla \
5306 force_ciphersuite=TLS-ECJPAKE-WITH-AES-128-CCM-8" \
5307 0
5308
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02005309# Tests for ciphersuites per version
5310
Janos Follathe2681a42016-03-07 15:57:05 +00005311requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01005312requires_config_enabled MBEDTLS_CAMELLIA_C
5313requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005314run_test "Per-version suites: SSL3" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01005315 "$P_SRV min_version=ssl3 version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02005316 "$P_CLI force_version=ssl3" \
5317 0 \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01005318 -c "Ciphersuite is TLS-RSA-WITH-CAMELLIA-128-CBC-SHA"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02005319
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01005320requires_config_enabled MBEDTLS_SSL_PROTO_TLS1
5321requires_config_enabled MBEDTLS_CAMELLIA_C
5322requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005323run_test "Per-version suites: TLS 1.0" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01005324 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnardbd47a582015-01-12 13:43:29 +01005325 "$P_CLI force_version=tls1 arc4=1" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02005326 0 \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005327 -c "Ciphersuite is TLS-RSA-WITH-AES-256-CBC-SHA"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02005328
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01005329requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
5330requires_config_enabled MBEDTLS_CAMELLIA_C
5331requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005332run_test "Per-version suites: TLS 1.1" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01005333 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02005334 "$P_CLI force_version=tls1_1" \
5335 0 \
5336 -c "Ciphersuite is TLS-RSA-WITH-AES-128-CBC-SHA"
5337
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01005338requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
5339requires_config_enabled MBEDTLS_CAMELLIA_C
5340requires_config_enabled MBEDTLS_AES_C
Manuel Pégourié-Gonnard8e03c712014-08-30 21:42:40 +02005341run_test "Per-version suites: TLS 1.2" \
Manuel Pégourié-Gonnardaa946b22019-03-01 10:14:58 +01005342 "$P_SRV version_suites=TLS-RSA-WITH-CAMELLIA-128-CBC-SHA,TLS-RSA-WITH-AES-256-CBC-SHA,TLS-RSA-WITH-AES-128-CBC-SHA,TLS-RSA-WITH-AES-128-GCM-SHA256" \
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02005343 "$P_CLI force_version=tls1_2" \
5344 0 \
5345 -c "Ciphersuite is TLS-RSA-WITH-AES-128-GCM-SHA256"
5346
Manuel Pégourié-Gonnard4cc8c632015-07-23 12:24:03 +02005347# Test for ClientHello without extensions
5348
Manuel Pégourié-Gonnardd55bc202015-08-04 16:22:30 +02005349requires_gnutls
Gilles Peskine5d2511c2017-05-12 13:16:40 +02005350run_test "ClientHello without extensions, SHA-1 allowed" \
Ron Eldor574ac572019-01-16 23:14:41 +02005351 "$P_SRV debug_level=3 key_file=data_files/server2.key crt_file=data_files/server2.crt" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005352 "$G_CLI --priority=NORMAL:%NO_EXTENSIONS:%DISABLE_SAFE_RENEGOTIATION localhost" \
Manuel Pégourié-Gonnard4cc8c632015-07-23 12:24:03 +02005353 0 \
5354 -s "dumping 'client hello extensions' (0 bytes)"
5355
Gilles Peskine5d2511c2017-05-12 13:16:40 +02005356requires_gnutls
5357run_test "ClientHello without extensions, SHA-1 forbidden in certificates on server" \
5358 "$P_SRV debug_level=3 key_file=data_files/server2.key crt_file=data_files/server2.crt allow_sha1=0" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02005359 "$G_CLI --priority=NORMAL:%NO_EXTENSIONS:%DISABLE_SAFE_RENEGOTIATION localhost" \
Gilles Peskine5d2511c2017-05-12 13:16:40 +02005360 0 \
5361 -s "dumping 'client hello extensions' (0 bytes)"
5362
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005363# Tests for mbedtls_ssl_get_bytes_avail()
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02005364
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005365run_test "mbedtls_ssl_get_bytes_avail: no extra data" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02005366 "$P_SRV" \
5367 "$P_CLI request_size=100" \
5368 0 \
5369 -s "Read from client: 100 bytes read$"
5370
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02005371run_test "mbedtls_ssl_get_bytes_avail: extra data" \
Manuel Pégourié-Gonnard95c0a632014-06-11 18:32:36 +02005372 "$P_SRV" \
5373 "$P_CLI request_size=500" \
5374 0 \
5375 -s "Read from client: 500 bytes read (.*+.*)"
Manuel Pégourié-Gonnard90805a82014-06-11 14:06:01 +02005376
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005377# Tests for small client packets
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005378
Janos Follathe2681a42016-03-07 15:57:05 +00005379requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005380run_test "Small client packet SSLv3 BlockCipher" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01005381 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005382 "$P_CLI request_size=1 force_version=ssl3 \
5383 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5384 0 \
5385 -s "Read from client: 1 bytes read"
5386
Janos Follathe2681a42016-03-07 15:57:05 +00005387requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005388run_test "Small client packet SSLv3 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005389 "$P_SRV min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005390 "$P_CLI request_size=1 force_version=ssl3 \
5391 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5392 0 \
5393 -s "Read from client: 1 bytes read"
5394
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005395run_test "Small client packet TLS 1.0 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005396 "$P_SRV" \
5397 "$P_CLI request_size=1 force_version=tls1 \
5398 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5399 0 \
5400 -s "Read from client: 1 bytes read"
5401
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005402run_test "Small client packet TLS 1.0 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01005403 "$P_SRV" \
5404 "$P_CLI request_size=1 force_version=tls1 etm=0 \
5405 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5406 0 \
5407 -s "Read from client: 1 bytes read"
5408
Hanno Becker32c55012017-11-10 08:42:54 +00005409requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005410run_test "Small client packet TLS 1.0 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005411 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005412 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005413 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005414 0 \
5415 -s "Read from client: 1 bytes read"
5416
Hanno Becker32c55012017-11-10 08:42:54 +00005417requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005418run_test "Small client packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005419 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00005420 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005421 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00005422 0 \
5423 -s "Read from client: 1 bytes read"
5424
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005425run_test "Small client packet TLS 1.0 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005426 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005427 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker8501f982017-11-10 08:59:04 +00005428 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5429 0 \
5430 -s "Read from client: 1 bytes read"
5431
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005432run_test "Small client packet TLS 1.0 StreamCipher, without EtM" \
Hanno Becker8501f982017-11-10 08:59:04 +00005433 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5434 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005435 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00005436 0 \
5437 -s "Read from client: 1 bytes read"
5438
5439requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005440run_test "Small client packet TLS 1.0 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005441 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005442 "$P_CLI request_size=1 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005443 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005444 0 \
5445 -s "Read from client: 1 bytes read"
5446
Hanno Becker8501f982017-11-10 08:59:04 +00005447requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005448run_test "Small client packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005449 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5450 "$P_CLI request_size=1 force_version=tls1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
5451 trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005452 0 \
5453 -s "Read from client: 1 bytes read"
5454
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005455run_test "Small client packet TLS 1.1 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005456 "$P_SRV" \
5457 "$P_CLI request_size=1 force_version=tls1_1 \
5458 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5459 0 \
5460 -s "Read from client: 1 bytes read"
5461
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005462run_test "Small client packet TLS 1.1 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01005463 "$P_SRV" \
Hanno Becker8501f982017-11-10 08:59:04 +00005464 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005465 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00005466 0 \
5467 -s "Read from client: 1 bytes read"
5468
5469requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005470run_test "Small client packet TLS 1.1 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005471 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00005472 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005473 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00005474 0 \
5475 -s "Read from client: 1 bytes read"
5476
5477requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005478run_test "Small client packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005479 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00005480 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005481 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01005482 0 \
5483 -s "Read from client: 1 bytes read"
5484
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005485run_test "Small client packet TLS 1.1 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005486 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005487 "$P_CLI request_size=1 force_version=tls1_1 \
5488 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5489 0 \
5490 -s "Read from client: 1 bytes read"
5491
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005492run_test "Small client packet TLS 1.1 StreamCipher, without EtM" \
Hanno Becker8501f982017-11-10 08:59:04 +00005493 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005494 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005495 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005496 0 \
5497 -s "Read from client: 1 bytes read"
5498
Hanno Becker8501f982017-11-10 08:59:04 +00005499requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005500run_test "Small client packet TLS 1.1 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005501 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005502 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005503 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005504 0 \
5505 -s "Read from client: 1 bytes read"
5506
Hanno Becker32c55012017-11-10 08:42:54 +00005507requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005508run_test "Small client packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005509 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005510 "$P_CLI request_size=1 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005511 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005512 0 \
5513 -s "Read from client: 1 bytes read"
5514
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005515run_test "Small client packet TLS 1.2 BlockCipher" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005516 "$P_SRV" \
5517 "$P_CLI request_size=1 force_version=tls1_2 \
5518 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5519 0 \
5520 -s "Read from client: 1 bytes read"
5521
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005522run_test "Small client packet TLS 1.2 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01005523 "$P_SRV" \
Hanno Becker8501f982017-11-10 08:59:04 +00005524 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005525 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
Manuel Pégourié-Gonnard169dd6a2014-11-04 16:15:39 +01005526 0 \
5527 -s "Read from client: 1 bytes read"
5528
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005529run_test "Small client packet TLS 1.2 BlockCipher larger MAC" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005530 "$P_SRV" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01005531 "$P_CLI request_size=1 force_version=tls1_2 \
5532 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005533 0 \
5534 -s "Read from client: 1 bytes read"
5535
Hanno Becker32c55012017-11-10 08:42:54 +00005536requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005537run_test "Small client packet TLS 1.2 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005538 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005539 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005540 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005541 0 \
5542 -s "Read from client: 1 bytes read"
5543
Hanno Becker8501f982017-11-10 08:59:04 +00005544requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005545run_test "Small client packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005546 "$P_SRV trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00005547 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005548 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005549 0 \
5550 -s "Read from client: 1 bytes read"
5551
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005552run_test "Small client packet TLS 1.2 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005553 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005554 "$P_CLI request_size=1 force_version=tls1_2 \
5555 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5556 0 \
5557 -s "Read from client: 1 bytes read"
5558
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005559run_test "Small client packet TLS 1.2 StreamCipher, without EtM" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005560 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005561 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005562 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker8501f982017-11-10 08:59:04 +00005563 0 \
5564 -s "Read from client: 1 bytes read"
5565
Hanno Becker32c55012017-11-10 08:42:54 +00005566requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005567run_test "Small client packet TLS 1.2 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005568 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005569 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005570 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005571 0 \
5572 -s "Read from client: 1 bytes read"
5573
Hanno Becker8501f982017-11-10 08:59:04 +00005574requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005575run_test "Small client packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005576 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker8501f982017-11-10 08:59:04 +00005577 "$P_CLI request_size=1 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005578 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005579 0 \
5580 -s "Read from client: 1 bytes read"
5581
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005582run_test "Small client packet TLS 1.2 AEAD" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005583 "$P_SRV" \
5584 "$P_CLI request_size=1 force_version=tls1_2 \
5585 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
5586 0 \
5587 -s "Read from client: 1 bytes read"
5588
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005589run_test "Small client packet TLS 1.2 AEAD shorter tag" \
Manuel Pégourié-Gonnardee415032014-06-18 15:08:56 +02005590 "$P_SRV" \
5591 "$P_CLI request_size=1 force_version=tls1_2 \
5592 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
5593 0 \
5594 -s "Read from client: 1 bytes read"
5595
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005596# Tests for small client packets in DTLS
Hanno Beckere2148042017-11-10 08:59:18 +00005597
5598requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005599run_test "Small client packet DTLS 1.0" \
Hanno Beckere2148042017-11-10 08:59:18 +00005600 "$P_SRV dtls=1 force_version=dtls1" \
5601 "$P_CLI dtls=1 request_size=1 \
5602 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5603 0 \
5604 -s "Read from client: 1 bytes read"
5605
5606requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005607run_test "Small client packet DTLS 1.0, without EtM" \
Hanno Beckere2148042017-11-10 08:59:18 +00005608 "$P_SRV dtls=1 force_version=dtls1 etm=0" \
5609 "$P_CLI dtls=1 request_size=1 \
5610 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5611 0 \
5612 -s "Read from client: 1 bytes read"
5613
5614requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5615requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005616run_test "Small client packet DTLS 1.0, truncated hmac" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005617 "$P_SRV dtls=1 force_version=dtls1 trunc_hmac=1" \
5618 "$P_CLI dtls=1 request_size=1 trunc_hmac=1 \
Hanno Beckere2148042017-11-10 08:59:18 +00005619 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5620 0 \
5621 -s "Read from client: 1 bytes read"
5622
5623requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5624requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005625run_test "Small client packet DTLS 1.0, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005626 "$P_SRV dtls=1 force_version=dtls1 trunc_hmac=1 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00005627 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005628 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
Hanno Beckere2148042017-11-10 08:59:18 +00005629 0 \
5630 -s "Read from client: 1 bytes read"
5631
5632requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005633run_test "Small client packet DTLS 1.2" \
Hanno Beckere2148042017-11-10 08:59:18 +00005634 "$P_SRV dtls=1 force_version=dtls1_2" \
5635 "$P_CLI dtls=1 request_size=1 \
5636 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5637 0 \
5638 -s "Read from client: 1 bytes read"
5639
5640requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005641run_test "Small client packet DTLS 1.2, without EtM" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005642 "$P_SRV dtls=1 force_version=dtls1_2 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00005643 "$P_CLI dtls=1 request_size=1 \
5644 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5645 0 \
5646 -s "Read from client: 1 bytes read"
5647
5648requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5649requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005650run_test "Small client packet DTLS 1.2, truncated hmac" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005651 "$P_SRV dtls=1 force_version=dtls1_2 trunc_hmac=1" \
Hanno Beckere2148042017-11-10 08:59:18 +00005652 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005653 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Beckere2148042017-11-10 08:59:18 +00005654 0 \
5655 -s "Read from client: 1 bytes read"
5656
5657requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5658requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005659run_test "Small client packet DTLS 1.2, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00005660 "$P_SRV dtls=1 force_version=dtls1_2 trunc_hmac=1 etm=0" \
Hanno Beckere2148042017-11-10 08:59:18 +00005661 "$P_CLI dtls=1 request_size=1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00005662 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
Hanno Beckere2148042017-11-10 08:59:18 +00005663 0 \
5664 -s "Read from client: 1 bytes read"
5665
Andrzej Kurekc19fc552018-06-19 09:37:30 -04005666# Tests for small server packets
5667
5668requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
5669run_test "Small server packet SSLv3 BlockCipher" \
5670 "$P_SRV response_size=1 min_version=ssl3" \
5671 "$P_CLI force_version=ssl3 \
5672 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5673 0 \
5674 -c "Read from server: 1 bytes read"
5675
5676requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
5677run_test "Small server packet SSLv3 StreamCipher" \
5678 "$P_SRV response_size=1 min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5679 "$P_CLI force_version=ssl3 \
5680 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5681 0 \
5682 -c "Read from server: 1 bytes read"
5683
5684run_test "Small server packet TLS 1.0 BlockCipher" \
5685 "$P_SRV response_size=1" \
5686 "$P_CLI force_version=tls1 \
5687 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5688 0 \
5689 -c "Read from server: 1 bytes read"
5690
5691run_test "Small server packet TLS 1.0 BlockCipher, without EtM" \
5692 "$P_SRV response_size=1" \
5693 "$P_CLI force_version=tls1 etm=0 \
5694 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5695 0 \
5696 -c "Read from server: 1 bytes read"
5697
5698requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5699run_test "Small server packet TLS 1.0 BlockCipher, truncated MAC" \
5700 "$P_SRV response_size=1 trunc_hmac=1" \
5701 "$P_CLI force_version=tls1 \
5702 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
5703 0 \
5704 -c "Read from server: 1 bytes read"
5705
5706requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5707run_test "Small server packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
5708 "$P_SRV response_size=1 trunc_hmac=1" \
5709 "$P_CLI force_version=tls1 \
5710 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
5711 0 \
5712 -c "Read from server: 1 bytes read"
5713
5714run_test "Small server packet TLS 1.0 StreamCipher" \
5715 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5716 "$P_CLI force_version=tls1 \
5717 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5718 0 \
5719 -c "Read from server: 1 bytes read"
5720
5721run_test "Small server packet TLS 1.0 StreamCipher, without EtM" \
5722 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5723 "$P_CLI force_version=tls1 \
5724 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5725 0 \
5726 -c "Read from server: 1 bytes read"
5727
5728requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5729run_test "Small server packet TLS 1.0 StreamCipher, truncated MAC" \
5730 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5731 "$P_CLI force_version=tls1 \
5732 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5733 0 \
5734 -c "Read from server: 1 bytes read"
5735
5736requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5737run_test "Small server packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
5738 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5739 "$P_CLI force_version=tls1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
5740 trunc_hmac=1 etm=0" \
5741 0 \
5742 -c "Read from server: 1 bytes read"
5743
5744run_test "Small server packet TLS 1.1 BlockCipher" \
5745 "$P_SRV response_size=1" \
5746 "$P_CLI force_version=tls1_1 \
5747 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5748 0 \
5749 -c "Read from server: 1 bytes read"
5750
5751run_test "Small server packet TLS 1.1 BlockCipher, without EtM" \
5752 "$P_SRV response_size=1" \
5753 "$P_CLI force_version=tls1_1 \
5754 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
5755 0 \
5756 -c "Read from server: 1 bytes read"
5757
5758requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5759run_test "Small server packet TLS 1.1 BlockCipher, truncated MAC" \
5760 "$P_SRV response_size=1 trunc_hmac=1" \
5761 "$P_CLI force_version=tls1_1 \
5762 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
5763 0 \
5764 -c "Read from server: 1 bytes read"
5765
5766requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5767run_test "Small server packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
5768 "$P_SRV response_size=1 trunc_hmac=1" \
5769 "$P_CLI force_version=tls1_1 \
5770 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
5771 0 \
5772 -c "Read from server: 1 bytes read"
5773
5774run_test "Small server packet TLS 1.1 StreamCipher" \
5775 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5776 "$P_CLI force_version=tls1_1 \
5777 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5778 0 \
5779 -c "Read from server: 1 bytes read"
5780
5781run_test "Small server packet TLS 1.1 StreamCipher, without EtM" \
5782 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5783 "$P_CLI force_version=tls1_1 \
5784 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5785 0 \
5786 -c "Read from server: 1 bytes read"
5787
5788requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5789run_test "Small server packet TLS 1.1 StreamCipher, truncated MAC" \
5790 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5791 "$P_CLI force_version=tls1_1 \
5792 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5793 0 \
5794 -c "Read from server: 1 bytes read"
5795
5796requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5797run_test "Small server packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
5798 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5799 "$P_CLI force_version=tls1_1 \
5800 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
5801 0 \
5802 -c "Read from server: 1 bytes read"
5803
5804run_test "Small server packet TLS 1.2 BlockCipher" \
5805 "$P_SRV response_size=1" \
5806 "$P_CLI force_version=tls1_2 \
5807 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5808 0 \
5809 -c "Read from server: 1 bytes read"
5810
5811run_test "Small server packet TLS 1.2 BlockCipher, without EtM" \
5812 "$P_SRV response_size=1" \
5813 "$P_CLI force_version=tls1_2 \
5814 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA etm=0" \
5815 0 \
5816 -c "Read from server: 1 bytes read"
5817
5818run_test "Small server packet TLS 1.2 BlockCipher larger MAC" \
5819 "$P_SRV response_size=1" \
5820 "$P_CLI force_version=tls1_2 \
5821 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
5822 0 \
5823 -c "Read from server: 1 bytes read"
5824
5825requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5826run_test "Small server packet TLS 1.2 BlockCipher, truncated MAC" \
5827 "$P_SRV response_size=1 trunc_hmac=1" \
5828 "$P_CLI force_version=tls1_2 \
5829 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
5830 0 \
5831 -c "Read from server: 1 bytes read"
5832
5833requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5834run_test "Small server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
5835 "$P_SRV response_size=1 trunc_hmac=1" \
5836 "$P_CLI force_version=tls1_2 \
5837 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
5838 0 \
5839 -c "Read from server: 1 bytes read"
5840
5841run_test "Small server packet TLS 1.2 StreamCipher" \
5842 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5843 "$P_CLI force_version=tls1_2 \
5844 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5845 0 \
5846 -c "Read from server: 1 bytes read"
5847
5848run_test "Small server packet TLS 1.2 StreamCipher, without EtM" \
5849 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5850 "$P_CLI force_version=tls1_2 \
5851 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
5852 0 \
5853 -c "Read from server: 1 bytes read"
5854
5855requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5856run_test "Small server packet TLS 1.2 StreamCipher, truncated MAC" \
5857 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5858 "$P_CLI force_version=tls1_2 \
5859 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5860 0 \
5861 -c "Read from server: 1 bytes read"
5862
5863requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5864run_test "Small server packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
5865 "$P_SRV response_size=1 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
5866 "$P_CLI force_version=tls1_2 \
5867 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
5868 0 \
5869 -c "Read from server: 1 bytes read"
5870
5871run_test "Small server packet TLS 1.2 AEAD" \
5872 "$P_SRV response_size=1" \
5873 "$P_CLI force_version=tls1_2 \
5874 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
5875 0 \
5876 -c "Read from server: 1 bytes read"
5877
5878run_test "Small server packet TLS 1.2 AEAD shorter tag" \
5879 "$P_SRV response_size=1" \
5880 "$P_CLI force_version=tls1_2 \
5881 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
5882 0 \
5883 -c "Read from server: 1 bytes read"
5884
5885# Tests for small server packets in DTLS
5886
5887requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5888run_test "Small server packet DTLS 1.0" \
5889 "$P_SRV dtls=1 response_size=1 force_version=dtls1" \
5890 "$P_CLI dtls=1 \
5891 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5892 0 \
5893 -c "Read from server: 1 bytes read"
5894
5895requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5896run_test "Small server packet DTLS 1.0, without EtM" \
5897 "$P_SRV dtls=1 response_size=1 force_version=dtls1 etm=0" \
5898 "$P_CLI dtls=1 \
5899 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5900 0 \
5901 -c "Read from server: 1 bytes read"
5902
5903requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5904requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5905run_test "Small server packet DTLS 1.0, truncated hmac" \
5906 "$P_SRV dtls=1 response_size=1 force_version=dtls1 trunc_hmac=1" \
5907 "$P_CLI dtls=1 trunc_hmac=1 \
5908 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5909 0 \
5910 -c "Read from server: 1 bytes read"
5911
5912requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5913requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5914run_test "Small server packet DTLS 1.0, without EtM, truncated MAC" \
5915 "$P_SRV dtls=1 response_size=1 force_version=dtls1 trunc_hmac=1 etm=0" \
5916 "$P_CLI dtls=1 \
5917 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
5918 0 \
5919 -c "Read from server: 1 bytes read"
5920
5921requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5922run_test "Small server packet DTLS 1.2" \
5923 "$P_SRV dtls=1 response_size=1 force_version=dtls1_2" \
5924 "$P_CLI dtls=1 \
5925 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5926 0 \
5927 -c "Read from server: 1 bytes read"
5928
5929requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5930run_test "Small server packet DTLS 1.2, without EtM" \
5931 "$P_SRV dtls=1 response_size=1 force_version=dtls1_2 etm=0" \
5932 "$P_CLI dtls=1 \
5933 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5934 0 \
5935 -c "Read from server: 1 bytes read"
5936
5937requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5938requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5939run_test "Small server packet DTLS 1.2, truncated hmac" \
5940 "$P_SRV dtls=1 response_size=1 force_version=dtls1_2 trunc_hmac=1" \
5941 "$P_CLI dtls=1 \
5942 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
5943 0 \
5944 -c "Read from server: 1 bytes read"
5945
5946requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
5947requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
5948run_test "Small server packet DTLS 1.2, without EtM, truncated MAC" \
5949 "$P_SRV dtls=1 response_size=1 force_version=dtls1_2 trunc_hmac=1 etm=0" \
5950 "$P_CLI dtls=1 \
5951 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1"\
5952 0 \
5953 -c "Read from server: 1 bytes read"
5954
Janos Follath00efff72016-05-06 13:48:23 +01005955# A test for extensions in SSLv3
5956
5957requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
5958run_test "SSLv3 with extensions, server side" \
5959 "$P_SRV min_version=ssl3 debug_level=3" \
5960 "$P_CLI force_version=ssl3 tickets=1 max_frag_len=4096 alpn=abc,1234" \
5961 0 \
5962 -S "dumping 'client hello extensions'" \
5963 -S "server hello, total extension length:"
5964
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005965# Test for large client packets
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005966
Angus Grattonc4dd0732018-04-11 16:28:39 +10005967# How many fragments do we expect to write $1 bytes?
5968fragments_for_write() {
5969 echo "$(( ( $1 + $MAX_OUT_LEN - 1 ) / $MAX_OUT_LEN ))"
5970}
5971
Janos Follathe2681a42016-03-07 15:57:05 +00005972requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005973run_test "Large client packet SSLv3 BlockCipher" \
Manuel Pégourié-Gonnard448ea502015-01-12 11:40:14 +01005974 "$P_SRV min_version=ssl3" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01005975 "$P_CLI request_size=16384 force_version=ssl3 recsplit=0 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005976 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5977 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005978 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5979 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005980
Janos Follathe2681a42016-03-07 15:57:05 +00005981requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005982run_test "Large client packet SSLv3 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01005983 "$P_SRV min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005984 "$P_CLI request_size=16384 force_version=ssl3 \
5985 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
5986 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005987 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5988 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005989
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005990run_test "Large client packet TLS 1.0 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005991 "$P_SRV" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01005992 "$P_CLI request_size=16384 force_version=tls1 recsplit=0 \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005993 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
5994 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10005995 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
5996 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005997
Andrzej Kurek30e731d2017-10-12 13:50:29 +02005998run_test "Large client packet TLS 1.0 BlockCipher, without EtM" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02005999 "$P_SRV" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006000 "$P_CLI request_size=16384 force_version=tls1 etm=0 recsplit=0 \
6001 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6002 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006003 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00006004
Hanno Becker32c55012017-11-10 08:42:54 +00006005requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006006run_test "Large client packet TLS 1.0 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006007 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01006008 "$P_CLI request_size=16384 force_version=tls1 recsplit=0 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006009 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006010 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006011 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6012 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006013
Hanno Becker32c55012017-11-10 08:42:54 +00006014requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006015run_test "Large client packet TLS 1.0 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006016 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006017 "$P_CLI request_size=16384 force_version=tls1 etm=0 recsplit=0 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006018 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006019 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006020 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00006021
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006022run_test "Large client packet TLS 1.0 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006023 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006024 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006025 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6026 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006027 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00006028
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006029run_test "Large client packet TLS 1.0 StreamCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006030 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6031 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006032 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006033 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006034 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00006035
6036requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006037run_test "Large client packet TLS 1.0 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006038 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006039 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006040 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006041 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006042 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006043
Hanno Becker278fc7a2017-11-10 09:16:28 +00006044requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006045run_test "Large client packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006046 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006047 "$P_CLI request_size=16384 force_version=tls1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006048 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006049 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006050 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6051 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006052
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006053run_test "Large client packet TLS 1.1 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006054 "$P_SRV" \
6055 "$P_CLI request_size=16384 force_version=tls1_1 \
6056 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6057 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006058 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6059 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006060
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006061run_test "Large client packet TLS 1.1 BlockCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006062 "$P_SRV" \
6063 "$P_CLI request_size=16384 force_version=tls1_1 etm=0 \
6064 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006065 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006066 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006067
Hanno Becker32c55012017-11-10 08:42:54 +00006068requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006069run_test "Large client packet TLS 1.1 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006070 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006071 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006072 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006073 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006074 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006075
Hanno Becker32c55012017-11-10 08:42:54 +00006076requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006077run_test "Large client packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006078 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006079 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006080 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006081 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006082 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00006083
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006084run_test "Large client packet TLS 1.1 StreamCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006085 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6086 "$P_CLI request_size=16384 force_version=tls1_1 \
6087 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6088 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006089 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6090 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006091
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006092run_test "Large client packet TLS 1.1 StreamCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006093 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006094 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006095 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006096 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006097 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6098 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006099
Hanno Becker278fc7a2017-11-10 09:16:28 +00006100requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006101run_test "Large client packet TLS 1.1 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006102 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006103 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006104 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006105 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006106 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006107
Hanno Becker278fc7a2017-11-10 09:16:28 +00006108requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006109run_test "Large client packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006110 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006111 "$P_CLI request_size=16384 force_version=tls1_1 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006112 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006113 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006114 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6115 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006116
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006117run_test "Large client packet TLS 1.2 BlockCipher" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006118 "$P_SRV" \
6119 "$P_CLI request_size=16384 force_version=tls1_2 \
6120 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6121 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006122 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6123 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006124
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006125run_test "Large client packet TLS 1.2 BlockCipher, without EtM" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006126 "$P_SRV" \
6127 "$P_CLI request_size=16384 force_version=tls1_2 etm=0 \
6128 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6129 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006130 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00006131
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006132run_test "Large client packet TLS 1.2 BlockCipher larger MAC" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006133 "$P_SRV" \
Manuel Pégourié-Gonnardc82ee352015-01-07 16:35:25 +01006134 "$P_CLI request_size=16384 force_version=tls1_2 \
6135 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006136 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006137 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6138 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006139
Hanno Becker32c55012017-11-10 08:42:54 +00006140requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006141run_test "Large client packet TLS 1.2 BlockCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006142 "$P_SRV trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006143 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006144 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006145 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006146 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006147
Hanno Becker278fc7a2017-11-10 09:16:28 +00006148requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006149run_test "Large client packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006150 "$P_SRV trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006151 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006152 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006153 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006154 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6155 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006156
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006157run_test "Large client packet TLS 1.2 StreamCipher" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006158 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006159 "$P_CLI request_size=16384 force_version=tls1_2 \
6160 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6161 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006162 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6163 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006164
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006165run_test "Large client packet TLS 1.2 StreamCipher, without EtM" \
Manuel Pégourié-Gonnardea0920f2015-03-24 09:50:15 +01006166 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006167 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006168 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
6169 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006170 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Hanno Becker278fc7a2017-11-10 09:16:28 +00006171
Hanno Becker32c55012017-11-10 08:42:54 +00006172requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006173run_test "Large client packet TLS 1.2 StreamCipher, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006174 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006175 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006176 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006177 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006178 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006179
Hanno Becker278fc7a2017-11-10 09:16:28 +00006180requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006181run_test "Large client packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
Hanno Becker909f9a32017-11-21 17:10:12 +00006182 "$P_SRV arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
Hanno Becker278fc7a2017-11-10 09:16:28 +00006183 "$P_CLI request_size=16384 force_version=tls1_2 \
Hanno Becker909f9a32017-11-21 17:10:12 +00006184 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006185 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006186 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6187 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006188
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006189run_test "Large client packet TLS 1.2 AEAD" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006190 "$P_SRV" \
6191 "$P_CLI request_size=16384 force_version=tls1_2 \
6192 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
6193 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006194 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6195 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006196
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006197run_test "Large client packet TLS 1.2 AEAD shorter tag" \
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006198 "$P_SRV" \
6199 "$P_CLI request_size=16384 force_version=tls1_2 \
6200 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
6201 0 \
Angus Grattonc4dd0732018-04-11 16:28:39 +10006202 -c "16384 bytes written in $(fragments_for_write 16384) fragments" \
6203 -s "Read from client: $MAX_CONTENT_LEN bytes read"
Manuel Pégourié-Gonnard8920f692014-06-18 22:05:08 +02006204
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006205# Test for large server packets
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006206requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
6207run_test "Large server packet SSLv3 StreamCipher" \
6208 "$P_SRV response_size=16384 min_version=ssl3 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6209 "$P_CLI force_version=ssl3 \
6210 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6211 0 \
6212 -c "Read from server: 16384 bytes read"
6213
Andrzej Kurek6a4f2242018-08-27 08:00:13 -04006214# Checking next 4 tests logs for 1n-1 split against BEAST too
6215requires_config_enabled MBEDTLS_SSL_PROTO_SSL3
6216run_test "Large server packet SSLv3 BlockCipher" \
6217 "$P_SRV response_size=16384 min_version=ssl3" \
6218 "$P_CLI force_version=ssl3 recsplit=0 \
6219 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6220 0 \
6221 -c "Read from server: 1 bytes read"\
6222 -c "16383 bytes read"\
6223 -C "Read from server: 16384 bytes read"
6224
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006225run_test "Large server packet TLS 1.0 BlockCipher" \
6226 "$P_SRV response_size=16384" \
6227 "$P_CLI force_version=tls1 recsplit=0 \
6228 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6229 0 \
6230 -c "Read from server: 1 bytes read"\
6231 -c "16383 bytes read"\
6232 -C "Read from server: 16384 bytes read"
6233
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006234run_test "Large server packet TLS 1.0 BlockCipher, without EtM" \
6235 "$P_SRV response_size=16384" \
6236 "$P_CLI force_version=tls1 etm=0 recsplit=0 \
6237 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6238 0 \
6239 -c "Read from server: 1 bytes read"\
6240 -c "16383 bytes read"\
6241 -C "Read from server: 16384 bytes read"
6242
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006243requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6244run_test "Large server packet TLS 1.0 BlockCipher truncated MAC" \
6245 "$P_SRV response_size=16384" \
6246 "$P_CLI force_version=tls1 recsplit=0 \
6247 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
6248 trunc_hmac=1" \
6249 0 \
6250 -c "Read from server: 1 bytes read"\
6251 -c "16383 bytes read"\
6252 -C "Read from server: 16384 bytes read"
6253
6254requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6255run_test "Large server packet TLS 1.0 StreamCipher truncated MAC" \
6256 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6257 "$P_CLI force_version=tls1 \
6258 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
6259 trunc_hmac=1" \
6260 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006261 -s "16384 bytes written in 1 fragments" \
6262 -c "Read from server: 16384 bytes read"
6263
6264run_test "Large server packet TLS 1.0 StreamCipher" \
6265 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6266 "$P_CLI force_version=tls1 \
6267 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6268 0 \
6269 -s "16384 bytes written in 1 fragments" \
6270 -c "Read from server: 16384 bytes read"
6271
6272run_test "Large server packet TLS 1.0 StreamCipher, without EtM" \
6273 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6274 "$P_CLI force_version=tls1 \
6275 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
6276 0 \
6277 -s "16384 bytes written in 1 fragments" \
6278 -c "Read from server: 16384 bytes read"
6279
6280requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6281run_test "Large server packet TLS 1.0 StreamCipher, truncated MAC" \
6282 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6283 "$P_CLI force_version=tls1 \
6284 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6285 0 \
6286 -s "16384 bytes written in 1 fragments" \
6287 -c "Read from server: 16384 bytes read"
6288
6289requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6290run_test "Large server packet TLS 1.0 StreamCipher, without EtM, truncated MAC" \
6291 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6292 "$P_CLI force_version=tls1 \
6293 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
6294 0 \
6295 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006296 -c "Read from server: 16384 bytes read"
6297
6298run_test "Large server packet TLS 1.1 BlockCipher" \
6299 "$P_SRV response_size=16384" \
6300 "$P_CLI force_version=tls1_1 \
6301 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6302 0 \
6303 -c "Read from server: 16384 bytes read"
6304
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006305run_test "Large server packet TLS 1.1 BlockCipher, without EtM" \
6306 "$P_SRV response_size=16384" \
6307 "$P_CLI force_version=tls1_1 etm=0 \
6308 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006309 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006310 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006311 -c "Read from server: 16384 bytes read"
6312
6313requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6314run_test "Large server packet TLS 1.1 BlockCipher truncated MAC" \
6315 "$P_SRV response_size=16384" \
6316 "$P_CLI force_version=tls1_1 \
6317 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
6318 trunc_hmac=1" \
6319 0 \
6320 -c "Read from server: 16384 bytes read"
6321
6322requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006323run_test "Large server packet TLS 1.1 BlockCipher, without EtM, truncated MAC" \
6324 "$P_SRV response_size=16384 trunc_hmac=1" \
6325 "$P_CLI force_version=tls1_1 \
6326 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
6327 0 \
6328 -s "16384 bytes written in 1 fragments" \
6329 -c "Read from server: 16384 bytes read"
6330
6331run_test "Large server packet TLS 1.1 StreamCipher" \
6332 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6333 "$P_CLI force_version=tls1_1 \
6334 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6335 0 \
6336 -c "Read from server: 16384 bytes read"
6337
6338run_test "Large server packet TLS 1.1 StreamCipher, without EtM" \
6339 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6340 "$P_CLI force_version=tls1_1 \
6341 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
6342 0 \
6343 -s "16384 bytes written in 1 fragments" \
6344 -c "Read from server: 16384 bytes read"
6345
6346requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006347run_test "Large server packet TLS 1.1 StreamCipher truncated MAC" \
6348 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6349 "$P_CLI force_version=tls1_1 \
6350 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
6351 trunc_hmac=1" \
6352 0 \
6353 -c "Read from server: 16384 bytes read"
6354
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006355run_test "Large server packet TLS 1.1 StreamCipher, without EtM, truncated MAC" \
6356 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6357 "$P_CLI force_version=tls1_1 \
6358 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
6359 0 \
6360 -s "16384 bytes written in 1 fragments" \
6361 -c "Read from server: 16384 bytes read"
6362
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006363run_test "Large server packet TLS 1.2 BlockCipher" \
6364 "$P_SRV response_size=16384" \
6365 "$P_CLI force_version=tls1_2 \
6366 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6367 0 \
6368 -c "Read from server: 16384 bytes read"
6369
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006370run_test "Large server packet TLS 1.2 BlockCipher, without EtM" \
6371 "$P_SRV response_size=16384" \
6372 "$P_CLI force_version=tls1_2 etm=0 \
6373 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA" \
6374 0 \
6375 -s "16384 bytes written in 1 fragments" \
6376 -c "Read from server: 16384 bytes read"
6377
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006378run_test "Large server packet TLS 1.2 BlockCipher larger MAC" \
6379 "$P_SRV response_size=16384" \
6380 "$P_CLI force_version=tls1_2 \
6381 force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-256-CBC-SHA384" \
6382 0 \
6383 -c "Read from server: 16384 bytes read"
6384
6385requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6386run_test "Large server packet TLS 1.2 BlockCipher truncated MAC" \
6387 "$P_SRV response_size=16384" \
6388 "$P_CLI force_version=tls1_2 \
6389 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA \
6390 trunc_hmac=1" \
6391 0 \
6392 -c "Read from server: 16384 bytes read"
6393
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006394run_test "Large server packet TLS 1.2 BlockCipher, without EtM, truncated MAC" \
6395 "$P_SRV response_size=16384 trunc_hmac=1" \
6396 "$P_CLI force_version=tls1_2 \
6397 force_ciphersuite=TLS-RSA-WITH-AES-256-CBC-SHA trunc_hmac=1 etm=0" \
6398 0 \
6399 -s "16384 bytes written in 1 fragments" \
6400 -c "Read from server: 16384 bytes read"
6401
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006402run_test "Large server packet TLS 1.2 StreamCipher" \
6403 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6404 "$P_CLI force_version=tls1_2 \
6405 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6406 0 \
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006407 -s "16384 bytes written in 1 fragments" \
6408 -c "Read from server: 16384 bytes read"
6409
6410run_test "Large server packet TLS 1.2 StreamCipher, without EtM" \
6411 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6412 "$P_CLI force_version=tls1_2 \
6413 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA etm=0" \
6414 0 \
6415 -s "16384 bytes written in 1 fragments" \
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006416 -c "Read from server: 16384 bytes read"
6417
6418requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6419run_test "Large server packet TLS 1.2 StreamCipher truncated MAC" \
6420 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA" \
6421 "$P_CLI force_version=tls1_2 \
6422 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA \
6423 trunc_hmac=1" \
6424 0 \
6425 -c "Read from server: 16384 bytes read"
6426
Andrzej Kurekc19fc552018-06-19 09:37:30 -04006427requires_config_enabled MBEDTLS_SSL_TRUNCATED_HMAC
6428run_test "Large server packet TLS 1.2 StreamCipher, without EtM, truncated MAC" \
6429 "$P_SRV response_size=16384 arc4=1 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1" \
6430 "$P_CLI force_version=tls1_2 \
6431 force_ciphersuite=TLS-RSA-WITH-RC4-128-SHA trunc_hmac=1 etm=0" \
6432 0 \
6433 -s "16384 bytes written in 1 fragments" \
6434 -c "Read from server: 16384 bytes read"
6435
Andrzej Kurek30e731d2017-10-12 13:50:29 +02006436run_test "Large server packet TLS 1.2 AEAD" \
6437 "$P_SRV response_size=16384" \
6438 "$P_CLI force_version=tls1_2 \
6439 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM" \
6440 0 \
6441 -c "Read from server: 16384 bytes read"
6442
6443run_test "Large server packet TLS 1.2 AEAD shorter tag" \
6444 "$P_SRV response_size=16384" \
6445 "$P_CLI force_version=tls1_2 \
6446 force_ciphersuite=TLS-RSA-WITH-AES-256-CCM-8" \
6447 0 \
6448 -c "Read from server: 16384 bytes read"
6449
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006450# Tests for restartable ECC
6451
6452requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6453run_test "EC restart: TLS, default" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006454 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006455 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006456 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006457 debug_level=1" \
6458 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006459 -C "x509_verify_cert.*4b00" \
6460 -C "mbedtls_pk_verify.*4b00" \
6461 -C "mbedtls_ecdh_make_public.*4b00" \
6462 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006463
6464requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6465run_test "EC restart: TLS, max_ops=0" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006466 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006467 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006468 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006469 debug_level=1 ec_max_ops=0" \
6470 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006471 -C "x509_verify_cert.*4b00" \
6472 -C "mbedtls_pk_verify.*4b00" \
6473 -C "mbedtls_ecdh_make_public.*4b00" \
6474 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006475
6476requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6477run_test "EC restart: TLS, max_ops=65535" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006478 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006479 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006480 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006481 debug_level=1 ec_max_ops=65535" \
6482 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006483 -C "x509_verify_cert.*4b00" \
6484 -C "mbedtls_pk_verify.*4b00" \
6485 -C "mbedtls_ecdh_make_public.*4b00" \
6486 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006487
6488requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6489run_test "EC restart: TLS, max_ops=1000" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006490 "$P_SRV auth_mode=required" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006491 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006492 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006493 debug_level=1 ec_max_ops=1000" \
6494 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006495 -c "x509_verify_cert.*4b00" \
6496 -c "mbedtls_pk_verify.*4b00" \
6497 -c "mbedtls_ecdh_make_public.*4b00" \
6498 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006499
6500requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02006501run_test "EC restart: TLS, max_ops=1000, badsign" \
6502 "$P_SRV auth_mode=required \
6503 crt_file=data_files/server5-badsign.crt \
6504 key_file=data_files/server5.key" \
6505 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
6506 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6507 debug_level=1 ec_max_ops=1000" \
6508 1 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006509 -c "x509_verify_cert.*4b00" \
6510 -C "mbedtls_pk_verify.*4b00" \
6511 -C "mbedtls_ecdh_make_public.*4b00" \
6512 -C "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02006513 -c "! The certificate is not correctly signed by the trusted CA" \
6514 -c "! mbedtls_ssl_handshake returned" \
6515 -c "X509 - Certificate verification failed"
6516
6517requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6518run_test "EC restart: TLS, max_ops=1000, auth_mode=optional badsign" \
6519 "$P_SRV auth_mode=required \
6520 crt_file=data_files/server5-badsign.crt \
6521 key_file=data_files/server5.key" \
6522 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
6523 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6524 debug_level=1 ec_max_ops=1000 auth_mode=optional" \
6525 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006526 -c "x509_verify_cert.*4b00" \
6527 -c "mbedtls_pk_verify.*4b00" \
6528 -c "mbedtls_ecdh_make_public.*4b00" \
6529 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02006530 -c "! The certificate is not correctly signed by the trusted CA" \
6531 -C "! mbedtls_ssl_handshake returned" \
6532 -C "X509 - Certificate verification failed"
6533
6534requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6535run_test "EC restart: TLS, max_ops=1000, auth_mode=none badsign" \
6536 "$P_SRV auth_mode=required \
6537 crt_file=data_files/server5-badsign.crt \
6538 key_file=data_files/server5.key" \
6539 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
6540 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6541 debug_level=1 ec_max_ops=1000 auth_mode=none" \
6542 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006543 -C "x509_verify_cert.*4b00" \
6544 -c "mbedtls_pk_verify.*4b00" \
6545 -c "mbedtls_ecdh_make_public.*4b00" \
6546 -c "mbedtls_pk_sign.*4b00" \
Manuel Pégourié-Gonnard3bf49c42017-08-15 13:47:06 +02006547 -C "! The certificate is not correctly signed by the trusted CA" \
6548 -C "! mbedtls_ssl_handshake returned" \
6549 -C "X509 - Certificate verification failed"
6550
6551requires_config_enabled MBEDTLS_ECP_RESTARTABLE
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006552run_test "EC restart: DTLS, max_ops=1000" \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006553 "$P_SRV auth_mode=required dtls=1" \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006554 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard862cde52017-05-17 11:56:15 +02006555 key_file=data_files/server5.key crt_file=data_files/server5.crt \
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006556 dtls=1 debug_level=1 ec_max_ops=1000" \
6557 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006558 -c "x509_verify_cert.*4b00" \
6559 -c "mbedtls_pk_verify.*4b00" \
6560 -c "mbedtls_ecdh_make_public.*4b00" \
6561 -c "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard2350b4e2017-05-16 09:26:48 +02006562
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02006563requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6564run_test "EC restart: TLS, max_ops=1000 no client auth" \
6565 "$P_SRV" \
6566 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
6567 debug_level=1 ec_max_ops=1000" \
6568 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006569 -c "x509_verify_cert.*4b00" \
6570 -c "mbedtls_pk_verify.*4b00" \
6571 -c "mbedtls_ecdh_make_public.*4b00" \
6572 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02006573
6574requires_config_enabled MBEDTLS_ECP_RESTARTABLE
6575run_test "EC restart: TLS, max_ops=1000, ECDHE-PSK" \
6576 "$P_SRV psk=abc123" \
6577 "$P_CLI force_ciphersuite=TLS-ECDHE-PSK-WITH-AES-128-CBC-SHA256 \
6578 psk=abc123 debug_level=1 ec_max_ops=1000" \
6579 0 \
Manuel Pégourié-Gonnardb5d668a2018-06-13 11:22:01 +02006580 -C "x509_verify_cert.*4b00" \
6581 -C "mbedtls_pk_verify.*4b00" \
6582 -C "mbedtls_ecdh_make_public.*4b00" \
6583 -C "mbedtls_pk_sign.*4b00"
Manuel Pégourié-Gonnard32033da2017-05-18 12:49:27 +02006584
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006585# Tests of asynchronous private key support in SSL
6586
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006587requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006588run_test "SSL async private: sign, delay=0" \
6589 "$P_SRV \
6590 async_operations=s async_private_delay1=0 async_private_delay2=0" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006591 "$P_CLI" \
6592 0 \
6593 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006594 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006595
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006596requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006597run_test "SSL async private: sign, delay=1" \
6598 "$P_SRV \
6599 async_operations=s async_private_delay1=1 async_private_delay2=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006600 "$P_CLI" \
6601 0 \
6602 -s "Async sign callback: using key slot " \
6603 -s "Async resume (slot [0-9]): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006604 -s "Async resume (slot [0-9]): sign done, status=0"
6605
Gilles Peskine12d0cc12018-04-26 15:06:56 +02006606requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
6607run_test "SSL async private: sign, delay=2" \
6608 "$P_SRV \
6609 async_operations=s async_private_delay1=2 async_private_delay2=2" \
6610 "$P_CLI" \
6611 0 \
6612 -s "Async sign callback: using key slot " \
6613 -U "Async sign callback: using key slot " \
6614 -s "Async resume (slot [0-9]): call 1 more times." \
6615 -s "Async resume (slot [0-9]): call 0 more times." \
6616 -s "Async resume (slot [0-9]): sign done, status=0"
6617
Gilles Peskined3268832018-04-26 06:23:59 +02006618# Test that the async callback correctly signs the 36-byte hash of TLS 1.0/1.1
6619# with RSA PKCS#1v1.5 as used in TLS 1.0/1.1.
6620requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
6621requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
6622run_test "SSL async private: sign, RSA, TLS 1.1" \
6623 "$P_SRV key_file=data_files/server2.key crt_file=data_files/server2.crt \
6624 async_operations=s async_private_delay1=0 async_private_delay2=0" \
6625 "$P_CLI force_version=tls1_1" \
6626 0 \
6627 -s "Async sign callback: using key slot " \
6628 -s "Async resume (slot [0-9]): sign done, status=0"
6629
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006630requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine807d74a2018-04-30 10:30:49 +02006631run_test "SSL async private: sign, SNI" \
6632 "$P_SRV debug_level=3 \
6633 async_operations=s async_private_delay1=0 async_private_delay2=0 \
6634 crt_file=data_files/server5.crt key_file=data_files/server5.key \
6635 sni=localhost,data_files/server2.crt,data_files/server2.key,-,-,-,polarssl.example,data_files/server1-nospace.crt,data_files/server1.key,-,-,-" \
6636 "$P_CLI server_name=polarssl.example" \
6637 0 \
6638 -s "Async sign callback: using key slot " \
6639 -s "Async resume (slot [0-9]): sign done, status=0" \
6640 -s "parse ServerName extension" \
6641 -c "issuer name *: C=NL, O=PolarSSL, CN=PolarSSL Test CA" \
6642 -c "subject name *: C=NL, O=PolarSSL, CN=polarssl.example"
6643
6644requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006645run_test "SSL async private: decrypt, delay=0" \
6646 "$P_SRV \
6647 async_operations=d async_private_delay1=0 async_private_delay2=0" \
6648 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6649 0 \
6650 -s "Async decrypt callback: using key slot " \
6651 -s "Async resume (slot [0-9]): decrypt done, status=0"
6652
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006653requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006654run_test "SSL async private: decrypt, delay=1" \
6655 "$P_SRV \
6656 async_operations=d async_private_delay1=1 async_private_delay2=1" \
6657 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6658 0 \
6659 -s "Async decrypt callback: using key slot " \
6660 -s "Async resume (slot [0-9]): call 0 more times." \
6661 -s "Async resume (slot [0-9]): decrypt done, status=0"
6662
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006663requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006664run_test "SSL async private: decrypt RSA-PSK, delay=0" \
6665 "$P_SRV psk=abc123 \
6666 async_operations=d async_private_delay1=0 async_private_delay2=0" \
6667 "$P_CLI psk=abc123 \
6668 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
6669 0 \
6670 -s "Async decrypt callback: using key slot " \
6671 -s "Async resume (slot [0-9]): decrypt done, status=0"
6672
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006673requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006674run_test "SSL async private: decrypt RSA-PSK, delay=1" \
6675 "$P_SRV psk=abc123 \
6676 async_operations=d async_private_delay1=1 async_private_delay2=1" \
6677 "$P_CLI psk=abc123 \
6678 force_ciphersuite=TLS-RSA-PSK-WITH-AES-128-CBC-SHA256" \
6679 0 \
6680 -s "Async decrypt callback: using key slot " \
6681 -s "Async resume (slot [0-9]): call 0 more times." \
6682 -s "Async resume (slot [0-9]): decrypt done, status=0"
6683
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006684requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006685run_test "SSL async private: sign callback not present" \
6686 "$P_SRV \
6687 async_operations=d async_private_delay1=1 async_private_delay2=1" \
6688 "$P_CLI; [ \$? -eq 1 ] &&
6689 $P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6690 0 \
6691 -S "Async sign callback" \
6692 -s "! mbedtls_ssl_handshake returned" \
6693 -s "The own private key or pre-shared key is not set, but needed" \
6694 -s "Async resume (slot [0-9]): decrypt done, status=0" \
6695 -s "Successful connection"
6696
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006697requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006698run_test "SSL async private: decrypt callback not present" \
6699 "$P_SRV debug_level=1 \
6700 async_operations=s async_private_delay1=1 async_private_delay2=1" \
6701 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA;
6702 [ \$? -eq 1 ] && $P_CLI" \
6703 0 \
6704 -S "Async decrypt callback" \
6705 -s "! mbedtls_ssl_handshake returned" \
6706 -s "got no RSA private key" \
6707 -s "Async resume (slot [0-9]): sign done, status=0" \
6708 -s "Successful connection"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006709
6710# key1: ECDSA, key2: RSA; use key1 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006711requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006712run_test "SSL async private: slot 0 used with key1" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006713 "$P_SRV \
6714 async_operations=s async_private_delay1=1 \
6715 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6716 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006717 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
6718 0 \
6719 -s "Async sign callback: using key slot 0," \
6720 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006721 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006722
6723# key1: ECDSA, key2: RSA; use key2 from slot 0
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006724requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006725run_test "SSL async private: slot 0 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006726 "$P_SRV \
6727 async_operations=s async_private_delay2=1 \
6728 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6729 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006730 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6731 0 \
6732 -s "Async sign callback: using key slot 0," \
6733 -s "Async resume (slot 0): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006734 -s "Async resume (slot 0): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006735
6736# key1: ECDSA, key2: RSA; use key2 from slot 1
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006737requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinead28bf02018-04-26 00:19:16 +02006738run_test "SSL async private: slot 1 used with key2" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006739 "$P_SRV \
Gilles Peskine168dae82018-04-25 23:35:42 +02006740 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006741 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6742 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006743 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6744 0 \
6745 -s "Async sign callback: using key slot 1," \
6746 -s "Async resume (slot 1): call 0 more times." \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006747 -s "Async resume (slot 1): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006748
6749# key1: ECDSA, key2: RSA; use key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006750requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006751run_test "SSL async private: fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006752 "$P_SRV \
6753 async_operations=s async_private_delay1=1 \
6754 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6755 key_file2=data_files/server2.key crt_file2=data_files/server2.crt " \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006756 "$P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6757 0 \
6758 -s "Async sign callback: no key matches this certificate."
6759
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006760requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006761run_test "SSL async private: sign, error in start" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006762 "$P_SRV \
6763 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6764 async_private_error=1" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006765 "$P_CLI" \
6766 1 \
6767 -s "Async sign callback: injected error" \
6768 -S "Async resume" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02006769 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006770 -s "! mbedtls_ssl_handshake returned"
6771
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006772requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006773run_test "SSL async private: sign, cancel after start" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006774 "$P_SRV \
6775 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6776 async_private_error=2" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006777 "$P_CLI" \
6778 1 \
6779 -s "Async sign callback: using key slot " \
6780 -S "Async resume" \
6781 -s "Async cancel"
6782
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006783requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006784run_test "SSL async private: sign, error in resume" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006785 "$P_SRV \
6786 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6787 async_private_error=3" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006788 "$P_CLI" \
6789 1 \
6790 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006791 -s "Async resume callback: sign done but injected error" \
Gilles Peskine37289cd2018-04-27 11:50:14 +02006792 -S "Async cancel" \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006793 -s "! mbedtls_ssl_handshake returned"
6794
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006795requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006796run_test "SSL async private: decrypt, error in start" \
6797 "$P_SRV \
6798 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6799 async_private_error=1" \
6800 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6801 1 \
6802 -s "Async decrypt callback: injected error" \
6803 -S "Async resume" \
6804 -S "Async cancel" \
6805 -s "! mbedtls_ssl_handshake returned"
6806
6807requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
6808run_test "SSL async private: decrypt, cancel after start" \
6809 "$P_SRV \
6810 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6811 async_private_error=2" \
6812 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6813 1 \
6814 -s "Async decrypt callback: using key slot " \
6815 -S "Async resume" \
6816 -s "Async cancel"
6817
6818requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
6819run_test "SSL async private: decrypt, error in resume" \
6820 "$P_SRV \
6821 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6822 async_private_error=3" \
6823 "$P_CLI force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6824 1 \
6825 -s "Async decrypt callback: using key slot " \
6826 -s "Async resume callback: decrypt done but injected error" \
6827 -S "Async cancel" \
6828 -s "! mbedtls_ssl_handshake returned"
6829
6830requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006831run_test "SSL async private: cancel after start then operate correctly" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006832 "$P_SRV \
6833 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6834 async_private_error=-2" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006835 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
6836 0 \
6837 -s "Async cancel" \
6838 -s "! mbedtls_ssl_handshake returned" \
6839 -s "Async resume" \
6840 -s "Successful connection"
6841
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006842requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006843run_test "SSL async private: error in resume then operate correctly" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006844 "$P_SRV \
6845 async_operations=s async_private_delay1=1 async_private_delay2=1 \
6846 async_private_error=-3" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006847 "$P_CLI; [ \$? -eq 1 ] && $P_CLI" \
6848 0 \
6849 -s "! mbedtls_ssl_handshake returned" \
6850 -s "Async resume" \
6851 -s "Successful connection"
6852
6853# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006854requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006855run_test "SSL async private: cancel after start then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006856 "$P_SRV \
6857 async_operations=s async_private_delay1=1 async_private_error=-2 \
6858 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6859 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006860 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
6861 [ \$? -eq 1 ] &&
6862 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6863 0 \
Gilles Peskinededa75a2018-04-30 10:02:45 +02006864 -s "Async sign callback: using key slot 0" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006865 -S "Async resume" \
6866 -s "Async cancel" \
6867 -s "! mbedtls_ssl_handshake returned" \
6868 -s "Async sign callback: no key matches this certificate." \
6869 -s "Successful connection"
6870
6871# key1: ECDSA, key2: RSA; use key1 through async, then key2 directly
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006872requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine725f1cb2018-06-12 15:06:40 +02006873run_test "SSL async private: sign, error in resume then fall back to transparent key" \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006874 "$P_SRV \
6875 async_operations=s async_private_delay1=1 async_private_error=-3 \
6876 key_file=data_files/server5.key crt_file=data_files/server5.crt \
6877 key_file2=data_files/server2.key crt_file2=data_files/server2.crt" \
Gilles Peskine60ee4ca2018-01-08 11:28:05 +01006878 "$P_CLI force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256;
6879 [ \$? -eq 1 ] &&
6880 $P_CLI force_ciphersuite=TLS-ECDHE-RSA-WITH-AES-128-CBC-SHA256" \
6881 0 \
6882 -s "Async resume" \
6883 -s "! mbedtls_ssl_handshake returned" \
6884 -s "Async sign callback: no key matches this certificate." \
6885 -s "Successful connection"
6886
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006887requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006888requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006889run_test "SSL async private: renegotiation: client-initiated; sign" \
6890 "$P_SRV \
6891 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006892 exchanges=2 renegotiation=1" \
6893 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1" \
6894 0 \
6895 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006896 -s "Async resume (slot [0-9]): sign done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006897
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006898requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006899requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006900run_test "SSL async private: renegotiation: server-initiated; sign" \
6901 "$P_SRV \
6902 async_operations=s async_private_delay1=1 async_private_delay2=1 \
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006903 exchanges=2 renegotiation=1 renegotiate=1" \
6904 "$P_CLI exchanges=2 renegotiation=1" \
6905 0 \
6906 -s "Async sign callback: using key slot " \
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006907 -s "Async resume (slot [0-9]): sign done, status=0"
6908
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006909requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006910requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
6911run_test "SSL async private: renegotiation: client-initiated; decrypt" \
6912 "$P_SRV \
6913 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6914 exchanges=2 renegotiation=1" \
6915 "$P_CLI exchanges=2 renegotiation=1 renegotiate=1 \
6916 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6917 0 \
6918 -s "Async decrypt callback: using key slot " \
6919 -s "Async resume (slot [0-9]): decrypt done, status=0"
6920
Gilles Peskineb74a1c72018-04-24 13:09:22 +02006921requires_config_enabled MBEDTLS_SSL_ASYNC_PRIVATE
Gilles Peskinefcca9d82018-01-12 13:47:48 +01006922requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
6923run_test "SSL async private: renegotiation: server-initiated; decrypt" \
6924 "$P_SRV \
6925 async_operations=d async_private_delay1=1 async_private_delay2=1 \
6926 exchanges=2 renegotiation=1 renegotiate=1" \
6927 "$P_CLI exchanges=2 renegotiation=1 \
6928 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
6929 0 \
6930 -s "Async decrypt callback: using key slot " \
6931 -s "Async resume (slot [0-9]): decrypt done, status=0"
Gilles Peskine3665f1d2018-01-05 21:22:12 +01006932
Ron Eldor58093c82018-06-28 13:22:05 +03006933# Tests for ECC extensions (rfc 4492)
6934
Ron Eldor643df7c2018-06-28 16:17:00 +03006935requires_config_enabled MBEDTLS_AES_C
6936requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
6937requires_config_enabled MBEDTLS_SHA256_C
6938requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03006939run_test "Force a non ECC ciphersuite in the client side" \
6940 "$P_SRV debug_level=3" \
Ron Eldor643df7c2018-06-28 16:17:00 +03006941 "$P_CLI debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03006942 0 \
6943 -C "client hello, adding supported_elliptic_curves extension" \
6944 -C "client hello, adding supported_point_formats extension" \
6945 -S "found supported elliptic curves extension" \
6946 -S "found supported point formats extension"
6947
Ron Eldor643df7c2018-06-28 16:17:00 +03006948requires_config_enabled MBEDTLS_AES_C
6949requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
6950requires_config_enabled MBEDTLS_SHA256_C
6951requires_config_enabled MBEDTLS_KEY_EXCHANGE_RSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03006952run_test "Force a non ECC ciphersuite in the server side" \
Ron Eldor643df7c2018-06-28 16:17:00 +03006953 "$P_SRV debug_level=3 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA256" \
Ron Eldor58093c82018-06-28 13:22:05 +03006954 "$P_CLI debug_level=3" \
6955 0 \
6956 -C "found supported_point_formats extension" \
6957 -S "server hello, supported_point_formats extension"
6958
Ron Eldor643df7c2018-06-28 16:17:00 +03006959requires_config_enabled MBEDTLS_AES_C
6960requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
6961requires_config_enabled MBEDTLS_SHA256_C
6962requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03006963run_test "Force an ECC ciphersuite in the client side" \
6964 "$P_SRV debug_level=3" \
6965 "$P_CLI debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
6966 0 \
6967 -c "client hello, adding supported_elliptic_curves extension" \
6968 -c "client hello, adding supported_point_formats extension" \
6969 -s "found supported elliptic curves extension" \
6970 -s "found supported point formats extension"
6971
Ron Eldor643df7c2018-06-28 16:17:00 +03006972requires_config_enabled MBEDTLS_AES_C
6973requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
6974requires_config_enabled MBEDTLS_SHA256_C
6975requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA_ENABLED
Ron Eldor58093c82018-06-28 13:22:05 +03006976run_test "Force an ECC ciphersuite in the server side" \
6977 "$P_SRV debug_level=3 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256" \
6978 "$P_CLI debug_level=3" \
6979 0 \
6980 -c "found supported_point_formats extension" \
6981 -s "server hello, supported_point_formats extension"
6982
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006983# Tests for DTLS HelloVerifyRequest
6984
6985run_test "DTLS cookie: enabled" \
6986 "$P_SRV dtls=1 debug_level=2" \
6987 "$P_CLI dtls=1 debug_level=2" \
6988 0 \
6989 -s "cookie verification failed" \
6990 -s "cookie verification passed" \
6991 -S "cookie verification skipped" \
6992 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02006993 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02006994 -S "SSL - The requested feature is not available"
6995
6996run_test "DTLS cookie: disabled" \
6997 "$P_SRV dtls=1 debug_level=2 cookies=0" \
6998 "$P_CLI dtls=1 debug_level=2" \
6999 0 \
7000 -S "cookie verification failed" \
7001 -S "cookie verification passed" \
7002 -s "cookie verification skipped" \
7003 -C "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02007004 -S "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02007005 -S "SSL - The requested feature is not available"
7006
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02007007run_test "DTLS cookie: default (failing)" \
7008 "$P_SRV dtls=1 debug_level=2 cookies=-1" \
7009 "$P_CLI dtls=1 debug_level=2 hs_timeout=100-400" \
7010 1 \
7011 -s "cookie verification failed" \
7012 -S "cookie verification passed" \
7013 -S "cookie verification skipped" \
7014 -C "received hello verify request" \
7015 -S "hello verification requested" \
7016 -s "SSL - The requested feature is not available"
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02007017
7018requires_ipv6
7019run_test "DTLS cookie: enabled, IPv6" \
7020 "$P_SRV dtls=1 debug_level=2 server_addr=::1" \
7021 "$P_CLI dtls=1 debug_level=2 server_addr=::1" \
7022 0 \
7023 -s "cookie verification failed" \
7024 -s "cookie verification passed" \
7025 -S "cookie verification skipped" \
7026 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02007027 -s "hello verification requested" \
Manuel Pégourié-Gonnard0eb6cab2014-07-23 20:17:47 +02007028 -S "SSL - The requested feature is not available"
7029
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02007030run_test "DTLS cookie: enabled, nbio" \
7031 "$P_SRV dtls=1 nbio=2 debug_level=2" \
7032 "$P_CLI dtls=1 nbio=2 debug_level=2" \
7033 0 \
7034 -s "cookie verification failed" \
7035 -s "cookie verification passed" \
7036 -S "cookie verification skipped" \
7037 -c "received hello verify request" \
Manuel Pégourié-Gonnardcaecdae2014-10-13 19:04:37 +02007038 -s "hello verification requested" \
Manuel Pégourié-Gonnard579950c2014-09-29 17:47:33 +02007039 -S "SSL - The requested feature is not available"
7040
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02007041# Tests for client reconnecting from the same port with DTLS
7042
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007043not_with_valgrind # spurious resend
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02007044run_test "DTLS client reconnect from same port: reference" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007045 "$P_SRV dtls=1 exchanges=2 read_timeout=1000" \
7046 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02007047 0 \
7048 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007049 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02007050 -S "Client initiated reconnection from same port"
7051
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007052not_with_valgrind # spurious resend
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02007053run_test "DTLS client reconnect from same port: reconnect" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007054 "$P_SRV dtls=1 exchanges=2 read_timeout=1000" \
7055 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02007056 0 \
7057 -C "resend" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007058 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02007059 -s "Client initiated reconnection from same port"
7060
Paul Bakker362689d2016-05-13 10:33:25 +01007061not_with_valgrind # server/client too slow to respond in time (next test has higher timeouts)
7062run_test "DTLS client reconnect from same port: reconnect, nbio, no valgrind" \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007063 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 nbio=2" \
7064 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-1000 reconnect_hard=1" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02007065 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007066 -S "The operation timed out" \
Manuel Pégourié-Gonnardd745a1a2015-09-08 12:40:43 +02007067 -s "Client initiated reconnection from same port"
7068
Paul Bakker362689d2016-05-13 10:33:25 +01007069only_with_valgrind # Only with valgrind, do previous test but with higher read_timeout and hs_timeout
7070run_test "DTLS client reconnect from same port: reconnect, nbio, valgrind" \
7071 "$P_SRV dtls=1 exchanges=2 read_timeout=2000 nbio=2 hs_timeout=1500-6000" \
7072 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=1500-3000 reconnect_hard=1" \
7073 0 \
7074 -S "The operation timed out" \
7075 -s "Client initiated reconnection from same port"
7076
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007077run_test "DTLS client reconnect from same port: no cookies" \
7078 "$P_SRV dtls=1 exchanges=2 read_timeout=1000 cookies=0" \
Manuel Pégourié-Gonnard6ad23b92015-09-15 12:57:46 +02007079 "$P_CLI dtls=1 exchanges=2 debug_level=2 hs_timeout=500-8000 reconnect_hard=1" \
7080 0 \
Manuel Pégourié-Gonnard259db912015-09-09 11:37:17 +02007081 -s "The operation timed out" \
7082 -S "Client initiated reconnection from same port"
7083
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02007084# Tests for various cases of client authentication with DTLS
7085# (focused on handshake flows and message parsing)
7086
7087run_test "DTLS client auth: required" \
7088 "$P_SRV dtls=1 auth_mode=required" \
7089 "$P_CLI dtls=1" \
7090 0 \
7091 -s "Verifying peer X.509 certificate... ok"
7092
7093run_test "DTLS client auth: optional, client has no cert" \
7094 "$P_SRV dtls=1 auth_mode=optional" \
7095 "$P_CLI dtls=1 crt_file=none key_file=none" \
7096 0 \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01007097 -s "! Certificate was missing"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02007098
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01007099run_test "DTLS client auth: none, client has no cert" \
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02007100 "$P_SRV dtls=1 auth_mode=none" \
7101 "$P_CLI dtls=1 crt_file=none key_file=none debug_level=2" \
7102 0 \
7103 -c "skip write certificate$" \
Manuel Pégourié-Gonnard89addc42015-04-20 10:56:18 +01007104 -s "! Certificate verification was skipped"
Manuel Pégourié-Gonnard08a1d4b2014-09-26 10:35:50 +02007105
Manuel Pégourié-Gonnard0a885742015-08-04 12:08:35 +02007106run_test "DTLS wrong PSK: badmac alert" \
7107 "$P_SRV dtls=1 psk=abc123 force_ciphersuite=TLS-PSK-WITH-AES-128-GCM-SHA256" \
7108 "$P_CLI dtls=1 psk=abc124" \
7109 1 \
7110 -s "SSL - Verification of the message MAC failed" \
7111 -c "SSL - A fatal alert message was received from our peer"
7112
Manuel Pégourié-Gonnard502bf302014-08-20 13:12:58 +02007113# Tests for receiving fragmented handshake messages with DTLS
7114
7115requires_gnutls
7116run_test "DTLS reassembly: no fragmentation (gnutls server)" \
7117 "$G_SRV -u --mtu 2048 -a" \
7118 "$P_CLI dtls=1 debug_level=2" \
7119 0 \
7120 -C "found fragmented DTLS handshake message" \
7121 -C "error"
7122
7123requires_gnutls
7124run_test "DTLS reassembly: some fragmentation (gnutls server)" \
7125 "$G_SRV -u --mtu 512" \
7126 "$P_CLI dtls=1 debug_level=2" \
7127 0 \
7128 -c "found fragmented DTLS handshake message" \
7129 -C "error"
7130
7131requires_gnutls
7132run_test "DTLS reassembly: more fragmentation (gnutls server)" \
7133 "$G_SRV -u --mtu 128" \
7134 "$P_CLI dtls=1 debug_level=2" \
7135 0 \
7136 -c "found fragmented DTLS handshake message" \
7137 -C "error"
7138
7139requires_gnutls
7140run_test "DTLS reassembly: more fragmentation, nbio (gnutls server)" \
7141 "$G_SRV -u --mtu 128" \
7142 "$P_CLI dtls=1 nbio=2 debug_level=2" \
7143 0 \
7144 -c "found fragmented DTLS handshake message" \
7145 -C "error"
7146
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02007147requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01007148requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02007149run_test "DTLS reassembly: fragmentation, renego (gnutls server)" \
7150 "$G_SRV -u --mtu 256" \
7151 "$P_CLI debug_level=3 dtls=1 renegotiation=1 renegotiate=1" \
7152 0 \
7153 -c "found fragmented DTLS handshake message" \
7154 -c "client hello, adding renegotiation extension" \
7155 -c "found renegotiation extension" \
7156 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02007157 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02007158 -C "error" \
7159 -s "Extra-header:"
7160
7161requires_gnutls
Hanno Becker6a243642017-10-12 15:18:45 +01007162requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02007163run_test "DTLS reassembly: fragmentation, nbio, renego (gnutls server)" \
7164 "$G_SRV -u --mtu 256" \
7165 "$P_CLI debug_level=3 nbio=2 dtls=1 renegotiation=1 renegotiate=1" \
7166 0 \
7167 -c "found fragmented DTLS handshake message" \
7168 -c "client hello, adding renegotiation extension" \
7169 -c "found renegotiation extension" \
7170 -c "=> renegotiate" \
Manuel Pégourié-Gonnard2cf5a7c2015-04-08 12:49:31 +02007171 -C "mbedtls_ssl_handshake returned" \
Manuel Pégourié-Gonnard0c4cbc72014-09-02 14:47:31 +02007172 -C "error" \
7173 -s "Extra-header:"
7174
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02007175run_test "DTLS reassembly: no fragmentation (openssl server)" \
7176 "$O_SRV -dtls1 -mtu 2048" \
7177 "$P_CLI dtls=1 debug_level=2" \
7178 0 \
7179 -C "found fragmented DTLS handshake message" \
7180 -C "error"
7181
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007182run_test "DTLS reassembly: some fragmentation (openssl server)" \
7183 "$O_SRV -dtls1 -mtu 768" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +02007184 "$P_CLI dtls=1 debug_level=2" \
7185 0 \
7186 -c "found fragmented DTLS handshake message" \
7187 -C "error"
7188
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007189run_test "DTLS reassembly: more fragmentation (openssl server)" \
Manuel Pégourié-Gonnard64dffc52014-09-02 13:39:16 +02007190 "$O_SRV -dtls1 -mtu 256" \
7191 "$P_CLI dtls=1 debug_level=2" \
7192 0 \
7193 -c "found fragmented DTLS handshake message" \
7194 -C "error"
7195
7196run_test "DTLS reassembly: fragmentation, nbio (openssl server)" \
7197 "$O_SRV -dtls1 -mtu 256" \
7198 "$P_CLI dtls=1 nbio=2 debug_level=2" \
7199 0 \
7200 -c "found fragmented DTLS handshake message" \
7201 -C "error"
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02007202
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007203# Tests for sending fragmented handshake messages with DTLS
7204#
7205# Use client auth when we need the client to send large messages,
7206# and use large cert chains on both sides too (the long chains we have all use
7207# both RSA and ECDSA, but ideally we should have long chains with either).
7208# Sizes reached (UDP payload):
7209# - 2037B for server certificate
7210# - 1542B for client certificate
7211# - 1013B for newsessionticket
7212# - all others below 512B
7213# All those tests assume MAX_CONTENT_LEN is at least 2048
7214
7215requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7216requires_config_enabled MBEDTLS_RSA_C
7217requires_config_enabled MBEDTLS_ECDSA_C
7218requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
7219run_test "DTLS fragmenting: none (for reference)" \
7220 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7221 crt_file=data_files/server7_int-ca.crt \
7222 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007223 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01007224 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007225 "$P_CLI dtls=1 debug_level=2 \
7226 crt_file=data_files/server8_int-ca2.crt \
7227 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007228 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01007229 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007230 0 \
7231 -S "found fragmented DTLS handshake message" \
7232 -C "found fragmented DTLS handshake message" \
7233 -C "error"
7234
7235requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7236requires_config_enabled MBEDTLS_RSA_C
7237requires_config_enabled MBEDTLS_ECDSA_C
7238requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007239run_test "DTLS fragmenting: server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007240 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7241 crt_file=data_files/server7_int-ca.crt \
7242 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007243 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007244 max_frag_len=1024" \
7245 "$P_CLI dtls=1 debug_level=2 \
7246 crt_file=data_files/server8_int-ca2.crt \
7247 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007248 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007249 max_frag_len=2048" \
7250 0 \
7251 -S "found fragmented DTLS handshake message" \
7252 -c "found fragmented DTLS handshake message" \
7253 -C "error"
7254
Hanno Becker69ca0ad2018-08-24 12:11:35 +01007255# With the MFL extension, the server has no way of forcing
7256# the client to not exceed a certain MTU; hence, the following
7257# test can't be replicated with an MTU proxy such as the one
7258# `client-initiated, server only (max_frag_len)` below.
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007259requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7260requires_config_enabled MBEDTLS_RSA_C
7261requires_config_enabled MBEDTLS_ECDSA_C
7262requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007263run_test "DTLS fragmenting: server only (more) (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007264 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7265 crt_file=data_files/server7_int-ca.crt \
7266 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007267 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007268 max_frag_len=512" \
7269 "$P_CLI dtls=1 debug_level=2 \
7270 crt_file=data_files/server8_int-ca2.crt \
7271 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007272 hs_timeout=2500-60000 \
Hanno Becker69ca0ad2018-08-24 12:11:35 +01007273 max_frag_len=4096" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007274 0 \
7275 -S "found fragmented DTLS handshake message" \
7276 -c "found fragmented DTLS handshake message" \
7277 -C "error"
7278
7279requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7280requires_config_enabled MBEDTLS_RSA_C
7281requires_config_enabled MBEDTLS_ECDSA_C
7282requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007283run_test "DTLS fragmenting: client-initiated, server only (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007284 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
7285 crt_file=data_files/server7_int-ca.crt \
7286 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007287 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007288 max_frag_len=2048" \
7289 "$P_CLI dtls=1 debug_level=2 \
7290 crt_file=data_files/server8_int-ca2.crt \
7291 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007292 hs_timeout=2500-60000 \
7293 max_frag_len=1024" \
7294 0 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007295 -S "found fragmented DTLS handshake message" \
7296 -c "found fragmented DTLS handshake message" \
7297 -C "error"
7298
Hanno Beckerc92b5c82018-08-24 11:48:01 +01007299# While not required by the standard defining the MFL extension
7300# (according to which it only applies to records, not to datagrams),
7301# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
7302# as otherwise there wouldn't be any means to communicate MTU restrictions
7303# to the peer.
7304# The next test checks that no datagrams significantly larger than the
7305# negotiated MFL are sent.
7306requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7307requires_config_enabled MBEDTLS_RSA_C
7308requires_config_enabled MBEDTLS_ECDSA_C
7309requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
7310run_test "DTLS fragmenting: client-initiated, server only (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04007311 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01007312 "$P_SRV dtls=1 debug_level=2 auth_mode=none \
7313 crt_file=data_files/server7_int-ca.crt \
7314 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007315 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01007316 max_frag_len=2048" \
7317 "$P_CLI dtls=1 debug_level=2 \
7318 crt_file=data_files/server8_int-ca2.crt \
7319 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007320 hs_timeout=2500-60000 \
7321 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01007322 0 \
7323 -S "found fragmented DTLS handshake message" \
7324 -c "found fragmented DTLS handshake message" \
7325 -C "error"
7326
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007327requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7328requires_config_enabled MBEDTLS_RSA_C
7329requires_config_enabled MBEDTLS_ECDSA_C
7330requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007331run_test "DTLS fragmenting: client-initiated, both (max_frag_len)" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007332 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7333 crt_file=data_files/server7_int-ca.crt \
7334 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007335 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007336 max_frag_len=2048" \
7337 "$P_CLI dtls=1 debug_level=2 \
7338 crt_file=data_files/server8_int-ca2.crt \
7339 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007340 hs_timeout=2500-60000 \
7341 max_frag_len=1024" \
Manuel Pégourié-Gonnard2cb17e22017-09-19 13:00:47 +02007342 0 \
7343 -s "found fragmented DTLS handshake message" \
7344 -c "found fragmented DTLS handshake message" \
7345 -C "error"
7346
Hanno Beckerc92b5c82018-08-24 11:48:01 +01007347# While not required by the standard defining the MFL extension
7348# (according to which it only applies to records, not to datagrams),
7349# Mbed TLS will never send datagrams larger than MFL + { Max record expansion },
7350# as otherwise there wouldn't be any means to communicate MTU restrictions
7351# to the peer.
7352# The next test checks that no datagrams significantly larger than the
7353# negotiated MFL are sent.
7354requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7355requires_config_enabled MBEDTLS_RSA_C
7356requires_config_enabled MBEDTLS_ECDSA_C
7357requires_config_enabled MBEDTLS_SSL_MAX_FRAGMENT_LENGTH
7358run_test "DTLS fragmenting: client-initiated, both (max_frag_len), proxy MTU" \
Andrzej Kurek0fc9cf42018-10-09 03:09:41 -04007359 -p "$P_PXY mtu=1110" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01007360 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7361 crt_file=data_files/server7_int-ca.crt \
7362 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007363 hs_timeout=2500-60000 \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01007364 max_frag_len=2048" \
7365 "$P_CLI dtls=1 debug_level=2 \
7366 crt_file=data_files/server8_int-ca2.crt \
7367 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007368 hs_timeout=2500-60000 \
7369 max_frag_len=1024" \
Hanno Beckerc92b5c82018-08-24 11:48:01 +01007370 0 \
7371 -s "found fragmented DTLS handshake message" \
7372 -c "found fragmented DTLS handshake message" \
7373 -C "error"
7374
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007375requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7376requires_config_enabled MBEDTLS_RSA_C
7377requires_config_enabled MBEDTLS_ECDSA_C
7378run_test "DTLS fragmenting: none (for reference) (MTU)" \
7379 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7380 crt_file=data_files/server7_int-ca.crt \
7381 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007382 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01007383 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007384 "$P_CLI dtls=1 debug_level=2 \
7385 crt_file=data_files/server8_int-ca2.crt \
7386 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007387 hs_timeout=2500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01007388 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007389 0 \
7390 -S "found fragmented DTLS handshake message" \
7391 -C "found fragmented DTLS handshake message" \
7392 -C "error"
7393
7394requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7395requires_config_enabled MBEDTLS_RSA_C
7396requires_config_enabled MBEDTLS_ECDSA_C
7397run_test "DTLS fragmenting: client (MTU)" \
7398 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7399 crt_file=data_files/server7_int-ca.crt \
7400 key_file=data_files/server7.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007401 hs_timeout=3500-60000 \
Hanno Becker12405e72018-08-13 16:45:46 +01007402 mtu=4096" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007403 "$P_CLI dtls=1 debug_level=2 \
7404 crt_file=data_files/server8_int-ca2.crt \
7405 key_file=data_files/server8.key \
Andrzej Kurek948fe802018-10-05 15:42:44 -04007406 hs_timeout=3500-60000 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007407 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007408 0 \
7409 -s "found fragmented DTLS handshake message" \
7410 -C "found fragmented DTLS handshake message" \
7411 -C "error"
7412
7413requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7414requires_config_enabled MBEDTLS_RSA_C
7415requires_config_enabled MBEDTLS_ECDSA_C
7416run_test "DTLS fragmenting: server (MTU)" \
7417 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7418 crt_file=data_files/server7_int-ca.crt \
7419 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007420 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007421 mtu=512" \
7422 "$P_CLI dtls=1 debug_level=2 \
7423 crt_file=data_files/server8_int-ca2.crt \
7424 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007425 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007426 mtu=2048" \
7427 0 \
7428 -S "found fragmented DTLS handshake message" \
7429 -c "found fragmented DTLS handshake message" \
7430 -C "error"
7431
7432requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7433requires_config_enabled MBEDTLS_RSA_C
7434requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007435run_test "DTLS fragmenting: both (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007436 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007437 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7438 crt_file=data_files/server7_int-ca.crt \
7439 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007440 hs_timeout=2500-60000 \
Andrzej Kurek95805282018-10-11 08:55:37 -04007441 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007442 "$P_CLI dtls=1 debug_level=2 \
7443 crt_file=data_files/server8_int-ca2.crt \
7444 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007445 hs_timeout=2500-60000 \
7446 mtu=1024" \
Manuel Pégourié-Gonnardb747c6c2018-08-12 13:28:53 +02007447 0 \
7448 -s "found fragmented DTLS handshake message" \
7449 -c "found fragmented DTLS handshake message" \
7450 -C "error"
7451
Andrzej Kurek77826052018-10-11 07:34:08 -04007452# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04007453requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7454requires_config_enabled MBEDTLS_RSA_C
7455requires_config_enabled MBEDTLS_ECDSA_C
7456requires_config_enabled MBEDTLS_SHA256_C
7457requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7458requires_config_enabled MBEDTLS_AES_C
7459requires_config_enabled MBEDTLS_GCM_C
7460run_test "DTLS fragmenting: both (MTU=512)" \
Hanno Becker8d832182018-03-15 10:14:19 +00007461 -p "$P_PXY mtu=512" \
Hanno Becker72a4f032017-11-15 16:39:20 +00007462 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7463 crt_file=data_files/server7_int-ca.crt \
7464 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007465 hs_timeout=2500-60000 \
Hanno Becker72a4f032017-11-15 16:39:20 +00007466 mtu=512" \
7467 "$P_CLI dtls=1 debug_level=2 \
7468 crt_file=data_files/server8_int-ca2.crt \
7469 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007470 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7471 hs_timeout=2500-60000 \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02007472 mtu=512" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02007473 0 \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02007474 -s "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02007475 -c "found fragmented DTLS handshake message" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02007476 -C "error"
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02007477
Andrzej Kurek7311c782018-10-11 06:49:41 -04007478# Test for automatic MTU reduction on repeated resend.
Andrzej Kurek77826052018-10-11 07:34:08 -04007479# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04007480# The ratio of max/min timeout should ideally equal 4 to accept two
7481# retransmissions, but in some cases (like both the server and client using
7482# fragmentation and auto-reduction) an extra retransmission might occur,
7483# hence the ratio of 8.
Hanno Becker37029eb2018-08-29 17:01:40 +01007484not_with_valgrind
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02007485requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7486requires_config_enabled MBEDTLS_RSA_C
7487requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007488requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7489requires_config_enabled MBEDTLS_AES_C
7490requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02007491run_test "DTLS fragmenting: proxy MTU: auto-reduction" \
7492 -p "$P_PXY mtu=508" \
7493 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7494 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007495 key_file=data_files/server7.key \
7496 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02007497 "$P_CLI dtls=1 debug_level=2 \
7498 crt_file=data_files/server8_int-ca2.crt \
7499 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007500 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7501 hs_timeout=400-3200" \
Manuel Pégourié-Gonnardb8eec192018-08-20 09:34:02 +02007502 0 \
7503 -s "found fragmented DTLS handshake message" \
7504 -c "found fragmented DTLS handshake message" \
7505 -C "error"
7506
Andrzej Kurek77826052018-10-11 07:34:08 -04007507# Forcing ciphersuite for this test to fit the MTU of 508 with full config.
Hanno Becker108992e2018-08-29 17:04:18 +01007508only_with_valgrind
7509requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7510requires_config_enabled MBEDTLS_RSA_C
7511requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007512requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7513requires_config_enabled MBEDTLS_AES_C
7514requires_config_enabled MBEDTLS_GCM_C
Hanno Becker108992e2018-08-29 17:04:18 +01007515run_test "DTLS fragmenting: proxy MTU: auto-reduction" \
7516 -p "$P_PXY mtu=508" \
7517 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7518 crt_file=data_files/server7_int-ca.crt \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007519 key_file=data_files/server7.key \
Hanno Becker108992e2018-08-29 17:04:18 +01007520 hs_timeout=250-10000" \
7521 "$P_CLI dtls=1 debug_level=2 \
7522 crt_file=data_files/server8_int-ca2.crt \
7523 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007524 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Hanno Becker108992e2018-08-29 17:04:18 +01007525 hs_timeout=250-10000" \
7526 0 \
7527 -s "found fragmented DTLS handshake message" \
7528 -c "found fragmented DTLS handshake message" \
7529 -C "error"
7530
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007531# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
Manuel Pégourié-Gonnard3d183ce2018-08-22 09:56:22 +02007532# OTOH the client might resend if the server is to slow to reset after sending
7533# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007534not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007535requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7536requires_config_enabled MBEDTLS_RSA_C
7537requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007538run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007539 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007540 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7541 crt_file=data_files/server7_int-ca.crt \
7542 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007543 hs_timeout=10000-60000 \
7544 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007545 "$P_CLI dtls=1 debug_level=2 \
7546 crt_file=data_files/server8_int-ca2.crt \
7547 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007548 hs_timeout=10000-60000 \
7549 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007550 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007551 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007552 -s "found fragmented DTLS handshake message" \
7553 -c "found fragmented DTLS handshake message" \
7554 -C "error"
7555
Andrzej Kurek77826052018-10-11 07:34:08 -04007556# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04007557# the proxy shouldn't drop or mess up anything, so we shouldn't need to resend
7558# OTOH the client might resend if the server is to slow to reset after sending
7559# a HelloVerifyRequest, so only check for no retransmission server-side
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007560not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007561requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7562requires_config_enabled MBEDTLS_RSA_C
7563requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007564requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7565requires_config_enabled MBEDTLS_AES_C
7566requires_config_enabled MBEDTLS_GCM_C
7567run_test "DTLS fragmenting: proxy MTU, simple handshake (MTU=512)" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007568 -p "$P_PXY mtu=512" \
7569 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7570 crt_file=data_files/server7_int-ca.crt \
7571 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007572 hs_timeout=10000-60000 \
7573 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007574 "$P_CLI dtls=1 debug_level=2 \
7575 crt_file=data_files/server8_int-ca2.crt \
7576 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007577 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7578 hs_timeout=10000-60000 \
7579 mtu=512" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007580 0 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007581 -S "autoreduction" \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007582 -s "found fragmented DTLS handshake message" \
7583 -c "found fragmented DTLS handshake message" \
7584 -C "error"
7585
Andrzej Kurek7311c782018-10-11 06:49:41 -04007586not_with_valgrind # spurious autoreduction due to timeout
7587requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7588requires_config_enabled MBEDTLS_RSA_C
7589requires_config_enabled MBEDTLS_ECDSA_C
7590run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=1024)" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007591 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007592 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7593 crt_file=data_files/server7_int-ca.crt \
7594 key_file=data_files/server7.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007595 hs_timeout=10000-60000 \
7596 mtu=1024 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007597 "$P_CLI dtls=1 debug_level=2 \
7598 crt_file=data_files/server8_int-ca2.crt \
7599 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007600 hs_timeout=10000-60000 \
7601 mtu=1024 nbio=2" \
7602 0 \
7603 -S "autoreduction" \
7604 -s "found fragmented DTLS handshake message" \
7605 -c "found fragmented DTLS handshake message" \
7606 -C "error"
7607
Andrzej Kurek77826052018-10-11 07:34:08 -04007608# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Andrzej Kurek7311c782018-10-11 06:49:41 -04007609not_with_valgrind # spurious autoreduction due to timeout
7610requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7611requires_config_enabled MBEDTLS_RSA_C
7612requires_config_enabled MBEDTLS_ECDSA_C
7613requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7614requires_config_enabled MBEDTLS_AES_C
7615requires_config_enabled MBEDTLS_GCM_C
7616run_test "DTLS fragmenting: proxy MTU, simple handshake, nbio (MTU=512)" \
7617 -p "$P_PXY mtu=512" \
7618 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7619 crt_file=data_files/server7_int-ca.crt \
7620 key_file=data_files/server7.key \
7621 hs_timeout=10000-60000 \
7622 mtu=512 nbio=2" \
7623 "$P_CLI dtls=1 debug_level=2 \
7624 crt_file=data_files/server8_int-ca2.crt \
7625 key_file=data_files/server8.key \
7626 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
7627 hs_timeout=10000-60000 \
7628 mtu=512 nbio=2" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007629 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007630 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007631 -s "found fragmented DTLS handshake message" \
7632 -c "found fragmented DTLS handshake message" \
7633 -C "error"
7634
Andrzej Kurek77826052018-10-11 07:34:08 -04007635# Forcing ciphersuite for this test to fit the MTU of 1450 with full config.
Hanno Beckerb841b4f2018-08-28 10:25:51 +01007636# This ensures things still work after session_reset().
7637# It also exercises the "resumed handshake" flow.
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007638# Since we don't support reading fragmented ClientHello yet,
7639# up the MTU to 1450 (larger than ClientHello with session ticket,
7640# but still smaller than client's Certificate to ensure fragmentation).
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007641# An autoreduction on the client-side might happen if the server is
7642# slow to reset, therefore omitting '-C "autoreduction"' below.
Manuel Pégourié-Gonnard2f2d9022018-08-21 12:17:54 +02007643# reco_delay avoids races where the client reconnects before the server has
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007644# resumed listening, which would result in a spurious autoreduction.
7645not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007646requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7647requires_config_enabled MBEDTLS_RSA_C
7648requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007649requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7650requires_config_enabled MBEDTLS_AES_C
7651requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007652run_test "DTLS fragmenting: proxy MTU, resumed handshake" \
7653 -p "$P_PXY mtu=1450" \
7654 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7655 crt_file=data_files/server7_int-ca.crt \
7656 key_file=data_files/server7.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007657 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007658 mtu=1450" \
7659 "$P_CLI dtls=1 debug_level=2 \
7660 crt_file=data_files/server8_int-ca2.crt \
7661 key_file=data_files/server8.key \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007662 hs_timeout=10000-60000 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007663 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard2f2d9022018-08-21 12:17:54 +02007664 mtu=1450 reconnect=1 reco_delay=1" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007665 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007666 -S "autoreduction" \
Manuel Pégourié-Gonnard19c62f92018-08-16 10:50:39 +02007667 -s "found fragmented DTLS handshake message" \
7668 -c "found fragmented DTLS handshake message" \
7669 -C "error"
7670
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007671# An autoreduction on the client-side might happen if the server is
7672# slow to reset, therefore omitting '-C "autoreduction"' below.
7673not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007674requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7675requires_config_enabled MBEDTLS_RSA_C
7676requires_config_enabled MBEDTLS_ECDSA_C
7677requires_config_enabled MBEDTLS_SHA256_C
7678requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7679requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7680requires_config_enabled MBEDTLS_CHACHAPOLY_C
7681run_test "DTLS fragmenting: proxy MTU, ChachaPoly renego" \
7682 -p "$P_PXY mtu=512" \
7683 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7684 crt_file=data_files/server7_int-ca.crt \
7685 key_file=data_files/server7.key \
7686 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007687 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007688 mtu=512" \
7689 "$P_CLI dtls=1 debug_level=2 \
7690 crt_file=data_files/server8_int-ca2.crt \
7691 key_file=data_files/server8.key \
7692 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007693 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007694 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007695 mtu=512" \
7696 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007697 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007698 -s "found fragmented DTLS handshake message" \
7699 -c "found fragmented DTLS handshake message" \
7700 -C "error"
7701
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007702# An autoreduction on the client-side might happen if the server is
7703# slow to reset, therefore omitting '-C "autoreduction"' below.
7704not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007705requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7706requires_config_enabled MBEDTLS_RSA_C
7707requires_config_enabled MBEDTLS_ECDSA_C
7708requires_config_enabled MBEDTLS_SHA256_C
7709requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7710requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7711requires_config_enabled MBEDTLS_AES_C
7712requires_config_enabled MBEDTLS_GCM_C
7713run_test "DTLS fragmenting: proxy MTU, AES-GCM renego" \
7714 -p "$P_PXY mtu=512" \
7715 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7716 crt_file=data_files/server7_int-ca.crt \
7717 key_file=data_files/server7.key \
7718 exchanges=2 renegotiation=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007719 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007720 mtu=512" \
7721 "$P_CLI dtls=1 debug_level=2 \
7722 crt_file=data_files/server8_int-ca2.crt \
7723 key_file=data_files/server8.key \
7724 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007725 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007726 hs_timeout=10000-60000 \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007727 mtu=512" \
7728 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007729 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007730 -s "found fragmented DTLS handshake message" \
7731 -c "found fragmented DTLS handshake message" \
7732 -C "error"
7733
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007734# An autoreduction on the client-side might happen if the server is
7735# slow to reset, therefore omitting '-C "autoreduction"' below.
7736not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007737requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7738requires_config_enabled MBEDTLS_RSA_C
7739requires_config_enabled MBEDTLS_ECDSA_C
7740requires_config_enabled MBEDTLS_SHA256_C
7741requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7742requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7743requires_config_enabled MBEDTLS_AES_C
7744requires_config_enabled MBEDTLS_CCM_C
7745run_test "DTLS fragmenting: proxy MTU, AES-CCM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007746 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007747 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7748 crt_file=data_files/server7_int-ca.crt \
7749 key_file=data_files/server7.key \
7750 exchanges=2 renegotiation=1 \
7751 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CCM-8 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007752 hs_timeout=10000-60000 \
7753 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007754 "$P_CLI dtls=1 debug_level=2 \
7755 crt_file=data_files/server8_int-ca2.crt \
7756 key_file=data_files/server8.key \
7757 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007758 hs_timeout=10000-60000 \
7759 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007760 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007761 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007762 -s "found fragmented DTLS handshake message" \
7763 -c "found fragmented DTLS handshake message" \
7764 -C "error"
7765
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007766# An autoreduction on the client-side might happen if the server is
7767# slow to reset, therefore omitting '-C "autoreduction"' below.
7768not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007769requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7770requires_config_enabled MBEDTLS_RSA_C
7771requires_config_enabled MBEDTLS_ECDSA_C
7772requires_config_enabled MBEDTLS_SHA256_C
7773requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7774requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7775requires_config_enabled MBEDTLS_AES_C
7776requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
7777requires_config_enabled MBEDTLS_SSL_ENCRYPT_THEN_MAC
7778run_test "DTLS fragmenting: proxy MTU, AES-CBC EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007779 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007780 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7781 crt_file=data_files/server7_int-ca.crt \
7782 key_file=data_files/server7.key \
7783 exchanges=2 renegotiation=1 \
7784 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007785 hs_timeout=10000-60000 \
7786 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007787 "$P_CLI dtls=1 debug_level=2 \
7788 crt_file=data_files/server8_int-ca2.crt \
7789 key_file=data_files/server8.key \
7790 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007791 hs_timeout=10000-60000 \
7792 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007793 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007794 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007795 -s "found fragmented DTLS handshake message" \
7796 -c "found fragmented DTLS handshake message" \
7797 -C "error"
7798
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007799# An autoreduction on the client-side might happen if the server is
7800# slow to reset, therefore omitting '-C "autoreduction"' below.
7801not_with_valgrind # spurious autoreduction due to timeout
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007802requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7803requires_config_enabled MBEDTLS_RSA_C
7804requires_config_enabled MBEDTLS_ECDSA_C
7805requires_config_enabled MBEDTLS_SHA256_C
7806requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7807requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
7808requires_config_enabled MBEDTLS_AES_C
7809requires_config_enabled MBEDTLS_CIPHER_MODE_CBC
7810run_test "DTLS fragmenting: proxy MTU, AES-CBC non-EtM renego" \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007811 -p "$P_PXY mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007812 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7813 crt_file=data_files/server7_int-ca.crt \
7814 key_file=data_files/server7.key \
7815 exchanges=2 renegotiation=1 \
7816 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-CBC-SHA256 etm=0 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007817 hs_timeout=10000-60000 \
7818 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007819 "$P_CLI dtls=1 debug_level=2 \
7820 crt_file=data_files/server8_int-ca2.crt \
7821 key_file=data_files/server8.key \
7822 exchanges=2 renegotiation=1 renegotiate=1 \
Andrzej Kurek52f84912018-10-05 07:53:40 -04007823 hs_timeout=10000-60000 \
7824 mtu=1024" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007825 0 \
Andrzej Kurek35f2f302018-10-09 08:52:14 -04007826 -S "autoreduction" \
Manuel Pégourié-Gonnard72c27072018-08-13 12:37:51 +02007827 -s "found fragmented DTLS handshake message" \
7828 -c "found fragmented DTLS handshake message" \
7829 -C "error"
7830
Andrzej Kurek77826052018-10-11 07:34:08 -04007831# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007832requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7833requires_config_enabled MBEDTLS_RSA_C
7834requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007835requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7836requires_config_enabled MBEDTLS_AES_C
7837requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007838client_needs_more_time 2
7839run_test "DTLS fragmenting: proxy MTU + 3d" \
7840 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007841 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 auth_mode=required \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007842 crt_file=data_files/server7_int-ca.crt \
7843 key_file=data_files/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007844 hs_timeout=250-10000 mtu=512" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01007845 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007846 crt_file=data_files/server8_int-ca2.crt \
7847 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007848 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007849 hs_timeout=250-10000 mtu=512" \
Manuel Pégourié-Gonnard2d56f0d2018-08-16 11:09:03 +02007850 0 \
7851 -s "found fragmented DTLS handshake message" \
7852 -c "found fragmented DTLS handshake message" \
7853 -C "error"
7854
Andrzej Kurek77826052018-10-11 07:34:08 -04007855# Forcing ciphersuite for this test to fit the MTU of 512 with full config.
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007856requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7857requires_config_enabled MBEDTLS_RSA_C
7858requires_config_enabled MBEDTLS_ECDSA_C
Andrzej Kurek7311c782018-10-11 06:49:41 -04007859requires_config_enabled MBEDTLS_KEY_EXCHANGE_ECDHE_ECDSA
7860requires_config_enabled MBEDTLS_AES_C
7861requires_config_enabled MBEDTLS_GCM_C
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007862client_needs_more_time 2
7863run_test "DTLS fragmenting: proxy MTU + 3d, nbio" \
7864 -p "$P_PXY mtu=512 drop=8 delay=8 duplicate=8" \
7865 "$P_SRV dtls=1 debug_level=2 auth_mode=required \
7866 crt_file=data_files/server7_int-ca.crt \
7867 key_file=data_files/server7.key \
7868 hs_timeout=250-10000 mtu=512 nbio=2" \
7869 "$P_CLI dtls=1 debug_level=2 \
7870 crt_file=data_files/server8_int-ca2.crt \
7871 key_file=data_files/server8.key \
Andrzej Kurek7311c782018-10-11 06:49:41 -04007872 force_ciphersuite=TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 \
Manuel Pégourié-Gonnardc1d54b72018-08-22 10:02:59 +02007873 hs_timeout=250-10000 mtu=512 nbio=2" \
7874 0 \
7875 -s "found fragmented DTLS handshake message" \
7876 -c "found fragmented DTLS handshake message" \
7877 -C "error"
7878
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02007879# interop tests for DTLS fragmentating with reliable connection
7880#
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007881# here and below we just want to test that the we fragment in a way that
7882# pleases other implementations, so we don't need the peer to fragment
7883requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7884requires_config_enabled MBEDTLS_RSA_C
7885requires_config_enabled MBEDTLS_ECDSA_C
7886requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02007887requires_gnutls
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007888run_test "DTLS fragmenting: gnutls server, DTLS 1.2" \
7889 "$G_SRV -u" \
7890 "$P_CLI dtls=1 debug_level=2 \
7891 crt_file=data_files/server8_int-ca2.crt \
7892 key_file=data_files/server8.key \
7893 mtu=512 force_version=dtls1_2" \
7894 0 \
7895 -c "fragmenting handshake message" \
7896 -C "error"
7897
7898requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7899requires_config_enabled MBEDTLS_RSA_C
7900requires_config_enabled MBEDTLS_ECDSA_C
7901requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02007902requires_gnutls
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007903run_test "DTLS fragmenting: gnutls server, DTLS 1.0" \
7904 "$G_SRV -u" \
7905 "$P_CLI dtls=1 debug_level=2 \
7906 crt_file=data_files/server8_int-ca2.crt \
7907 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02007908 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007909 0 \
7910 -c "fragmenting handshake message" \
7911 -C "error"
7912
Hanno Beckerb9a00862018-08-28 10:20:22 +01007913# We use --insecure for the GnuTLS client because it expects
7914# the hostname / IP it connects to to be the name used in the
7915# certificate obtained from the server. Here, however, it
7916# connects to 127.0.0.1 while our test certificates use 'localhost'
7917# as the server name in the certificate. This will make the
7918# certifiate validation fail, but passing --insecure makes
7919# GnuTLS continue the connection nonetheless.
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007920requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7921requires_config_enabled MBEDTLS_RSA_C
7922requires_config_enabled MBEDTLS_ECDSA_C
7923requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02007924requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -04007925requires_not_i686
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007926run_test "DTLS fragmenting: gnutls client, DTLS 1.2" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02007927 "$P_SRV dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007928 crt_file=data_files/server7_int-ca.crt \
7929 key_file=data_files/server7.key \
7930 mtu=512 force_version=dtls1_2" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02007931 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007932 0 \
7933 -s "fragmenting handshake message"
7934
Hanno Beckerb9a00862018-08-28 10:20:22 +01007935# See previous test for the reason to use --insecure
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007936requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7937requires_config_enabled MBEDTLS_RSA_C
7938requires_config_enabled MBEDTLS_ECDSA_C
7939requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard61512982018-08-21 09:40:07 +02007940requires_gnutls
Andrzej Kurekb4593462018-10-11 08:43:30 -04007941requires_not_i686
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007942run_test "DTLS fragmenting: gnutls client, DTLS 1.0" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02007943 "$P_SRV dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007944 crt_file=data_files/server7_int-ca.crt \
7945 key_file=data_files/server7.key \
7946 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard34aa1872018-08-23 19:07:15 +02007947 "$G_CLI -u --insecure 127.0.0.1" \
Manuel Pégourié-Gonnard1218bc02018-08-17 10:51:26 +02007948 0 \
7949 -s "fragmenting handshake message"
7950
7951requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7952requires_config_enabled MBEDTLS_RSA_C
7953requires_config_enabled MBEDTLS_ECDSA_C
7954requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7955run_test "DTLS fragmenting: openssl server, DTLS 1.2" \
7956 "$O_SRV -dtls1_2 -verify 10" \
7957 "$P_CLI dtls=1 debug_level=2 \
7958 crt_file=data_files/server8_int-ca2.crt \
7959 key_file=data_files/server8.key \
7960 mtu=512 force_version=dtls1_2" \
7961 0 \
7962 -c "fragmenting handshake message" \
7963 -C "error"
7964
7965requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7966requires_config_enabled MBEDTLS_RSA_C
7967requires_config_enabled MBEDTLS_ECDSA_C
7968requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
7969run_test "DTLS fragmenting: openssl server, DTLS 1.0" \
7970 "$O_SRV -dtls1 -verify 10" \
7971 "$P_CLI dtls=1 debug_level=2 \
7972 crt_file=data_files/server8_int-ca2.crt \
7973 key_file=data_files/server8.key \
7974 mtu=512 force_version=dtls1" \
7975 0 \
7976 -c "fragmenting handshake message" \
7977 -C "error"
7978
7979requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7980requires_config_enabled MBEDTLS_RSA_C
7981requires_config_enabled MBEDTLS_ECDSA_C
7982requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
7983run_test "DTLS fragmenting: openssl client, DTLS 1.2" \
7984 "$P_SRV dtls=1 debug_level=2 \
7985 crt_file=data_files/server7_int-ca.crt \
7986 key_file=data_files/server7.key \
7987 mtu=512 force_version=dtls1_2" \
7988 "$O_CLI -dtls1_2" \
7989 0 \
7990 -s "fragmenting handshake message"
7991
7992requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
7993requires_config_enabled MBEDTLS_RSA_C
7994requires_config_enabled MBEDTLS_ECDSA_C
7995requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
7996run_test "DTLS fragmenting: openssl client, DTLS 1.0" \
7997 "$P_SRV dtls=1 debug_level=2 \
7998 crt_file=data_files/server7_int-ca.crt \
7999 key_file=data_files/server7.key \
8000 mtu=512 force_version=dtls1" \
8001 "$O_CLI -dtls1" \
8002 0 \
8003 -s "fragmenting handshake message"
8004
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008005# interop tests for DTLS fragmentating with unreliable connection
8006#
8007# again we just want to test that the we fragment in a way that
8008# pleases other implementations, so we don't need the peer to fragment
8009requires_gnutls_next
8010requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8011requires_config_enabled MBEDTLS_RSA_C
8012requires_config_enabled MBEDTLS_ECDSA_C
8013requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02008014client_needs_more_time 4
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008015run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.2" \
8016 -p "$P_PXY drop=8 delay=8 duplicate=8" \
8017 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008018 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008019 crt_file=data_files/server8_int-ca2.crt \
8020 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02008021 hs_timeout=250-60000 mtu=512 force_version=dtls1_2" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008022 0 \
8023 -c "fragmenting handshake message" \
8024 -C "error"
8025
8026requires_gnutls_next
8027requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8028requires_config_enabled MBEDTLS_RSA_C
8029requires_config_enabled MBEDTLS_ECDSA_C
8030requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02008031client_needs_more_time 4
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008032run_test "DTLS fragmenting: 3d, gnutls server, DTLS 1.0" \
8033 -p "$P_PXY drop=8 delay=8 duplicate=8" \
8034 "$G_NEXT_SRV -u" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008035 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008036 crt_file=data_files/server8_int-ca2.crt \
8037 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02008038 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008039 0 \
8040 -c "fragmenting handshake message" \
8041 -C "error"
8042
k-stachowiak17a38d32019-02-18 15:29:56 +01008043requires_gnutls_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +01008044requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8045requires_config_enabled MBEDTLS_RSA_C
8046requires_config_enabled MBEDTLS_ECDSA_C
8047requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
8048client_needs_more_time 4
8049run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.2" \
8050 -p "$P_PXY drop=8 delay=8 duplicate=8" \
8051 "$P_SRV dtls=1 debug_level=2 \
8052 crt_file=data_files/server7_int-ca.crt \
8053 key_file=data_files/server7.key \
8054 hs_timeout=250-60000 mtu=512 force_version=dtls1_2" \
k-stachowiak17a38d32019-02-18 15:29:56 +01008055 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01008056 0 \
8057 -s "fragmenting handshake message"
8058
k-stachowiak17a38d32019-02-18 15:29:56 +01008059requires_gnutls_next
Hanno Becker3b8b40c2018-08-28 10:25:41 +01008060requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8061requires_config_enabled MBEDTLS_RSA_C
8062requires_config_enabled MBEDTLS_ECDSA_C
8063requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
8064client_needs_more_time 4
8065run_test "DTLS fragmenting: 3d, gnutls client, DTLS 1.0" \
8066 -p "$P_PXY drop=8 delay=8 duplicate=8" \
8067 "$P_SRV dtls=1 debug_level=2 \
8068 crt_file=data_files/server7_int-ca.crt \
8069 key_file=data_files/server7.key \
8070 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
k-stachowiak17a38d32019-02-18 15:29:56 +01008071 "$G_NEXT_CLI -u --insecure 127.0.0.1" \
Hanno Becker3b8b40c2018-08-28 10:25:41 +01008072 0 \
8073 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008074
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02008075## Interop test with OpenSSL might trigger a bug in recent versions (including
8076## all versions installed on the CI machines), reported here:
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008077## Bug report: https://github.com/openssl/openssl/issues/6902
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02008078## They should be re-enabled once a fixed version of OpenSSL is available
8079## (this should happen in some 1.1.1_ release according to the ticket).
Hanno Becker3b8b40c2018-08-28 10:25:41 +01008080skip_next_test
8081requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8082requires_config_enabled MBEDTLS_RSA_C
8083requires_config_enabled MBEDTLS_ECDSA_C
8084requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
8085client_needs_more_time 4
8086run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.2" \
8087 -p "$P_PXY drop=8 delay=8 duplicate=8" \
8088 "$O_SRV -dtls1_2 -verify 10" \
8089 "$P_CLI dtls=1 debug_level=2 \
8090 crt_file=data_files/server8_int-ca2.crt \
8091 key_file=data_files/server8.key \
8092 hs_timeout=250-60000 mtu=512 force_version=dtls1_2" \
8093 0 \
8094 -c "fragmenting handshake message" \
8095 -C "error"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008096
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02008097skip_next_test
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008098requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8099requires_config_enabled MBEDTLS_RSA_C
8100requires_config_enabled MBEDTLS_ECDSA_C
8101requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02008102client_needs_more_time 4
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008103run_test "DTLS fragmenting: 3d, openssl server, DTLS 1.0" \
8104 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02008105 "$O_SRV -dtls1 -verify 10" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008106 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008107 crt_file=data_files/server8_int-ca2.crt \
8108 key_file=data_files/server8.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02008109 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008110 0 \
8111 -c "fragmenting handshake message" \
8112 -C "error"
8113
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02008114skip_next_test
8115requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8116requires_config_enabled MBEDTLS_RSA_C
8117requires_config_enabled MBEDTLS_ECDSA_C
8118requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
8119client_needs_more_time 4
8120run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.2" \
8121 -p "$P_PXY drop=8 delay=8 duplicate=8" \
8122 "$P_SRV dtls=1 debug_level=2 \
8123 crt_file=data_files/server7_int-ca.crt \
8124 key_file=data_files/server7.key \
8125 hs_timeout=250-60000 mtu=512 force_version=dtls1_2" \
8126 "$O_CLI -dtls1_2" \
8127 0 \
8128 -s "fragmenting handshake message"
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008129
8130# -nbio is added to prevent s_client from blocking in case of duplicated
8131# messages at the end of the handshake
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02008132skip_next_test
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008133requires_config_enabled MBEDTLS_SSL_PROTO_DTLS
8134requires_config_enabled MBEDTLS_RSA_C
8135requires_config_enabled MBEDTLS_ECDSA_C
8136requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_1
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02008137client_needs_more_time 4
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008138run_test "DTLS fragmenting: 3d, openssl client, DTLS 1.0" \
8139 -p "$P_PXY drop=8 delay=8 duplicate=8" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008140 "$P_SRV dgram_packing=0 dtls=1 debug_level=2 \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008141 crt_file=data_files/server7_int-ca.crt \
8142 key_file=data_files/server7.key \
Manuel Pégourié-Gonnard02f3a8a2018-08-20 10:49:28 +02008143 hs_timeout=250-60000 mtu=512 force_version=dtls1" \
Manuel Pégourié-Gonnardc1eda672018-09-03 10:41:49 +02008144 "$O_CLI -nbio -dtls1" \
Manuel Pégourié-Gonnard38110df2018-08-17 12:44:54 +02008145 0 \
8146 -s "fragmenting handshake message"
8147
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02008148# Tests for specific things with "unreliable" UDP connection
8149
8150not_with_valgrind # spurious resend due to timeout
8151run_test "DTLS proxy: reference" \
8152 -p "$P_PXY" \
8153 "$P_SRV dtls=1 debug_level=2" \
8154 "$P_CLI dtls=1 debug_level=2" \
8155 0 \
8156 -C "replayed record" \
8157 -S "replayed record" \
Hanno Beckerb2a86c32019-07-19 15:43:09 +01008158 -C "Buffer record from epoch" \
8159 -S "Buffer record from epoch" \
8160 -C "ssl_buffer_message" \
8161 -S "ssl_buffer_message" \
Manuel Pégourié-Gonnarda7756172014-08-31 18:37:01 +02008162 -C "discarding invalid record" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02008163 -S "discarding invalid record" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02008164 -S "resend" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02008165 -s "Extra-header:" \
Manuel Pégourié-Gonnardbe9eb872014-09-05 17:45:19 +02008166 -c "HTTP/1.0 200 OK"
8167
8168not_with_valgrind # spurious resend due to timeout
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02008169run_test "DTLS proxy: duplicate every packet" \
8170 -p "$P_PXY duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008171 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
8172 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard990f9e42014-09-06 12:27:02 +02008173 0 \
8174 -c "replayed record" \
8175 -s "replayed record" \
8176 -c "record from another epoch" \
8177 -s "record from another epoch" \
8178 -S "resend" \
8179 -s "Extra-header:" \
8180 -c "HTTP/1.0 200 OK"
8181
8182run_test "DTLS proxy: duplicate every packet, server anti-replay off" \
8183 -p "$P_PXY duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008184 "$P_SRV dtls=1 dgram_packing=0 debug_level=2 anti_replay=0" \
8185 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02008186 0 \
8187 -c "replayed record" \
8188 -S "replayed record" \
8189 -c "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008190 -s "record from another epoch" \
8191 -c "resend" \
8192 -s "resend" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02008193 -s "Extra-header:" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008194 -c "HTTP/1.0 200 OK"
8195
8196run_test "DTLS proxy: multiple records in same datagram" \
8197 -p "$P_PXY pack=50" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008198 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
8199 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02008200 0 \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008201 -c "next record in same datagram" \
8202 -s "next record in same datagram"
8203
8204run_test "DTLS proxy: multiple records in same datagram, duplicate every packet" \
8205 -p "$P_PXY pack=50 duplicate=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008206 "$P_SRV dtls=1 dgram_packing=0 debug_level=2" \
8207 "$P_CLI dtls=1 dgram_packing=0 debug_level=2" \
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02008208 0 \
8209 -c "next record in same datagram" \
8210 -s "next record in same datagram"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008211
Manuel Pégourié-Gonnard246c13a2014-09-24 13:56:09 +02008212run_test "DTLS proxy: inject invalid AD record, default badmac_limit" \
8213 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008214 "$P_SRV dtls=1 dgram_packing=0 debug_level=1" \
8215 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnard63eca932014-09-08 16:39:08 +02008216 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02008217 -c "discarding invalid record (mac)" \
8218 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008219 -s "Extra-header:" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008220 -c "HTTP/1.0 200 OK" \
8221 -S "too many records with bad MAC" \
8222 -S "Verification of the message MAC failed"
8223
8224run_test "DTLS proxy: inject invalid AD record, badmac_limit 1" \
8225 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008226 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=1" \
8227 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008228 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02008229 -C "discarding invalid record (mac)" \
8230 -S "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008231 -S "Extra-header:" \
8232 -C "HTTP/1.0 200 OK" \
8233 -s "too many records with bad MAC" \
8234 -s "Verification of the message MAC failed"
8235
8236run_test "DTLS proxy: inject invalid AD record, badmac_limit 2" \
8237 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008238 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2" \
8239 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008240 0 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02008241 -c "discarding invalid record (mac)" \
8242 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008243 -s "Extra-header:" \
8244 -c "HTTP/1.0 200 OK" \
8245 -S "too many records with bad MAC" \
8246 -S "Verification of the message MAC failed"
8247
8248run_test "DTLS proxy: inject invalid AD record, badmac_limit 2, exchanges 2"\
8249 -p "$P_PXY bad_ad=1" \
Hanno Becker1c9a24c2018-08-14 13:46:33 +01008250 "$P_SRV dtls=1 dgram_packing=0 debug_level=1 badmac_limit=2 exchanges=2" \
8251 "$P_CLI dtls=1 dgram_packing=0 debug_level=1 read_timeout=100 exchanges=2" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008252 1 \
Manuel Pégourié-Gonnard74a13782014-10-14 22:34:08 +02008253 -c "discarding invalid record (mac)" \
8254 -s "discarding invalid record (mac)" \
Manuel Pégourié-Gonnarde698f592014-10-14 19:36:36 +02008255 -s "Extra-header:" \
8256 -c "HTTP/1.0 200 OK" \
8257 -s "too many records with bad MAC" \
8258 -s "Verification of the message MAC failed"
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008259
8260run_test "DTLS proxy: delay ChangeCipherSpec" \
8261 -p "$P_PXY delay_ccs=1" \
Hanno Beckerc4305232018-08-14 13:41:21 +01008262 "$P_SRV dtls=1 debug_level=1 dgram_packing=0" \
8263 "$P_CLI dtls=1 debug_level=1 dgram_packing=0" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008264 0 \
8265 -c "record from another epoch" \
8266 -s "record from another epoch" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008267 -s "Extra-header:" \
8268 -c "HTTP/1.0 200 OK"
8269
Hanno Beckeraa5d0c42018-08-16 13:15:19 +01008270# Tests for reordering support with DTLS
8271
Hanno Becker56cdfd12018-08-17 13:42:15 +01008272run_test "DTLS reordering: Buffer out-of-order handshake message on client" \
8273 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008274 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
8275 hs_timeout=2500-60000" \
8276 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
8277 hs_timeout=2500-60000" \
Hanno Beckere3842212018-08-16 15:28:59 +01008278 0 \
8279 -c "Buffering HS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008280 -c "Next handshake message has been buffered - load"\
8281 -S "Buffering HS message" \
8282 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +01008283 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008284 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008285 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008286 -S "Remember CCS message"
Hanno Beckere3842212018-08-16 15:28:59 +01008287
Hanno Beckerdc1e9502018-08-28 16:02:33 +01008288run_test "DTLS reordering: Buffer out-of-order handshake message fragment on client" \
8289 -p "$P_PXY delay_srv=ServerHello" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008290 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
8291 hs_timeout=2500-60000" \
8292 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
8293 hs_timeout=2500-60000" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +01008294 0 \
8295 -c "Buffering HS message" \
8296 -c "found fragmented DTLS handshake message"\
8297 -c "Next handshake message 1 not or only partially bufffered" \
8298 -c "Next handshake message has been buffered - load"\
8299 -S "Buffering HS message" \
8300 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +01008301 -C "Injecting buffered CCS message" \
Hanno Beckerdc1e9502018-08-28 16:02:33 +01008302 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008303 -S "Injecting buffered CCS message" \
Hanno Beckeraa5d0c42018-08-16 13:15:19 +01008304 -S "Remember CCS message"
8305
Hanno Beckera1adcca2018-08-24 14:41:07 +01008306# The client buffers the ServerKeyExchange before receiving the fragmented
8307# Certificate message; at the time of writing, together these are aroudn 1200b
8308# in size, so that the bound below ensures that the certificate can be reassembled
8309# while keeping the ServerKeyExchange.
8310requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1300
8311run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next" \
Hanno Beckere3567052018-08-21 16:50:43 +01008312 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008313 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
8314 hs_timeout=2500-60000" \
8315 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
8316 hs_timeout=2500-60000" \
Hanno Beckere3567052018-08-21 16:50:43 +01008317 0 \
8318 -c "Buffering HS message" \
8319 -c "Next handshake message has been buffered - load"\
Hanno Beckera1adcca2018-08-24 14:41:07 +01008320 -C "attempt to make space by freeing buffered messages" \
8321 -S "Buffering HS message" \
8322 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +01008323 -C "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +01008324 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008325 -S "Injecting buffered CCS message" \
Hanno Beckera1adcca2018-08-24 14:41:07 +01008326 -S "Remember CCS message"
8327
8328# The size constraints ensure that the delayed certificate message can't
8329# be reassembled while keeping the ServerKeyExchange message, but it can
8330# when dropping it first.
8331requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 900
8332requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 1299
8333run_test "DTLS reordering: Buffer out-of-order hs msg before reassembling next, free buffered msg" \
8334 -p "$P_PXY delay_srv=Certificate delay_srv=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008335 "$P_SRV mtu=512 dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
8336 hs_timeout=2500-60000" \
8337 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
8338 hs_timeout=2500-60000" \
Hanno Beckera1adcca2018-08-24 14:41:07 +01008339 0 \
8340 -c "Buffering HS message" \
8341 -c "attempt to make space by freeing buffered future messages" \
8342 -c "Enough space available after freeing buffered HS messages" \
Hanno Beckere3567052018-08-21 16:50:43 +01008343 -S "Buffering HS message" \
8344 -S "Next handshake message has been buffered - load"\
Hanno Becker39b8bc92018-08-28 17:17:13 +01008345 -C "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +01008346 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008347 -S "Injecting buffered CCS message" \
Hanno Beckere3567052018-08-21 16:50:43 +01008348 -S "Remember CCS message"
8349
Hanno Becker56cdfd12018-08-17 13:42:15 +01008350run_test "DTLS reordering: Buffer out-of-order handshake message on server" \
8351 -p "$P_PXY delay_cli=Certificate" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008352 "$P_SRV dgram_packing=0 auth_mode=required cookies=0 dtls=1 debug_level=2 \
8353 hs_timeout=2500-60000" \
8354 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
8355 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008356 0 \
8357 -C "Buffering HS message" \
8358 -C "Next handshake message has been buffered - load"\
8359 -s "Buffering HS message" \
8360 -s "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008361 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008362 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008363 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008364 -S "Remember CCS message"
8365
8366run_test "DTLS reordering: Buffer out-of-order CCS message on client"\
8367 -p "$P_PXY delay_srv=NewSessionTicket" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008368 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
8369 hs_timeout=2500-60000" \
8370 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
8371 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008372 0 \
8373 -C "Buffering HS message" \
8374 -C "Next handshake message has been buffered - load"\
8375 -S "Buffering HS message" \
8376 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008377 -c "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008378 -c "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008379 -S "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008380 -S "Remember CCS message"
8381
8382run_test "DTLS reordering: Buffer out-of-order CCS message on server"\
8383 -p "$P_PXY delay_cli=ClientKeyExchange" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008384 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
8385 hs_timeout=2500-60000" \
8386 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
8387 hs_timeout=2500-60000" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008388 0 \
8389 -C "Buffering HS message" \
8390 -C "Next handshake message has been buffered - load"\
8391 -S "Buffering HS message" \
8392 -S "Next handshake message has been buffered - load" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008393 -C "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008394 -C "Remember CCS message" \
Hanno Becker39b8bc92018-08-28 17:17:13 +01008395 -s "Injecting buffered CCS message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008396 -s "Remember CCS message"
8397
Hanno Beckera1adcca2018-08-24 14:41:07 +01008398run_test "DTLS reordering: Buffer encrypted Finished message" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008399 -p "$P_PXY delay_ccs=1" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008400 "$P_SRV dgram_packing=0 cookies=0 dtls=1 debug_level=2 \
8401 hs_timeout=2500-60000" \
8402 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 \
8403 hs_timeout=2500-60000" \
Hanno Beckerb34149c2018-08-16 15:29:06 +01008404 0 \
8405 -s "Buffer record from epoch 1" \
Hanno Becker56cdfd12018-08-17 13:42:15 +01008406 -s "Found buffered record from current epoch - load" \
8407 -c "Buffer record from epoch 1" \
8408 -c "Found buffered record from current epoch - load"
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008409
Hanno Beckera1adcca2018-08-24 14:41:07 +01008410# In this test, both the fragmented NewSessionTicket and the ChangeCipherSpec
8411# from the server are delayed, so that the encrypted Finished message
8412# is received and buffered. When the fragmented NewSessionTicket comes
8413# in afterwards, the encrypted Finished message must be freed in order
8414# to make space for the NewSessionTicket to be reassembled.
8415# This works only in very particular circumstances:
8416# - MBEDTLS_SSL_DTLS_MAX_BUFFERING must be large enough to allow buffering
8417# of the NewSessionTicket, but small enough to also allow buffering of
8418# the encrypted Finished message.
8419# - The MTU setting on the server must be so small that the NewSessionTicket
8420# needs to be fragmented.
8421# - All messages sent by the server must be small enough to be either sent
8422# without fragmentation or be reassembled within the bounds of
8423# MBEDTLS_SSL_DTLS_MAX_BUFFERING. Achieve this by testing with a PSK-based
8424# handshake, omitting CRTs.
Manuel Pégourié-Gonnardeef4c752019-05-28 10:21:30 +02008425requires_config_value_at_least "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 190
8426requires_config_value_at_most "MBEDTLS_SSL_DTLS_MAX_BUFFERING" 230
Hanno Beckera1adcca2018-08-24 14:41:07 +01008427run_test "DTLS reordering: Buffer encrypted Finished message, drop for fragmented NewSessionTicket" \
8428 -p "$P_PXY delay_srv=NewSessionTicket delay_srv=NewSessionTicket delay_ccs=1" \
Manuel Pégourié-Gonnardeef4c752019-05-28 10:21:30 +02008429 "$P_SRV mtu=140 response_size=90 dgram_packing=0 psk=abc123 psk_identity=foo cookies=0 dtls=1 debug_level=2" \
Hanno Beckera1adcca2018-08-24 14:41:07 +01008430 "$P_CLI dgram_packing=0 dtls=1 debug_level=2 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 psk=abc123 psk_identity=foo" \
8431 0 \
8432 -s "Buffer record from epoch 1" \
8433 -s "Found buffered record from current epoch - load" \
8434 -c "Buffer record from epoch 1" \
8435 -C "Found buffered record from current epoch - load" \
8436 -c "Enough space available after freeing future epoch record"
8437
Manuel Pégourié-Gonnarda0719722014-09-20 12:46:27 +02008438# Tests for "randomly unreliable connection": try a variety of flows and peers
8439
8440client_needs_more_time 2
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008441run_test "DTLS proxy: 3d (drop, delay, duplicate), \"short\" PSK handshake" \
8442 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008443 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008444 psk=abc123" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008445 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008446 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8447 0 \
8448 -s "Extra-header:" \
8449 -c "HTTP/1.0 200 OK"
8450
Janos Follath74537a62016-09-02 13:45:28 +01008451client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008452run_test "DTLS proxy: 3d, \"short\" RSA handshake" \
8453 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008454 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
8455 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008456 force_ciphersuite=TLS-RSA-WITH-AES-128-CBC-SHA" \
8457 0 \
8458 -s "Extra-header:" \
8459 -c "HTTP/1.0 200 OK"
8460
Janos Follath74537a62016-09-02 13:45:28 +01008461client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008462run_test "DTLS proxy: 3d, \"short\" (no ticket, no cli_auth) FS handshake" \
8463 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008464 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none" \
8465 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008466 0 \
8467 -s "Extra-header:" \
8468 -c "HTTP/1.0 200 OK"
8469
Janos Follath74537a62016-09-02 13:45:28 +01008470client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008471run_test "DTLS proxy: 3d, FS, client auth" \
8472 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008473 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=required" \
8474 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008475 0 \
8476 -s "Extra-header:" \
8477 -c "HTTP/1.0 200 OK"
8478
Janos Follath74537a62016-09-02 13:45:28 +01008479client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008480run_test "DTLS proxy: 3d, FS, ticket" \
8481 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008482 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=none" \
8483 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008484 0 \
8485 -s "Extra-header:" \
8486 -c "HTTP/1.0 200 OK"
8487
Janos Follath74537a62016-09-02 13:45:28 +01008488client_needs_more_time 2
Manuel Pégourié-Gonnard18e519a2014-09-24 19:09:17 +02008489run_test "DTLS proxy: 3d, max handshake (FS, ticket + client auth)" \
8490 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008491 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1 auth_mode=required" \
8492 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=1" \
Manuel Pégourié-Gonnard825a49e2014-09-23 11:00:37 +02008493 0 \
8494 -s "Extra-header:" \
8495 -c "HTTP/1.0 200 OK"
8496
Janos Follath74537a62016-09-02 13:45:28 +01008497client_needs_more_time 2
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008498run_test "DTLS proxy: 3d, max handshake, nbio" \
8499 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008500 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008501 auth_mode=required" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008502 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 nbio=2 tickets=1" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008503 0 \
8504 -s "Extra-header:" \
8505 -c "HTTP/1.0 200 OK"
8506
Janos Follath74537a62016-09-02 13:45:28 +01008507client_needs_more_time 4
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +02008508run_test "DTLS proxy: 3d, min handshake, resumption" \
8509 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008510 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +02008511 psk=abc123 debug_level=3" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008512 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard7a26d732014-10-02 14:50:46 +02008513 debug_level=3 reconnect=1 read_timeout=1000 max_resend=10 \
8514 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8515 0 \
8516 -s "a session has been resumed" \
8517 -c "a session has been resumed" \
8518 -s "Extra-header:" \
8519 -c "HTTP/1.0 200 OK"
8520
Janos Follath74537a62016-09-02 13:45:28 +01008521client_needs_more_time 4
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02008522run_test "DTLS proxy: 3d, min handshake, resumption, nbio" \
8523 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008524 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02008525 psk=abc123 debug_level=3 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008526 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard85beb302014-10-02 17:59:19 +02008527 debug_level=3 reconnect=1 read_timeout=1000 max_resend=10 \
8528 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8 nbio=2" \
8529 0 \
8530 -s "a session has been resumed" \
8531 -c "a session has been resumed" \
8532 -s "Extra-header:" \
8533 -c "HTTP/1.0 200 OK"
8534
Janos Follath74537a62016-09-02 13:45:28 +01008535client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +01008536requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008537run_test "DTLS proxy: 3d, min handshake, client-initiated renego" \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +02008538 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008539 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008540 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008541 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008542 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard1b753f12014-09-25 16:09:36 +02008543 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8544 0 \
8545 -c "=> renegotiate" \
8546 -s "=> renegotiate" \
8547 -s "Extra-header:" \
8548 -c "HTTP/1.0 200 OK"
8549
Janos Follath74537a62016-09-02 13:45:28 +01008550client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +01008551requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008552run_test "DTLS proxy: 3d, min handshake, client-initiated renego, nbio" \
8553 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008554 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008555 psk=abc123 renegotiation=1 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008556 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnard37a4de22014-10-01 16:38:03 +02008557 renegotiate=1 debug_level=2 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008558 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8559 0 \
8560 -c "=> renegotiate" \
8561 -s "=> renegotiate" \
8562 -s "Extra-header:" \
8563 -c "HTTP/1.0 200 OK"
8564
Janos Follath74537a62016-09-02 13:45:28 +01008565client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +01008566requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008567run_test "DTLS proxy: 3d, min handshake, server-initiated renego" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008568 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008569 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008570 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008571 debug_level=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008572 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008573 renegotiation=1 exchanges=4 debug_level=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008574 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8575 0 \
8576 -c "=> renegotiate" \
8577 -s "=> renegotiate" \
8578 -s "Extra-header:" \
8579 -c "HTTP/1.0 200 OK"
8580
Janos Follath74537a62016-09-02 13:45:28 +01008581client_needs_more_time 4
Hanno Becker6a243642017-10-12 15:18:45 +01008582requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008583run_test "DTLS proxy: 3d, min handshake, server-initiated renego, nbio" \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008584 -p "$P_PXY drop=5 delay=5 duplicate=5" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008585 "$P_SRV dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 auth_mode=none \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008586 psk=abc123 renegotiate=1 renegotiation=1 exchanges=4 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008587 debug_level=2 nbio=2" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008588 "$P_CLI dtls=1 dgram_packing=0 hs_timeout=500-10000 tickets=0 psk=abc123 \
Manuel Pégourié-Gonnarda6ace042014-10-15 12:44:41 +02008589 renegotiation=1 exchanges=4 debug_level=2 nbio=2 \
Manuel Pégourié-Gonnardba958b82014-10-09 16:13:44 +02008590 force_ciphersuite=TLS-PSK-WITH-AES-128-CCM-8" \
8591 0 \
8592 -c "=> renegotiate" \
8593 -s "=> renegotiate" \
8594 -s "Extra-header:" \
8595 -c "HTTP/1.0 200 OK"
8596
Manuel Pégourié-Gonnard82986c12018-09-03 10:50:21 +02008597## Interop tests with OpenSSL might trigger a bug in recent versions (including
8598## all versions installed on the CI machines), reported here:
8599## Bug report: https://github.com/openssl/openssl/issues/6902
8600## They should be re-enabled once a fixed version of OpenSSL is available
8601## (this should happen in some 1.1.1_ release according to the ticket).
8602skip_next_test
Janos Follath74537a62016-09-02 13:45:28 +01008603client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008604not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008605run_test "DTLS proxy: 3d, openssl server" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +02008606 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
8607 "$O_SRV -dtls1 -mtu 2048" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008608 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +02008609 0 \
Manuel Pégourié-Gonnardd0fd1da2014-09-25 17:00:27 +02008610 -c "HTTP/1.0 200 OK"
8611
Manuel Pégourié-Gonnard82986c12018-09-03 10:50:21 +02008612skip_next_test # see above
Janos Follath74537a62016-09-02 13:45:28 +01008613client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008614not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008615run_test "DTLS proxy: 3d, openssl server, fragmentation" \
8616 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
8617 "$O_SRV -dtls1 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008618 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 tickets=0" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008619 0 \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008620 -c "HTTP/1.0 200 OK"
8621
Manuel Pégourié-Gonnard82986c12018-09-03 10:50:21 +02008622skip_next_test # see above
Janos Follath74537a62016-09-02 13:45:28 +01008623client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008624not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008625run_test "DTLS proxy: 3d, openssl server, fragmentation, nbio" \
8626 -p "$P_PXY drop=5 delay=5 duplicate=5 protect_hvr=1" \
8627 "$O_SRV -dtls1 -mtu 768" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008628 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2 tickets=0" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008629 0 \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008630 -c "HTTP/1.0 200 OK"
8631
Manuel Pégourié-Gonnard96999962015-02-17 16:02:37 +00008632requires_gnutls
Janos Follath74537a62016-09-02 13:45:28 +01008633client_needs_more_time 6
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008634not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008635run_test "DTLS proxy: 3d, gnutls server" \
8636 -p "$P_PXY drop=5 delay=5 duplicate=5" \
8637 "$G_SRV -u --mtu 2048 -a" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008638 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008639 0 \
8640 -s "Extra-header:" \
8641 -c "Extra-header:"
8642
k-stachowiak17a38d32019-02-18 15:29:56 +01008643requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +01008644client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008645not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008646run_test "DTLS proxy: 3d, gnutls server, fragmentation" \
8647 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +01008648 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008649 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000" \
Manuel Pégourié-Gonnard9590e0a2014-09-26 16:27:59 +02008650 0 \
8651 -s "Extra-header:" \
8652 -c "Extra-header:"
8653
k-stachowiak17a38d32019-02-18 15:29:56 +01008654requires_gnutls_next
Janos Follath74537a62016-09-02 13:45:28 +01008655client_needs_more_time 8
Manuel Pégourié-Gonnardd68434e2015-08-31 12:48:22 +02008656not_with_valgrind # risk of non-mbedtls peer timing out
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008657run_test "DTLS proxy: 3d, gnutls server, fragmentation, nbio" \
8658 -p "$P_PXY drop=5 delay=5 duplicate=5" \
k-stachowiak17a38d32019-02-18 15:29:56 +01008659 "$G_NEXT_SRV -u --mtu 512" \
Andrzej Kurek948fe802018-10-05 15:42:44 -04008660 "$P_CLI dgram_packing=0 dtls=1 hs_timeout=500-60000 nbio=2" \
Manuel Pégourié-Gonnard6093d812014-09-29 17:52:57 +02008661 0 \
8662 -s "Extra-header:" \
8663 -c "Extra-header:"
8664
Ron Eldorf75e2522019-05-14 20:38:49 +03008665requires_config_enabled MBEDTLS_SSL_EXPORT_KEYS
8666run_test "export keys functionality" \
8667 "$P_SRV eap_tls=1 debug_level=3" \
8668 "$P_CLI eap_tls=1 debug_level=3" \
8669 0 \
8670 -s "exported maclen is " \
8671 -s "exported keylen is " \
8672 -s "exported ivlen is " \
8673 -c "exported maclen is " \
8674 -c "exported keylen is " \
8675 -c "exported ivlen is "
8676
Manuel Pégourié-Gonnard8520dac2014-02-21 12:12:23 +01008677# Final report
8678
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01008679echo "------------------------------------------------------------------------"
8680
8681if [ $FAILS = 0 ]; then
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +01008682 printf "PASSED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01008683else
Manuel Pégourié-Gonnardf46f1282014-12-11 11:51:28 +01008684 printf "FAILED"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01008685fi
Manuel Pégourié-Gonnard72e51ee2014-08-31 10:22:11 +02008686PASSES=$(( $TESTS - $FAILS ))
Manuel Pégourié-Gonnard6f4fbbb2014-08-14 14:31:29 +02008687echo " ($PASSES / $TESTS tests ($SKIPS skipped))"
Manuel Pégourié-Gonnard33a752e2014-02-21 09:47:37 +01008688
8689exit $FAILS